Home
Allied Telesis
Switch
AT-9000 Series
Allied Telesis AT-9000 Series User Manual
5
of 1
of 1 rating
1526 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
Chapter 63: 802.1x
Port-based Network Acces
s Control Commands
1004
1003
1005
Table of Contents
Default Chapter
5
Table of Contents
5
Document Conventions
38
Where to Find Web-Based Guides
39
Contacting Allied Telesis
40
Section I: Getting Started
41
Chapter 1: Alliedware Plus Command Line Interface
43
Management Sessions
44
Local Management
44
Remote Management
44
Table 1. Remote Software Tool Settings
44
Management Interfaces
47
Local Manager Account
48
Alliedware Plus Command Modes
49
Figure 1: Command Modes
49
Table 2. Alliedware Plus Modes
50
Moving down the Hierarchy
52
ENABLE Command
52
CONFIGURE TERMINAL Command
52
LINE CONSOLE 0 Command
52
Figure 2: ENABLE Command
52
Figure 3: CONFIGURE TERMINAL Command
52
Figure 4: LINE CONSOLE Command
52
LINE VTY Command
53
INTERFACE Command - Dynamic Port Trunk
53
INTERFACE Command - Ports
53
Figure 5: LINE VTY Command
53
Figure 6: INTERFACE TRUNK Command
53
Figure 7: INTERFACE PORT Command - Single Port
53
INTERFACE Command - Static Port Trunk
54
INTERFACE VLAN Command
54
Figure 8: INTERFACE PORT Command - Multiple Ports
54
Figure 9: INTERFACE PORT Command - Moving between Port Interface Modes
54
Figure 10: INTERFACE TRUNK Command
54
Figure 11: INTERFACE VLAN Command
54
VLAN DATABASE Command
55
LOCATION CIVIC-LOCATION Command
55
LOCATION COORD-LOCATION Command
55
Figure 12: VLAN DATABASE Command
55
Figure 13: LLDP LOCATION CIVIC-LOCATION Command
55
Figure 14: LLDP LOCATION COORD-LOCATION Command
55
Moving up the Hierarchy
56
EXIT and QUIT Commands
56
END Command
56
Figure 15: Moving up One Mode with the EXIT and QUIT Command
56
DISABLE Command
57
Figure 16: Returning to the Privileged Exec Mode with the END Command
57
Figure 17: Returning to the User Exec Mode with the DISABLE Command
57
Port Numbers in Commands
58
Figure 18: PORT Parameter in the Command Line Interface
58
Combo Ports 25 to 28
60
Command Format
61
Command Line Interface Features
61
Command Formatting Conventions
61
Command Examples
61
Startup Messages
62
Figure 19: Startup Messages
62
Figure 20: Startup Messages (Continued)
63
Figure 21: Startup Messages (Continued)
64
Chapter 2: Starting a Management Session
65
Starting a Local Management Session
66
Figure 22: Connecting the Management Cable to the Console Port
66
Figure 23: Alliedware Plus Command Line Prompt
67
Starting a Remote Telnet or SSH Management Session
68
VTY Lines
69
What to Configure First
70
Creating a Boot Configuration File
70
Changing the Login Password
71
Assigning a Name to the Switch
71
Figure 24: SHOW BOOT Command
71
Adding a Management IP Address
72
Table 3. Adding a Management Address: Example 1
73
Table 4. Adding a Management IP Address: Example 2
73
Saving Your Changes
74
Ending a Management Session
75
Chapter 3: Basic Command Line Management
77
Clearing the Screen
78
Displaying the On-Line Help
79
Figure 25: Displaying the Keywords of a Mode
79
Figure 26: Displaying Subsequent Keywords of a Keyword
79
Figure 27: Displaying the Class of a Parameter
80
Saving Your Configuration Changes
81
Ending a Management Session
82
Chapter 4: Basic Command Line Management Commands
83
Table 5. Basic Command Line Commands
83
(Question Mark Key)
85
Clear Screen
87
Configure Terminal
88
Copy Running-Config Startup-Config
89
Disable
90
Enable
92
End
93
Exit
94
Length
95
Logout
97
Quit
98
Write
99
Chapter 5: Temperature and Fan Control Overview
101
Overview
102
Displaying the System Environmental Status
103
Figure 28: SHOW SYSTEM ENVIRONMENT Command
103
Controlling Eco-Mode LED
104
Chapter 6: Temperature and Fan Control Commands
105
Table 6. Temperature and Fan Control Commands
105
Ecofriendly Led
106
No Ecofriendly Led
107
Show Ecofriendly
108
Figure 29: SHOW ECOFRIENDLY Command
108
Show System Environment
109
Figure 30: SHOW SYSTEM ENVIRONMENT Command
109
Table 7. SHOW SYSTEM ENVIRONMENT Command
109
Section II: Basic Operations
111
Chapter 7: Basic Switch Management
113
Adding a Name to the Switch
114
Adding Contact and Location Information
115
Displaying Parameter Settings
116
Manually Setting the Date and Time
117
Pinging Network Devices
118
Resetting the Switch
119
Restoring the Default Settings to the Switch
120
Figure 31: SHOW BOOT Command
120
Setting the Baud Rate of the Console Port
122
Figure 32: SHOW BAUD-RATE Command
122
Configuring the Management Session Timers
124
Setting the Maximum Number of Manager Sessions
126
Configuring the Banners
127
Figure 33: Banner Messages
127
Chapter 8: Basic Switch Management Commands
131
Banner Exec
133
Table 8. Basic Switch Management Commands
134
Banner Login
135
Banner Motd
137
Baud-Rate Set
139
Clock Set
140
Erase Startup-Config
141
Exec-Timeout
142
Help
144
Figure 34: HELP Command
144
Hostname
145
Line Console
146
Line Vty
147
No Hostname
148
Ping
149
PING Ipv6
151
Reboot
152
Reload
153
Service Maxmanager
154
Show Banner Login
155
Figure 35: SHOW BANNER LOGIN Command
155
Show Baud-Rate
156
Figure 36: SHOW BAUD-RATE Command
156
Show Clock
157
Show Running-Config
158
Show Switch
159
Figure 37: SHOW SWITCH Command
159
Table 9. SHOW SWITCH Command
159
Show System
161
Figure 38: SHOW SYSTEM Command
161
Show System Serialnumber
162
Figure 39: SHOW SYSTEM SERIALNUMBER Command
162
Show Users
163
Figure 40: SHOW USERS Command
163
Table 10. SHOW USERS Command
163
Show Version
165
Figure 41: SHOW VERSION Command
165
Snmp-Server Contact
166
Snmp-Server Location
167
System Territory
168
Chapter 9: Port Parameters
171
Adding Descriptions
172
Setting the Speed and Duplex Mode
173
Setting the MDI/MDI-X Wiring Configuration
175
Enabling or Disabling Ports
176
Enabling or Disabling Backpressure
177
Enabling or Disabling Flow Control
178
Figure 42: SHOW FLOWCONTROL INTERFACE Command
179
Resetting Ports
181
Configuring Threshold Limits for Ingress Packets
182
Displaying Threshold Limit Settings on Ports
184
Figure 43: SHOW STORM-CONTROL Command
184
Figure 44: SHOW STORM-CONTROL Command
184
Reinitializing Auto-Negotiation
185
Restoring the Default Settings
186
Displaying Port Settings
187
Displaying Speed and Duplex Settings
187
Displaying Port Status
187
Figure 45: SHOW INTERFACE STATUS Command
187
Displaying Port Configuration
188
Figure 46: SHOW INTERFACE Command
188
Figure 47: SHOW RUNNING-CONFIG INTERFACE Command
188
Displaying or Clearing Port Statistics
189
Displaying SFP Information
190
Chapter 10: Port Parameter Commands
191
Table 11. Port Parameter Commands
191
Backpressure
194
Bplimit
196
Clear Port Counter
197
Description
198
Duplex
200
Egress-Rate-Limit
202
Fctrllimit
203
Flowcontrol
204
Holbplimit
207
