NETGEAR ProSafe GSM7212 Cli Reference Manual
NETGEAR ProSafe GSM7212 Cli Reference Manual

NETGEAR ProSafe GSM7212 Cli Reference Manual

Layer-2 switches, software version 4.0
Hide thumbs Also See for ProSafe GSM7212:
Table of Contents

Advertisement

Command Line Interface
Reference for the ProSafe
7200 Series Layer-2
Switches, Software
Version 4.0
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
Beta Draft 2
March 2006

Advertisement

Table of Contents
loading

Summary of Contents for NETGEAR ProSafe GSM7212

  • Page 1 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Version 4.0 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Beta Draft 2 March 2006...
  • Page 2: Statement Of Conditions

    In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
  • Page 3 Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FSM72xx/GSM72xx March 2006 managed switch ProSafe 7200 Series Layer-2 Managed Switch Business English Beta Draft 2 v1.0, March 2006...
  • Page 4 v1.0, March 2006...
  • Page 5: Table Of Contents

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Version 4.0 Chapter 1 About This Manual Audience ...1-1 Scope ...1-1 Typographical Conventions ...1-2 Special Message Formats ...1-2 How to Use This Manual ...1-3 How to Print this Manual ...1-3 Revision History ...1-4 Chapter 2 Overview...
  • Page 6 3.1.3 serviceport protocol ...3-2 3.1.4 network parms ...3-2 3.1.5 network mgmt_vlan ...3-2 3.1.6 network protocol ...3-3 3.1.7 show network ...3-3 3.1.8 show serviceport ...3-4 Console Port Access Commands ...3-5 3.2.1 configuration ...3-5 3.2.2 lineconfig ...3-5 3.2.3 serial baudrate ...3-6 3.2.4 serial timeout ...3-6 3.2.5 show serial ...3-7...
  • Page 7 User Account Commands ...3-18 3.6.1 users name ...3-18 3.6.2 users passwd ...3-19 3.6.3 users snmpv3 accessmode ...3-19 3.6.4 users snmpv3 authentication ...3-20 3.6.5 users snmpv3 encryption ...3-20 3.6.6 show loginsession ...3-21 3.6.7 show users ...3-21 3.6.8 disconnect ...3-22 Chapter 4 Port and System Setup Commands Port Configuration Commands ...4-1 4.1.1...
  • Page 8 4.3.6 sntp unicast client poll-retry ... 4-11 4.3.7 sntp multicast client poll-interval ... 4-11 4.3.8 sntp server ...4-12 4.3.9 show sntp ...4-12 4.3.10 show sntp client ...4-12 4.3.11 show sntp server ...4-13 MAC Address and MAC Database Commands ...4-14 4.4.1 network mac-address ...4-14 4.4.2 network mac-type ...4-14...
  • Page 9 5.1.14 spanning-tree mst vlan ...5-8 5.1.15 spanning-tree port mode ...5-8 5.1.16 spanning-tree port mode all ...5-9 STP Show Commands ...5-9 5.2.1 show spanning-tree ...5-9 5.2.2 show spanning-tree summary ... 5-11 5.2.3 show spanning-tree interface ...5-12 5.2.4 show spanning-tree mst port detailed ...5-13 5.2.5 show spanning-tree mst port summary ...5-15 5.2.6...
  • Page 10 6.1.22 vlan tagging ...6-9 VLAN Show Commands ...6-10 6.2.1 show vlan ...6-10 6.2.2 show vlan brief ... 6-11 6.2.3 show vlan port ...6-12 Provisioning (IEEE 802.1p) Commands ...6-13 6.3.1 vlan port priority all ...6-13 6.3.2 vlan priority ...6-13 Chapter 7 DHCP Commands DHCP Server Commands (DHCP Config Pool Mode) ...7-2 7.1.1...
  • Page 11 7.3.3 clear ip dhcp conflict ... 7-11 7.3.4 show ip dhcp binding ...7-12 7.3.5 show ip dhcp global configuration ...7-12 7.3.6 show ip dhcp pool configuration ...7-12 7.3.7 show ip dhcp server statistics ...7-13 7.3.8 show ip dhcp conflict ...7-14 DHCP and BOOTP Relay Commands ...7-14 7.4.1 bootpdhcprelay cidoptmode ...7-15...
  • Page 12 9.1.4 port-security mac-address ...9-3 9.1.5 port-security mac-address move ...9-3 9.1.6 show port-security ...9-3 9.1.7 show port-security ...9-4 9.1.8 show port-security dynamic ...9-4 9.1.9 show port-security static ...9-4 9.1.10 show port-security violation ...9-4 Storm Control Commands ...9-5 9.2.1 storm-control broadcast ...9-5 9.2.2 storm-control flowcontrol ...9-6 9.2.3...
  • Page 13 10.2.2 show snmptrap ...10-10 10.2.3 show trapflags ... 10-11 Chapter 11 Port-Based Access and Authentication Commands 11.1 Port-Based Network Access Control Commands ... 11-1 11.1.1 authentication login ... 11-1 11.1.2 clear dot1x statistics ... 11-3 11.1.3 clear radius statistics ... 11-3 11.1.4 dot1x defaultlogin ...
  • Page 14 11.2.9 show radius accounting ... 11-17 11.2.10 show radius statistics ... 11-19 Chapter 12 Port-Channel/LAG (802.3ad) Commands 12.1 Port-Channel Configuration Commands ...12-1 12.1.1 addport ...12-2 12.1.2 deleteport (Interface Config) ...12-2 12.1.3 deleteport (Global Config) ...12-2 12.1.4 port-channel ...12-2 12.1.5 clear port-channel ...12-3 12.1.6 port-channel staticcapability ...12-3 12.1.7...
  • Page 15 Chapter 14 Quality of Service (QoS) Commands 14.1 Class of Service (CoS) Commands (GSM7248 only) ...14-2 14.1.1 classofservice dot1p-mapping ...14-2 14.1.2 classofservice ip-precedence-mapping ...14-2 14.1.3 classofservice ip-dscp-mapping ...14-3 14.1.4 classofservice trust ...14-3 14.1.5 cos-queue min-bandwidth ...14-4 14.1.6 cos-queue strict ...14-4 14.1.7 traffic-shape ...14-4 14.1.8...
  • Page 16 ...14-34 14.8.4 show access-lists ...14-35 Chapter 15 System Maintenance Commands 15.1 System Information and Statistics Commands ...15-1 15.1.1 show arp switch ...15-1 15.1.2 show eventlog ...15-2 15.1.3 show hardware ...15-2 15.1.4 show interface ...15-3 15.1.5 show interface ethernet ...15-5...
  • Page 17 15.1.6 show logging ...15-14 15.1.7 show mac-addr-table ...15-14 15.1.8 clear mac-addr-table ...15-15 15.1.9 show running-config ...15-16 15.1.10 terminal length ...15-16 15.1.11 show sysinfo ...15-16 15.2 System Utility Commands ...15-17 15.2.1 traceroute ...15-17 15.2.2 clear config ...15-17 15.2.3 clear counters ...15-18 15.2.4 clear igmpsnooping ...15-18 15.2.5...
  • Page 18 15.5 Configuration Scripting Commands ...15-27 15.5.1 script apply ...15-28 15.5.2 script delete ...15-28 15.5.3 script list ...15-28 15.5.4 script show ...15-28 15.5.5 script validate ...15-29 xviii v1.0, March 2006...
  • Page 19: About This Manual

    This document is for system administrators who configure and operate systems using 7200 Series Managed Switch software. Software engineers who integrate 7200 Series Managed Switch software into their hardware platform can also benefit from a description of the configuration options.
  • Page 20: Typographical Conventions

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Note: Product updates are available on the NETGEAR Web site at http://kbserver.netgear.com/products/. 1.3 Typographical Conventions This guide uses the following typographical conventions: Table 1-2. Typographical conventions italics...
  • Page 21: How To Use This Manual

    Properties button and increasing the number of pages per sheet. About This Manual , for browsing forwards or backwards through the manual button to access the full NETGEAR, Inc. online knowledge base for Publication Version 1.0, March 2006 button.
  • Page 22: Revision History

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- • Printing the Full Manual. Use the Complete PDF Manual link at the top left of any page. — Click the Complete PDF Manual link at the top left of any page in the manual. The PDF version of the complete manual opens in a browser window.
  • Page 23: Overview

