Dell K0670 CLI Guide
Dell K0670 - PowerConnect 3448, 48 Port Gigabit Ethernet Switch Manual
 |
UPC - 002121314141
View all Dell K0670 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell K0670 manual content summary:
- Dell K0670 | CLI Guide - Page 1
Dell™ PowerConnect™ 3400 Series CLI Reference Guide www.dell.com | support.dell.com - Dell K0670 | CLI Guide - Page 2
to hardware or loss of data and tells you how to avoid the problem. CAUTION: A CAUTION indicates a potential for property damage, personal injury, permission of Dell Inc. is strictly forbidden. Trademarks used in this text: Dell, the DELL logo, and PowerConnect are trademarks of Dell Inc. Other - Dell K0670 | CLI Guide - Page 3
Contents 1 Command Groups Introduction 23 Command Groups 23 AAA Commands 25 ACL Commands 26 Address Table Commands 26 Clock Commands 28 Configuration and Image Files Commands 29 DHCP Filtering Commands 29 Ethernet Configuration Commands 29 GVRP Commands 31 IGMP Snooping Commands 31 IP - Dell K0670 | CLI Guide - Page 4
Spanning Tree Commands 40 SSH Commands 41 Syslog Commands 42 System Management Commands 43 TACACS Commands 44 User Interface Commands 44 VLAN Commands 45 Web Server Commands 46 802.1x Commands 47 2 Command Modes GC (Global Configuration) Mode 49 IC (Interface Configuration) Mode 53 LC ( - Dell K0670 | CLI Guide - Page 5
Starting the CLI 67 Editing Features 68 Setup Wizard 69 Terminal Command Buffer 69 Negating the Effect of Commands 70 Command Completion 70 Keyboard Shortcuts 70 CLI Command Conventions 71 4 AAA Commands aaa authentication login 73 aaa authentication enable 74 login authentication 75 - Dell K0670 | CLI Guide - Page 6
show passwords configuration 89 show users login-history 91 show users accounts 92 5 ACL Commands mac access-list 95 deny (MAC 95 service-acl 96 show access-lists 97 show interfaces access-lists 97 6 Address Table Commands bridge address 99 bridge multicast filtering 100 bridge multicast - Dell K0670 | CLI Guide - Page 7
show bridge address-table count 111 show bridge multicast address-table 112 show bridge multicast filtering 114 show ports security 115 show ports security addresses 116 7 Clock clock set 119 clock source 119 clock timezone 120 clock summer-time 121 sntp authentication-key 123 sntp - Dell K0670 | CLI Guide - Page 8
delete 138 delete startup-config 139 dir 139 more 140 rename 142 boot system 143 show running-config 144 show startup-config 145 show bootvar 146 9 DHCP Filtering ip dhcp filtering vlan 147 ip dhcp filtering trust 147 show ip dhcp filtering 148 10 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 9
set interface active 159 show interfaces advertise 159 show interfaces configuration 162 show interfaces status 163 show interfaces description 165 show interfaces counters 166 port storm-control include-multicast 168 port storm-control broadcast enable 169 port storm-control broadcast rate - Dell K0670 | CLI Guide - Page 10
ip igmp snooping mrouter-time-out 183 ip igmp snooping leave-time-out 184 show ip igmp snooping mrouter 185 show ip igmp snooping interface 186 show ip igmp snooping groups 187 13 IP Addressing Commands ip address 189 ip address dhcp 190 ip default-gateway 191 show ip interface 191 arp 192 - Dell K0670 | CLI Guide - Page 11
show lacp ethernet 203 show lacp port-channel 205 15 Line Commands line 207 speed 207 autobaud 208 exec-timeout 209 history 210 history size 210 terminal history 211 terminal history size 212 show line 212 16 LLDP Commands lldp enable (global 215 lldp enable (interface 215 lldp timer - Dell K0670 | CLI Guide - Page 12
17 Management ACL management access-list 225 permit (Management 226 deny (Management 227 management access-class 228 show management access-list 229 show management access-class 230 18 PHY Diagnostics Commands test copper-port tdr 231 show copper-ports tdr 231 show copper-ports cable-length - Dell K0670 | CLI Guide - Page 13
power inline powered-device 244 power inline priority 244 power inline usage-threshold 245 power inline traps enable 246 show power inline 246 22 QoS Commands qos 251 show qos 251 priority-queue out num-of-queues 252 show qos interface 253 wrr-queue cos-map 254 qos map dscp-queue 255 qos - Dell K0670 | CLI Guide - Page 14
24 RMON Commands show rmon statistics 265 rmon collection history 267 show rmon collection history 268 show rmon history 269 rmon alarm 271 show rmon alarm-table 273 show rmon alarm 274 rmon event 276 show rmon events 277 show rmon log 278 rmon table-size 279 25 SNMP Commands snmp-server - Dell K0670 | CLI Guide - Page 15
show snmp 295 show snmp engineid 297 show snmp views 297 show snmp groups 298 show snmp filters 300 show snmp users 301 26 Spanning-Tree Commands spanning-tree 303 spanning-tree mode 303 spanning-tree forward-time 304 spanning-tree hello-time 305 spanning-tree max-age 305 spanning-tree - Dell K0670 | CLI Guide - Page 16
instance (mst 316 name (mst 317 revision (mst 317 show (mst 318 exit (mst 319 abort (mst 320 show spanning-tree 320 spanning-tree guard root 335 27 SSH Commands ip ssh port 337 ip ssh server 337 crypto key generate dsa 338 crypto key generate rsa 339 ip ssh pubkey-auth 339 crypto key - Dell K0670 | CLI Guide - Page 17
logging console 352 logging buffered 353 logging buffered size 354 clear logging 355 logging file 355 clear logging file 356 aaa logging 356 file-system logging 357 management logging 358 show logging 358 show logging file 360 show syslog-servers 362 29 System Management ping 365 - Dell K0670 | CLI Guide - Page 18
show version 381 asset-tag 381 show system id 382 service cpu-utilization 383 show cpu utilization 384 30 TACACS+ Commands tacacs-server host 385 tacacs-server key 386 tacacs-server timeout 387 tacacs-server source- - Dell K0670 | CLI Guide - Page 19
32 VLAN Commands vlan database 399 vlan 399 interface vlan 400 interface range vlan 401 name 401 private-vlan primary 402 private-vlan isolated 403 private-vlan community 404 switchport mode 405 switchport access vlan 406 switchport private-vlan 407 show vlan private-vlan 408 switchport - Dell K0670 | CLI Guide - Page 20
33 Web Server ip http server 425 ip http port 425 ip https server 426 ip https port 427 crypto certificate generate 427 crypto certificate request 428 crypto certificate import 430 ip https certificate 432 show crypto certificate mycertificate 432 show ip http 433 show ip https 434 34 802 - Dell K0670 | CLI Guide - Page 21
show dot1x statistics 449 ADVANCED FEATURES 451 dot1x auth-not-req 451 dot1x multiple-hosts 452 dot1x single-host-violation 452 dot1x guest-vlan 453 dot1x guest-vlan enable 454 show dot1x advanced 455 Contents 21 - Dell K0670 | CLI Guide - Page 22
22 Contents - Dell K0670 | CLI Guide - Page 23
syntax, and describes the command functionality. This guide also provides information for configuring the PowerConnect device, details the procedures, and provides clock commands on the device. Configures DHCP filtering commands. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups - Dell K0670 | CLI Guide - Page 24
www.dell.com | support.dell.com Ethernet Configuration GVRP IGMP Snooping IP Addressing LACP Line LLDP Management ACL PHY Configures Web based access to the device. Configures commands related to 802.1x security protocol. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 24 Command Groups - Dell K0670 | CLI Guide - Page 25
locked. Global Configuration aaa login-history file Enables writing to the login history file. Global Configuration set username active Reactivates a locked user account. Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups 25 - Dell K0670 | CLI Guide - Page 26
www.dell.com | support.dell.com set line active Reactivates a locked line. set enable-password active Privileged EXEC Privileged EXEC Privileged EXEC Command Group mac access-list deny (MAC) service-acl show access-lists show interfaces accesslists Description Creates Layer 2 ACLs. Denies - Dell K0670 | CLI Guide - Page 27
EXEC Interface Configuration Interface Configuration Interface Configuration Interface Configuration Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups 27 - Dell K0670 | CLI Guide - Page 28
www.dell.com | support.dell.com Clock Commands Command Group clock set clock source clock enable sntp unicast client poll sntp server show clock show sntp configuration show sntp status Description Manually sets the system clock. Configures an external time source for the system clock. Sets the - Dell K0670 | CLI Guide - Page 29
an Ethernet type interface. Enters the interface configuration mode to configure multiple Ethernet type interfaces. Disables interfaces. Access Mode Global Configuration Global Configuration Interface Configuration DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups 29 - Dell K0670 | CLI Guide - Page 30
www.dell.com | support.dell.com description duplex speed negotiation flowcontrol mdix back-pressure clear counters . Privileged EXEC Interface Configuration Interface Configuration Interface Configuration Privileged User EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 30 Command - Dell K0670 | CLI Guide - Page 31
dynamically learned multicast router interfaces. Displays IGMP snooping configuration. Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups 31 - Dell K0670 | CLI Guide - Page 32
www.dell.com | support.dell.com show ip igmp snooping groups IP Addressing Displays multicast groups learned by Global Configuration Global Configuration Global Configuration Privileged EXEC Privileged EXEC Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 32 Command - Dell K0670 | CLI Guide - Page 33
-channel Displays LACP information for Ethernet ports. Displays LACP information for a port-channel. Access Mode Global Configuration Interface Configuration Interface Configuration Privileged EXEC Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups 33 - Dell K0670 | CLI Guide - Page 34
www.dell.com | support.dell.com LLDP Commands Command Group lldp enable (global) lldp enable (interface) lldp timer lldp ) Interface configuration (Ethernet) Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 34 Command Groups - Dell K0670 | CLI Guide - Page 35
management access-lists. Displays the active management access-list. Access Mode Global Configuration Management Access-level Management Access-level Global Configuration Privileged EXEC Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups 35 - Dell K0670 | CLI Guide - Page 36
www.dell.com | support.dell.com PHY Diagnostics Commands Command Group test copper-port tdr show copper- packets. Displays port monitoring status. Access Mode Interface Configuration Interface Configuration User EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 36 Command Groups - Dell K0670 | CLI Guide - Page 37
trust (Global) qos trust (Interface) qos cos show qos map Description Enables quality of service (QoS) on the device and enters QoS basic mode. Displays the QoS status. Maps Configuration Interface Configuration Interface Configuration User EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF - Dell K0670 | CLI Guide - Page 38
www.dell.com | support.dell.com Radius Commands Command Group radius-server host radius-server key radius-server Global Configuration User EXEC User EXEC Global Configuration User EXEC User EXEC Global Configuration DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 38 Command Groups - Dell K0670 | CLI Guide - Page 39
Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups 39 - Dell K0670 | CLI Guide - Page 40
www.dell.com | support.dell.com Spanning Tree Commands Command Group spanning-tree Description Enables spanning tree functionality. Global Configuration Privileged EXEC Global Configuration Global Configuration Interface Configuration DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 40 - Dell K0670 | CLI Guide - Page 41
command. Manually specifies a SSH public key. Displays the SSH server configuration. Access Mode Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration SSH Public Key SSH Public Key Privileged EXEC DELL CONFIDENTIAL - Dell K0670 | CLI Guide - Page 42
www.dell.com | support.dell.com show crypto key mypubkey show crypto key pubkey-chain ssh crypto slogin key generate dsa Displays the state of logging and the syslog messages Privileged EXEC stored in the logging file. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 42 Command Groups - Dell K0670 | CLI Guide - Page 43
traveling to their destination. Logs in to a host that supports Telnet. Switches to another open Telnet session Reloads the operating show system id Displays the service ID information. service cpu-utilization Enables measuring Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - - Dell K0670 | CLI Guide - Page 44
www.dell.com | support.dell.com TACACS Commands Command Group tacacs-server host tacacs-server key tacacs-server source-ip tacacs- EXEC All Priv/User EXEC After Privileged EXEC All User EXEC Privileged EXEC User EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 44 Command Groups - Dell K0670 | CLI Guide - Page 45
Configuration Interface Configuration Interface Configuration Interface Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Groups 45 - Dell K0670 | CLI Guide - Page 46
www.dell.com | support.dell.com switchport general acceptable-frame-type tagged-only switchport forbidden vlan switchport for HTTPS. Configures the active certificate for HTTPS. Global Configuration Global Configuration DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 46 Command Groups - Dell K0670 | CLI Guide - Page 47
re-authentication of the client. Sets the number of seconds between re-authentication attempts. Manually initiates a re-authentication of all 802.1xenabled ports or the specified 802.1x-enabled Interface Configuration Interface Configuration Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - - Dell K0670 | CLI Guide - Page 48
www.dell.com | support.dell.com show dot1x users show dot1x statistics dot1x auth-not-req VLAN) Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Privileged EXEC DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 48 Command Groups - Dell K0670 | CLI Guide - Page 49
DSA key pairs for secure login to a remote access server. Generates RSA key pairs for secure login to a remote access server. Enables 802.1x globally. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Modes 49 - Dell K0670 | CLI Guide - Page 50
www.dell.com | support.dell.com enable password end file-system logging gvrp enable (Global) hostname interface ethernet interface to be used by the SSH server. Enables public key authentication for incoming SSH sessions. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 50 Command Modes - Dell K0670 | CLI Guide - Page 51
to the interface. Configures the administrative mode of the inline power on an interface. Enables the egress queues to be SP queues. Enables Quality of Service (QoS) on the device and enters QoS basic or advance mode. Modifies the DSCP to CoS map. Configure the system to "trust" state. Improves - Dell K0670 | CLI Guide - Page 52