Figure 48: Head of Line Blocking
208
No Egress-Rate-Limit
209
No Flowcontrol
210
No Shutdown
211
No Snmp Trap Link-Status
212
No Storm-Control
213
Polarity
214
Purge
216
Renegotiate
217
Reset
218
Show Flowcontrol Interface
219
Figure 49: SHOW FLOWCONTROL INTERFACE Command
219
Table 12. SHOW FLOWCONTROL INTERFACE Command
219
Show Interface
221
Figure 50: SHOW INTERFACE Command
222
Table 13. SHOW INTERFACE Command
222
Show Interface Brief
225
Figure 51: SHOW INTERFACE BRIEF Command
225
Table 14. SHOW INTERFACE BRIEF Command
225
Show Interface Status
227
Figure 52: SHOW INTERFACE STATUS Command
227
Table 15. SHOW INTERFACE STATUS Command
227
Show Platform Table Port Counters
229
Table 16. SHOW PLATFORM TABLE PORT COUNTERS Command
229
Show Running-Config Interface
232
Figure 53: SHOW RUNNING-CONFIG INTERFACE Command
232
Show Storm-Control
233
Figure 54: SHOW STORM-CONTROL Command
233
Table 17. SHOW STORM-CONTROL Command
233
Show System Pluggable
235
Figure 55: SHOW SYSTEM PLUGGABLE Command
235
Show System Pluggable Detail
236
Figure 56: SHOW SYSTEM PLUGGABLE DETAIL Command
236
Shutdown
237
Snmp Trap Link-Status
238
Speed
239
Storm-Control
241
Chapter 11: Power over Ethernet
243
Overview
244
Power Sourcing Equipment (PSE)
244
Powered Device (PD)
244
PD Classes
244
Power Budget
244
Table 18. IEEE Powered Device Classes
244
Port Prioritization
245
Table 19. Poe Port Priorities
245
Enabling and Disabling Poe
246
Adding PD Descriptions to Ports
248
Prioritizing Ports
249
Managing the Maximum Power Limit on Ports
250
Managing Legacy Pds
251
Monitoring Power Consumption
252
Table 20. Receiving Power Consumption Notification
252
Displaying Poe Information
253
Figure 57: SHOW POWER-INLINE Command
253
Table 21. Poe Show Commands
253
Figure 58: SHOW POWER-INLINE INTERFACE Command
254
Figure 59: SHOW POWER-INLINE INTERFACE DETAIL Command
254
Chapter 12: Power over Ethernet Commands
255
Table 22. Power over Ethernet Commands
255
Clear Power-Inline Counters Interface
257
No Power-Inline Allow-Legacy
258
No Power-Inline Description
259
No Power-Inline Enable
260
No Power-Inline Max
261
No Power-Inline Priority
262
No Power-Inline Usage-Threshold
263
No Service Power-Inline
264
No Snmp-Server Enable Trap Power-Inline
265
Power-Inline Allow-Legacy
266
Power-Inline Description
267
Power-Inline Enable
268
Power-Inline Max
269
Power-Inline Priority
270
Power-Inline Usage-Threshold
272
Service Power-Inline
273
Show Power-Inline
274
Figure 60: SHOW POWER-INLINE Command
274
Table 23. SHOW POWER-INLINE Command
275
Show Power-Inline Counters Interface
277
Figure 61: SHOW POWER-INLINE COUNTERS INTERFACE Command
277
Table 24. SHOW POWER-INLINE COUNTERS INTERFACE Command
277
Show Power-Inline Interface
279
Figure 62: SHOW POWER-INLINE INTERFACE Command
279
Show Power-Inline Interface Detail
280
Figure 63: SHOW POWER-INLINE INTERFACE DETAIL Command
280
Table 25. SHOW POWER-INLINE INTERFACE DETAIL Command
280
Snmp-Server Enable Trap Power-Inline
283
Chapter 13: Ipv4 and Ipv6 Management Addresses
285
Overview
286
Table 26. Features Requiring an IP Management Address on the Switch
286
Assigning an Ipv4 Management Address and Default Gateway
289
Adding an Ipv4 Management Address
289
Adding an Ipv4 Default Gateway Address
291
Deleting an Ipv4 Management Address and Default Gateway
292
Displaying an Ipv4 Management Address and Default Gateway
293
Figure 64: SHOW IP ROUTE Command
293
Figure 65: SHOW IP INTERFACE Command
293
Assigning an Ipv6 Management Address and Default Gateway
294
Adding an Ipv6 Management Address
294
Adding an Ipv6 Default Gateway Address
295
Deleting an Ipv6 Management Address and Default Gateway
296
Displaying an Ipv6 Management Address and Default Gateway
297
Figure 66: SHOW IPV6 ROUTE Command
297
Figure 67: SHOW IPV6 INTERFACE Command
297
Chapter 14: Ipv4 and Ipv6 Management Address Commands
299
Table 27. Management IP Address Commands
299
Clear Ipv6 Neighbors
301
Ip Address
302
Ip Address Dhcp
304
Ip Route
306
Ipv6 Address
308
Ipv6 Route
310
No Ip Address
312
No Ip Address Dhcp
313
No Ip Route
314
No Ipv6 Address
315
No Ipv6 Route
316
Show Ip Interface
317
Figure 68: SHOW IP INTERFACE Command
317
Show Ip Route
318
Figure 69: SHOW IP ROUTE Command
318
Table 28. SHOW IP ROUTE Command
318
Show Ipv6 Interface
320
Figure 70: SHOW IPV6 INTERFACE Command
320
Table 29. SHOW IPV6 INTERFACE Command
320
Show Ipv6 Route
321
Figure 71: SHOW IPV6 ROUTE Command
321
Chapter 15: DHCP Server with Port-Based IP Assignment
323
Overview
324
Figure 72: DHCP Server with Port-Based IP Assignment
324
Configuring the DHCP Server
325
Enabling Port-Based IP Assignment
325
Creating a DHCP Pool
325
Defining a Network
326
Table 30. DHCP Server with Port-Based IP Assignment
326
Defining a Range
327
Setting a Lease Time
327
Setting the Options
328
Defining Ports' IP Addresses Offered DHCP Service
330
DHCP Server Configuration Example
331
Displaying Status of Port-Based IP Assignment
333
Displaying Lease Bindings
333
Figure 73: SHOW IP DHCP BINDING Command
333
Displaying DHCP Address Pool Configuration
334
Displaying DHCP Server Statistics
334
Figure 74: SHOW IP DHCP POOL Command
334
Figure 75: SHOW IP DHCP SERVER STATISTICS Command
335
Chapter 16: DHCP Server with Port-Based IP Assignment Commands
337
Default-Router
339
Dhcp-Offer Ip
340
Dns-Server
341
Domain-Name
342
Ip Dhcp Pool
343
Lease
344
Lease Infinite
345
Network
346
No Default-Router
347
No Dhcp-Offer Ip
348
No Dns-Server
350
No Domain-Name
351
No Ip Dhcp Pool
352
No Lease
353
No Network
354
No Range
355
No Range All
356
No Service Dhcp-Server
357
No Subnet-Mask
358
Range
359
Service Dhcp-Server
360
Show Ip Dhcp Binding
361
Figure 76: SHOW IP DHCP BINDING Command
361
Show Ip Dhcp Pool
363
Figure 77: SHOW IP DHCP POOL Command
363
Show Ip Dhcp Server Statistics
364
Figure 78: SHOW IP DHCP SERVER STATISTICS Command
364
Subnet-Mask
365
Chapter 17: Simple Network Time Protocol (SNTP) Client
367
Overview
368
Activating the SNTP Client and Specifying the IP Address of an NTP or SNTP Server
369
Configuring Daylight Savings Time and UTC Offset
370
Table 31. SNTP Daylight Savings Time and UTC Offset Commands
370
Disabling the SNTP Client
372
Displaying the SNTP Client
373
Figure 79: SHOW NTP ASSOCIATIONS Command
373
Figure 80: SHOW NTP STATUS Command
373
Displaying the Date and Time
374
Chapter 18: SNTP Client Commands
375
Table 32. Simple Network Time Protocol Commands
375
Clock Summer-Time
376
Clock Timezone
377
No Clock Summer-Time
378
No Ntp Peer
379
Ntp Peer
380
Purge Ntp
381
Show Clock
382
Show Ntp Associations
383
Figure 81: SHOW NTP ASSOCIATIONS Command
383
Table 33. SHOW NTP ASSOCIATIONS Command
383
Show Ntp Status
385
Figure 82: SHOW NTP STATUS Command
385
Chapter 19: MAC Address Table