    • Provide a complete device management portfolio to the network administrator. 2.1 Scope 7200 Series Managed Switch software encompasses both hardware and software support. It software is partitioned to run in the following processors: • CPU—This code runs the networking device management portfolio and controls the overall networking device hardware.
  • Page 24: Command Syntax

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- • Section 2.2.5 “Command Modes” on page 2-5 • Section 2.2.6 “Entering CLI Commands” on page 2-8 • Section 2.2.7 “Using CLI Help” on page 2-10 • Section 2.2.8 “Accessing the CLI”...
  • Page 25 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- The parameters for a command might include mandatory values, optional values, or keyword choices. Table 2-1 describes the conventions this document uses to distinguish between value types. Table 2-1.
  • Page 26: Unit-Slot-Port Naming Convention

    Character strings 2.2.3 Unit-Slot-Port Naming Convention 7200 Series Managed Switch software references physical entities such as cards and ports by using a Unit-Slot-Port (USP) naming convention. The software also uses this convention to identify certain logical entities, such as port-channel interfaces.
  • Page 27: Using The "No" Form Of A Command

    7200 Series Managed Switch software commands. The commands in one mode are not available until you switch to that particular mode, with the exception of the User EXEC mode commands. You can execute the User EXEC mode commands in the Privileged EXEC mode.
  • Page 28 Policy Class Config Class Map Config Router OSPF Config Prompt Switch> Switch# Switch (Config)# Switch (Vlan)# Switch (Interface <unit/slot/ port>)# Switch (line)# Switch (Config policy-map)# Switch (Config policy-class-map)# Switch (Config class-map)# Switch (Config router)# v1.0, March 2006 Mode Description Contains a limited set of commands to view basic system information.
  • Page 29 Config policy-map. Policy-Class-Map From the Policy Map mode enter Config class. Overview Prompt Switch (Config router)# Switch (Config router)# Switch (Config mac-access-list)# Switch (Config dhcp-pool)# Switch (Config stack)# v1.0, March 2006 Mode Description Allows you to access the router RIP configuration commands.
  • Page 30: Entering Cli Commands

    Config Mode stack command. 2.2.6 Entering CLI Commands The 7200 Series Managed Switch supports several features to help you enter commands. 2.2.6.1 Command Completion and Abbreviation Command completion finishes spelling the command when you type enough letters of a command to uniquely identify the command keyword. Once you have entered enough letters, press the SPACEBAR or TAB key to complete the word.
  • Page 31: Cli Error Messages

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 2.2.6.2 CLI Error Messages If you enter a command and the system is unable to execute it, an error message appears. Table 2-7 describes the most common CLI error messages. Table 2-7.
  • Page 32: Using Cli Help

    Display switch options and settings. Enable/Disable. Configure Network Parameters of the router. Select DHCP, BootP, or None as the network config protocol. Configure the Management VLAN ID of the switch. Enter the IP Address. Press Enter to execute the command v1.0, March 2006 Overview...
  • Page 33: Accessing The Cli

    You can also enter a question mark (?) after typing one or more characters of a word to list the available command or parameters that begin with the letters, as shown in the following example: (switch) #show m? mac-addr-table 2.2.8 Accessing the CLI You can access the CLI by using a direct console connection or by using a telnet or SSH connection from a remote management host.
  • Page 34 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 2-12 Overview v1.0, March 2006...
  • Page 35: Administrative Access Commands

    • Show commands display switch settings, statistics, and other information. • Configuration commands configure features and options of the switch. For every configuration command, there is a show command that displays the configuration setting. To manage the device by using SNMP, see 3.1 Network Interface Commands...
  • Page 36: Enable

    This command specifies the network management port configuration protocol. If you modify this value, the change is effective immediately. If you use the the switch periodically sends requests to a BootP server until a response is received. If you use the...
  • Page 37: Network Protocol

    The network interface is the logical interface used for in-band connectivity with the switch via any of the switch's front panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed.
  • Page 38: Show Serviceport

    Indicates which network protocol is being used. The options are bootp | dhcp | none. Specifies if the switch should allow access to the Java applet in the header frame. Enabled means the applet can be viewed. The factory default is disabled.
  • Page 39: Console Port Access Commands

    3.2 Console Port Access Commands This section describes the commands you use to configure the console port. You can use a serial cable to connect a management host directly to the console port of the switch. 3.2.1 configuration This command gives you access to the Global Config mode. From the Global Config mode, you can configure a variety of system settings, including user accounts.
  • Page 40: Serial Baudrate

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.2.3 serial baudrate This command specifies the communication rate of the terminal interface. The supported rates are 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200. Default Format Mode 3.2.3.1 no serial baudrate This command sets the communication rate of the terminal interface.
  • Page 41: Show Serial

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.2.5 show serial This command displays serial communication settings for the switch. Format Modes Serial Port Login Timeout (minutes) Baud Rate (bps) Character Size (bits) Flow Control...
  • Page 42: Telnet Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.3 Telnet Commands This section describes the commands you use to configure and view telnet settings. You can use telnet to manage the device from a remote management host. 3.3.1 telnet This command establishes a new outbound telnet connection to a remote host.
  • Page 43: Transport Output Telnet

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.3.3 transport output telnet This command regulates new outbound telnet connections. If enabled, new outbound telnet sessions can be established until it reaches the maximum number of simultaneous outbound telnet sessions allowed.
  • Page 44: Session-Timeout

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.3.5 session-timeout This command sets the telnet session timeout value.The timeout value unit of time is minutes. A value of 0 indicates that a session remains active indefinitely. Default Format Mode...
  • Page 45: Telnetcon Timeout

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.3.7 telnetcon timeout This command sets the telnet connection session timeout value, in minutes. A session is active as long as the session has not been idle for the value you set, which ranges from 1- 160 minutes.
  • Page 46: Show Telnetcon

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Allow New Outbound Telnet Sessions 3.3.9 show telnetcon This command displays telnet settings. Format Modes Remote Connection Login Timeout (minutes) Maximum Number of Remote Connection Sessions Allow New Telnet Sessions 3-12 Indicates whether outbound telnet sessions are allowed.
  • Page 47: Secure Shell (Ssh) Command

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.4 Secure Shell (SSH) Command This section describes the commands you use to configure SSH access to the switch. Use SSH to access the switch from a remote management host.
  • Page 48: Sshcon Maxsessions

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.4.3 sshcon maxsessions This command specifies the maximum number of SSH connection sessions that can be established. A value of 0 indicates that no ssh connection can be established. The range is 0 to 5.
  • Page 49: Hypertext Transfer Protocol (Http) Commands

    This section describes the commands you use to configure HTTP access to the switch. Access to the switch by using a Web browser is enabled by default. Everything you can view and configure by using the CLI is also available by using the Web.
  • Page 50: Ip Http Secure-Protocol

    This command enables access to the switch through the Web interface. When access is enabled, you can login to the switch from the Web interface. When access is disabled, you cannot login to the switch's Web server. Disabling the Web interface takes effect immediately and affects all interfaces.
  • Page 51: Network Javamode

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.5.5 network javamode This command specifies whether or not the switch should allow access to the Java applet in the header frame of the Web interface. When access is enabled, the Java applet can be viewed from the Web interface.
  • Page 52: User Account Commands

    This section describes the commands you use to add, manage, and delete system users. The 7200 Series Managed Switch has two default users: admin and guest. The admin user can view and configure system settings, and the guest user can view settings.
  • Page 53: Users Passwd

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.6.2 users passwd Use this command to change a password. Passwords are a maximum of eight alphanumeric characters. If a user is authorized for authentication or encryption is enabled, the password length must be at least eight alphanumeric characters.
  • Page 54: Users Snmpv3 Authentication

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 3.6.4 users snmpv3 authentication This command specifies the authentication protocol to be used for the specified user. The valid authentication protocols are none, md5 or sha. the snmpv3 authentication password and therefore must be at least eight characters in length.
  • Page 55: Show Loginsession

    This command sets the encryption protocol to none. The name for which the specified encryption protocol will be used. Format Mode 3.6.6 show loginsession This command displays current telnet and serial port connections to the switch. Format Mode User Name Connection From...
  • Page 56: Disconnect

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- SNMPv3 Authentication SNMPv3 Encryption 3.6.8 disconnect This command closes a telnet session. Format Mode 3-22 retrieve parameters on the system. If the value is set to the SNMPv3 user is only able to retrieve parameter dOnly, information.
  • Page 57: Port And System Setup Commands

    The commands in this section are in one of three functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands configure features and options of the switch. For every configuration command, there is a show command that displays the configuration setting. •...
  • Page 58: Cablestatus