www.dell.com | support.dell.com radius-server host radius-server key radius-server retransmit radius-server source-ip radius-server timeout rmon alarm rmon event rmon table-size service cpu-utilization snmp-server community snmp-server contact snmp-server enable traps snmp-server engineID local - Dell K0670 | CLI Guide - Page 53
multicast forbidden forward-all Forbids a port from becoming a forward-all multicast port. channel-group Associates a port with a Port-channel. description Adds a description to an interface. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Modes 53 - Dell K0670 | CLI Guide - Page 54
www.dell.com | support.dell.com dot1x guest-vlan Defines a guest VLAN. dot1x guest- dot1x port-control Interface Configuration mode command set to auto. dot1x port-control Enables manual control of the authorization state of the port dot1x re-authentication Enables periodic re-authentication - Dell K0670 | CLI Guide - Page 55
private-vlan primary qos cos qos trust (Interface) rmon collection history service-acl shutdown sntp client enable (Interface) spanning-tree cost spanning-tree cost for a port. Disables spanning tree on a specific port. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Modes 55 - Dell K0670 | CLI Guide - Page 56
www.dell.com | support.dell.com spanning-tree link-type spanning-tree mst cost spanning-tree mst level) Mode Command deny (Management) permit (Management) Description Defines a deny rule. Defines a permit rule. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 56 Command Modes - Dell K0670 | CLI Guide - Page 57
buffer. Clears messages from the logging file Restarts the protocol migration process on all interfaces or on the specified interface. Manually sets the system clock. Enters the Global Configuration mode. Copies files from a source to a destination. Generates and displays certificate requests - Dell K0670 | CLI Guide - Page 58
www.dell.com | support.dell.com delete Deletes a file from a Flash memory device. delete startup-config Deletes the startup-config file. dir Displays a list of files on a flash file system. dot1x re-authenticate Manually initiates a re-authentication of all 802.1x-enabled ports or the - Dell K0670 | CLI Guide - Page 59
SNMP status. Displays the local SNMP EngineID. Displays the configuration of SNMP filters. Displays the configuration of SNMP groups. Displays the configuration of SNMP users. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Command Modes 59 - Dell K0670 | CLI Guide - Page 60
www.dell.com | support.dell.com show snmp views show spanning-tree show startup- (SSH Public Key) Mode Command key-string user-key Description Manually specifies a SSH public key. Specifies which SSH public key is manually configured and enters the SSH public key-string configuration command UE - Dell K0670 | CLI Guide - Page 61
. Displays the RMON logging table. Displays RMON Ethernet Statistics. Displays information about stack status. Displays system information. Displays the service id information. Displays information about the active users. Displays the system version information. Enables dumping all output of a show - Dell K0670 | CLI Guide - Page 62
www.dell.com | support.dell.com terminal history terminal history size Enables the command history function for the current . Creates a VLAN. Enables unauthorized users access to that VLAN. Configures a name to a VLAN. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 62 Command Modes - Dell K0670 | CLI Guide - Page 63
is as follows: User EXEC mode, Privileged EXEC mode, Global Configuration mode, and Interface Configuration mode. The following figure illustrates the command mode access path. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Using the CLI 63 - Dell K0670 | CLI Guide - Page 64
www.dell.com | support.dell.com When starting a session, the initial mode is the User EXEC mode. Only a limited subset of general, the User EXEC commands allow the user to perform basic tests, and list system information. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 64 Using the CLI - Dell K0670 | CLI Guide - Page 65
mode from the Privileged EXEC mode. For example, the exit command is used to return from the Interface Configuration mode to the Global Configuration mode. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Using the CLI 65 - Dell K0670 | CLI Guide - Page 66
www.dell.com | support.dell.com Global Configuration Mode Global Configuration mode commands apply to features that affect the Configuration mode command is used to enter the Management Access List Configuration mode. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 66 Using the CLI - Dell K0670 | CLI Guide - Page 67
Contains commands to manually specify other device service definitions. The qos Global Configuration mode command is used to enter the QoS services port of the terminal or computer running the terminal emulation application. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Using the CLI 67 - Dell K0670 | CLI Guide - Page 68
dell.com | support.dell.com NOTICE: When using HyperTerminal with Microsoft® Windows 2000,ensure that Windows® 2000 Service Pack 2 or later is installed.With Windows 2000 Service service packs. For more information, see Dell™ PowerConnect™ 3400 Series User's Guide , but is manually entered. To see - Dell K0670 | CLI Guide - Page 69
and pasted into the device. Setup Wizard The CLI supports a Setup Wizard. This is an easy-to-use user interface which quickly guides the user in setting up basic device information, so the history buffer, see history. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Using the CLI 69 - Dell K0670 | CLI Guide - Page 70
www.dell.com | support.dell.com There is a standard default number of commands that are cancel the effect of a command or reset the configuration to the default value. This guide describes the negation effect for all applicable commands. Command Completion An appropriate error message displays - Dell K0670 | CLI Guide - Page 71
-channel has the option of either entering a range of channels, or selecting all. When the command is entered without a parameter, it automatically defaults to all. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Using the CLI 71 - Dell K0670 | CLI Guide - Page 72
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 72 Using the CLI - Dell K0670 | CLI Guide - Page 73
login default local. NOTE: On the console, login succeeds without any authentication check if the authentication method is not defined. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 73 - Dell K0670 | CLI Guide - Page 74
www.dell.com | support.dell.com User Guidelines • The default and optional list names created with the aaa authentication login password for authentication. Uses the line password for authentication. Uses no authentication. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 74 AAA Commands - Dell K0670 | CLI Guide - Page 75
for a remote telnet or console. To return to the default configuration specified by the aaa authentication login command, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 75 - Dell K0670 | CLI Guide - Page 76
www.dell.com | support.dell.com Syntax login authentication {default | list-name} no login authentication • default - Uses the command. Default Configuration Uses the default set with the aaa authentication enable command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 76 AAA Commands - Dell K0670 | CLI Guide - Page 77
. Default Configuration The local user database is checked. This has the same effect as the command ip http authentication local. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 77 - Dell K0670 | CLI Guide - Page 78
www.dell.com | support.dell.com User Guidelines • The additional methods of authentication are used only if the previous method returns an if all methods return an error, specify none as the final method in the command line. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 78 AAA Commands - Dell K0670 | CLI Guide - Page 79
configuration. Console# sh authentication methods Login Authentication Method Lists Console_Default: None Network_Default: Local Enable Authentication Method Lists Console_Default: Enable, None Network_Default: Enable DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 79 - Dell K0670 | CLI Guide - Page 80
www.dell.com | support.dell.com Line Console Telnet SSH Login Method List Default Default Default Enable Method List Default secret on a console. Console(config)# line console Console(config-line)# password secret DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 80 AAA Commands - Dell K0670 | CLI Guide - Page 81
). • password - The authentication password for the user (Range: 1-159 characters). • level - The user level (Range: 1-15). • encrypted - Encrypted password entered, copied from another device configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 81 - Dell K0670 | CLI Guide - Page 82
www.dell.com | support.dell.com Default Configuration No user is defined. Command Mode Global Configuration mode User Guidelines • minimum password length requirement was configured are checked only when the user logs in. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 82 AAA Commands - Dell K0670 | CLI Guide - Page 83
user still does not change the password, the account is locked. • It is recommended that local device time be updated using an external SNTP clock. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 83 - Dell K0670 | CLI Guide - Page 84
www.dell.com | support.dell.com Example The following example sets the expiration time of the level 15 enable password to password aging to 120 days. Console(config)# line telnet Console(config-line)# password-aging 120 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 84 AAA Commands - Dell K0670 | CLI Guide - Page 85
the number of days a password is relevant for tracking its password history. To return to the default configuration, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 85 - Dell K0670 | CLI Guide - Page 86
www.dell.com | support.dell.com Syntax passwords history hold-time days no passwords hold-time • days-Number of days a Configuration No locked user account due to failed login attempts. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 86 AAA Commands - Dell K0670 | CLI Guide - Page 87
saved in the internal buffer of the device. Example The following example enables writing to the login history file. Console(config)# aaa login-history file DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 87 - Dell K0670 | CLI Guide - Page 88
www.dell.com | support.dell.com set username active The set username active Privileged EXEC mode command reactivates a SSH). Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 88 AAA Commands - Dell K0670 | CLI Guide - Page 89
The show passwords configuration Privileged EXEC mode command displays information about password management. Syntax show passwords configuration Default Configuration This command has no default configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 89 - Dell K0670 | CLI Guide - Page 90
www.dell.com | support.dell.com Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for Console Telnet SSH Aging ----90 90 Expiry date ----------Jan 18 2005 Jan 21 2005 Lockout ------LOCKOUT 0 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 90 AAA Commands - Dell K0670 | CLI Guide - Page 91
: 1-20 characters). Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 91 - Dell K0670 | CLI Guide - Page 92
www.dell.com | support.dell.com Example The following example displays the login history of users. Console# show users login- . Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 92 AAA Commands - Dell K0670 | CLI Guide - Page 93
control is enabled, specifies the number of failed authentication attempts since the user last logged in successfully. If the user account is locked, specifies LOCKOUT. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY AAA Commands 93 - Dell K0670 | CLI Guide - Page 94
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 94 AAA Commands - Dell K0670 | CLI Guide - Page 95
conditions defined in the deny statement match. Syntax deny destination • destination - Specifies the MAC address of the host to which the packet is being sent. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY ACL Commands 95 - Dell K0670 | CLI Guide - Page 96
www.dell.com | support.dell.com Default Configuration This command has no default configuration. mac-acl)# deny 66:66:66:66:66:66 Console(config-mac-acl)# exit Console(config)# service-acl The service-acl Interface (VLAN) Configuration mode command applies an ACL to the input interface. To detach - Dell K0670 | CLI Guide - Page 97
to VLAN 2. Console(config)# interface vlan 2 Console(config-if)# service-acl input macl-1 show access-lists The show access-lists Privileged EXEC mode show interfaces access-lists [vlan vlan-id ] • vlan-id-VLAN number. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY ACL Commands 97 - Dell K0670 | CLI Guide - Page 98
www.dell.com | support.dell.com Default Configuration This command has no default configuration. Command Mode Privileged Console# show interfaces access-lists Interface --------VLAN 2 VLAN 10 Input ACL ---------ACL1 ACL3 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 98 ACL Commands - Dell K0670 | CLI Guide - Page 99
Configuration (VLAN) mode User Guidelines • Using the no form of the command without specifying a MAC address deletes all static MAC addresses belonging to this VLAN. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 99 - Dell K0670 | CLI Guide - Page 100
www.dell.com | support.dell.com Example The following example adds a permanent static MAC-layer station source address example, bridge multicast filtering is enabled. Console(config)# bridge multicast filtering DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 100 Address Table Commands - Dell K0670 | CLI Guide - Page 101
VLANs. Examples The following example registers the MAC address: Console(config)# interface vlan 8 Console(config-if)# bridge multicast address 01:00:5e:02:02:03 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 101 - Dell K0670 | CLI Guide - Page 102
www.dell.com | support.dell.com The following example registers the MAC address and adds ports statically. Console( mode User Guidelines • Before defining forbidden ports, the multicast group should be registered. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 102 Address Table Commands - Dell K0670 | CLI Guide - Page 103
of port-channels. Default Configuration This setting is disabled Command Mode Interface Configuration (VLAN) mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 103 - Dell K0670 | CLI Guide - Page 104
www.dell.com | support.dell.com Example In this example, all multicast packets on port 1/e8 are forwarded. forwarded to it unconditionally. • This command prevents a port from becoming a multicast router port. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 104 Address Table Commands - Dell K0670 | CLI Guide - Page 105