387
Overview
388
Adding Static MAC Addresses
390
Deleting MAC Addresses
392
Setting the Aging Timer
394
Displaying the MAC Address Table
395
Figure 83: SHOW MAC ADDRESS-TABLE Command
395
Chapter 20: MAC Address Table Commands
397
Table 34. MAC Address Table Commands
397
Clear Mac Address-Table
398
Mac Address-Table Ageing-Time
400
Mac Address-Table Static
402
No Mac Address-Table Static
404
Show Mac Address-Table
406
Figure 84: SHOW MAC ADDRESS-TABLE Command
407
Table 35. SHOW MAC ADDRESS-TABLE Command - Unicast Addresses
407
Table 36. SHOW MAC ADDRESS-TABLE Command - Multicast Addresses
408
Chapter 21: Enhanced Stacking
409
Overview
410
Command and Member Switches
410
Common VLAN
410
Guidelines
411
General Steps
411
Configuring the Command Switch
413
Configuring a Member Switch
416
Managing the Member Switches of an Enhanced Stack
418
Figure 85: SHOW ESTACK REMOTELIST Command
418
Changing the Enhanced Stacking Mode
420
Figure 86: SHOW ESTACK Command
420
Uploading Boot Configuration Files from the Command Switch to Member Switches
422
Uploading the Management Software from the Command Switch to Member Switches
429
Disabling Enhanced Stacking
431
Chapter 22: Enhanced Stacking Commands
433
Estack Command-Switch
435
Estack Run
436
Table 37. Enhanced Stacking Commands
436
No Estack Command-Switch
437
No Estack Run
438
Rcommand
439
Reboot Estack Member
440
Show Estack
442
Figure 87: SHOW ESTACK Command
442
Table 38. SHOW ESTACK Command
442
Show Estack Command-Switch
444
Figure 88: SHOW ESTACK COMMAND-SWITCH Command
444
Show Estack Remotelist
445
Figure 89: SHOW ESTACK REMOTELIST Command
445
Upload Config Remotelist
447
Upload Image Remotelist
448
Chapter 23: Port Mirror
451
Overview
452
Creating the Port Mirror or Adding New Source Ports
453
Removing Source Ports or Deleting the Port Mirror
454
Combining the Port Mirror with Access Control Lists
455
Displaying the Port Mirror
457
Figure 90: SHOW MIRROR Command
457
Figure 91: SHOW MIRROR Command and Access Control Lists
457
Chapter 24: Port Mirror Commands
459
Table 39. Port Mirror Commands
459
Mirror
460
Mirror Interface
461
No Mirror Interface
463
Show Mirror
464
Figure 92: SHOW MIRROR Command
464
Table 40. SHOW MIRROR Command
464
Figure 93: SHOW MIRROR Command and Access Control Lists
465
Chapter 25: Internet Group Management Protocol (IGMP) Snooping
467
Overview
468
Understanding Multicast Traffic Settings
469
Enabling the Suppression of Unknown Multicast Traffic
469
Host Node Topology
470
Single-Host Per Port
470
Multiple-Hosts Per Port
470
Enabling IGMP Snooping
471
Configuring the IGMP Snooping Commands
472
Table 41. IGMP Snooping Commands
472
Disabling IGMP Snooping
474
Displaying IGMP Snooping
475
Chapter 26: IGMP Snooping Commands
477
Table 42. Internet Group Management Protocol Snooping Commands
477
Clear Ip Igmp
478
Ip Igmp Limit
479
Figure 94: SHOW IP IGMP SNOOPING
479
Ip Igmp Querier-Timeout
480
Ip Igmp Snooping
481
Ip Igmp Snooping Flood-Unknown-Mcast
482
Ip Igmp Snooping Mrouter
484
Ip Igmp Status
485
No Ip Igmp Snooping
486
No Ip Igmp Snooping Mrouter
487
Show Ip Igmp Snooping
488
Figure 95: SHOW IP IGMP SNOOPING Command
488
Table 43. SHOW IP IGMP SNOOPING Command
489
Chapter 27: Multicast Commands
491
Table 44. Multicast Commands
491
No Switchport Block Egress-Multicast
492
No Switchport Block Ingress-Multicast
493
Switchport Block Egress-Multicast
494
Switchport Block Ingress-Multicast
495
Section III: File System
497
Chapter 28: File System
499
Overview
500
Table 45. File Extensions and File Types
500
Copying Boot Configuration Files
501
Renaming Boot Configuration Files
502
Deleting Boot Configuration Files
503
Displaying the Specifications of the File System
504
Figure 96: SHOW FILE SYSTEMS Command
504
Listing the Files in the File System
505
Chapter 29: File System Commands
507
Copy
508
Delete
509
Delete Force
510
Table 46. File System Commands
510
Dir
511
Move
512
Show File Systems
513
Figure 97: SHOW FILE SYSTEMS Command
513
Table 47. SHOW FILE SYSTEMS Command
513
Chapter 30: Boot Configuration Files
515
Overview
516
Specifying the Active Boot Configuration File
517
Creating a New Boot Configuration File
519
Displaying the Active Boot Configuration File
520
Figure 98: SHOW BOOT Command
520
Chapter 31: Boot Configuration File Commands
521
Boot Config-File
522
Copy Running-Config
524
Table 48. Boot Configuration File Commands
524
Copy Running-Config Startup-Config
525
Erase Startup-Config
526
No Boot Config-File
527
Show Boot
528
Figure 99: SHOW BOOT Command
528
Table 49. SHOW BOOT Command
528
Show Startup-Config
530
Write
531
Chapter 32: File Transfer
533
Overview
534
Uploading or Downloading Files with TFTP
535
Downloading New Management Software with TFTP
535
Downloading Files to the Switch with TFTP
536
Uploading Files from the Switch with TFTP
537
Uploading or Downloading Files with Zmodem
539
Downloading Files to the Switch with Zmodem
539
Uploading Files from the Switch with Zmodem
540
Downloading Files with Enhanced Stacking
542
Figure 100: SHOW ESTACK REMOTELIST
542
Chapter 33: File Transfer Commands
545
Copy Filename Zmodem
546
Copy Flash Tftp
547
Copy Tftp Flash
548
Table 50. File Transfer Commands
548
Copy Zmodem
550
Upload Image Remotelist
551
Section IV: Event Messages
553
Chapter 34: Event Log
555
Overview
556
Displaying the Event Log
557
Figure 101: SHOW LOG Command
557
Clearing the Event Log
558
Chapter 35: Event Log Commands
559
Table 51. Event Log Commands
559
Clear Log Buffered
560
Log Buffered
561
Table 52. Event Message Severity Levels
561
No Log Buffered
563
Show Log
565
Figure 102: SHOW LOG Command
565
Table 53. SHOW LOG Command
565
Table 54. Management Software Modules
566
Show Log Config
568
Figure 103: SHOW LOG CONFIG Command
568
Table 55. SHOW LOG CONFIG Command
568
Show Log Reverse
570
Show Log Tail
571
Chapter 36: Syslog Client
573
Overview
574
Creating Syslog Server Definitions
575
Table 56. Event Message Severity Levels
575
Table 57. Program Abbreviations
575
Deleting Syslog Server Definitions
578
Displaying the Syslog Server Definitions
579
Figure 104: SHOW LOG CONFIG Command with Syslog Server Entries
579
Chapter 37: Syslog Client Commands
581
Table 58. Syslog Client Commands
581
Log Host
582
No Log Host
584
Show Log Config
585
Figure 105 SHOW LOG CONFIG Command with Syslog Server Entries
585
Section V: Port Trunks
587
Chapter 38: Static Port Trunks
589
Overview
590
Load Distribution Methods
590
Figure 106: Static Port Trunk Example
590
Guidelines
592
Creating New Static Port Trunks or Adding Ports to Existing Trunks
594
Specifying the Load Distribution Method
595
Removing Ports from Static Port Trunks or Deleting Trunks
596
Displaying Static Port Trunks
597