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.1.2 cablestatus This command tests the status of the cable attached to an interface. Format Mode 4.1.3 auto-negotiate This command enables automatic negotiation on a port. Default Format Mode 4.1.3.1 no auto-negotiate...
  • Page 59: Mtu

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.1.5 mtu This command sets the maximum transmission unit (MTU) size, in bytes, for physical and port-channel (LAG) interfaces. For the standard implementation, the MTU size is a valid integer between 1522 - 9216 for tagged packets and a valid integer between 1518 - 9216 for untagged packets.
  • Page 60: Shutdown All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.1.6.1 no shutdown This command enables a port. Note: You can use the (LAG) interfaces, but not on VLAN routing interfaces. Format Mode 4.1.7 shutdown all This command disables all ports. Note: You can use the interfaces, but not on VLAN routing interfaces.
  • Page 61: Speed All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Acceptable values are: 100h 100f 4.1.9 speed all This command sets the speed and duplex setting for all interfaces. Format Mode Acceptable values are: 100h 100f 4.1.10 monitor session This command configures a probe port and a monitored port for monitor session (port monitoring).
  • Page 62: No Monitor

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 4.1.11 no monitor This command removes all the source ports and a destination port and restores the default value for mirroring session mode for all the configured sessions. Note: This is a stand-alone “no”...
  • Page 63: Show Port Protocol

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Admin Mode Physical Mode Physical Status Link Status Link Trap LACP Mode 4.1.14 show port protocol This command displays the Protocol-Based VLAN information for either the entire system, or for the indicated group.
  • Page 64: Pre-Login Banner And System Prompt Commands

    The pre-login banner is the text that displays before you login at the prompt. 4.2.1 copy command includes the option to upload or download the CLI Banner to or from copy the switch. You can specify local URLs by using TFTP, Xmodem, Ymodem, or Zmodem. Default Format Mode 4.2.2 set prompt This command changes the name of the prompt.
  • Page 65: Simple Network Time Protocol (Sntp) Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.3 Simple Network Time Protocol (SNTP) Commands This section describes the commands you use to automatically configure the system time and date by using SNTP. 4.3.1 sntp broadcast client poll-interval This command sets the poll interval for SNTP broadcast clients in seconds as a power of two where <poll-interval>...
  • Page 66: Sntp Unicast Client Poll-Interval

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 4.3.3.1 no sntp client port This command resets the SNTP client port back to its default value. Format Mode 4.3.4 sntp unicast client poll-interval This command sets the poll interval for SNTP unicast clients in seconds as a power of two where <poll-interval>...
  • Page 67: Sntp Unicast Client Poll-Retry

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.3.6 sntp unicast client poll-retry This command will set the poll retry for SNTP unicast clients to a value from 0 to 10. Default Format Mode 4.3.6.1 no sntp unicast client poll-retry This command will reset the poll retry for SNTP unicast clients to its default value.
  • Page 68: Sntp Server

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.3.8 sntp server This command configures an SNTP server (a maximum of three). The optional priority can be a value of 1-3, the version a value of 1-4, and the port id a value of 1-65535. Format Mode 4.3.8.1 no sntp server...
  • Page 69: Show Sntp Server

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Client Supported Modes SNTP Version Port Client Mode Poll Interval Poll Timeout Poll Retry 4.3.11 show sntp server This command is used to display SNTP server settings and configured servers. Format Mode Server IP...
  • Page 70: Mac Address And Mac Database Commands

    A locally administered address must have bit 6 On (b'1') and bit 7 Off (b'0'). Format Mode 4.4.2 network mac-type This command specifies whether the switch uses the burned in MAC address or the locally-administered MAC address. Default Format Mode...
  • Page 71: Macfilter

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.4.2.1 no network mac-type This command resets the value of MAC address to its default. Format Mode 4.4.3 macfilter This command adds a static MAC filter entry for the MAC address < VLAN <...
  • Page 72: Macfilter Adddest All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.4.4.1 no macfilter adddest This command removes a port from the destination filter set for the MAC filter with the given and VLAN of <macaddr> a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. parameter must identify a valid VLAN.
  • Page 73: Macfilter Addsrc All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 4.4.6.1 no macfilter addsrc This command removes a port from the source filter set for the MAC filter with the MAC address of <macaddr> specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. parameter must identify a valid VLAN.
  • Page 74: Show Forwardingdb Agetime

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Forwarding Database ID 4.4.8.1 no bridge aging-time This command sets the forwarding database address aging timeout to 300 seconds. In an IVL system, the [fdbid | all] Format Mode Forwarding...
  • Page 75: Show Mac-Address-Table Static

    Port and System Setup Commands show mac-address-table multicast <macaddr> Privileged EXEC A multicast MAC address for which the switch has forward- ing and or filtering information. The format is two-digit hexa- decimal numbers separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as a MAC address and VLAN ID combination of 8 bytes.
  • Page 76: Show Mac-Address-Table Staticfiltering

    4-20 show mac-address-table staticfiltering Privileged EXEC A unicast MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for exam- ple 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes.
  • Page 77: Chapter 5 Spanning Tree Protocol Commands

    5.1 STP Configuration Commands This section describes the commands you use to configure Spanning Tree Protocol (STP). Note: STP is disabled by default. When you enable STP on the switch, STP is still disabled on each port. If STP is disabled, the system does not forward BPDU messages.
  • Page 78: Spanning-Tree Bpdumigrationcheck

    BPDU migration check on all interfaces. Format Mode 5.1.3 spanning-tree configuration name This command sets the Configuration Identifier Name for use in identifying the configuration that this switch is currently using. The characters. Default Format Mode 5.1.3.1 no spanning-tree configuration name This command resets the Configuration Identifier Name to its default.
  • Page 79: Spanning-Tree Configuration Revision

    Format Mode 5.1.4.1 no spanning-tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using to the default value, i.e. 0. Format Mode 5.1.5 spanning-tree edgeport This command specifies that this port is an Edge Port within the common and internal spanning tree.
  • Page 80: Spanning-Tree Forward-Time

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- • 802.1s - MST BPDUs are transmitted (IEEE 802.1s functionality supported) Default Format Mode 5.1.6.1 no spanning-tree forceversion This command sets the Force Protocol Version parameter to the default value, i.e. 802.1s. Format Mode 5.1.7 spanning-tree forward-time...
  • Page 81: Spanning-Tree Max-Age

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 5.1.8.1 no spanning-tree hello-time This command sets the admin Hello Time parameter for the common and internal spanning tree to the default value. Format Mode 5.1.9 spanning-tree max-age This command sets the Bridge Max Age parameter to a new value for the common and internal spanning tree.
  • Page 82: Spanning-Tree Mst

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 5.1.11 spanning-tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the common and internal spanning tree. If you specify an parameter that corresponds to an existing multiple spanning tree instance, the configurations are done for that multiple spanning tree instance.
  • Page 83: Spanning-Tree Mst Instance

    This command adds a multiple spanning tree instance to the switch. The parameter is a number within a range of 1 to 4094, that corresponds to the new instance ID <mstid> to be added. The maximum number of multiple instances supported by the switch is 4. Format Mode 5.1.12.1 no spanning-tree mst instance...
  • Page 84: Spanning-Tree Mst Vlan

    The parameter <mstid> spanning tree instance. The Format Mode 5.1.15 spanning-tree port mode This command sets the Administrative Switch Port State for this port to enabled. Default Format Mode spanning-tree mst priority <mstid> <0-61440> Global Config is a number that corresponds to the <mstid>...
  • Page 85: Spanning-Tree Port Mode All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 5.1.15.1 no spanning-tree port mode This command sets the Administrative Switch Port State for this port to disabled. Format Mode 5.1.16 spanning-tree port mode all This command sets the Administrative Switch Port State for all ports to enabled.
  • Page 86 Number of times changed. Boolean value of the Topology Change parameter for the switch indicating if a topology change is in progress on any port assigned to the common and internal spanning tree. The bridge identifier of the root bridge. It is made up from the bridge priority and the base MAC address of the bridge.
  • Page 87: Show Spanning-Tree Summary

    Bridge Hello Time Bridge Forward Delay Bridge Hold Time 5.2.2 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command. Format Modes Spanning Tree Adminmode Spanning Tree...
  • Page 88: Show Spanning-Tree Interface