clear bridge Privileged EXEC mode command removes any learned entries from the forwarding database. Syntax clear bridge Default Configuration This command has no default configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 105 - Dell K0670 | CLI Guide - Page 106
www.dell.com | support.dell.com Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command are no user guidelines for this command. 802.1x multiple host mode must be enabled. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 106 Address Table Commands - Dell K0670 | CLI Guide - Page 107
this example, port security mode is set to dynamic for Ethernet interface 1/e7. Console(config)# interface ethernet 1/e7 Console(config-if)# port security mode dynamic DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 107 - Dell K0670 | CLI Guide - Page 108
www.dell.com | support.dell.com port security max The port security max Interface Configuration (Ethernet, port-channel no port security routed secure-address mac-address • mac-address - A valid MAC address. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 108 Address Table Commands - Dell K0670 | CLI Guide - Page 109
VLAN 1. • interface - A valid Ethernet port. • port-channel-number - A valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 109 - Dell K0670 | CLI Guide - Page 110
www.dell.com | support.dell.com User Guidelines • Internal usage VLANs (VLANs that are automatically number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 110 Address Table Commands - Dell K0670 | CLI Guide - Page 111
-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 111 - Dell K0670 | CLI Guide - Page 112
www.dell.com | support.dell.com Example In this example, the number of addresses present in all VLANs are displayed. Console# show in IP format only if it is in the range of 0100.5e00.0000- 0100.5e7f.ffff. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 112 Address Table Commands - Dell K0670 | CLI Guide - Page 113
---1 19 IP/MAC Address 224-239.130|2.2.3 224-239.130|2.2.8 Ports -----2/e8 2/e8 NOTE: A multicast MAC address maps to multiple IP addresses as shown above. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 113 - Dell K0670 | CLI Guide - Page 114
www.dell.com | support.dell.com show bridge multicast filtering The show bridge multicast filtering Privileged (d) Forward-All Static --------Forbidden Forward - Status ---------Filter Forward(s) Forward(d) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 114 Address Table Commands - Dell K0670 | CLI Guide - Page 115
---1/e1 1/e2 1/e3 Status ------Locked Unlocked Locked Learning -------Dynamic Dynamic Disabled Action ------Discard Discard, Shutdown Maximum ------3 28 8 Trap ------Enable Disable Frequency --------100 - DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 115 - Dell K0670 | CLI Guide - Page 116
www.dell.com | support.dell.com The following tables describes the fields shown above. Field Port Status Learning Action Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 116 Address Table Commands - Dell K0670 | CLI Guide - Page 117
, dynamic addresses in currently locked port 1/e1 are displayed. Console# show ports security addresses ethernet 1/e1 Port ---1/e1 Status -------Disabled Learning -------Lock Current ------- Maximum ------1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Address Table Commands 117 - Dell K0670 | CLI Guide - Page 118
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 118 Address Table Commands - Dell K0670 | CLI Guide - Page 119
Clock clock set The clock set Privileged EXEC mode command manually sets the system clock. Syntax clock set hh:mm:ss day month year or clock set hh: for the system clock. Use no form of this command to disable external time source. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Clock 119 - Dell K0670 | CLI Guide - Page 120
www.dell.com | support.dell.com Syntax clock source {sntp} no clock source • sntp - SNTP servers Default Configuration . (Range: Up to 4 characters) Default Configuration Clock set to UTC. Command Mode Global Configuration mode 120 Clock DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY - Dell K0670 | CLI Guide - Page 121
so this command is used only for display purposes and when the time is manually set. Examples The following example sets the timezone to 6 hours difference from name, like Jan) • year - Year - no abbreviation (Range: 2000 - 2097) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Clock 121 - Dell K0670 | CLI Guide - Page 122
www.dell.com | support.dell.com • hh:mm - Time in military format, in hours and minutes. (Range: hh: 0 - 23, mm:0 - 59) • offset - Number of 2 am. Console(config)# clock summer-time recurring first sun apr 2:00 last sun oct 2:00 122 Clock DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY - Dell K0670 | CLI Guide - Page 123
disable the feature, use the no form of this command. Syntax sntp authenticate no sntp authenticate Default Configuration No authentication Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Clock 123 - Dell K0670 | CLI Guide - Page 124
www.dell.com | support.dell.com User Guidelines • The command is relevant for both unicast and broadcast. Examples The sntp authentication-key 8 md5 ClkKey Console(config)# sntp trusted-key 8 Console(config)# sntp authenticate 124 Clock DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY - Dell K0670 | CLI Guide - Page 125
this command. Syntax sntp broadcast client enable no sntp broadcast client enable Default Configuration The SNTP broadcast client is disabled. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Clock 125 - Dell K0670 | CLI Guide - Page 126
www.dell.com | support.dell.com User Guidelines • Use the sntp client enable (Interface) Interface Configuration mode command to enable the SNTP client anycast updates. To disable the SNTP client, use the no form of this command. 126 Clock DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY - Dell K0670 | CLI Guide - Page 127
this command. Syntax sntp unicast client enable no sntp unicast client enable Default Configuration The SNTP unicast client is disabled. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Clock 127 - Dell K0670 | CLI Guide - Page 128
www.dell.com | support.dell.com User Guidelines • Use the sntp server Global Configuration mode command to define SNTP servers. Network Time Protocol (SNTP) predefined unicast clients. Console(config)# sntp unicast client poll 128 Clock DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY - Dell K0670 | CLI Guide - Page 129
Global Configuration mode command. Examples The following example configures the device to accept SNTP traffic from the server on 192.1.1.1. Console(config)# sntp server 192.1.1.1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Clock 129 - Dell K0670 | CLI Guide - Page 130
www.dell.com | support.dell.com show clock The show clock User EXEC mode command displays the time and date from the system not authoritative. (blank) . Time is authoritative. Time is authoritative, but SNTP is not synchronized. 130 Clock DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY - Dell K0670 | CLI Guide - Page 131
configuration of the Simple Network Time Protocol (SNTP). Syntax show sntp configuration Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Clock 131 - Dell K0670 | CLI Guide - Page 132
www.dell.com | support.dell.com User Guidelines There are no user guidelines for this command. Examples The following example displays SNTP). Syntax show sntp status Default Configuration This command has no default configuration. 132 Clock DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY - Dell K0670 | CLI Guide - Page 133
PDT Feb 19 2002 7.19 Delay [mSec] ----119.89 Broadcast: Interface --------176.9.1.1 Interface --------VLAN 119 Last response 19:17:59.792 PDT Feb 19 2002 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Clock 133 - Dell K0670 | CLI Guide - Page 134
www.dell.com | support.dell.com 134 Clock DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY - Dell K0670 | CLI Guide - Page 135
that uses the Xmodem protocol. Image file on one of the units. To copy from the master to all units, specify * in the member field. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Configuration and Image Files 135 - Dell K0670 | CLI Guide - Page 136
www.dell.com | support.dell.com unit://member/ boot null: backup-config Boot file on one of the configuration. Command Mode Privileged EXEC mode User Guidelines • Up to five backup configuration files are supported on the device. • The location of a file system dictates the format of the source - Dell K0670 | CLI Guide - Page 137
-config file command. Before copying from the backup configuration file to the running configuration file, make sure that the backup configuration file is not corrupt. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Configuration and Image Files 137 - Dell K0670 | CLI Guide - Page 138
www.dell.com | support.dell.com Example The following example copies system image file1 from the TFTP server 172.16 EXEC mode User Guidelines • *.sys, *.prv, image-1 and image-2 files cannot be deleted. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 138 Configuration and Image Files - Dell K0670 | CLI Guide - Page 139
. Syntax dir Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Configuration and Image Files 139 - Dell K0670 | CLI Guide - Page 140
www.dell.com | support.dell.com Examples The following example displays files in the flash directory. Console# dir location URL or reserved keyword of the file to be displayed. (Range: 1-160 characters) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 140 Configuration and Image Files - Dell K0670 | CLI Guide - Page 141
User Guidelines • Files are displayed in ASCII format, except for image files, which are displayed in hexadecimal format. • *.prv and *.sys files cannot be displayed. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Configuration and Image Files 141 - Dell K0670 | CLI Guide - Page 142
www.dell.com | support.dell.com Example The following example displays the contents of file configuration.bak. Console# more flash memory. It is the default in case a URL is specified without a prefix. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 142 Configuration and Image Files - Dell K0670 | CLI Guide - Page 143
bootvar command to find out which image is the active image. Examples The following example loads system image 1 at device startup. Console# boot system image-1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Configuration and Image Files 143 - Dell K0670 | CLI Guide - Page 144
www.dell.com | support.dell.com show running-config The show running-config Privileged EXEC mode command displays the contents ethernet 1/e2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 144 Configuration and Image Files - Dell K0670 | CLI Guide - Page 145
.100.100 255.255.255.0 duplex full speed 1000 interface ethernet 1/e2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Configuration and Image Files 145 - Dell K0670 | CLI Guide - Page 146
www.dell.com | support.dell.com show bootvar The show bootvar Privileged EXEC mode command displays the boot) Unit ---1 2 Active Image -----------image-1 image-1 Selected for next boot image-2 image-1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 146 Configuration and Image Files - Dell K0670 | CLI Guide - Page 147
of this command to return to the default setting. Syntax ip dhcp filtering trust no ip dhcp filtering trust Default Configuration The interface is untrusted. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY DHCP Filtering 147 - Dell K0670 | CLI Guide - Page 148
www.dell.com | support.dell.com Command Mode Interface configuration (Ethernet, Port-channel) User Guidelines • Configure as "trusted", . Command Mode EXEC User Guidelines There are no user guidelines for this command . DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 148 DHCP Filtering - Dell K0670 | CLI Guide - Page 149
Example The following example displays the DHCP filtering configuration. Console# show ip dhcp filtering DHCP filtering is configured on following VLANs: 2,3 Interface Trusted 1/e1 yes 1/e2 yes DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY DHCP Filtering 149 - Dell K0670 | CLI Guide - Page 150
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 150 DHCP Filtering - Dell K0670 | CLI Guide - Page 151
more than one port is listed, separate nonconsecutive ports with a comma and no spaces, use a hyphen to designate a range of ports. • all - All Ethernet ports. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 151 - Dell K0670 | CLI Guide - Page 152
www.dell.com | support.dell.com Default Configuration This command has no default configuration. Command Mode Global 1/e5 operations. Console(config)# interface ethernet 1/e5 Console(config-if)# shutdown DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 152 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 153
guidelines for this command. Example The following example adds a description to Ethernet port 1/e5. Console(config)# interface ethernet 1/e5 Console(config-if)# description "RD SW#3" DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 153 - Dell K0670 | CLI Guide - Page 154
www.dell.com | support.dell.com speed The speed Interface Configuration (Ethernet, port-channel) mode command configures operation. Console(config)# interface ethernet 1/e5 Console(config-if)# speed 100 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 154 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 155
The following example configures the duplex operation of Ethernet port 1/e5 to full duplex operation. Console(config)# interface ethernet 1/e5 Console(config-if)# duplex full DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 155 - Dell K0670 | CLI Guide - Page 156
www.dell.com | support.dell.com negotiation The negotiation Interface Configuration (Ethernet, port-channel) auto - Indicates auto-negotiation • on - Enables flow control. • off - Disables flow control. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 156 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 157
mdix {on | auto} no mdix • on - Manual mdix • auto - Automatic mdi/mdix Default Configuration The default to connect a PC with cross or normal cables are supported and are automatically detected. • On: It is possible DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration - Dell K0670 | CLI Guide - Page 158
www.dell.com | support.dell.com Example In the following example, automatic crossover is enabled on port Valid Ethernet port. (Full syntax: unit/port) • port-channel-number - Valid port-channel number. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 158 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 159