Figure 107: SHOW STATIC-CHANNEL-GROUP Command
597
Chapter 39: Static Port Trunk Commands
599
No Static-Channel-Group
600
Port-Channel Load-Balance
601
Table 59. Static Port Trunk Commands
602
Show Static-Channel-Group
603
Figure 108: SHOW STATIC-CHANNEL-GROUP Command
603
Static-Channel-Group
604
Chapter 40: Link Aggregation Control Protocol (LACP)
607
Overview
608
LACP System Priority
608
Base Port
609
Load Distribution Methods
609
Guidelines
609
Creating New Aggregators
611
Setting the Load Distribution Method
612
Adding Ports to Aggregators
613
Removing Ports from Aggregators
614
Deleting Aggregators
615
Displaying Aggregators
616
Figure 109: SHOW ETHERCHANNEL DETAIL
616
Figure 110: SHOW LACP SYS-ID Command
617
Chapter 41: LACP Commands
619
Table 60. LACP Port Trunk Commands
619
Channel-Group
620
Lacp System-Priority
622
No Channel-Group
623
Port-Channel Load-Balance
624
Show Etherchannel
626
Figure 111: SHOW ETHERCHANNEL Command
626
Show Etherchannel Detail
627
Figure 112: SHOW ETHERCHANNEL DETAIL Command
627
Show Etherchannel Summary
629
Figure 113: SHOW ETHERCHANNEL SUMMARY Command
629
Show Lacp Sys-ID
630
Figure 114: SHOW LACP SYS-ID Command
630
Show Port Etherchannel
631
Figure 115: SHOW PORT ETHERCHANNEL Command
631
Section VI: Spanning Tree Protocols
633
Chapter 42: STP, RSTP and MSTP Protocols
635
Overview
636
Bridge Priority and the Root Bridge
637
Path Costs and Port Costs
638
Port Priority
639
Forwarding Delay and Topology Changes
640
Hello Time and Bridge Protocol Data Units (BPDU)
641
Point-To-Point and Edge Ports
642
Figure 116: Point-To-Point Ports
642
Figure 117: Edge Port
643
Figure 118: Point-To-Point and Edge Port
643
Mixed STP and RSTP Networks
644
Spanning Tree and Vlans
645
Figure 119: VLAN Fragmentation
645
RSTP and MSTP BPDU Guard
646
STP, RSTP, MSTP Loop Guard
648
Figure 120: Loop Guard Example 1
649
Figure 121: Loop Guard Example 2
650
Figure 122: Loop Guard Example 3
650
Figure 123: Loop Guard Example 4
651
Figure 124: Loop Guard Example 5
652
STP and RSTP Root Guard
653
Chapter 43: Spanning Tree Protocol (STP) Procedures
655
Designating STP as the Active Spanning Tree Protocol
656
Enabling the Spanning Tree Protocol
657
Setting the Switch Parameters
658
Table 61. STP Switch Parameter Commands
658
Setting the Port Parameters
660
Table 62. STP Port Parameter Commands
660
Disabling the Spanning Tree Protocol
661
Displaying STP Settings
662
Figure 125: SHOW SPANNING-TREE Command for STP
662
Chapter 44: STP Commands
663
Table 63. Spanning Tree Protocol Commands
663
No Spanning-Tree Stp Enable
665
Show Spanning-Tree
666
Figure 126: SHOW SPANNING-TREE Command for STP
666
Spanning-Tree Forward-Time
668
Spanning-Tree Guard Root
669
Spanning-Tree Hello-Time
670
Spanning-Tree Max-Age
671
Spanning-Tree Mode Stp
672
Spanning-Tree Path-Cost
673
Spanning-Tree Portfast
674
Spanning-Tree Portfast Bpdu-Guard
675
SPANNING-TREE PRIORITY (Bridge Priority)
676
SPANNING-TREE Priority (Port Priority)
677
Spanning-Tree Stp Enable
678
Chapter 45: Rapid Spanning Tree Protocol (RSTP) Procedures
679
Designating RSTP as the Active Spanning Tree Protocol
680
Enabling the Rapid Spanning Tree Protocol
681
Configuring the Switch Parameters
682
Setting the Forward Time, Hello Time, and Max Age
682
Table 64. RSTP Switch Parameters
682
Setting the Bridge Priority
683
Enabling or Disabling BPDU Guard
683
Configuring the Port Parameters
685
Configuring Port Costs
685
Table 65. RSTP Port Parameters
685
Configuring Port Priorities
686
Designating Point-To-Point and Shared Ports
686
Designating Edge Ports
686
Enabling or Disabling RSTP Loop-Guard
687
Enabling or Disabling BPDU Guard
687
Disabling the Rapid Spanning Tree Protocol
689
Displaying RSTP Settings
690
Figure 127: SHOW SPANNING-TREE Command for RSTP
690
Chapter 46: RSTP Commands
691
Table 66. Rapid Spanning Tree Protocol Commands
691
No Spanning-Tree Portfast
693
No Spanning-Tree Errdisable-Timeout Enable
694
No Spanning-Tree Loop-Guard
695
No Spanning-Tree Portfast Bpdu-Guard
696
No Spanning-Tree Rstp Enable
697
Show Spanning-Tree
698
Figure 128: SHOW SPANNING-TREE Command for RSTP
698
Spanning-Tree Errdisable-Timeout Enable
700
Spanning-Tree Errdisable-Timeout Interval
701
Spanning-Tree Forward-Time
702
Spanning-Tree Guard Root
703
Spanning-Tree Hello-Time
704
Spanning-Tree Link-Type
705
Spanning-Tree Loop-Guard
706
Spanning-Tree Max-Age
707
Spanning-Tree Mode Rstp
708
Spanning-Tree Path-Cost
709
Spanning-Tree Portfast
710
Spanning-Tree Portfast Bpdu-Guard
711
SPANNING-TREE PRIORITY (Bridge Priority)
712
SPANNING-TREE PRIORITY (Port Priority)
713
Spanning-Tree Rstp Enable
714
Chapter 47: Multiple Spanning Tree Protocol (MSTP)
715
Overview
716
Multiple Spanning Tree Instance (MSTI)
717
Figure 129: VLAN Fragmentation with STP or RSTP
717
Figure 130: MSTP Example of Two Spanning Tree Instances
718
Figure 131: Multiple Vlans in an MSTI
718
MSTI Guidelines
719
VLAN and MSTI Associations
720
Ports in Multiple Mstis
721
Multiple Spanning Tree Regions
722
Table 67. MSTP Region
723
Region Guidelines
724
Common and Internal Spanning Tree (CIST)
725
MSTP with STP and RSTP
725
Summary of Guidelines
727
Associating Vlans to Mstis
729
Figure 132: CIST and VLAN Guideline - Example 1
729
Figure 133: CIST and VLAN Guideline - Example 2
730
Connecting Vlans Across Different Regions
731
Figure 134: Spanning Regions - Example 1
731
Figure 135: Spanning Regions Without Blocking
732
Table 68. Two Region Examples
732
MSTP Root Guard
733
Chapter 48: MSTP Commands
735
Table 69. Multiple Spanning Tree Protocol Commands
735
Instance Msti-ID Priority
737
Table 70. MSTP Bridge Priority Value Increments
737
Instance Msti-ID Vlan
739
No Spanning-Tree Errdisable-Timeout Enable
740
No Spanning-Tree Portfast
741
No Spanning-Tree Mstp Enable
742
Show Spanning-Tree
743
Figure 136: SHOW SPANNING-TREE Command for MSTP
743
Show Spanning-Tree Mst Config
744
Figure 137: SHOW SPANNING-TREE MST CONFIG Command
744
Show Spanning-Tree Mst
745
Figure 138: SHOW SPANNING-TREE MST Command
745
Show Spanning-Tree Mst Instance
746
Spanning-Tree Errdisable-Timeout Enable
747
Spanning-Tree Errdisable-Timeout Interval
748
Spanning-Tree Guard Root
749
Spanning-Tree Mode Mstp
750
Spanning-Tree Mstp Enable
751
Spanning-Tree Mst Configuration
752
Spanning-Tree Mst Instance
753
Spanning-Tree Path-Cost
754
Spanning-Tree Portfast
755
Spanning-Tree Portfast Bpdu-Guard
756
Region
757
Revision
758
Section VII: Virtual Lans
759
Chapter 49: Port-Based and Tagged Vlans
761
Overview
762
Port-Based VLAN Overview
764
VLAN Name
764
VLAN Identifier
764
Port VLAN Identifier
765
Untagged Ports
765
Guidelines to Creating a Port-Based VLAN
766
Drawbacks of Port-Based Vlans
766
Port-Based Example 1
767
Figure 139: Port-Based VLAN - Example 1