    Configuration Digest Key MST Instances 5.2.3 show spanning-tree interface This command displays the settings and parameters for a specific switch port within the common and internal spanning tree. The following details are displayed on execution of the command. Format Modes...
  • Page 89: Show Spanning-Tree Mst Port Detailed

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 5.2.4 show spanning-tree mst port detailed This command displays the detailed settings and parameters for a specific switch port within a particular multiple spanning tree instance. The parameter that corresponds to the desired existing multiple spanning tree instance.
  • Page 90 Designated Bridge Designated Port Identifier If you specify 0 (defined as the default CIST ID) as the the settings and parameters for a specific switch port within the common and internal spanning tree. The <slot/port> displayed. Port Identifier Port Priority...
  • Page 91: Show Spanning-Tree Mst Port Summary

    Port Role Link Status Link Trap 5.2.6 show spanning-tree mst summary This command displays summary information about all multiple spanning tree instances in the switch. On execution, the following details are displayed. Format Modes MST Instance ID List For each MSTID: Spanning Tree Protocol Commands The regional root identifier in use for this port.
  • Page 92: Show Spanning-Tree Vlan

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Associated FIDs Associated VLANs 5.2.7 show spanning-tree vlan This command displays the association between a VLAN and a multiple spanning tree instance. The <vlanid> Format Modes VLAN Identifier Associated Instance 5-16...
  • Page 93: Vlan Commands

    This section describes the VLAN commands available in the 7200 Series Managed Switch CLI. VLANs allow users located on different physical networks to be on the same logical network. The VLAN Commands section includes the following topics: • Section 6.1 “VLAN Configuration Commands” on page 6-1 •...
  • Page 94: Vlan

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Mode 6.1.2.1 no network mgmt_vlan This command sets the Management VLAN ID to the default. Format Mode 6.1.3 vlan This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN).
  • Page 95: Vlan Ingressfilter

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 6.1.5 vlan ingressfilter This command enables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
  • Page 96: Vlan Participation

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 6.1.7.1 no vlan name This command sets the name of a VLAN to a blank string. Format Mode 6.1.8 vlan participation This command configures the degree of participation for a specific interface in a VLAN. The ID is a valid VLAN identification number, and the interface is a valid interface number Format...
  • Page 97: Vlan Port Acceptframe All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- auto 6.1.10 vlan port acceptframe all This command sets the frame acceptance mode for all interfaces. The modes defined as follows: • VLAN Only mode - Untagged frames or priority frames received on this interface are discarded.
  • Page 98: Vlan Port Tagging All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 6.1.12 vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames.
  • Page 99: Global Config

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 6.1.14 Global Config Mode 6.1.15 vlan protocol group This command adds protocol-based VLAN group to the system. The < character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to identify the group in subsequent commands.
  • Page 100: Protocol Group

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 6.1.18 protocol group This command attaches a A group may only be associated with one VLAN at a time, however the VLAN association can be changed. The referenced VLAN should be created prior to the creation of the protocol-based VLAN except when GVRP is expected to create the VLAN.
  • Page 101: Protocol Vlan Group All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 6.1.20 protocol vlan group all This command adds all physical interfaces to the protocol-based VLAN identified by . You can associate multiple interfaces with a group, but you can only associate <groupid>...
  • Page 102: Vlan Show Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 6.1.22.1 no vlan tagging This command configures the tagging behavior for a specific interface in a VLAN to disabled. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.
  • Page 103: Show Vlan Brief

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Configured Tagging 6.2.2 show vlan brief This command displays a list of all configured VLANs. Format Modes VLAN ID VLAN Commands Include - This port is always a member of this VLAN. This is equivalent to registration fixed in the IEEE 802.1Q standard.
  • Page 104: Show Vlan Port

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- VLAN Name VLAN Type 6.2.3 show vlan port This command displays VLAN port information. Format Modes Interface Port VLAN ID Acceptable Frame Types Ingress Filtering GVRP 6-12 A string associated with this VLAN as a convenience.
  • Page 105: Provisioning (Ieee 802.1P) Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Default Priority 6.3 Provisioning (IEEE 802.1p) Commands This section describes the commands you use to configure provisioning, which allows you to prioritize ports. 6.3.1 vlan port priority all This command configures the port priority assigned for untagged packets for all ports presently plugged into the device.
  • Page 106 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 6-14 VLAN Commands v1.0, March 2006...
  • Page 107: Dhcp Commands

    This section describes the DHCP commands available in the 7200 Series Managed Switch CLI. DHCP automatically allocates and manages client TCP/ IP configurations. DHCP uses UDP as its transport protocol and supports a number of features that facilitate in administration address allocations.
  • Page 108: Dhcp Server Commands (Dhcp Config Pool Mode)

    7.1 DHCP Server Commands (DHCP Config Pool Mode) This section describes the commands you to configure the DHCP server settings for the switch. 7.1.1 ip dhcp pool This command configures a DHCP address pool name on a DHCP server and enters DHCP pool configuration mode.
  • Page 109: Client-Name

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7.1.2.1 no client-identifier This command deletes the client identifier. Format Mode 7.1.3 client-name This command specifies the name for a DHCP client. Name is a string consisting of standard ASCII characters.
  • Page 110: Dns-Server

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7.1.5 dns-server This command specifies the IP servers available to a DHCP client. Address parameters are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid.
  • Page 111: Lease

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 7.1.7.1 no host This command removes the IP address of the DHCP client. Format Mode 7.1.8 lease This command configures the duration of the lease for an IP address that is assigned from a DHCP server to a DHCP client.
  • Page 112: Bootfile

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 7.1.10 bootfile The command specifies the name of the default boot image for a DHCP client. The specifies the boot image file. <filename> Default Format Mode 7.1.10.1 no bootfile This command deletes the boot image name.
  • Page 113: Netbios-Node-Type

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Default Format Mode 7.1.12.1 no netbios-name-server This command removes the NetBIOS name server list. Format Mode 7.1.13 netbios-node-type The command configures the NetBIOS node type for Microsoft Dynamic Host Configuration Protocol (DHCP) clients.type Specifies the NetBIOS node type.
  • Page 114: Option

    Mode 7.2 DHCP Server Commands (Global Config Mode) This section describes the commands you to configure the DHCP server settings for the switch. You must be in Global Config mode to execute these commands. next-server <address> DHCP Pool Config no next-server...
  • Page 115: Ip Dhcp Excluded-Address

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7.2.1 ip dhcp excluded-address This command specifies the IP addresses that a DHCP server should not assign to DHCP clients. Low-address and high-address are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255.
  • Page 116: Service Dhcp

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 7.2.3 service dhcp This command enables the DHCP server. Default Format Mode 7.2.3.1 no service dhcp This command disables the DHCP server. Format Mode 7.2.4 ip dhcp bootp automatic This command enables the allocation of the addresses to the bootp client.
  • Page 117: Dhcp Server Clear And Show Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7.2.5.1 no ip dhcp conflict logging This command disables conflict logging on DHCP server. Format Mode 7.3 DHCP Server Clear and Show Commands This section describes the commands you to delete various DHCP information and the commands you use to view DHCP configuration information and statistics.
  • Page 118: Show Ip Dhcp Binding

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7.3.4 show ip dhcp binding This command displays address bindings for the specific IP address on the DHCP server. If no IP address is specified, the bindings corresponding to all the addresses are displayed. Format Modes IP address...
  • Page 119: Show Ip Dhcp Server Statistics

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Pool Name Pool Type Lease Time DNS Servers Default Routers The following additional field is displayed for Dynamic pool type: Network The following additional fields are displayed for Manual pool type: Client Name Client Identifier Hardware...
  • Page 120: Show Ip Dhcp Conflict

    This section describes the commands you use to configure BootP/DHCP Relay on the switch. A DHCP relay agent operates at Layer 3 and forwards DHCP requests and replies between clients and servers when they are not on the same physical subnet.
  • Page 121: Bootpdhcprelay Cidoptmode

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7.4.1 bootpdhcprelay cidoptmode This command enables the circuit ID option mode for BootP/DHCP Relay on the system. Default Format Mode 7.4.1.1 no bootpdhcprelay cidoptmode This command disables the circuit ID option mode for BootP/DHCP Relay on the system. Format Mode 7.4.2 bootpdhcprelay enable...
  • Page 122: Bootpdhcprelay Minwaittime

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7.4.3.1 no bootpdhcprelay maxhopcount This command configures the default maximum allowable relay agent hops for BootP/ DHCP Relay on the system. Format Mode 7.4.4 bootpdhcprelay minwaittime This command configures the minimum wait time in seconds for BootP/DHCP Relay on the system.
  • Page 123: Show Bootpdhcprelay