example reactivates interface 1/e5. Console# set interface active ethernet 1/e5 show interfaces advertise The show interfaces advertise Privileged EXEC mode command displays autonegotiation data. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 159 - Dell K0670 | CLI Guide - Page 160
www.dell.com | support.dell.com Syntax show interfaces advertise [ethernet interface | port-channel port-channel-number ] • interface - User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 160 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 161
Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Operational Link Advertisement 100f, 100h, 10f, 10h DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 161 - Dell K0670 | CLI Guide - Page 162
www.dell.com | support.dell.com show interfaces configuration The show interfaces configuration Off Up Disabled Off Up Disabled Off Up Disabled Off Up Disabled Off Up Disabled DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 162 Ethernet Configuration Commands Mdix Mode - Dell K0670 | CLI Guide - Page 163
-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 163 - Dell K0670 | CLI Guide - Page 164
www.dell.com | support.dell.com Example The following example displays the status of all Down -- -- Down -- -- Down -- -- Down -- -- Down -- -- Down -- -- Down -- -- Down -- Mdix Mode -------On DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 164 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 165
command. Example The following example displays descriptions of configured interfaces. Console# show interfaces description Port ---1/e1 1/e2 1/e3 1/e4 1/e5 1/e6 ch1 ch2 Description ----------lab DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 165 - Dell K0670 | CLI Guide - Page 166
www.dell.com | support.dell.com show interfaces counters The show interfaces counters User EXEC mode 8789 OutUcastPkts -----------0 0 0 OutMcastPkts -----------0 0 0 OutBcastPkts -----------0 0 0 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 166 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 167
OutBcastPkts -----------0 FCS Errors: 8 Single Collision Frames: 0 Late Collisions: 0 Oversize Packets: 0 Internal MAC Rx Errors: 0 Symbol Errors: 0 Received Pause Frames: 0 Transmitted Pause Frames: 0 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 167 - Dell K0670 | CLI Guide - Page 168
www.dell.com | support.dell.com The following table describes the fields shown in the display: Specifies also counting unknown unicast packets. Default Configuration Multicast packets are not counted. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 168 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 169
calculation. Example The following example enables storm control on Ethernet port 1/e5. Console(config)# interface ethernet 1/e5 Console(config-if)# port storm-control broadcast enable DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 169 - Dell K0670 | CLI Guide - Page 170
www.dell.com | support.dell.com port storm-control broadcast rate The port storm-control broadcast rate Interface ports storm-control Privileged EXEC mode command displays the storm control configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 170 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 171
# show ports storm-control Port ---1/e1 2/e1 3/e1 State -------Enabled Enabled Disabled Rate [Kbits/ Sec] --------70 100 100 Included Broadcast, Multicast, Unknown Unicast Broadcast Broadcast DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Ethernet Configuration Commands 171 - Dell K0670 | CLI Guide - Page 172
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 172 Ethernet Configuration Commands - Dell K0670 | CLI Guide - Page 173
to propagate VLAN information from device to device. With GVRP, a single device is manually configured with all desired VLANs for the network, and all other devices on the an interface, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY GVRP Commands 173 - Dell K0670 | CLI Guide - Page 174
www.dell.com | support.dell.com Syntax gvrp enable no gvrp enable Default Configuration GVRP is untagged VLAN is propagated in the same way as in a tagged VLAN. That is, the PVID is manually defined as the untagged VLAN VID. Example The following example enables GVRP on Ethernet port 1/e6. Console( - Dell K0670 | CLI Guide - Page 175
dynamic VLAN registration entries as a result of the GVRP exchanges on an interface are restricted only to those VLANs for which static VLAN registration exists. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY GVRP Commands 175 - Dell K0670 | CLI Guide - Page 176
www.dell.com | support.dell.com Example The following example disables dynamic VLAN creation on Ethernet port 1/e6. - A valid Ethernet port. (Full syntax: unit/port) • port-channel-number - A valid port-channel number. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 176 GVRP Commands - Dell K0670 | CLI Guide - Page 177
-channel number. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY GVRP Commands 177 - Dell K0670 | CLI Guide - Page 178
www.dell.com | support.dell.com Example The following example displays GVRP configuration information: Console> show gvrp configuration GVRP User EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 178 GVRP Commands - Dell K0670 | CLI Guide - Page 179
-channel number. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY GVRP Commands 179 - Dell K0670 | CLI Guide - Page 180
www.dell.com | support.dell.com Example The following example displays GVRP statistical information. Console> show gvrp : Invalid Event INVAVAL : Invalid Attribute Value Port INVPROT INVATYP INVAVAL INVALEN INVEVENT DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 180 GVRP Commands - Dell K0670 | CLI Guide - Page 181
on a specific VLAN. To disable IGMP snooping on a VLAN interface, use the no form of this command. Syntax ip igmp snooping no ip igmp snooping DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IGMP Snooping Commands 181 - Dell K0670 | CLI Guide - Page 182
www.dell.com | support.dell.com Default Configuration IGMP snooping is disabled. Command Mode Interface Configuration (VLAN using the bridge multicast forward-all Interface Configuration (VLAN) mode command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 182 IGMP Snooping Commands - Dell K0670 | CLI Guide - Page 183
setting the aging-out time after multicast router ports are automatically learned. To return to the default configuration, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IGMP Snooping Commands 183 - Dell K0670 | CLI Guide - Page 184
www.dell.com | support.dell.com Syntax ip igmp snooping mrouter-time-out time-out no ip igmp snooping mrouter-time-out • IGMP Leave. Default Configuration The default leave-time-out configuration is 10 seconds. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 184 IGMP Snooping Commands - Dell K0670 | CLI Guide - Page 185
- VLAN number. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IGMP Snooping Commands 185 - Dell K0670 | CLI Guide - Page 186
www.dell.com | support.dell.com Example The following example displays multicast router interfaces in VLAN 1000. Console> show Mode User EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 186 IGMP Snooping Commands - Dell K0670 | CLI Guide - Page 187
User EXEC mode User Guidelines • To see the full multicast address table (including static addresses) use the show bridge multicast address-table Privileged EXEC command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IGMP Snooping Commands 187 - Dell K0670 | CLI Guide - Page 188
www.dell.com | support.dell.com Example The following example shows IGMP snooping information on multicast groups that are forbidden statically: Vlan IP Address Ports ---- 1 224-239.130|2.2.3 1/e19 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 188 IGMP Snooping Commands - Dell K0670 | CLI Guide - Page 189
address 131.108.1.27 and subnet mask 255.255.255.0. Console(config)# interface vlan 1 Console(config-if)# ip address 131.108.1.27 255.255.255.0 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IP Addressing Commands 189 - Dell K0670 | CLI Guide - Page 190
www.dell.com | support.dell.com ip address dhcp The ip address dhcp Interface Configuration (Ethernet, VLAN, port dhcp command deconfigures any IP address that was acquired, thus sending a DHCPRELEASE message. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 190 IP Addressing Commands - Dell K0670 | CLI Guide - Page 191
| vlan vlan-id | port-channel port-channel number.] • interface-number - Valid Ethernet port. • vlan-id - Valid VLAN number. • port-channel number. - Valid Port-channel number. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IP Addressing Commands 191 - Dell K0670 | CLI Guide - Page 192
www.dell.com | support.dell.com Default Configuration This command has no default configuration. Command Mode User port. • vlan-id - Valid VLAN number. • port-channel number. - Valid Port-channel number. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 192 IP Addressing Commands - Dell K0670 | CLI Guide - Page 193
to translate 32-bit IP addresses into 48-bit hardware addresses. Because most hosts support dynamic resolution, static ARP cache entries do not generally have to be specified. timeout value to less than 3600. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IP Addressing Commands 193 - Dell K0670 | CLI Guide - Page 194
www.dell.com | support.dell.com Example The following example configures the ARP timeout to 12000 seconds. Console(config)# Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 194 IP Addressing Commands - Dell K0670 | CLI Guide - Page 195
guidelines for this command. Examples The following example enables IP Domain Naming System (DNS)-based host name-to-address translation. Console(config)# ip domain-lookup DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IP Addressing Commands 195 - Dell K0670 | CLI Guide - Page 196
www.dell.com | support.dell.com ip domain-name The ip domain-name Global Configuration and DNS-protocol entries. Examples The following example defines default domain name dell.com. Console(config)# ip domain-name dell.com ip name-server The ip name-server Global Configuration mode command defines - Dell K0670 | CLI Guide - Page 197
permitted in the host cache. Examples The following example defines a static host name-to-address mapping in the host cache. Console(config)# ip host accounting.dell.com 176.10.23.1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IP Addressing Commands 197 - Dell K0670 | CLI Guide - Page 198
www.dell.com | support.dell.com clear host The clear host Privileged EXEC mode command deletes entries from . Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 198 IP Addressing Commands - Dell K0670 | CLI Guide - Page 199
gm.com, sales.gm.com, usa.sales.gm.com(DHCP) Name/address lookup is enabled Name servers (Preference order): 176.16.1.18 176.16.1.19 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY IP Addressing Commands 199 - Dell K0670 | CLI Guide - Page 200
www.dell.com | support.dell.com Configured host name-to-address mapping: Host Addresses ---- --------- accounting.gm.com 176.16.8.8 176.16.8.9 (DHCP) Cache: Host ---www.stanford.edu TTL(Hours) Total Elapsed Type 72 3 IP Addresses --------171.64.14.203 DELL CONFIDENTIAL - - Dell K0670 | CLI Guide - Page 201
the default configuration, use the no form of this command. Syntax lacp port-priority value no lacp port-priority • value - Specifies port priority. (Range: 1 - 65535) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY LACP Commands 201 - Dell K0670 | CLI Guide - Page 202
www.dell.com | support.dell.com Default Configuration The default port priority is 1. Command Mode Interface Configuration ( port 1/e6 . Console(config)# interface ethernet 1/e6 Console(config-if)# lacp timeout long DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 202 LACP Commands - Dell K0670 | CLI Guide - Page 203
addr: port Admin key: port Oper key: port Oper number: port Admin priority: port Oper priority: 1 00:00:12:34:56:78 30 30 21 1 1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY LACP Commands 203 - Dell K0670 | CLI Guide - Page 204
www.dell.com | support.dell.com port Admin timeout: port Oper timeout: LACP Activity: Aggregation: synchronization: FALSE FALSE FALSE FALSE Port 1/e1 LACP Statistics: LACP PDUs sent: 2 LACP PDUs received: 2 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 204 LACP Commands - Dell K0670 | CLI Guide - Page 205
displays LACP information for a port-channel. Syntax show lacp port-channel [port_channel_number] • port_channel_number - Valid port-channel number. Default Configuration This command has no default configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY LACP Commands 205 - Dell K0670 | CLI Guide - Page 206
www.dell.com | support.dell.com Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Oper Key: 29 Partner System Priority: MAC Address: Oper Key: 0 00:00:00:00:00:00 14 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 206 LACP Commands - Dell K0670 | CLI Guide - Page 207
)# speed The speed Line Configuration mode command sets the line baud rate. To return to the default configuration, use the no form of the command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Line Commands 207 - Dell K0670 | CLI Guide - Page 208
www.dell.com | support.dell.com Syntax speed bps no speed • bps-Baud rate in bits per second (bps). Possible autobaud no autobaud Default Configuration Autobaud is disabled. Command Mode Line Configuration (console) mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 208 Line Commands - Dell K0670 | CLI Guide - Page 209
configures the interval that the system waits until user input is detected to 20 minutes. Console(config)# line console Console(config-line)# exec-timeout 20 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Line Commands 209 - Dell K0670 | CLI Guide - Page 210
www.dell.com | support.dell.com history The history Line Configuration mode command enables the command history function. To history buffer. (Range: 10 - 216) Default Configuration The default history buffer size is 10. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 210 Line Commands - Dell K0670 | CLI Guide - Page 211
are no user guidelines for this command. Examples The following example disables the command history function for the current terminal session. Console# no terminal history DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Line Commands 211 - Dell K0670 | CLI Guide - Page 212
www.dell.com | support.dell.com terminal history size The terminal history size User EXEC command - Virtual terminal for remote console access (Telnet). • ssh - Virtual terminal for secured remote console access (SSH). DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 212 Line Commands - Dell K0670 | CLI Guide - Page 213
: 9600 Databits: 8 Parity: none Stopbits: 1 Telnet configuration: Interactive timeout: 10 minutes 10 seconds History: 10 SSH configuration: Interactive timeout: 10 minutes 10 seconds History: 10 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Line Commands 213 - Dell K0670 | CLI Guide - Page 214