767
Port-Based Example 2
768
Figure 140: Port-Based VLAN - Example 2
768
Tagged VLAN Overview
770
Tagged and Untagged Ports
771
Port VLAN Identifier
771
Guidelines to Creating a Tagged VLAN
771
Tagged VLAN Example
772
Figure 141: Example of a Tagged VLAN
772
Table 71. VLAN Port Assignments
773
Creating Vlans
775
Adding Untagged Ports to Vlans
776
Adding Tagged Ports to Vlans
778
Removing Untagged Ports from Vlans
780
Removing Tagged Ports from Vlans
781
Deleting Vlans
782
Displaying the Vlans
783
Figure 142: SHOW VLAN ALL Command
783
Chapter 50: Port-Based and Tagged VLAN Commands
785
Table 72. Port-Based and Tagged VLAN Commands
785
No Switchport Access Vlan
786
No Switchport Trunk
787
No Switchport Trunk Native Vlan
788
No Vlan
789
Show Vlan
790
Figure 143: SHOW VLAN Command
790
Table 73. SHOW VLAN Command
790
Switchport Access Vlan
792
Switchport Mode Access
794
Switchport Mode Trunk
795
Switchport Trunk Allowed Vlan
797
Switchport Trunk Native Vlan
800
Vlan
802
Chapter 51: GARP VLAN Registration Protocol
805
Overview
806
Figure 144: GVRP Example
807
Guidelines
809
GVRP and Network Security
810
GVRP-Inactive Intermediate Switches
811
Enabling GVRP on the Switch
812
Enabling GIP on the Switch
813
Enabling GVRP on the Ports
814
Setting the GVRP Timers
815
Disabling GVRP Timers on the Switch
816
Disabling GVRP on the Ports
817
Disabling GIP on the Switch
818
Disabling GVRP on the Switch
819
Restoring the GVRP Default Settings
820
Displaying GVRP
821
Figure 145: SHOW GVRP TIMER Command
821
Chapter 52: GARP VLAN Registration Protocol Commands
823
Table 74. GARP VLAN Registration Protocol Commands
823
Convert Dynamic Vlan
825
Gvrp Applicant State Active
826
Gvrp Applicant State Normal
827
Gvrp Enable
828
Gvrp Registration
829
Gvrp Timer Join
830
Gvrp Timer Leave
831
Gvrp Timer Leaveall
832
No Gvrp Enable
833
No Gvrp Timer Join
834
No Gvrp Timer Leave
835
No Gvrp Timer Leaveall
836
Purge Gvrp
837
Show Gvrp Applicant
838
Show Gvrp Configuration
839
Show Gvrp Machine
840
Show Gvrp Statistics
841
Show Gvrp Timer
843
Chapter 53: MAC Address-Based Vlans
845
Overview
846
Egress Ports
846
Table 75. Mappings of MAC Addresses to Egress Ports Example
847
Table 76. Revised Example of Mappings of MAC Addresses to Egress Ports
848
Vlans that Span Switches
849
Figure 146: Example of a MAC Address-Based VLAN that Spans Switches
849
VLAN Hierarchy
850
Table 77. Example of a MAC Address-Based VLAN Spanning Switches
850
Guidelines
851
General Steps
852
Creating MAC Address-Based Vlans
853
Adding MAC Addresses to Vlans and Designating Egress Ports
854
Removing MAC Addresses
855
Deleting Vlans
856
Displaying Vlans
857
Figure 147: SHOW VLAN MACADDRESS Command
857
Example of Creating a MAC Address-Based VLAN
858
Chapter 54: MAC Address-Based VLAN Commands
861
Table 78. MAC Address-Based VLAN Commands
861
No Vlan
862
NO VLAN MACADDRESS (Global Configuration Mode)
863
NO VLAN MACADDRESS (Port Interface Mode)
864
Show Vlan Macaddress
866
Figure 148: SHOW VLAN MACADDRESS Command
866
Table 79. SHOW VLAN MACADDRESS Command
867
Vlan Macaddress
868
VLAN SET MACADDRESS (Global Configuration Mode)
870
VLAN SET MACADDRESS (Port Interface Mode)
872
Chapter 55: Private Port Vlans
875
Overview
876
Host Ports
876
Uplink Port
876
Private VLAN Functionality
877
Guidelines
878
Creating Private Vlans
879
Adding Host and Uplink Ports
880
Deleting Vlans
881
Displaying Private Vlans
882
Figure 149: SHOW VLAN PRIVATE-VLAN Command
882
Chapter 56: Private Port VLAN Commands
883
Table 80. Private Port VLAN Commands
883
No Vlan
884
Private-Vlan
885
Show Vlan Private-Vlan
886
Figure 150: SHOW VLAN PRIVATE-VLAN Command
886
Switchport Mode Private-Vlan Host
887
Switchport Mode Private-Vlan Promiscuous
888
Chapter 57: Voice VLAN Commands
889
Table 81. Voice VLAN Commands
889
No Switchport Voice Vlan
890
Switchport Voice Dscp
891
Switchport Voice Vlan
892
Chapter 58: VLAN Stacking
895
Overview
896
Figure 151: Metro Provider 802.1Q Header in Tagged Packets
897
Figure 152: Metro Provider 802.1Q Header in Untagged Packets
897
Components
898
Vlan
898
Customer Ports
898
Provider Ports
898
Ethertype/Length
898
VLAN Stacking Process
899
Figure 153: VLAN Stacking Process
899
Table 82. VLAN Stacking Process
899
Example of VLAN Stacking
900
Chapter 59: VLAN Stacking Commands
905
Table 83. VLAN Stacking Commands
905
No Switchport Vlan-Stacking
906
Platform Vlan-Stacking-Tpid
907
Show Vlan Vlan-Stacking
908
Figure 154: SHOW VLAN VLAN-STACKING Command
908
Switchport Vlan-Stacking
909
Section VIII: Port Security
911
Chapter 60: MAC Address-Based Port Security
913
Overview
914
Static Versus Dynamic Addresses
914
Intrusion Actions
914
Guidelines
915
Configuring Ports
916
Table 84. MAC Address-Based Port Security Commands and Descriptions
916
Enabling MAC Address-Based Security on Ports
918
Disabling MAC Address-Based Security on Ports
919
Displaying Port Settings
920
Figure 155: SHOW PORT-SECURITY INTERFACE Command
920
Figure 156: Example of SHOW PORT-SECURITY INTRUSION INTERFACE Command
921
Chapter 61: MAC Address-Based Port Security Commands
923
Table 85. MAC Address-Based Port Security Commands
923
No Switchport Port-Security
924
No Switchport Port-Security Aging
925
Show Port-Security Interface
926
Figure 157: SHOW PORT-SECURITY INTERFACE Command
926
Table 86. SHOW PORT-SECURITY INTERFACE Command
926
Show Port-Security Intrusion Interface
929
Figure 158: SHOW PORT-SECURITY INTRUSION INTERFACE Command
929
Figure 159: Example of SHOW PORT-SECURITY INTRUSION INTERFACE Command
930
Switchport Port-Security
931
Switchport Port-Security Aging
932
Switchport Port-Security Maximum
933
Switchport Port-Security Violation
934
Chapter 62: 802.1X Port-Based Network Access Control
937
Overview
938
Authentication Process
939
Port Roles
940
None Role
940
Authenticator Role
940
Authentication Methods for Authenticator Ports
941
Operational Settings for Authenticator Ports
942
Operating Modes for Authenticator Ports
943
Single-Host Mode
943
Multi-Host Mode
943
Figure 160: Single-Host Mode
943
Figure 161: Multi-Host Operating Mode
944
Multi-Supplicant Mode
945
Figure 162: Multi-Supplicant Mode
946
Supplicant and VLAN Associations
947
Single-Host Mode
948
Multi-Host Mode
948
Multi-Supplicant Mode
948
Supplicant VLAN Attributes on the RADIUS Server
949
Guest VLAN
950
Guidelines
951
Enabling 802.1X Port-Based Network Access Control on the Switch
953
Configuring Authenticator Ports
954
Designating Authenticator Ports
954
Designating the Authentication Methods
954
Configuring the Operating Modes
955
Configuring Reauthentication
957
Table 87. Reauthentication Commands
957
Removing Ports from the Authenticator Role
958
Disabling 802.1X Port-Based Network Access Control on the Switch