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7.4.6 show bootpdhcprelay This command displays the BootP/DHCP Relay information. Format Modes Maximum Hop Count Minimum Wait Time (Seconds) Admin Mode Server IP Address Circuit Id Option Mode Requests Received...
  • Page 124 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 7-18 DHCP Commands v1.0, March 2006...
  • Page 125: Garp, Gvrp, And Gmrp Commands

    This section describes the Generic Attribute Registration Protocol (GARP), GARP VLAN Registration Protocol (GVRP), and Garp Multicast Registration Protocol (GVMP) commands available in the 7200 Series Managed Switch CLI. GARP is a protocol that allows client stations to register with the switch for membership in VLANS (by using GVMP) or multicast groups (by using GMRP).
  • Page 126: Garp Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 8.1 GARP Commands This section describes the commands you use to configure GARP and view GARP status. The commands in this section affect both GVMP and GMRP. 8.1.1 set garp timer join This command sets the GVRP join time for one or all ports and per GARP.
  • Page 127: Set Garp Timer Leave

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 8.1.2 set garp timer leave This command sets the GVRP leave time. Leave time is the time to wait after receiving an unregister request for a VLAN or a multicast group before deleting the VLAN entry. This can be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service.time is 20 to 600 (centiseconds).
  • Page 128: Set Garp Timer Leaveall

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 8.1.3 set garp timer leaveall This command sets how frequently indicates that all registrations will be unregistered. Participants would need to rejoin in order to maintain registration. The value applies per port and per GARP participation. The time may range from 200 to 6000 (centiseconds).
  • Page 129: Gvrp Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- GVRP Admin Mode 8.2 GVRP Commands This section describes the commands you use to configure and view GARP VLAN Registration Protocol (GVRP) information. GVRP-enabled switches exchange VLAN configuration information, which allows GVRP to provide dynamic VLAN creation on trunk ports and automatic VLAN pruning.
  • Page 130: Show Gvrp Configuration

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 8.2.2.1 no set gvrp interfacemode This command disables GVRP. If GVRP is disabled, Join Time, Leave Time and Leave All Time have no effect. Format Modes 8.2.3 show gvrp configuration This command displays Generic Attributes Registration Protocol (GARP) information for one or all interfaces.
  • Page 131: Gmrp Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Port GMRP Mode 8.3 GMRP Commands This section describes the commands you use to configure and view GARP Multicast Registration Protocol (GMRP) information. Like IGMP snooping, GMRP helps control the flooding of multicast packets.
  • Page 132: Set Gmrp Interfacemode

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 8.3.2 set gmrp interfacemode This command enables GARP Multicast Registration Protocol. If an interface which has GARP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG), GARP functionality is disabled on that interface.
  • Page 133: Show Mac-Address-Table Gmrp

    Time, Leave Time and Leave All Time have no effect. Privileged EXEC A unicast MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for exam- ple 01:23:45:67:89:AB.
  • Page 134 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Description Interfaces 8-10 The text description of this multicast table entry. The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:). GARP, GVRP, and GMRP Commands v1.0, March 2006...
  • Page 135: Port-Based Traffic Control Commands

    Show commands are used to display switch settings, statistics and other information. 9.1 Port Security Commands This section describes the command you use to configure Port Security on the switch. Port security, which is also known as port MAC locking, allows you to secure the network by locking allowable MAC addresses on a given port.
  • Page 136: Port-Security

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 9.1.1 port-security This command enables port locking at the system level (Global Config) or port level (Interface Config) Default Format Modes 9.1.1.1 no port-security This command disables port locking at the system level (Global Config) or port level (Interface Config).
  • Page 137: Port-Security Mac-Address

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Mode 9.1.3.1 no port-security max-static This command resets the maximum of statically locked MAC addresses allowed on a specific port to its default value. Format Mode 9.1.4 port-security mac-address This command adds a MAC address to the list of statically locked MAC addresses.
  • Page 138: Show Port-Security

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 9.1.7 show port-security This command displays the port-security settings for a particular interface or all interfaces. Format Mode Interface Admin Mode Dynamic Limit Static Limit Violation Trap Mode 9.1.8 show port-security dynamic This command displays the dynamically locked MAC addresses for port.
  • Page 139: Storm Control Commands

    The threshold implementation follows a percentage pattern. If the broadcast traffic on any Ethernet port exceeds the high threshold percentage (as represented in link speed, the switch discards the broadcasts traffic until the broadcast traffic returns to the low threshold percentage or less. The full implementation is depicted in Table 9-1.
  • Page 140: Storm-Control Flowcontrol

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 9.2.2 storm-control flowcontrol This command enables 802.3x flow control for the switch and only applies to full-duplex mode ports. Note: 802.3x flow control works by pausing a port when the port becomes oversubscribed and dropping all traffic for small bursts of time during the congestion condition.
  • Page 141: Snmp Configuration Commands

    10.1 SNMP Configuration Commands This section describes the commands you use to configure SNMP on switch. 10.1.1 snmp-server This command sets the name and the physical location of the switch, and the organization responsible for the network. The range for alphanumeric characters.
  • Page 142: Snmp-Server Community

    10.1.2 snmp-server community This command adds (and names) a new SNMP community. A community name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level. The length of Note: Community names in the SNMP Community Table must be unique. When making multiple entries using the same community name, the first entry is kept and processed and all duplicate entries are ignored.
  • Page 143: Snmp-Server Community Ipmask

    This command activates an SNMP community. If a community is enabled, an SNMP manager associated with this community manages the switch according to its access right. If the community is disabled, no SNMP requests using this community are accepted. In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable.
  • Page 144: Snmp-Server Community Ro

    This command deactivates an SNMP community. If the community is disabled, no SNMP requests using this community are accepted. In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable. Format Mode 10.1.6 snmp-server community ro...
  • Page 145: Snmp-Server Enable Traps

    Mode 10.1.11 snmp-server enable traps linkmode This command enables Link Up/Down traps for the entire switch. When enabled, link traps are sent only if the Link Trap flag setting associated with the port is enabled. 10.1.18 “snmp trap link-status” on page 10-8...
  • Page 146: Snmp-Server Enable Traps Multiusers

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 10.1.11.1 no snmp-server enable traps linkmode This command disables Link Up/Down traps for the entire switch. Format Mode 10.1.12 snmp-server enable traps multiusers This command enables Multiple User traps. When the traps are enabled, a Multiple User Trap is sent when a user logs in to the terminal interface (EIA 232 or telnet) and there is an existing terminal interface session.
  • Page 147: Snmptrap

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 10.1.14 snmptrap This command adds an SNMP trap receiver. The maximum length of sensitive alphanumeric characters. The version parameter options are snmpv1 or snmpv2. parameter does not need to be unique, however; the <name>...
  • Page 148: Snmptrap Ipaddr

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 10.1.16 snmptrap ipaddr This command assigns an IP address to a specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters. Note: IP addresses in the SNMP trap receiver table must be unique. If you make multiple entries using the same IP address, the first entry is retained and processed.
  • Page 149: Snmp Trap Link-Status All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 10.1.18.1 no snmp trap link-status This command disables link status traps by interface. Note: This command is valid only when the Link Up/Down Flag is enabled. See ‘snmp-server enable traps linkmode’...
  • Page 150: Show Snmpcommunity

    10.2.1 show snmpcommunity This command displays SNMP community information. Six communities are supported. You can add, change, or delete communities. The switch does not have to be reset for changes to take effect. The SNMP agent of the switch complies with SNMP Versions 1, 2 or 3. For more information about the SNMP specification, see the SNMP RFCs.
  • Page 151: Show Trapflags

    If a trap condition is enabled and the condition is detected, the SNMP agent on the switch sends the trap to all enabled trap receivers. You do not have to reset the switch to implement the changes. Cold and warm start traps are always generated and cannot be disabled.
  • Page 152 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- OSPF Traps PIM Traps 10-12 Can be enabled or disabled. The factory default is disabled. Indicates whether OSPF traps will be sent. Can be enabled or disabled. The factory default is disabled. Indicates whether PIM traps are sent.
  • Page 153: Port-Based Access And Authentication Commands