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 214 Line Commands - Dell K0670 | CLI Guide - Page 215
LLDP Commands lldp enable (global) To enable Link Layer Discovery Protocol (LLDP), use the lldp enable command in global configuration mode. To disable LLDP, use the no form of this command. Syntax lldp enable no lldp enable Default Configuration The command is enabled. Command Mode Global - Dell K0670 | CLI Guide - Page 216
www.dell.com | support.dell.com Command Modes Interface configuration (Ethernet) User Guidelines • LLDP manages LAG ports individually. LLDP sends separate advertisements on each port in a LAG. LLDP data received - Dell K0670 | CLI Guide - Page 217
Examples The following example specifies how often the software sends Link Layer Discovery Protocol (LLDP) updates. Console (config) # lldp timer lldp hold-multiplier To specify the amount of time, the receiving device should hold a Link Layer Discovery Protocol (LLDP) packet before discarding it. - Dell K0670 | CLI Guide - Page 218
www.dell.com | support.dell.com Syntax lldp reinit-delay seconds no lldp reinit-delay • seconds - Specifies the minimum time in seconds an LLDP port will wait before reinitializing LLDP - Dell K0670 | CLI Guide - Page 219
Usage Guidelines • It is recommended that the TxDelay would be less than 0.25 of the LLDP timer interval. Examples The following example specifies the delay between successive LLDP frame transmissions initiated by value/status changes in the LLDP local systems MIB. Console (config) # lldp tx-delay 7 - Dell K0670 | CLI Guide - Page 220
www.dell.com | support.dell.com Syntax lldp management-address ip-address no management-address ip • ip-address - Specifies the management address to advertise. Default Configuration No IP address is - Dell K0670 | CLI Guide - Page 221
show lldp configuration To display the Link Layer Discovery Protocol (LLDP) configuration, use the show lldp configuration command in privileged EXEC mode. Syntax show lldp configuration [ethernet interface] • Interface - Ethernet port Command Modes Privileged EXEC User Guidelines There are no user - Dell K0670 | CLI Guide - Page 222
www.dell.com | support.dell.com Command Modes Privileged EXEC User Guidelines There are no user guidelines for this command. Example The following example displays the Link Layer Discovery Protocol ( - Dell K0670 | CLI Guide - Page 223
Switch# show lldp neighbors Port g1 g1 g2 g3 Device ID 0060.704C.73FE 0060.704C.73FD 0060.704C.73F C 0060.704C.73FB Port ID 1 1 9 1 Hold Time 117 93 1 92 System Capabilities Name B ts-7800-2 B ts-7800-2 B, R ts-7900-1 W ts-7900-2 Switch# show lldp neighbors ethernet g1 Device ID: 0060. - Dell K0670 | CLI Guide - Page 224
www.dell.com | support.dell.com 224 LLDP Commands - Dell K0670 | CLI Guide - Page 225
a port, VLAN, or port channel with an IP address or console interface. Management ACL only restricts access to the device for management configuration or viewing. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Management ACL 225 - Dell K0670 | CLI Guide - Page 226
www.dell.com | support.dell.com Examples The following example creates a management access list mask | prefix-length] [ethernet interface-number | vlan vlan-id | port-channel port-channel-number] [service service] • interface-number - A valid Ethernet port number. • vlan-id - A valid VLAN number. • - Dell K0670 | CLI Guide - Page 227
IP address is defined on the appropriate interface. • The system supports up to 128 management access rules. Example The following example permits all slash (/). (Range: 0-32) • service - Service type. Possible values: telnet, ssh, http, https and snmp. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR - Dell K0670 | CLI Guide - Page 228
www.dell.com | support.dell.com Default Configuration This command has no default configuration. Command Mode Management Access-list Configuration mode User Guidelines • Rules with Ethernet, VLAN and port-channel - Dell K0670 | CLI Guide - Page 229
displays the mlist management access list. Console# show management access-list mlist mlist ----- permit ethernet 1/e1 permit ethernet 2/e2 ! (Note: all other access implicitly denied) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Management ACL 229 - Dell K0670 | CLI Guide - Page 230
www.dell.com | support.dell.com show management access-class The show management access-class Privileged EXEC mode command Console# show management access-class Management access-class is enabled, using access list mlist DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 230 Management ACL - Dell K0670 | CLI Guide - Page 231
-ports tdr The show copper-ports tdr User EXEC mode command displays information on the last Time Domain Reflectometry (TDR) test performed on copper ports. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY PHY Diagnostics Commands 231 - Dell K0670 | CLI Guide - Page 232
www.dell.com | support.dell.com show copper-ports tdr [interface] • interface - A valid Ethernet port. (Full /port) Default Configuration This command has no default configuration. Command Mode User EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 232 PHY Diagnostics Commands - Dell K0670 | CLI Guide - Page 233
diagnostics. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines To test optical transceivers, ensure a fiber link is present. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY PHY Diagnostics Commands 233 - Dell K0670 | CLI Guide - Page 234
www.dell.com | support.dell.com Examples The following examples display the optical transceiver diagnostics. Tx Fault - Transmitter fault LOS - Loss of signal N/A - Not Available, N/S - Not Supported, W - Warning, E - Error Console# show fiber-ports optical-transceiver detailed Power Port Temp - Dell K0670 | CLI Guide - Page 235
port-channels to add. Separate non-consecutive port-channels with a comma and no spaces. A hyphen designates a range of port-channels. • all - All valid port-channels. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Port Channel Commands 235 - Dell K0670 | CLI Guide - Page 236
www.dell.com | support.dell.com Default Configuration This command has no default configuration. Command Mode Global Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 236 Port Channel Commands - Dell K0670 | CLI Guide - Page 237
example displays information on all port-channels. Console# show interfaces port-channel Channel ------1 2 3 Ports Active: 1/e1, 2/e2 Active: 2/e2, 2/e7 Inactive: 3/e1 Active: 3/e3, 3/e8 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Port Channel Commands 237 - Dell K0670 | CLI Guide - Page 238
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 238 Port Channel Commands - Dell K0670 | CLI Guide - Page 239
restrictions apply to ports configured to be source ports: • The port cannot be already configured as a destination port. • Up to 8 source ports can be configured. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Port Monitor Commands 239 - Dell K0670 | CLI Guide - Page 240
www.dell.com | support.dell.com Example The following example copies traffic on port 1/e8 (source port) to port 1/e1 . Syntax show ports monitor Default Configuration This command has no default configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 240 Port Monitor Commands - Dell K0670 | CLI Guide - Page 241
Source Port Destination Port Type Status VLAN Tagging 1/e1 1/e8 RX,TX Active No 1/e2 1/e8 RX,TX Active No 1/e18 1/e8 RX Active No DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Port Monitor Commands 241 - Dell K0670 | CLI Guide - Page 242
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 242 Port Monitor Commands - Dell K0670 | CLI Guide - Page 243
discovery protocol on port 1/e1, so that power will be supplied to a discovered device. Console(config)# interface ethernet 1/e1 Console(config-if)# power inline auto DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Power over Ethernet Commands 243 - Dell K0670 | CLI Guide - Page 244
www.dell.com | support.dell.com power inline powered-device The power inline powered-device Interface Configuration ( has high priority. • low-Indicates that operating the powered device has low priority. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 244 Power over Ethernet Commands - Dell K0670 | CLI Guide - Page 245
. (Range: 1-99) Default Configuration The default threshold is 95 percent. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Power over Ethernet Commands 245 - Dell K0670 | CLI Guide - Page 246
www.dell.com | support.dell.com Example The following example configures the power usage threshold for port. (Full syntax: unit/port) Default Configuration This command has no default configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 246 Power over Ethernet Commands - Dell K0670 | CLI Guide - Page 247
Device State Priority Status Classification [w] IP Phone Model A Auto High On 0.44 - 12.95 Wireless AP Model Auto Low On 0.44 - 3.84 Auto Low Off N/A DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Power over Ethernet Commands 247 - Dell K0670 | CLI Guide - Page 248
www.dell.com | support.dell.com Console> show power inline ethernet 1/e1 Port ---1/e1 Powered Device State Priority Status Classification of view of inline power management. Can be: Critical, High or Low. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 248 Power over Ethernet Commands - Dell K0670 | CLI Guide - Page 249
of times power has been removed because powered device dropout was detected. Counts the number of times an invalid signature of a powered device was detected. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Power over Ethernet Commands 249 - Dell K0670 | CLI Guide - Page 250
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 250 Power over Ethernet Commands - Dell K0670 | CLI Guide - Page 251
Commands qos The qos Global Configuration mode command enables quality of service (QoS) on the device. To disable QoS on the config)# qos show qos The show qos User EXEC mode command displays quality of service (QoS) for the device. Syntax show qos Default Configuration This command has no default configuration - Dell K0670 | CLI Guide - Page 252
www.dell.com | support.dell.com User Guidelines There are no user guidelines for this command. Example The following example configures the number of expedite queues as 0. Console(config)# priority-queue out num-of-queues 0 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 252 QoS Commands - Dell K0670 | CLI Guide - Page 253
qos interface ethernet 1/e11 queuing Ethernet 1/e11 wrr bandwidth weights and EF priority: qid weights 1 25 2 25 3 25 4 25 Ef Priority dis N/A dis N/A dis N/A dis N/A DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY QoS Commands 253 - Dell K0670 | CLI Guide - Page 254
www.dell.com | support.dell.com Cos-queue map: cos qid 0 2 1 1 2 1 3 2 4 3 5 3 6 4 7 4 wrr-queue cos-map The wrr-queue cos-map Global Configuration mode command maps Class of Service (CoS) values to a specific egress queue. To return to the default configuration, use the no form - Dell K0670 | CLI Guide - Page 255
mode and trust state. To return to the untrusted state, use the no form of this command. Syntax qos trust {cos | dscp} no qos trust DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY QoS Commands 255 - Dell K0670 | CLI Guide - Page 256
www.dell.com | support.dell.com • cos - Indicates that ingress packets are classified with packet default trust mode. Command Mode Global Configuration mode User Guidelines • Packets entering a quality of service (QoS) domain are classified at the edge of the QoS domain. When packets are classified - Dell K0670 | CLI Guide - Page 257
packets entering the port. Example The following example configures port 1/e15 default CoS value to 3. Console(config)# interface ethernet 1/e15 Console(config-if) qos cos 3 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY QoS Commands 257 - Dell K0670 | CLI Guide - Page 258
www.dell.com | support.dell.com show qos map The show qos map User EXEC mode command displays all QoS maps. Syntax show qos Column Description d1 Decimal Bit 1 of DSCP d2 Decimal Bit 2 of DSCP 01 - 04 Queue numbers DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 258 QoS Commands - Dell K0670 | CLI Guide - Page 259
servers are used, where 0 has the highest priority. (Range: 0-65535) • type - Specifies the usage type of the server. Possible values: login, dot.1x or all. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Radius Commands 259 - Dell K0670 | CLI Guide - Page 260
www.dell.com | support.dell.com Default Configuration No RADIUS server host is specified. The port number for ) Default Configuration The key-string is an empty string. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 260 Radius Commands - Dell K0670 | CLI Guide - Page 261
the authentication and encryption key for all RADIUS communications between the device and the RADIUS daemon. Console(config)# radius-server key dell-server radius-server retransmit The radius-server retransmit Global Configuration mode command specifies the number of times the software searches the - Dell K0670 | CLI Guide - Page 262
www.dell.com | support.dell.com Syntax radius-server source-ip source no radius-source-ip source • source - seconds. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 262 Radius Commands - Dell K0670 | CLI Guide - Page 263
The show radius-servers Privileged EXEC mode command displays the RADIUS server settings. Syntax show radius-servers Default Configuration This command has no default configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Radius Commands 263 - Dell K0670 | CLI Guide - Page 264
www.dell.com | support.dell.com Command Mode Privileged EXEC mode User Guidelines There are no user guidelines 1 All 8 Global Global 2 All Global values TimeOut: 3 Retransmit: 3 Deadtime: 0 Source IP: 172.16.8.1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 264 Radius Commands - Dell K0670 | CLI Guide - Page 265
: 0 64 Octets: 98 65 to 127 Octets: 0 128 to 255 Octets: 0 256 to 511 Octets: 0 512 to 1023 Octets: 491 1024 to 1518 Octets: 389 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY RMON Commands 265 - Dell K0670 | CLI Guide - Page 266
www.dell.com | support.dell.com The following table describes significant fields shown above: Field Description Octets The total 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets). DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 266 RMON Commands - Dell K0670 | CLI Guide - Page 267
port 1/e1 with index number 1 and a polling interval period of 2400 seconds. Console(config)# interface ethernet 1/e1 Console(config-if)# rmon collection history 1 interval 2400 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY RMON Commands 267 - Dell K0670 | CLI Guide - Page 268