959
Displaying Authenticator Ports
960
Figure 163: SHOW DOT1X INTERFACE Command
960
Displaying EAP Packet Statistics
961
Figure 164: SHOW DOT1X STATISTICS INTERFACE Command
961
Chapter 63: 802.1X Port-Based Network Access Control Commands
963
Table 88. 802.1X Port-Based Network Access Control Commands
963
Aaa Authentication Dot1X Default Group Radius
966
Auth Dynamic-Vlan-Creation
967
Auth Guest-Vlan
969
Auth Host-Mode
970
Auth Reauthentication
972
Auth Timeout Quiet-Period
973
Auth Timeout Reauth-Period
974
Auth Timeout Server-Timeout
975
Auth Timeout Supp-Timeout
976
Auth-Mac Enable
977
Auth-Mac Reauth-Relearning
978
Dot1X Control-Direction
979
Dot1X Eap
981
Dot1X Initialize Interface
983
Dot1X Max-Reauth-Req
984
Dot1X Port-Control Auto
985
Dot1X Port-Control Force-Authorized
986
Dot1X Port-Control Force-Unauthorized
987
Dot1X Timeout Tx-Period
988
No Aaa Authentication Dot1X Default Group Radius
989
No Auth Dynamic-Vlan-Creation
990
No Auth Guest-Vlan
991
No Auth Reauthentication
992
No Auth-Mac Enable
993
No Dot1X Port-Control
994
Show Auth-Mac Interface
995
Figure 165: SHOW AUTH-MAC INTERFACE Command
995
Show Auth-Mac Sessionstatistics Interface
996
Figure 166: SHOW AUTH-MAC SESSIONSTATISTICS INTERFACE Command
996
Show Auth-Mac Statistics Interface
997
Figure 167: SHOW AUTH-MAC STATISTICS INTERFACE Command
997
Show Auth-Mac Supplicant Interface
998
Figure 168: SHOW AUTH-MAC SUPPLICANT INTERFACE Command
998
Show Dot1X
999
Figure 169: SHOW DOT1X Command
999
Show Dot1X Interface
1000
Figure 170: SHOW DOT1X INTERFACE Command
1000
Show Dot1X Statistics Interface
1001
Figure 171: SHOW DOT1X STATISTICS INTERFACE Command
1001
Show Dot1X Supplicant Interface
1002
Figure 172: SHOW DOT1X SUPPLICANT INTERFACE Command
1002
Section IX: Simple Network Management Protocols
1005
Chapter 64: Snmpv1 and Snmpv2C
1007
Overview
1008
Enabling Snmpv1 and Snmpv2C
1010
Creating Community Strings
1011
Adding or Removing IP Addresses of Trap or Inform Receivers
1012
Deleting Community Strings
1014
Disabling Snmpv1 and Snmpv2C
1015
Displaying Snmpv1 and Snmpv2C
1016
Figure 173: SHOW SNMP-SERVER Command
1016
Figure 174: SHOW SNMP-SERVER COMMUNITY Command
1016
Figure 175: SHOW RUNNING-CONFIG SNMP Command
1017
Chapter 65: Snmpv1 and Snmpv2C Commands
1019
Table 89. Snmpv1 and Snmpv2C Commands
1019
No Snmp-Server
1021
No Snmp-Server Community
1022
No Snmp-Server Enable Trap
1023
No Snmp-Server Enable Trap Auth
1024
No Snmp-Server Host
1025
No Snmp-Server View
1027
No Snmp Trap Link-Status
1028
Show Running-Config Snmp
1029
Figure 176: SHOW RUNNING-CONFIG SNMP Command
1029
Show Snmp-Server
1030
Figure 177: SHOW SNMP-SERVER Command
1030
Show Snmp-Server Community
1031
Figure 178: SHOW SNMP-SERVER COMMUNITY Command
1031
Table 90. SHOW SNMP-SERVER COMMUNITY Command
1031
Show Snmp-Server View
1033
Figure 179: SHOW SNMP-SERVER VIEW Command
1033
Table 91. SHOW SNMP-SERVER VIEW Command
1033
Snmp-Server
1034
Snmp-Server Community
1035
Snmp-Server Enable Trap
1036
Snmp-Server Enable Trap Auth
1037
Snmp-Server Host
1038
Snmp-Server View
1040
Snmp Trap Link-Status
1042
Chapter 66: Snmpv3 Commands
1043
Table 92. Snmpv3 Commands
1043
No Snmp-Server
1045
No Snmp-Server Engineid Local
1046
No Snmp-Server Group
1047
No Snmp-Server Host
1048
No Snmp-Server User
1050
No Snmp-Server View
1051
Show Snmp-Server
1052
Figure 180: SHOW SNMP-SERVER Command
1052
Show Snmp-Server Group
1053
Show Snmp-Server Host
1054
Show Snmp-Server User
1055
Show Snmp-Server View
1056
Snmp-Server
1057
Snmp-Server Engineid Local
1058
Snmp-Server Group
1059
Snmp-Server Host
1061
Snmp-Server User
1063
Snmp-Server View
1065
Section X: Network Management
1067
Chapter 67: Sflow Agent
1069
Overview
1070
Ingress Packet Samples
1070
Packet Counters
1070
Guidelines
1071
Configuring the Sflow Agent
1072
Configuring the Ports
1073
Configuring the Sampling Rate
1073
Configuring the Polling Interval
1074
Enabling the Sflow Agent
1075
Disabling the Sflow Agent
1076
Displaying the Sflow Agent
1077
Figure 181: SHOW SFLOW Command
1077
Configuration Example
1078
Chapter 68: Sflow Agent Commands
1081
Table 93. Sflow Agent Commands
1081
No Sflow Collector Ip
1082
No Sflow Enable
1083
Sflow Collector Ip
1084
Sflow Enable
1085
Sflow Polling-Interval
1086
Sflow Sampling-Rate
1088
Show Sflow
1090
Figure 182: SHOW SFLOW Command
1090
Table 94. SHOW SFLOW Command
1091
Chapter 69: LLDP and LLDP-MED
1093
Overview
1094
Mandatory LLDP Tlvs
1095
Optional LLDP Tlvs
1095
Table 95. Mandatory LLDP Tlvs
1095
Table 96. Optional LLDP Tlvs
1095
Optional LLDP-MED Tlvs
1097
Table 97. Optional LLDP-MED Tlvs
1097
Enabling LLDP and LLDP-MED on the Switch
1099
Configuring Ports to Only Receive LLDP and LLDP-MED Tlvs
1100
Configuring Ports to Send Only Mandatory LLDP Tlvs
1101
Configuring Ports to Send Optional LLDP Tlvs
1102
Table 98. Optional LLDP Tlvs - Summary
1102
Configuring Ports to Send Optional LLDP-MED Tlvs
1104
Configuring Ports to Send LLDP-MED CIVIC Location Tlvs
1106
Table 99. Abbreviated List of LLDP-MED CIVIC Location Entry Parameters
1106
Configuring Ports to Send LLDP-MED Coordinate Location Tlvs
1109
Table 100. LLDP-MED Coordinate Location Entry Parameters
1109
Configuring Ports to Send LLDP-MED ELIN Location Tlvs
1113
Removing LLDP Tlvs from Ports
1115
Removing LLDP-MED Tlvs from Ports
1116
Deleting LLDP-MED Location Entries
1117
Disabling LLDP and LLDP-MED on the Switch
1118
Displaying General LLDP Settings
1119
Figure 183: SHOW LLDP Command
1119
Displaying Port Settings
1120
Figure 184: SHOW LLDP INTERFACE Command
1120
Displaying or Clearing Neighbor Information
1121
Displaying Port Tlvs
1123
Displaying and Clearing Statistics
1124
Figure 185: SHOW LLDP STATISTICS Command
1124
Chapter 70: LLDP and LLDP-MED Commands
1125
Table 101. LLDP and LLDP-MED Commands
1125
Clear Lldp Statistics
1128
Clear Lldp Table
1129
Lldp Holdtime-Multiplier
1130
Lldp Location
1131
Lldp Management-Address
1133
Lldp Med-Notifications
1135
Lldp Med-Tlv-Select
1136
Lldp Non-Strict-Med-Tlv-Order-Check
1138
Lldp Notifications
1139
Lldp Notification-Interval
1140
Lldp Reinit
1141
Lldp Run
1142
Lldp Timer
1143
Lldp Tlv-Select
1144
Table 102. Optional Tlvs
1144
Lldp Transmit Receive
1147
Lldp Tx-Delay
1148
Location CIVIC-Location
1149
Table 103. LLDP-MED CIVIC Location Entry Parameters
1149
Location Coord-Location
1152
Table 104. LLDP-MED Coordinate Location Entry Parameters
1152
Location Elin-Location
1155
No Lldp Med-Notifications
1156
No Lldp Med-Tlv-Select
1157
No Lldp Notifications
1159
No Lldp Run
1160
No Lldp Tlv-Select
1161
No Lldp Transmit Receive
1162
No Location
1163
Show Lldp
1165
Figure 186: SHOW LLDP Command
1165
Table 105. SHOW LLDP Command
1165
Show Lldp Interface
1167