    This command creates an authentication login list. The string and is not case sensitive. Up to 10 authentication login lists can be configured on the switch. When a list is created, the authentication method “local” is set as the first method. Port-Based Access and Authentication Commands <listname>...
  • Page 154 To authenticate a user, the first authentication method in the user’s login (authentication login list) is attempted. The 7200 Series Managed Switch software does not utilize multiple entries in the user’s login. If the first entry returns a timeout, the user authentication attempt fails.
  • Page 155: Clear Dot1X Statistics

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 11.1.2 clear dot1x statistics This command resets the 802.1x statistics for the specified port or for all ports. Format Mode 11.1.3 clear radius statistics This command is used to clear all RADIUS statistics. Format Mode 11.1.4 dot1x defaultlogin...
  • Page 156: Dot1X Max-Req

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 11.1.7 dot1x max-req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request/Identity frame before timing out the supplicant.
  • Page 157: Dot1X Port-Control All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Mode 11.1.9 dot1x port-control all This command sets the authentication mode to be used on all ports. The control mode may be one of the following modes: •...
  • Page 158: Dot1X System-Auth-Control

    Format Mode 11.1.12 dot1x system-auth-control This command is used to enable the dot1x authentication support on the switch. By default, the authentication support is disabled. While disabled, the dot1x configuration is retained and can be changed, but is not activated.
  • Page 159: Dot1X User

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- supp-timeout: Sets the value, in seconds, of the timer used by the authenticator state machine on this port to timeout the supplicant. The supp-timeout must be a value in the range 1 - 65535.
  • Page 160: Users Defaultlogin

    CLI, web, and telnet sessions will be blocked until the authentication is complete. Note that the login list associated with the ‘admin’ user can not be changed to prevent accidental lockout from the switch. Format Mode 11.1.17 show authentication This command displays the ordered authentication methods for all authentication login lists.
  • Page 161: Show Authentication Users

    [{summary {<slot/port> | all} | {detail <slot/port>} | {statistics <slot/port>}] Privileged EXEC Indicates whether authentication control on the switch is enabled or disabled. [summary {<slot/port> | all}] The interface whose configuration is displayed.
  • Page 162 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Key Transmission Enabled If you use the optional configuration for the specified port are displayed. Port Protocol Version PAE Capabilities Authenticator PAE State Backend Authentication State Quiet Period Transmit Period Supplicant Timeout...
  • Page 163 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Maximum Requests Reauthentication Period Reauthentication Enabled Key Transmission Enabled Control Direction If you use the optional parameter statistics for the specified port appear. Port EAPOL Frames Received EAPOL Frames Transmitted EAPOL Start...
  • Page 164: Show Dot1X Users

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Last EAPOL Frame Source EAP Response/Id Frames Received EAP Response Frames Received EAP Request/Id Frames Transmitted EAP Request Frames Transmitted Invalid EAPOL Frames Received EAP Length Error Frames Received 11.1.20 show dot1x users This command displays 802.1x port security user information for locally configured users.
  • Page 165: Radius Commands

    Security 11.2 RADIUS Commands This section describes the commands you use to configure the 7200 Series Managed Switch to use a Remote Authentication Dial-In User Service (RADIUS) server on your network for authentication and accounting. 11.2.1 radius accounting mode Use this command to enable the RADIUS accounting function.
  • Page 166 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- If you use the optional to use when connecting to the configured RADIUS server. The - 65535, with 1812 being the default value. Note: To re-configure a RADIUS authentication server to use the default UDP , set the <port>...
  • Page 167: Radius Server Key

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 11.2.3 radius server key This command is used to configure the shared secret between the RADIUS client and the RADIUS accounting / authentication server. Depending on whether the 'auth' or 'acct' token is used, the shared secret is configured for the RADIUS authentication or RADIUS accounting server.
  • Page 168: Radius Server Retransmit

    This command sets the timeout value to the default value. Format Mode 11.2.8 show radius This command is used to display the various RADIUS configuration items for the switch as well as the configured RADIUS servers. Format Mode 11-16 radius server retransmit <retries>...
  • Page 169: Show Radius Accounting

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Primary Server IP Address Number of configured servers Max number of retransmits Timeout Duration Accounting Mode If you include the optional configured RADIUS servers is displayed. IP Address Port Type Secret...
  • Page 170 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Secret Configured If you include the optional configured RADIUS accounting server are displayed. The IP address parameter must match that of a previously configured RADIUS accounting server. The following information regarding the statistics of the RADIUS accounting server is displayed.
  • Page 171: Show Radius Statistics

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Packets Dropped 11.2.10 show radius statistics This command is used to display the statistics for RADIUS or configured server. To show the configured RADIUS server statistic, the IP Address specified must match that of a previously configured RADIUS server.
  • Page 172 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Malformed Access Responses Authenticators Pending Requests Timeouts Unknown Types Packets Dropped 11-20 The number of malformed RADIUS Access-Response pack- ets received from this server. Malformed packets include packets with an invalid length.
  • Page 173: Port-Channel/Lag (802.3Ad) Commands

    Port-Channel/LAG (802.3ad) Commands This section describes the Link Aggregation/Port-Channel (802.3ad) commands available in the 7200 Series Managed Switch CLI. Port channels are also known as link aggregation groups (LAGs). Link aggregation allows you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, which increases fault tolerance and provides load sharing.
  • Page 174: Addport

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 12.1.1 addport This command adds one port to the port-channel (LAG). The first interface is a logical unit, slot and port number of a configured port-channel. Note: Before adding a port to a port-channel, set the physical mode of the port. For more information, see Format Mode...
  • Page 175: Clear Port-Channel

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Mode 12.1.4.1 no port-channel This command deletes a port-channel (LAG). Format Mode 12.1.5 clear port-channel Use this command to clear all configured port channels. Format Mode 12.1.6 port-channel staticcapability This command enables the support of port-channels (static link aggregations) on the device.
  • Page 176: Port Lacpmode All

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 12.1.8 port lacpmode all This command enables Link Aggregation Control Protocol (LACP) on all ports. Format Mode 12.1.8.1 no port lacpmode all This command disables Link Aggregation Control Protocol (LACP) on all ports. Format Mode 12.1.9 port-channel adminmode...
  • Page 177: Port-Channel Linktrap

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 12.1.11 port-channel linktrap This command enables link trap notifications for the port-channel (LAG). The interface is a logical slot/port for a configured port-channel. The option port-channel with the same administrative mode setting. Default Format Mode...
  • Page 178: Show Port-Channel

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Active Ports 12.2.2 show port-channel This command displays an overview of all port-channels (LAGs) on the switch. Format Modes Logical Interface Port-Channel Name Link State Admin Mode...
  • Page 179: Igmp Snooping Commands

    This section describes the Internet Group Management Protocol (IGMP) snooping commands available in the 7200 Series Managed Switch CLI. The 7200 Series Managed Switch supports IGMP Versions 1, 2, and 3. The IGMP snooping feature can help conserve bandwidth because it allows the switch to forward IP multicast traffic only to connected hosts that request multicast traffic.
  • Page 180: Set Igmp Interfacemode

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- If an interface has IGMP Snooping enabled and you enable this interface for routing or enlist it as a member of a port-channel (LAG), IGMP Snooping functionality is disabled on that interface.
  • Page 181: Set Igmp Fast-Leave

    The Group Membership Interval time is the amount of time in seconds that a switch waits for a report from a particular group on a particular interface before deleting the interface from the entry. This value must be greater than the IGMPv3 Maximum Response time value.
  • Page 182: Set Igmp Maxresponse

    VLAN. The Maximum Response time is the amount of time in seconds that a switch will wait after sending a query on an interface because it did not receive a report for a particular group in that interface. This value must be less than the IGMP Query Interval time value.
  • Page 183: Set Igmp Mcrtexpiretime

    VLAN. This is the amount of time in seconds that a switch waits for a query to be received on an interface before the interface is removed from the list of interfaces with multicast routers attached.
  • Page 184: Set Igmp Mrouter Interface

    [<slot/port> | <vlanId>] Privileged EXEC are not used, the command <slot/port> <vlanId> This indicates whether or not IGMP Snooping is active on the switch. This is the list of interfaces on which IGMP Snooping is enabled. v1.0, March 2006 IGMP Snooping Commands...
  • Page 185 Indicates whether IGMP Snooping Fast-leave is active on the VLAN. Shows the amount of time in seconds that a switch will wait for a report from a particular group on a particular interface, which is participating in the VLAN, before deleting the inter- face from the entry.This value may be configured...
  • Page 186: Show Igmpsnooping Mrouter Interface