www.dell.com | support.dell.com show rmon collection history The show rmon collection history User EXEC mode command displays the The granted number of samples to be saved. Owner The entity that configured this entry. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 268 RMON Commands - Dell K0670 | CLI Guide - Page 269
2002 21:57:00 Jan 18 2002 21:57:30 Octets --------303595962 287696304 Packets ------357568 275686 Broadcast Multicast 3289 7287 Util ----19% 2789 5878 20% DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY RMON Commands 269 - Dell K0670 | CLI Guide - Page 270
www.dell.com | support.dell.com Console> show rmon history 1 errors Sample Set: 1 Owner: Me Interface: 1/e1 Interval: 1800 packets received during this sampling interval that were directed to the broadcast address. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 270 RMON Commands - Dell K0670 | CLI Guide - Page 271
sampling interval. rmon alarm The rmon alarm Global Configuration mode command configures alarm conditions. To remove an alarm, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY RMON Commands 271 - Dell K0670 | CLI Guide - Page 272
www.dell.com | support.dell.com Syntax rmon alarm index variable interval rthreshold fthreshold revent fevent [type type] [startup Configuration mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 272 RMON Commands - Dell K0670 | CLI Guide - Page 273
following alarm conditions: • Alarm index - 1000 • Variable identifier - dell • Sample interval - 360000 seconds • Rising threshold - 1000000 • 10 • Falling threshold event index - 20 Console(config)# rmon alarm 1000 dell 360000 1000000 1000000 10 20 show rmon alarm-table The show rmon alarm-table - Dell K0670 | CLI Guide - Page 274
www.dell.com | support.dell.com The following table describes significant fields shown above: Field Description Index An . Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 274 RMON Commands - Dell K0670 | CLI Guide - Page 275
value is delta, the value of the variable at the last sample is subtracted from the current value, and the difference compared with the thresholds. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY RMON Commands 275 - Dell K0670 | CLI Guide - Page 276
www.dell.com | support.dell.com Startup Alarm Rising Threshold Falling Threshold Rising Event Falling Event Owner Default Configuration This command has no default configuration. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 276 RMON Commands - Dell K0670 | CLI Guide - Page 277
Broadcast Type -------Log Log-Trap Community --------- device Owner Last time sent CLI Jan 18 2002 23:58:17 Manager Jan 18 2002 23:59:48 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY RMON Commands 277 - Dell K0670 | CLI Guide - Page 278
www.dell.com | support.dell.com The following table describes significant fields shown above: Field Description Index An . Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 278 RMON Commands - Dell K0670 | CLI Guide - Page 279
-size {history | log} • history entries - Maximum number of history table entries. (Range: 20 -270) • log entries - Maximum number of log table entries. (Range: 20-100) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY RMON Commands 279 - Dell K0670 | CLI Guide - Page 280
www.dell.com | support.dell.com Default Configuration History table size is 270. Log table size is 200. Command Mode Global the maximum RMON history table sizes to 100 entries. Console(config)# rmon table-size history 100 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 280 RMON Commands - Dell K0670 | CLI Guide - Page 281
has access to the whole MIB. • The view-name parameter can be used to restrict the access rights of a community string. When it is specified: DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 281 - Dell K0670 | CLI Guide - Page 282
www.dell.com | support.dell.com - An internal security name is generated. - The internal security name for SNMPv1 and included-Indicates that the view type is included. • excluded-Indicates that the view type is excluded. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 282 SNMP Commands - Dell K0670 | CLI Guide - Page 283
- ifHCOutUcastPkts - ifHCOutMulticastPkts - ifHCOutBroadcastPkts • The following counters are also not supported - Alignment errors - Multiple Collision Frames - SQE Test Errors - Carrier Sense Errors - Symbol Errors DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 283 - Dell K0670 | CLI Guide - Page 284
www.dell.com | support.dell.com Examples The following example creates a view that includes all objects in the MIB-II system , nothing is defined for the notify view. Applicable only to the SNMP Version 3 security model. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 284 SNMP Commands - Dell K0670 | CLI Guide - Page 285
hexadecimal string. Each byte in the hexadecimal character string is two hexadecimal digits. Each byte can be separated by a period or colon. (Range: 5-32 characters) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 285 - Dell K0670 | CLI Guide - Page 286
www.dell.com | support.dell.com • auth-md5 password-Indicates the HMAC-MD5-96 authentication level. The user should enter a password SNMPv3 user John in group user-group. Console(config)# snmp-server user John user-group DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 286 SNMP Commands - Dell K0670 | CLI Guide - Page 287
, configure the engine ID to be used for the entire stack, and verify that the stack engine ID is unique throughout the entire management network. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 287 - Dell K0670 | CLI Guide - Page 288
www.dell.com | support.dell.com • Changing the value of the engine ID has the following important side-effect. A user's command. Examples The following example enables SNMP traps. Console(config)# snmp-server enable traps DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 288 SNMP Commands - Dell K0670 | CLI Guide - Page 289
)# snmp-server filter filter-name system included Console(config)# snmp-server filter filter-name system.7 excluded Console(config)# snmp-server filter filter-name ifEntry.*.1 included DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 289 - Dell K0670 | CLI Guide - Page 290
www.dell.com | support.dell.com snmp-server host The snmp-server host Global Configuration mode command specifies 255) Default Configuration This command has no default configuration. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 290 SNMP Commands - Dell K0670 | CLI Guide - Page 291
UDP port number is 162. (Range: 0-65535) • filtername-Specifies a string that defines the filter for this host. If unspecified, nothing is filtered. (Range: 1-30 characters) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 291 - Dell K0670 | CLI Guide - Page 292
www.dell.com | support.dell.com • seconds-Specifies the number of seconds to wait for an acknowledgment before resending informs. If Global Configuration mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 292 SNMP Commands - Dell K0670 | CLI Guide - Page 293
no form of this command. Syntax snmp-server location text no snmp-server location • text - Specifies a string that describes system location information. (Range: 0-160 characters) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 293 - Dell K0670 | CLI Guide - Page 294
where a SNMP user sets a MIB variable that does not have an equivalent command. In order to generate configuration files that support those situations, the snmp-server set command is used. • This command is case-sensitive. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 294 SNMP Commands - Dell K0670 | CLI Guide - Page 295
Examples The following example configures the scalar MIB sysName with the value dell. Console(config)# snmp-server set sysName sysname dell show snmp The show snmp Privileged EXEC mode command displays the SNMP status. Syntax show snmp Default Configuration This command has no default configuration. - Dell K0670 | CLI Guide - Page 296
www.dell.com | support.dell.com Community-string public Group name ---------user-group IP address ---------all Traps are Statistics sent with the notification operation. SNMP version for the sent trap 1 or 2. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 296 SNMP Commands - Dell K0670 | CLI Guide - Page 297
. (Range: 1-30) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 297 - Dell K0670 | CLI Guide - Page 298
www.dell.com | support.dell.com Example The following example displays the configuration of views. Console# show snmp views Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 298 SNMP Commands - Dell K0670 | CLI Guide - Page 299
of the view that enables entering data and managing the contents of the agent. Name of the view that enables specifying an inform or a trap. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 299 - Dell K0670 | CLI Guide - Page 300
www.dell.com | support.dell.com show snmp filters The show snmp filters Privileged EXEC mode command user-filter OID Tree 1.3.6.1.2.1.1 1.3.6.1.2.1.1.7 1.3.6.1.2.1.2.2.1.*.1 Type --------Included Excluded Included DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 300 SNMP Commands - Dell K0670 | CLI Guide - Page 301
example displays the configuration of users. Console# show snmp users Name -----John John Group name Auth Method user-group md5 user-group md5 Remote 08009009020C0B099C075879 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SNMP Commands 301 - Dell K0670 | CLI Guide - Page 302
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 302 SNMP Commands - Dell K0670 | CLI Guide - Page 303
(STP) is enabled. • rstp - Indicates that the Rapid Spanning Tree Protocol (RSTP) is enabled. • mstp - Indicates that the Multiple Spanning Tree Protocol (RSTP) is enabled. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 303 - Dell K0670 | CLI Guide - Page 304
www.dell.com | support.dell.com Default Configuration STP is enabled. Command Modes Global Configuration mode User the forwarding time, the following relationship should be kept: - 2*(Forward-Time - 1) >= Max-Age DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 304 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 305
configuration, use the no form of this command. Syntax spanning-tree max-age seconds no spanning-tree max-age • seconds - Time in seconds. (Range: 6 - 40) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 305 - Dell K0670 | CLI Guide - Page 306
www.dell.com | support.dell.com Default Configuration The default maximum age for IEEE Spanning Tree Protocol (STP) is configures spanning tree priority to 12288. Console(config)# spanning-tree priority 12288 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 306 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 307
the no form of this command. Syntax spanning-tree cost cost no spanning-tree cost • cost - Path cost of the port (Range: 1 - 200,000,000) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 307 - Dell K0670 | CLI Guide - Page 308
www.dell.com | support.dell.com Default Configuration Default path cost is determined by port speed and path cost TreeProtocol (STP) is 128. Command Modes Interface Configuration (Ethernet, port-channel) mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 308 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 309
device and network operations. Example The following example enables PortFast on Ethernet port 1/e15. Console(config)# interface ethernet 1/e15 Console(config-if)# spanning-tree portfast DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 309 - Dell K0670 | CLI Guide - Page 310
www.dell.com | support.dell.com spanning-tree link-type The spanning-tree link-type Interface Configuration mode command a range of 1-200,000,000 . • short - Specifies port path costs with a range of 0-65,535. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 310 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 311
this command. Example The following example defines BPDU packet flooding when the spanning-tree is disabled on an interface. Console(config)# spanning-tree bpdu flooding DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 311 - Dell K0670 | CLI Guide - Page 312
www.dell.com | support.dell.com clear spanning-tree detected-protocols The clear spanning-tree detected-protocols Default Configuration The default bridge priority for IEEE Spanning Tree Protocol (STP) is 32768. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 312 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 313
maximum number of hops that a packet travels in an MST region before it is discarded to 10. Console (config) # spanning-tree mst max-hops 10 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 313 - Dell K0670 | CLI Guide - Page 314
www.dell.com | support.dell.com spanning-tree mst port-priority The spanning-tree mst port-priority Interface spanning -tree instance (Range: 1-15). • cost-The port path cost. (Range: 1 - 200,000,000) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 314 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 315
configuration. Command Mode Global Configuration mode User Guidelines All devices in an MST region must have the same VLAN mapping, configuration revision number and name. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 315 - Dell K0670 | CLI Guide - Page 316
www.dell.com | support.dell.com Example The following example configures an MST region. Console(config)# spanning-tree mst (config)# spanning-tree mst configuration Console(config-mst)# instance 1 add vlan 10-20 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 316 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 317
command. Syntax revision value no revision • value-Configuration revision number (Range: 0-65535). Default Configuration The default configuration revision number is 0. Command Mode MST Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 317 - Dell K0670 | CLI Guide - Page 318
www.dell.com | support.dell.com User Guidelines There are no user guidelines for this command. Example The following pending MST region configuration takes effect only after exiting the MST configuration mode. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 318 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 319
for this command. Example The following example exits the MST configuration mode and saves changes. Console(config)# spanning-tree mst configuration Console(config-mst)# exit DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 319 - Dell K0670 | CLI Guide - Page 320
www.dell.com | support.dell.com abort (mst) The abort MST Configuration mode command exits the -configuration- Indicates the MST configuration identifier. • instance-id-Specifies ID of the spanning tree instance. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 320 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 321
---- --- 1/e1 Enabled 128.1 20000 FWD 1/e2 Enabled 128.2 20000 FWD 1/e3 Disabled 128.3 20000 - Role ---Root Desg - PortFast Type No P2p (RSTP) No Shared (STP) - - DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 321 - Dell K0670 | CLI Guide - Page 322