Figure 187: SHOW LLDP INTERFACE Command
1167
Show Lldp Local-Info Interface
1169
Figure 188: SHOW LLDP LOCAL-INFO INTERFACE Command
1169
Figure 189: SHOW LLDP LOCAL-INFO INTERFACE Command (Continued)
1170
Show Lldp Neighbors Detail
1171
Figure 190: SHOW LLDP NEIGHBORS DETAIL Command
1171
Figure 191: SHOW LLDP NEIGHBORS DETAIL Command (Continued)
1172
Table 106. SHOW LLDP NEIGHBORS DETAIL Command
1172
Show Lldp Neighbors Interface
1176
Figure 192: SHOW LLDP NEIGHBORS INTERFACE Command
1176
Table 107. SHOW LLDP NEIGHBORS INTERFACE Command
1176
Show Lldp Statistics
1178
Figure 193: SHOW LLDP STATISTICS Command
1178
Table 108. SHOW LLDP STATISTICS Command
1178
Show Lldp Statistics Interface
1180
Figure 194: SHOW LLDP STATISTICS INTERFACE Command
1180
Table 109. SHOW LLDP STATISTICS INTERFACE Command
1180
Show Location
1182
Figure 195: SHOW LOCATION Command for a CIVIC Location
1182
Table 110. SHOW LLDP STATISTICS INTERFACE Command
1182
Chapter 71: Address Resolution Protocol (ARP)
1185
Overview
1186
ARP on the Switch
1186
Dynamic ARP Entries
1186
Static ARP Entries
1186
Adding Static ARP Entries
1187
Deleting Static and Dynamic ARP Entries
1188
Table 111. Deleting ARP Entries
1188
Displaying the ARP Table
1189
Figure 196: SHOW ARP Command
1189
Chapter 72: Address Resolution Protocol (ARP) Commands
1191
Table 112. ARP Commands
1191
Arp
1192
Clear Arp-Cache
1194
No Arp (Ip Address)
1195
Show Arp
1196
Figure 197: SHOW ARP Command
1196
Table 113. SHOW ARP Command
1196
Chapter 73: RMON
1199
Overview
1200
RMON Port Statistics
1201
Adding Statistics Groups
1201
Viewing Statistics Groups
1202
Deleting Statistics Groups
1202
Figure 198: SHOW RMON STATISTICS Command
1202
RMON Histories
1203
Adding History Groups
1203
Displaying History Groups
1204
Deleting History Groups
1205
Figure 199: SHOW RMON HISTORY Command
1205
RMON Alarms
1206
Creating RMON Statistics Groups
1207
Creating RMON Events
1207
Creating RMON Alarms
1208
Table 114. Abbreviated List of MIB Object Names and OID Numbers
1208
Creating an Alarm - Example 1
1209
Creating an Alarm - Example 2
1211
Chapter 74: RMON Commands
1215
Table 115. RMON Commands
1215
No Rmon Alarm
1217
No Rmon Collection History
1218
No Rmon Collection Stats
1219
No Rmon Event
1220
Rmon Alarm
1221
Table 116. MIB Object Names and ID Numbers
1222
Rmon Collection History
1224
Rmon Collection Stats
1226
Rmon Event Log
1227
Rmon Event Log Trap
1228
Rmon Event Trap
1230
Show Rmon Alarm
1232
Figure 200: SHOW RMON ALARM Command
1232
Table 117. SHOW RMON ALARM Command
1233
Show Rmon Event
1234
Figure 201: SHOW RMON EVENT Command
1234
Table 118. SHOW RMON EVENT Command
1234
Show Rmon History
1236
Figure 202: SHOW RMON HISTORY Command
1236
Table 119. SHOW RMON HISTORY Command
1236
Show Rmon Statistics
1238
Figure 203: SHOW RMON STATISTICS Command
1238
Table 120. SHOW RMON STATISTICS Command
1238
Chapter 75: Advanced Access Control Lists (Acls)
1239
Overview
1240
Filtering Criteria
1240
Actions
1241
ID Numbers
1241
How Ingress Packets Are Compared against Acls
1241
Table 121. Access Control List ID Number Ranges
1241
Guidelines
1242
Creating Acls
1243
Creating Numbered Ipv4 Acls
1243
Table 122. ACCESS-LIST Commands for Creating Numbered Ipv4 Acls
1243
Table 123. Blocking Ingress Packets Example
1245
Table 124. Blocking Traffic with Two Ipv4 Addresses
1245
Table 125. Creating a Permit ACL Followed by a Deny ACL Example
1246
Table 126. Permit Acls Ipv4 Packets Example
1247
Table 127. ACL Filters Tagged Ipv4 Packets Example
1248
Table 128. Numbered Ipv4 ACL with ICMP Packets Example
1249
Table 129. Numbered Ipv4 ACL with Protocol Example
1251
Table 130. Numbered Ipv4 ACL with TCP Port Packets Example
1253
Creating Numbered MAC Acls
1255
Table 131. Numbered Ipv4 ACL with UDP Port Example
1255
Table 132. Numbered MAC ACL Example
1257
Assigning Acls to Ports
1258
Assigning Numbered Ipv4 Acls to a Port
1258
Assigning MAC Address Acls to a Port
1259
Table 133. Assigning Numbered Ipv4 Acls
1259
Table 134. Assigning MAC Address Acls Example
1259
Removing Acls from Ports
1261
Removing Numbered Ipv4 Acls
1261
Removing MAC Address Acls
1261
Table 135. Removing Numbered IP Acls Example
1261
Table 136. Removing MAC Address Acls Example
1262
Restricting Remote Access
1263
Assigning Numbered IP Acls to VTY Lines
1263
Table 137. Assigning Numbered IP Acls to VTY Lines Example
1263
Assigning MAC Acls to VTY Lines
1264
Table 138. Assigning MAC Acls to VTY Lines Example
1264
Assigning Named Ipv4 and Ipv6 Acls to VTY Lines
1265
Table 139. Assigning Named Ipv4 Acls to VTY Lines Example
1265
Table 140. Assigning Named Ipv4 Acls to VTY Lines Example
1266
Unrestricting Remote Access
1268
Table 141. Removing Numbered IP Acls from VTY Lines Example
1268
Deleting Numbered IP and MAC Address Acls
1269
Table 142. Deleting Numbered IP Acls Example 1
1269
Table 143. Deleting Numbered IP Acls Example 2
1269
Displaying the Acls
1270
Displaying Ipv4 Acls
1270
Displaying IP ACL Port Assignments
1270
Figure 204: SHOW ACCESS-LIST Command
1270
Displaying Acls Assigned to VTY Lines
1271
Figure 205: SHOW INTERFACE ACCESS-GROUP Command
1271
Figure 206: SHOW RUNNING-CONFIG Command
1271
Chapter 76: ACL Commands
1273
Table 144. Access Control List Commands
1273
Access-Class
1275
Access-Group
1277
ACCESS-LIST (MAC Address)
1279
Access-List Icmp
1282
Access-List Ip
1285
Access-List Proto
1289
Table 145. Protocol Numbers
1290
Access-List Tcp
1294
Access-List Udp
1298
Mac Access-Group
1302
No Access-List
1303
No Access-Group
1304
No Mac Access-Group
1305
Show Access-List
1306
Figure 207: SHOW ACCESS-LIST Command
1307
Show Interface Access-Group
1308
Figure 208: SHOW INTERFACE ACCESS-GROUP Command
1308
Chapter 77: Quality of Service (QOS) Commands
1309
Table 146. Quality of Service Commands
1309
Mls Qos Enable
1311
Mls Qos Map Cos-Queue
1312
Mls Qos Map Dscp-Queue
1314
Mls Qos Queue
1316
Mls Qos Set Cos
1317
Mls Qos Set Dscp
1318
Mls Qos Trust Cos
1319
Mls Qos Trust Dscp
1320
No Mls Qos Enable
1321
No Wrr-Queue Weight
1322
Show Mls Qos Interface
1323
Figure 209: SHOW MLS QOS INTERFACE Command - Strict Priority
1323
Figure 210: SHOW MLS QOS INTERFACE Command - Strict Priority (Continued)
1324
Figure 211: SHOW MLS QOS INTERFACE Command - Weighted Round Robin
1324
Table 147. SHOW MLS QOS INTERFACE Command
1325
Show Mls Qos Maps Cos-Queue
1326
Figure 212: SHOW MLS QOS MAPS COS-QUEUE Command
1326
Show Mls Qos Maps Dscp-Queue
1327
Figure 213: SHOW MLS QOS MAPS DSCP-QUEUE Command
1328
Wrr-Queue Weight
1329
Section XI: Management Security
1331
Chapter 78: Local Manager Accounts
1333
Overview
1334
Privilege Levels
1334
Command Mode Restriction
1334
Password Encryption
1335
Figure 214: Password Prompt for Command Mode Restriction
1335