    Privileged EXEC A multicast MAC address for which the switch has forward- ing or filtering information. The format is two-digit hexadec- imal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address is displayed as a MAC address and VLAN ID combination of 8 bytes.
  • Page 187 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Description Interfaces IGMP Snooping Commands The text description of this multicast table entry. The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:). v1.0, March 2006 13-9...
  • Page 188 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 13-10 IGMP Snooping Commands v1.0, March 2006...
  • Page 189 The commands in this section are in one of two functional groups: • Configuration Commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting.
  • Page 190: Class Of Service (Cos) Commands (Gsm7248 Only)

    14.1 Class of Service (CoS) Commands (GSM7248 only) This section describes the commands you use to configure and view Class of Service (CoS) settings for the switch. The commands in this section allow you to control the priority and transmission rate of traffic.
  • Page 191: Classofservice Ip-Dscp-Mapping

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.1.2.1 no classofservice ip-precedence-mapping This command maps an IP precedence value to a default internal traffic class value Format Modes 14.1.3 classofservice ip-dscp-mapping This command maps an IP DSCP value to an internal traffic class. The specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4,...
  • Page 192: Cos-Queue Min-Bandwidth

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.1.5 cos-queue min-bandwidth This command specifies the minimum transmission bandwidth guarantee for each interface queue. The total number of queues supported per interface is platform specific. A value from 0-100 (percentage of link rate) must be specified for each supported queue, with 0 indicating no guaranteed minimum bandwidth.
  • Page 193: Show Classofservice Dot1P-Mapping

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Modes 14.1.7.1 no traffic-shape This command restores the interface shaping rate to the default value. Format Modes 14.1.8 show classofservice dot1p-mapping This command displays the current Dot1p (802.1p) priority mapping to internal traffic classes for a specific interface.
  • Page 194: Show Classofservice Ip-Dscp-Mapping

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode The following information is repeated for each user priority. IP Precedence Traffic Class 14.1.10 show classofservice ip-dscp-mapping This command displays the current IP DSCP mapping to internal traffic classes for the global configuration settings.
  • Page 195: Show Interfaces Cos-Queue

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.1.12 show interfaces cos-queue This command displays the class-of-service queue configuration for the specified interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port class of service mappings.
  • Page 196 The DiffServ class defines the packet filtering criteria. The attributes of a DiffServ policy define the way the switch processes packets. You can define policy attributes on a per- class instance basis. The switch applies these attributes when a match occurs.
  • Page 197: Diffserv

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.2.1 diffserv This command sets the DiffServ operational mode to active. While disabled, the DiffServ configuration is retained and can be changed, but it is not activated. When enabled, Diffserv services are activated.
  • Page 198: Class-Map

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.3.1 class-map This command defines a DiffServ class of type match-all. When used without any match condition, this command enters the class-map mode. The sensitive alphanumeric string from 1 to 31 characters uniquely identifying an existing DiffServ class.
  • Page 199: Match Any

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.3.3 match any This command adds to the specified class definition a match condition whereby all packets are considered to belong to the class. Format Mode 14.3.4 match class-map This command adds to the specified class definition the set of match conditions defined for another class.
  • Page 200: Match Dstip

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.3.5 match dstip This command adds to the specified class definition a match condition based on the destination IP address of a packet. The parameter specifies an IP address bit mask and must consist of a contiguous set <ipmask>...
  • Page 201: Match Ip Precedence

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.3.8 match ip precedence This command adds to the specified class definition a match condition based on the value of the IP Precedence field in a packet, which is defined as the high-order three bits of the Service Type octet in the IP header (the low-order five bits are not checked).
  • Page 202: Match Protocol

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.3.10 match protocol This command adds to the specified class definition a match condition based on the value of the IP Protocol field in a packet using a single keyword notation or a numeric value notation.
  • Page 203: Diffserv Policy Commands (Gsm7248 Only)

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- To specify the match condition as a numeric value, one layer 4 port number is required. The port number is an integer from 0 to 65535. Format Mode 14.4 DiffServ Policy Commands (GSM7248 only) Use the DiffServ policy commands to specify traffic conditioning actions, such as policing...
  • Page 204: Drop

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.4.2 drop This command specifies that all packets for the associated traffic stream are to be dropped at ingress. Format Mode Incompatibilities Assign Queue, Mark (all forms), Police 14.4.3 conform-color This command is used to enable color-aware traffic policing and define the conform-color class map.
  • Page 205: Mark Cos

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.4.4.1 no class This command deletes the instance of a particular class and its defined treatment from the specified policy. <classname> Note: This command removes the reference to the class definition for the specified policy.
  • Page 206: Mark Ip-Precedence

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.4.7 mark ip-precedence This command marks all packets for the associated traffic stream with the specified IP Precedence value. The IP Precedence value is an integer from 0 to 7. Format Mode Policy Type...
  • Page 207: Policy-Map

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.4.9 policy-map This command establishes a new DiffServ policy. The sensitive alphanumeric string from 1 to 31 characters uniquely identifying the policy. The type of policy is specific to the inbound traffic direction as indicated by the in parameter. Note: The policy type dictates which of the individual policy attribute commands are valid within the policy definition.
  • Page 208: Service-Policy

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- The service commands attach a defined policy to a directional interface. You can assign only one policy at any one time to an interface in the inbound direction. DiffServ is not used in the outbound direction.
  • Page 209: Diffserv Show Commands

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.5.1.1 no service-policy This command detaches a policy from an interface in the inbound direction. The parameter is the name of an existing DiffServ policy. <policyname> Note: This command causes a service to remove its reference to the policy. This command effectively disables DiffServ on an interface in the inbound direction.
  • Page 210: Show Diffserv

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Values If you do not specify the Class Name, this command displays a list of all defined DiffServ classes. The following fields are displayed: Class Name Class Type Ref Class Name 14.6.2 show diffserv This command displays the DiffServ General Status Group information, which includes...
  • Page 211: Show Policy-Map (Gsm7248 Only)

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Policy Instance Table Max Policy Attribute Table Size Policy Attribute Table Max Service Table Size Service Table 14.6.3 show policy-map (GSM7248 only) This command displays all configuration information for the specified policy. The is the name of an existing DiffServ policy.
  • Page 212 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Committed Rate (Kbps) Conform Action Conform COS Conform DSCP Value Conform IP Precedence Value Drop Mark CoS Mark IP DSCP Mark IP Precedence Non-Conform Action Non-Conform 14-24 This field displays the committed rate, used in simple polic- ing, The current setting for the action taken on a packet consid-...
  • Page 213: Show Diffserv Service (Gsm7248 Only)

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Non-Conform DSCP Value Non-Conform IP Precedence Value Policing Style Redirect If the Policy Name is not specified this command displays a list of all defined DiffServ policies. The following fields are displayed: Policy Name Policy Type Class Members...
  • Page 214: Show Diffserv Service Brief (Gsm7248 Only)

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Policy Name Policy Details 14.6.5 show diffserv service brief (GSM7248 only) This command displays all interfaces in the system to which a DiffServ policy has been attached. The inbound direction parameter is optional. Format Mode DiffServ Mode...
  • Page 215: Show Service-Policy (Gsm7248 Only)

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Direction Operational Status Policy Name The following information is repeated for each class instance within this policy: Class Name In Discarded Packets 14.6.7 show service-policy (GSM7248 only) This command displays a summary of policy-oriented statistics information for all interfaces in the specified direction.
  • Page 216: Mac Access-List Extended

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- • The system supports only Ethernet II frame types. • The maximum number of rules per IP ACL is hardware dependent. • If you configure an IP ACL on an interface, you cannot configure a MAC ACL on the same interface.
  • Page 217: Deny|Permit

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.7.3 {deny|permit} This command creates a new rule for the current MAC access list. Each rule is appended to the list of configured rules for the list. Note: The 'no' form of this command is not supported since the rules within a MAC ACL cannot be deleted individually.
  • Page 218: Mac Access-Group

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- The vlan and cos parameters refer to the VLAN identifier and 802.1p user priority fields, respectively, of the VLAN tag. For packets containing a double VLAN tag, this is the first (or outer) tag.
  • Page 219: Show Mac Access-Lists

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14.7.4.1 no mac access-group This command removes a MAC ACL identified by direction. Format Modes 14.7.5 show mac access-lists This command displays a MAC access list and all of the rules that are defined for the MAC ACL.
  • Page 220: Ip Access Control List (Acl) Commands (Gsm7248 Only)