www.dell.com | support.dell.com 1/e4 1/e5 Enabled 128.4 20000 BLK Enabled 128.5 20000 DIS ALTN No - - Desg Desg Desg - PortFast Type No P2p (RSTP) No Shared (STP) - - No Shared (STP) - - DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 322 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 323
e1 Enabled 128.1 20000 - 1/e2 Enabled 128.2 20000 - 1/e3 Disabled 128.3 20000 - 1/e4 Enabled 128.4 20000 - 1/e5 Enabled 128.5 20000 - Role ---- PortFast Type - - - - - - - - - - DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 323 - Dell K0670 | CLI Guide - Page 324
www.dell.com | support.dell.com Console# show spanning-tree active Spanning tree enabled mode RSTP Default port cost Role ---Root Desg ALTN PortFast Type No P2p (RSTP) No Shared (STP) No Shared (STP) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 324 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 325
enabled mode RSTP Default port cost method: long Root ID Priority 32768 Address 00:01:42:97:e0:00 Path Cost 20000 Root Port 1 (1/e1) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 325 - Dell K0670 | CLI Guide - Page 326
www.dell.com | support.dell.com Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID .2 Designated path cost: 20000 Number of transitions to forwarding state: 1 BPDU: sent 2, received 170638 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 326 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 327
) Port Fast: N/A (configured:no) Designated bridge Priority: N/A Address: N/A Designated port id: N/A Designated path cost: N/A Number of transitions to forwarding state: N/A BPDU: sent N/A, received N/A DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 327 - Dell K0670 | CLI Guide - Page 328
www.dell.com | support.dell.com Console# show spanning-tree ethernet 1/e1 Port 1 (1/e1) enabled State: Forwarding Role: Root Port Priority 32768 Address 00:01:42:97:e0:00 Path Cost 20000 Root Port 1 (1/e1) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 328 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 329
:02:4b:29:89:76 Path Cost 20000 Root Port 4 (1/e4) Rem hops 19 Bridge ID Priority 32768 Address 00:02:4b:29:7a:00 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 329 - Dell K0670 | CLI Guide - Page 330
www.dell.com | support.dell.com Interfaces Name State Prio.Nbr Cost Sts ---- --- 1/e1 Enabled 128.1 20000 FWD 1/e2 15 sec Max hops 20 Number of topology changes 2 last change occurred 2d18h ago DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 330 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 331
Address: 00:02:4b:29:7a:00 Designated port id: 128.3 Designated path cost: 20000 Number of transitions to forwarding state: 1 BPDU: sent 2, received 170638 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 331 - Dell K0670 | CLI Guide - Page 332
www.dell.com | support.dell.com Port 4 (1/e4) enabled State: Forwarding Port id: 128.4 Type: Shared (configured: auto) Internal Address: 00:02:4b:29:7a:00 Designated port id: 128.1 Designated path cost: 20000 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 332 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 333
Address: 00:02:4b:29:7a:00 Designated port id: 128.2 Designated path cost: 20000 Number of transitions to forwarding state: 1 BPDU: sent 2, received 170638 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 333 - Dell K0670 | CLI Guide - Page 334
www.dell.com | support.dell.com Console# show spanning-tree Spanning tree enabled mode MSTP Default port cost method: long ###### spanning-tree Spanning tree enabled mode MSTP Default port cost method: long DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 334 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 335
the alternate state. Example The following example enable root guard on port e8. Console(config)# interface ethernet 1/e8 Console(config-if)# spanning-tree guard root DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Spanning-Tree Commands 335 - Dell K0670 | CLI Guide - Page 336
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 336 Spanning-Tree Commands - Dell K0670 | CLI Guide - Page 337
to be configured from a SSH server. To disable this function, use the no form of this command. Syntax ip ssh server no ip ssh server DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SSH Commands 337 - Dell K0670 | CLI Guide - Page 338
www.dell.com | support.dell.com Default Configuration Device configuration from a SSH server is enabled. Command Mode Global the backup master. • This command may take a considerable period of time to execute. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 338 SSH Commands - Dell K0670 | CLI Guide - Page 339
pubkey-auth Global Configuration mode command enables public key authentication for incoming SSH sessions. To disable this function, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SSH Commands 339 - Dell K0670 | CLI Guide - Page 340
www.dell.com | support.dell.com Syntax ip ssh pubkey-auth no ip ssh pubkey-auth Default Configuration mode command enters the SSH Public Key-chain Configuration mode. The mode is used to manually specify other device public keys such as SSH client public keys. Syntax crypto key pubkey-chain ssh - Dell K0670 | CLI Guide - Page 341
The user-key SSH Public Key-string Configuration mode command specifies which SSH public key is manually configured. To remove an SSH public key, use the no form of this command. key pair. • dsa - Indicates the DSA key pair. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SSH Commands 341 - Dell K0670 | CLI Guide - Page 342
.com | support.dell.com Default Configuration No SSH public keys exist. Command Mode SSH Public Key-string Configuration mode User Guidelines Follow this command with the key-string SSH Public Key-String Configuration mode command to specify the key. Example The following example enables manually - Dell K0670 | CLI Guide - Page 343
ssh Console(config-pubkey-chain)# user-key bob rsa Console(config-pubkey-key)# key-string row AAAAB3Nza Console(config-pubkey-key)# key-string row C1yc2 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SSH Commands 343 - Dell K0670 | CLI Guide - Page 344
www.dell.com | support.dell.com show ip ssh The show ip ssh Privileged EXEC mode command displays the SSH server number Cipher Encryption type (3DES, Blowfish, RC4) Auth Code Authentication Code (HMAC-MD5, HMAC-SHA1) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 344 SSH Commands - Dell K0670 | CLI Guide - Page 345
(Hex): 77:C7:19:85:98:19:27:96:C9:CC:83:C5:78:89:F8:86 Fingerprint(Bubble Babble): yteriuwt jgkljhglk yewiury hdskjfryt gfhkjglk DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SSH Commands 345 - Dell K0670 | CLI Guide - Page 346
www.dell.com | support.dell.com show crypto key pubkey-chain ssh The show crypto key pubkey-chain ssh Privileged EXEC mode command displays SSH 9ACC01C5 129D99E4 Fingerprint: 9A:CC:01:C5:78:39:27:86:79:CC:23:C5:98:59:F1:86 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 346 SSH Commands - Dell K0670 | CLI Guide - Page 347
generates RSA key pairs for secure login to remote access servers. Syntax crypto slogin key generate rsa Default Configuration RSA key pairs do not exist. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SSH Commands 347 - Dell K0670 | CLI Guide - Page 348
www.dell.com | support.dell.com Command Mode Global Configuration mode User Guidelines • Use this command to generate RSA key pairs Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 348 SSH Commands - Dell K0670 | CLI Guide - Page 349
(Hex): 77:C7:19:85:98:19:27:96:C9:CC:83:C5:78:89:F8:86 Fingerprint(Bubble Babble): yteriuwt jgkljhglk yewiury hdskjfryt gfhkjglk DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY SSH Commands 349 - Dell K0670 | CLI Guide - Page 350
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 350 SSH Commands - Dell K0670 | CLI Guide - Page 351
messages to a syslog server. To delete the syslog server with the specified address from the list of syslogs, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Syslog Commands 351 - Dell K0670 | CLI Guide - Page 352
www.dell.com | support.dell.com Syntax logging {ip-address | hostname} [port port] [severity level] [facility facility] [description text] no logging { To disable logging to the console, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 352 Syslog Commands - Dell K0670 | CLI Guide - Page 353
buffer. Possible values: emergencies, alerts, critical, errors, warnings, notifications, informational, debugging. Default Configuration The default severity level is informational. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Syslog Commands 353 - Dell K0670 | CLI Guide - Page 354
www.dell.com | support.dell.com User Guidelines • All the syslog messages are logged to the internal buffer. This command syslog messages stored in the internal buffer to 300. Console(config)# logging buffered size 300 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 354 Syslog Commands - Dell K0670 | CLI Guide - Page 355
file. Possible values: emergencies, alerts, critical, errors, warnings, notifications, informational and debugging. Default Configuration The default severity level is errors. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Syslog Commands 355 - Dell K0670 | CLI Guide - Page 356
www.dell.com | support.dell.com User Guidelines There are no user guidelines for this command. Example The logging messages related to successful login events, unsuccessful login events and other login-related events. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 356 Syslog Commands - Dell K0670 | CLI Guide - Page 357
are no user guidelines for this command. Example The following example enables logging messages related to file copy operations. Console(config)# file-system logging copy DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Syslog Commands 357 - Dell K0670 | CLI Guide - Page 358
www.dell.com | support.dell.com management logging The management logging global configuration command enables logging management access list EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 358 Syslog Commands - Dell K0670 | CLI Guide - Page 359
logged (resources) Application filtering control Application Event Status ----------- ----- ------ AAA Login Enabled File system Copy Enabled File system Delete-Rename Enabled Management ACL Deny Enabled DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Syslog Commands 359 - Dell K0670 | CLI Guide - Page 360
www.dell.com | support.dell.com Buffer log: 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 360 Syslog Commands - Dell K0670 | CLI Guide - Page 361
logged (resources) Application filtering control Application Event Status ----------- ----- ------ AAA Login Enabled File system Copy Enabled File system Delete-Rename Enabled Management ACL Deny Enabled DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Syslog Commands 361 - Dell K0670 | CLI Guide - Page 362
www.dell.com | support.dell.com Buffer log: 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 362 Syslog Commands - Dell K0670 | CLI Guide - Page 363
servers. Console# show syslog-servers Device Configuration IP address Port 192.180.2.27 514 192.180.2.28 514 Severity Informational Warning Facility -------local7 local7 Description ----------- DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Syslog Commands 363 - Dell K0670 | CLI Guide - Page 364
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 364 Syslog Commands - Dell K0670 | CLI Guide - Page 365
. The gateway for this destination indicates that the destination is unreachable. - Network or host unreachable. The device found no corresponding entry in the route table. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 365 - Dell K0670 | CLI Guide - Page 366
www.dell.com | support.dell.com Examples The following example displays pinging results: Console> ping 10.1.1.1 Pinging ---4 packets transmitted, 4 packets received, 0% packet loss round-trip (ms) min/avg/max = 7/8/11 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 366 System Management - Dell K0670 | CLI Guide - Page 367
normally selects what it feels is the best source address to use. • tos - The Type-Of-Service byte in the IP Header of the packet. (Range: 0-255) Default Configuration The default number of round-trip time for each. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 367 - Dell K0670 | CLI Guide - Page 368
www.dell.com | support.dell.com • The traceroute command sends out one probe at a time. Each outgoing packet may result in one or two 58 msec 11 umaxp1.physics.lsa.umich.edu (141.211.101.64) 62 msec 63 msec 63 msec DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 368 System Management - Dell K0670 | CLI Guide - Page 369
unreachable. telnet The telnet User EXEC mode command enables logging on to a host that supports Telnet. Syntax telnet {ip-address | hostname} [port] [keyword1......] • ip-address table in the User Guidelines. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 369 - Dell K0670 | CLI Guide - Page 370
www.dell.com | support.dell.com Default Configuration The default port is the Telnet port (decimal23) on the host. Command Mode User EXEC mode User Guidelines • Telnet software supports special Telnet commands in the form of Telnet sequences that map generic terminal control functions to - Dell K0670 | CLI Guide - Page 371
hostname server Ident Protocol Internet Relay Chat Kerberos login Kerberos shell Login Printer service Network News Transport Protocol Port Number 179 19 514 13 9 53 7 512 79 21 20 70 101 113 194 543 544 513 515 119 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 371 - Dell K0670 | CLI Guide - Page 372
www.dell.com | support.dell.com pim-auto-rp pop2 pop3 smtp sunrpc syslog tacacs talk connections) Default Configuration The default connection number is that of the most recent connection. Command Mode User EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 372 System Management - Dell K0670 | CLI Guide - Page 373
following example reloads the operating system. Console# reload This command will reset the whole system and disconnect your current session. Do you want to continue (y/n) [n]? DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 373 - Dell K0670 | CLI Guide - Page 374
www.dell.com | support.dell.com hostname The hostname Global Configuration mode command command. Example The following example specifies the device host name. Console(config)# hostname Dell Dell(config)# stack master The stack master Global Configuration mode command enables forcing the selection - Dell K0670 | CLI Guide - Page 375
User Guidelines If no unit is specified, all units are reloaded. Example The following example reloads Unit 2 of the stack. Console(config)# stack reload unit 2 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 375 - Dell K0670 | CLI Guide - Page 376