Figure 215: Command Mode Restriction Error Message
1335
Creating Local Manager Accounts
1337
Deleting Local Manager Accounts
1339
Activating Command Mode Restriction and Creating the Special Password
1340
Deactivating Command Mode Restriction and Deleting the Special Password
1341
Activating or Deactivating Password Encryption
1342
Displaying the Local Manager Accounts
1343
Figure 216: Displaying the Local Manager Accounts in the Running Configuration
1343
Chapter 79: Local Manager Account Commands
1345
Table 148. Local Manager Account Commands
1345
Enable Password
1346
No Enable Password
1348
No Service Password-Encryption
1349
No Username
1350
Service Password-Encryption
1351
Username
1352
Chapter 80: Telnet Server
1355
Overview
1356
Enabling the Telnet Server
1357
Disabling the Telnet Server
1358
Displaying the Telnet Server
1359
Figure 217: SHOW TELNET Command
1359
Chapter 81: Telnet Server Commands
1361
Table 149. Telnet Server Commands
1361
No Service Telnet
1362
Service Telnet
1363
Show Telnet
1364
Figure 218: SHOW TELNET Command
1364
Chapter 82: Telnet Client
1365
Overview
1366
Starting a Remote Management Session with the Telnet Client
1367
Chapter 83: Telnet Client Commands
1369
Table 150. Telnet Client Commands
1369
Telnet
1370
Telnet Ipv6
1371
Chapter 84: Secure Shell (SSH) Server
1373
Overview
1374
Algorithms
1374
Support for SSH
1375
Guidelines
1375
SSH and Enhanced Stacking
1377
Figure 219: SSH Remote Management of a Member Switch
1377
Creating the Encryption Key Pair
1379
Enabling the SSH Server
1380
Disabling the SSH Server
1381
Deleting Encryption Keys
1382
Displaying the SSH Server
1383
Chapter 85: SSH Server Commands
1385
Table 151. Secure Shell Server Commands
1385
Crypto Key Destroy Hostkey
1386
Crypto Key Generate Hostkey
1388
No Service Ssh
1390
Service Ssh
1391
Show Crypto Key Hostkey
1392
Figure 220: SHOW CRYPTO KEY HOSTKEY Command
1392
Show Ssh Server
1393
Figure 221: SHOW SSH SERVER Command
1393
Chapter 86: Non-Secure HTTP Web Browser Server
1395
Overview
1396
Enabling the Web Browser Server
1397
Setting the Protocol Port Number
1398
Disabling the Web Browser Server
1399
Displaying the Web Browser Server
1400
Figure 222: SHOW IP HTTP Command
1400
Chapter 87: Non-Secure HTTP Web Browser Server Commands
1401
Table 152. Non-Secure HTTP Web Browser Server Commands
1401
Service Http
1402
Ip Http Port
1403
No Service Http
1404
Show Ip Http
1405
Figure 223: SHOW IP HTTP Command
1405
Chapter 88: Secure HTTPS Web Browser Server
1407
Overview
1408
Certificates
1408
Distinguished Name
1409
Guidelines
1410
Creating a Self-Signed Certificate
1411
Configuring the HTTPS Web Server for a Certificate Issued by a CA
1414
Enabling the Web Browser Server
1418
Disabling the Web Browser Server
1419
Displaying the Web Browser Server
1420
Figure 224: SHOW IP HTTPS Command
1420
Chapter 89: Secure HTTPS Web Browser Server Commands
1421
Table 153. Secure HTTPS Web Browser Server Commands
1421
Crypto Certificate Destroy
1422
Crypto Certificate Generate
1423
Crypto Certificate Import
1426
Crypto Certificate Request
1427
Service Https
1429
Ip Https Certificate
1430
No Service Https
1431
Show Crypto Certificate
1432
Show Ip Https
1433
Figure 225: SHOW IP HTTPS Command
1433
Table 154. SHOW IP HTTPS Command
1433
Chapter 90: RADIUS and TACACS+ Clients
1435
Overview
1436
Remote Manager Accounts
1437
Guidelines
1439
Managing the RADIUS Client
1440
Adding IP Addresses of RADIUS Servers
1440
Specifying a RADIUS Global Encryption Key
1441
Specifying the Server Timeout
1441
Specifying RADIUS Accounting
1442
Removing the Accounting Method List
1442
Deleting Server IP Addresses
1443
Displaying the RADIUS Client
1443
Figure 226: SHOW RADIUS Command
1443
Managing the TACACS+ Client
1444
Adding IP Addresses of TACACS+ Servers
1444
Specifying TACACS+ Accounting
1445
Removing the Accounting Method List
1445
Deleting IP Addresses of TACACS+ Servers
1446
Displaying the TACACS+ Client
1446
Figure 227: SHOW TACACS Command
1446
Configuring Remote Authentication of Manager Accounts
1447
Chapter 91: RADIUS and TACACS+ Client Commands
1451
Table 155. RADIUS and TACACS+ Client Commands
1451
Aaa Accounting Login
1453
Aaa Authentication Enable (Tacacs+)
1455
Aaa Authentication Login
1457
Ip Radius Source-Interface
1459
Login Authentication
1461
No Login Authentication
1463
No Radius-Server Host
1464
No Tacacs-Server Host
1465
Radius-Server Host
1466
Radius-Server Key
1468
Radius-Server Timeout
1469
Show Radius
1470
Figure 228: SHOW RADIUS Command
1470
Table 156. SHOW RADIUS Command
1470
Show Tacacs
1472
Figure 229: SHOW TACACS Command
1472
Table 157. SHOW TACACS Command
1472
Tacacs-Server Host
1474
Tacacs-Server Key
1475
Tacacs-Server Timeout
1476
Appendix A: System Monitoring Commands
1477
Table 158. System Monitoring Commands
1477
Show Cpu
1478
Show Cpu History
1479
Show Cpu User-Threads
1480
Show Memory
1481
Show Memory Allocation
1482
Show Memory History
1483
Show Memory Pools
1484
Show Process
1485
Show System Serialnumber
1486
Show System Interrupts
1487
Show Tech-Support
1488
Appendix B: Management Software Default Settings
1491
Boot Configuration File
1492
Class of Service
1493
Console Port
1494
802.1X Port-Based Network Access Control
1495
Enhanced Stacking
1497
Gvrp
1498
IGMP Snooping
1499
Link Layer Discovery Protocol (LLDP and LLDP-MED)
1500
MAC Address-Based Port Security
1501
MAC Address Table
1502
Management IP Address
1503
Manager Account
1504
Port Settings
1505
RADIUS Client
1506
Remote Manager Account Authentication
1507
Rmon
1508
Secure Shell Server
1509
Sflow Agent
1510
Simple Network Management Protocol (Snmpv1, Snmpv2C and Snmpv3)
1511
Simple Network Time Protocol
1512
Spanning Tree Protocols (STP, RSTP and MSTP)
1513
Spanning Tree Status
1513
Spanning Tree Protocol
1513
Rapid Spanning Tree Protocol
1513
Multiple Spanning Tree Protocol
1514
System Name
1515
TACACS+ Client
1516
Telnet Server
1517
Vlans
1518
Web Server
1519
Command Index
1521
5
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Allied Telesis AT-9000 Series and is the answer not in the manual?
Ask a question
Allied Telesis AT-9000 Series Specifications
General
Brand
Allied Telesis
Model
AT-9000 Series
Category
Switch
Language
English
Related product manuals
Allied Telesis AT-9000/28
1276 pages
Allied Telesis AT-9000/28SP
1482 pages
Allied Telesis AT-9000/12PoE
1482 pages
Allied Telesis AT-9028
1278 pages
Allied Telesis AT-9924SP
65 pages
AT 9924SP AT-9924SP-30 AT-9924SP-30
56 pages
Allied Telesis AT-x210-9GT
1575 pages
Allied Telesis AT-FS980M/9
76 pages
Allied Telesis AT-FS716
44 pages
Allied Telesis AT-8350GB
104 pages
Allied Telesis AT-8624PoE
36 pages
Allied Telesis AT-8016F/MT
116 pages
Need help?
General
To Next Page