    The following rules apply to IP ACLs: • The 7200 Series Managed Switch does not support IP ACL configuration for IP packet fragments. • The maximum number of ACLs you can create is 100, regardless of type.
  • Page 221: Ip Access-Group

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- The < parameter uses a single keyword notation and currently has the values portvalue> domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp of these values translates into its equivalent port number, which is used as both the start and end of a port range.
  • Page 222: Show Ip Access-Lists

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- An optional sequence number may be specified to indicate the order of this IP access list relative to other IP access lists already assigned to this interface and direction. A lower number indicates higher precedence order.
  • Page 223: Show Access-Lists

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Destination IP Address Destination IP Mask Destination Ports Service Type Field Match Service Type Field Value 14.8.4 show access-lists This command displays IP ACLs and MAC access control lists information for a designated interface and direction.
  • Page 224 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 14-36 Quality of Service (QoS) Commands v1.0, March 2006...
  • Page 225 This section describes the commands you use to view information about system features, components, and configurations. 15.1.1 show arp switch This command displays connectivity between the switch and other devices. The Address Resolution Protocol (ARP) cache identifies the MAC addresses of the IP stations communicating with the switch.
  • Page 226: System Maintenance Commands

    The event log is not cleared on a system reset. The [ Format Mode File Line Task Id Code Time Unit Note: Event log information is retained across a switch reset. 15.1.3 show hardware This command displays inventory information for the switch. Format Mode Switch Description Machine Type 15-2...
  • Page 227: Show Interface

    The display parameters, when the argument is System Maintenance Commands Specifies the machine model as defined by the Vital Product Data. The unique box serial number for this switch. The field replaceable unit number. Manufacturing part number. Indicates hardware changes that are significant to software.
  • Page 228 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Packets Received Without Error Packets Received With Error Broadcast Packets Received Packets Transmitted Without Error Transmit Packets Errors Collisions Frames Time Since Counters Last Cleared If you use the switchport Packets Received Without Error...
  • Page 229: Show Interface Ethernet

    The number of outbound packets that could not be transmit- ted because of errors. The total number of Forwarding Database Address Table entries now active on the switch, including learned and static entries. The number of VLAN entries presently occupying the VLAN table.
  • Page 230 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 15-6 before and after a common interval. The result of this equa- tion is the value Utilization which is the percent utilization of the Ethernet segment on a scale of 0 to 100 percent. Packets Received <...
  • Page 231 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Packets Received Successfully Packets Received with MAC Errors System Maintenance Commands Total - The total number of packets received that were with- out errors. Unicast Packets Received - The number of subnetwork-uni- cast packets delivered to a higher-layer protocol.
  • Page 232 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Received Packets Not Forwarded 15-8 bad Frame Check Sequence (FCS) with an integral number of octets Overruns - The total number of frames discarded as this port was overloaded with incoming packets, and could not keep up with the inflow.
  • Page 233 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Packets Transmitted Octets System Maintenance Commands Upstream Threshold - The number of frames discarded due to lack of cell descriptors available for that packet's priority level. Total Bytes - The total number of octets of data (including those in bad packets) received on the network (excluding framing bits but including FCS octets).
  • Page 234 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Packets Transmitted Successfully Transmit Errors Transmit Discards 15-10 Max Info - The maximum size of the Info (non-MAC) field that this port will receive or transmit. Total - The number of frames that have been transmitted by this port to its segment.
  • Page 235 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Protocol Statistics System Maintenance Commands Multiple Collision Frames - A count of the number of suc- cessfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision. Excessive Collisions - A count of frames for which transmis- sion on a particular interface fails due to excessive collisions.
  • Page 236 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Dot1x Statistics Time Since Counters Last Cleared If you specify the switchport 15-12 RSTP BPDUs Received - Rapid Spanning Tree Protocol Bridge Protocol Data Units received MSTP BPDUs Transmitted - Multiple Spanning Tree Proto- col Bridge Protocol Data Units sent MSTP BPDUs Received - Multiple Spanning Tree Protocol Bridge Protocol Data Units received...
  • Page 237 Maximum VLAN Entries - The maximum number of Vir- tual LANs (VLANs) allowed on this switch. Most VLAN Entries Ever Used - The largest number of VLANs that have been active on this switch since the last reboot. Static VLAN Entries - The number of presently active VLAN entries on this switch that have been created statically.
  • Page 238: Show Logging

    Time Since Counters Last Cleared 15.1.6 show logging This command displays the trap log that the switch maintains. The trap log contains a maximum of 256 entries that wrap. Note: Trap log information is not retained across a switch reset. Format...
  • Page 239: Clear Mac-Addr-Table

    Learned Management Self GMRP Learned Other 15.1.8 clear mac-addr-table This command clears the dynamically learned MAC addresses of the switch. Format Mode System Maintenance Commands show mac-addr-table [<macaddr> | all] Privileged EXEC A unicast MAC address for which the switch has forwarding and or filtering information.
  • Page 240: Show Running-Config

    To display/capture the commands with settings/configurations that are equal to the default value, include the The output is displayed in script format, which can be used to configure another switch with the same configuration. If the optional extension of “.scr”, the output is redirected to a script file.
  • Page 241: System Utility Commands

    Format Mode 15.2.2 clear config This command resets the configuration to the factory defaults without powering off the switch. When you issue this command, a prompt appears to confirm that the reset should proceed. When you enter Format Mode System Maintenance Commands Text used to identify the location of the switch.
  • Page 242: Clear Counters

    Format Mode 15.2.5 clear pass This command resets all user passwords to the factory defaults without powering off the switch. You are prompted to confirm that the password reset should proceed. Format Mode 15.2.6 enable passwd This command prompts you to change the Privileged EXEC password.
  • Page 243: Clear Vlan

    This command resets VLAN configuration parameters to the factory defaults. Format Mode 15.2.10 copy command uploads and downloads files to and from the switch. You can upload copy and download files from a server by using TFTP, Xmodem, Ymodem, or Zmodem. Format...
  • Page 244: Logout

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Table 15-1. Copy Parameters (continued) Source <url> <url> <url> <url> <url> <url> <url> <url> <url> <url> 15.2.11 logout This command closes the current telnet connection or resets the current serial connection. Note: Save configuration changes before logging out.
  • Page 245: Ping

    TCP/IP. You can ping the switch from any IP workstation the switch is connected to through the default VLAN (VLAN 1), as long as there is a physical path between the switch and the workstation.
  • Page 246: Logging Buffered Wrap

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Format Mode 15.3.2 logging buffered wrap This command enables wrapping of in-memory logging when the log file reaches full capacity. Otherwise when the log file reaches full capacity, logging stops. Default Format Mode...
  • Page 247: Logging Host

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 15.3.4 logging host This command enables logging to a host. You can configure up to eight hosts. The is the IP address of the logging host. The <ipaddr>...
  • Page 248: Show Logging

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 15.3.7.1 no logging syslog This command disables syslog logging. Format Mode 15.3.8 show logging This command displays logging. Format Mode Client Local Port Console Logging Administrative Mode Console Logging Severity Filter Buffered Logging...
  • Page 249: Show Logging Buffered

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- Log Messages Received Log Messages Dropped 15.3.9 show logging buffered This command displays buffered logging (system startup and system operation logs). Format Mode Admin Status Component Filter Wrapping Behavior Log Count...
  • Page 250: Show Logging Traplogs

    This section describes the commands you use to configure CLI Command Logging. 15.4.1 logging cli-command This command enables the CLI command logging feature, which enables the 7200 Series Managed Switch software to log all CLI commands issued on the system. Default Format Mode 15.4.1.1 no logging cli-command...
  • Page 251: Configuration Scripting Commands

    • A maximum of ten scripts are allowed on the switch. • The combined size of all script files on the switch shall not exceed 2048 KB. • The maximum number of configuration file command lines is 2000. You can type single-line annotations at the command prompt to use when you write test or configuration scripts to improve script readability.
  • Page 252: Script Apply

    15.5.2 script delete This command deletes a specified script where the of the script to delete. The Format Mode 15.5.3 script list This command lists all scripts present on the switch as well as the remaining available space. Format Mode Configuration Script Size 15.5.4 script show...
  • Page 253: Script Validate

    Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 15.5.5 script validate This command validates a script file by parsing each line in the script file where is the name of the script to validate.The validate option is intended to be <scriptname>...
  • Page 254 Command Line Interface Reference for the ProSafe 7200 Series Layer-2 Switches, Software Ver- 15-30 System Maintenance Commands v1.0, March 2006...

Table of Contents