www.dell.com | support.dell.com stack display-order The stack display-order Global Configuration mode command . (Range: 1-6) Default Configuration This command has no default configuration. Command Mode User EXEC mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 376 System Management - Dell K0670 | CLI Guide - Page 377
:12:12 1.0.0.0 Forced 6 1 Master 2 00:00:b0:87:12:11 1.0.0.0 Enabled 2 3 Slave Configured order: Unit 1 at Top, Unit 6 at bottom Can't display order as requested. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 377 - Dell K0670 | CLI Guide - Page 378
www.dell.com | support.dell.com Console> show stack 1 Unit 1: MAC address: 00:00:b0:87:12:11 Master: Forced. Product: Robert Betty Protocol ----------Serial SSH HTTP Telnet Location 172.16.0.1 172.16.0.8 172.16.1.7 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 378 System Management - Dell K0670 | CLI Guide - Page 379
session. IP address of the remote host. Port Telnet TCP port number Byte Number of unread bytes for the user to see on the connection. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 379 - Dell K0670 | CLI Guide - Page 380
www.dell.com | support.dell.com show system The show system User EXEC mode command displays Example The following example displays the system information. Console> show system Unit ---1 Type PowerConnect 3424 Unit ---1 Main Power Supply OK Redundant Power Supply Unit ---1 Fan1 ---OK - Dell K0670 | CLI Guide - Page 381
-tag Global Configuration mode command specifies the asset tag of the device. To return to the default configuration, use the no form of the command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 381 - Dell K0670 | CLI Guide - Page 382
www.dell.com | support.dell.com Syntax asset-tag [unit unit] tag no asset-tag [unit unit] • unit- Specifies the number of the . Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 382 System Management - Dell K0670 | CLI Guide - Page 383
• Use the show cpu utilization privileged EXEC command to view information on CPU utilization. Example This example enables measuring CPU utilization. Console# config Console(config)# service cpu-utilization DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY System Management 383 - Dell K0670 | CLI Guide - Page 384
www.dell.com | support.dell.com show cpu utilization The show cpu utilization Privileged EXEC mode utilization. Console# show cpu utilization CPU utilization service is on. CPU utilization five seconds: 5%; one minute: 3%; five minutes: 3% DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF - Dell K0670 | CLI Guide - Page 385
-specific timeout, key-string or source value is specified, the global value is used. If no TACACS+ server priority is specified, default priority 0 is used. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY TACACS+ Commands 385 - Dell K0670 | CLI Guide - Page 386
www.dell.com | support.dell.com Command Mode Global Configuration mode User Guidelines • Multiple tacacs-server host commands example sets the authentication encryption key. Console(config)# tacacs-server key dell-s DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 386 TACACS+ Commands - Dell K0670 | CLI Guide - Page 387
• source - Specifies the source IP address. Default Configuration The source IP address is the address of the outgoing IP interface. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY TACACS+ Commands 387 - Dell K0670 | CLI Guide - Page 388
www.dell.com | support.dell.com User Guidelines There are no user guidelines for this command. Examples The Port Single TimeOut Source Connection IP 172.16.1.1 Connected 49 No Global Global Priority -------1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 388 TACACS+ Commands - Dell K0670 | CLI Guide - Page 389
Global values TimeOut: 3 Device Configuration Source IP: 172.16.8.1 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY TACACS+ Commands 389 - Dell K0670 | CLI Guide - Page 390
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 390 TACACS+ Commands - Dell K0670 | CLI Guide - Page 391
the User EXEC mode. Syntax disable [privilege-level] • privilege-level - Privilege level to enter the system. (Range: 1 - 15) Default Configuration The default privilege level is 1. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY User Interface 391 - Dell K0670 | CLI Guide - Page 392
www.dell.com | support.dell.com Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this EXEC mode and logs in with username admin. Console> login User Name:admin Password:***** Console# DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 392 User Interface - Dell K0670 | CLI Guide - Page 393
. Syntax exit Default Configuration This command has no default configuration. Command Mode All configuration modes User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY User Interface 393 - Dell K0670 | CLI Guide - Page 394
www.dell.com | support.dell.com Example The following example changes the configuration mode from Interface Configuration mode to command. Example The following example closes an active terminal session. Console> exit DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 394 User Interface - Dell K0670 | CLI Guide - Page 395
. Syntax help Default Configuration This command has no default configuration. Command Mode All command modes User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY User Interface 395 - Dell K0670 | CLI Guide - Page 396
www.dell.com | support.dell.com Example The following example describes the help system. Console# help Help may be requested at any after entering the show command. • This command is relevant only for the current session. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 396 User Interface - Dell K0670 | CLI Guide - Page 397
1.0.0 Console# show clock 15:29:03 Jun 17 2004 Console# show history show version show clock show history 3 commands were logged (buffer size is 10) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY User Interface 397 - Dell K0670 | CLI Guide - Page 398
www.dell.com | support.dell.com show privilege The show privilege Privileged/User EXEC mode command displays the current privilege level for the Privileged EXEC mode. Console# show privilege Current privilege level is 15 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 398 User Interface - Dell K0670 | CLI Guide - Page 399
• vlan-range - Specifies a list of VLAN IDs to be added. Separate non-consecutive VLAN IDs with a comma and no spaces; a hyphen designates a range of IDs. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 399 - Dell K0670 | CLI Guide - Page 400
www.dell.com | support.dell.com Default Configuration This command has no default configuration. Command Mode VLAN Interface Configuration mode for VLAN 1. Console(config)# interface vlan 1 Console(config-if)# DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 400 VLAN Commands - Dell K0670 | CLI Guide - Page 401
command continues on the other interfaces. • The following commands are not supported with the interface range vlan command: privatevlan primary, private-vlan community, associated with this VLAN. (Range: 1-32 characters) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 401 - Dell K0670 | CLI Guide - Page 402
www.dell.com | support.dell.com Default Configuration No name is defined. Command Mode Interface Configuration IP interface has been configured on it. • The command is not supported under the command interface range vlan. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 402 VLAN Commands - Dell K0670 | CLI Guide - Page 403
with one primary VLAN. • A VLAN that has been configured as an isolated VLAN cannot be configured as a primary or community VLAN. • The command is not supported under the command interface range vlan. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 403 - Dell K0670 | CLI Guide - Page 404
associated with one primary VLAN. • A VLAN that has been configured as a community VLAN cannot be configured as a primary or isolated VLAN. • The command is not supported under the command interface range vlan. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 404 VLAN Commands - Dell K0670 | CLI Guide - Page 405
Indicates a trunking layer 2 VLAN port. • general - Indicates a full 802-1q supported VLAN port. • promiscuous - Indicates a promiscuous private-vlan port. • community - Indicates no longer a member of the default VLAN. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 405 - Dell K0670 | CLI Guide - Page 406
www.dell.com | support.dell.com Example The following example configures Ethernet port 1/e16 as an untagged layer 2 VLAN port 1/e16. Console(config)# interface ethernet 1/e16 Console(config-if)# switchport access vlan 23 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 406 VLAN Commands - Dell K0670 | CLI Guide - Page 407
the command is used to add a port to a Private VLAN, prior to adding the port, the port must be added to the Private Isolated Mode. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 407 - Dell K0670 | CLI Guide - Page 408
www.dell.com | support.dell.com Example This example configures private VLAN 200 as the primary private VLAN and associates it . Command Mode Privileged EXEC User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 408 VLAN Commands - Dell K0670 | CLI Guide - Page 409
Isolated VLAN: 101 Community VLANs: 102, 103 Promiscuous ports: 1/e19, 2/e19 Isolated ports: 1/e1-e8, 2/e1-e8 Community --------102 103 Ports ----1/e21, 1/e22 2/e21, 2/e22 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 409 - Dell K0670 | CLI Guide - Page 410
www.dell.com | support.dell.com switchport trunk allowed vlan The switchport trunk allowed vlan Interface Configuration mode command adds vlan • vlan-id- Specifies the ID of the native VLAN. Default Configuration VID=1. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 410 VLAN Commands - Dell K0670 | CLI Guide - Page 411
If the port is added to a VLAN without specifying tagged or untagged, the default setting is tagged. Command Mode Interface Configuration (Ethernet, port-channel) mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 411 - Dell K0670 | CLI Guide - Page 412
www.dell.com | support.dell.com User Guidelines • This command enables changing the egress rule (e.g., from tagged to mode. Console(config)# interface ethernet 1/e16 Console(config-if)# switchport general pvid 234 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 412 VLAN Commands - Dell K0670 | CLI Guide - Page 413
no switchport general acceptable-frame-type tagged-only Default Configuration All frame types are accepted at ingress. Command Mode Interface Configuration (Ethernet, port-channel) mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 413 - Dell K0670 | CLI Guide - Page 414
www.dell.com | support.dell.com User Guidelines There are no user guidelines for this command. Example The following Console(config)# interface ethernet 1/e16 Console(config-if)# switchport forbidden vlan add 234-256 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 414 VLAN Commands - Dell K0670 | CLI Guide - Page 415
-id - Specifies the ID of the internal usage VLAN. Default Configuration The software reserves an unused VLAN as the internal usage VLAN of an interface. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 415 - Dell K0670 | CLI Guide - Page 416
www.dell.com | support.dell.com Command Mode Interface Configuration (Ethernet, port-channel) to explicitly configure a different VLAN as the internal usage VLAN. • This command is not supported under the command interface range vlan. Example The following example reserves VLAN 15 as the internal - Dell K0670 | CLI Guide - Page 417
no user guidelines for this command. Example The following example displays the MAC-to-VLAN database. Console# show vlan mac-to-vlan MAC Address ----------- VLAN ---- DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 417 - Dell K0670 | CLI Guide - Page 418
www.dell.com | support.dell.com 0060.704c.73ff 0060.708c.73ff 123 deny show vlan The show vlan static static static guest Authorization Required Required Required Required Required Required Required Not Required - DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 418 VLAN Commands - Dell K0670 | CLI Guide - Page 419
| port-channel port-channel-number} • interface - A valid Ethernet port number. • port-channel-number - A valid port-channel number. Default Configuration This command has no default configuration. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 419 - Dell K0670 | CLI Guide - Page 420
www.dell.com | support.dell.com Command Mode Privileged EXEC mode User Guidelines There are no user guidelines Static Static Static configuration: PVID: 1 (default) Ingress Filtering: Enabled Acceptable Frame Type: All DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 420 VLAN Commands - Dell K0670 | CLI Guide - Page 421
: All Port is member in: Vlan Name ---- ------------ 91 IP Telephony Egress rule ----------tagged Type -----Static Static configuration: PVID: 8 Ingress Filtering: Disabled Acceptable Frame Type: All DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 421 - Dell K0670 | CLI Guide - Page 422
www.dell.com | support.dell.com Port is statically configured to: Vlan Name Egress rule ---- ------------ ----------- 8 VLAN0072 2922 Ingress Filtering: Enabled Acceptable Frame Type: Untagged GVRP status: Disabled DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 422 VLAN Commands - Dell K0670 | CLI Guide - Page 423
Primary A 2922 Community A1 Egress rule ----------untagged untagged Type -----Static Static Static configuration: PVID: 2922 Ingress Filtering: Enabled Acceptable Frame Type: Untagged GVRP status: Disabled DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY VLAN Commands 423 - Dell K0670 | CLI Guide - Page 424
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 424 VLAN Commands - Dell K0670 | CLI Guide - Page 425
of this command. Syntax ip http port port-number no ip http port • port-number - Port number for use by the HTTP server. (Range: 1-65534) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Web Server 425 - Dell K0670 | CLI Guide - Page 426
www.dell.com | support.dell.com Default Configuration The default port number is 80. Command Mode Global Configuration mode User example enables configuring the device from a secured browser. console(config)# ip https server DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 426 Web Server - Dell K0670 | CLI Guide - Page 427
IP address of the device. (Range: 1 - 64) • organization - Specifies the organization name. (Range: 1 - 64) • organization-unit - Specifies the organization-unit or department name.(Range: 1 - 64) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Web Server 427 - Dell K0670 | CLI Guide - Page 428
www.dell.com | support.dell.com • location - Specifies the location or city name. (Range: 1 - 64) • state - Specifies the state or province name state] [cu country] • number - Specifies the certificate number. (Range: 1 - 2) DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 428 Web Server - Dell K0670 | CLI Guide - Page 429
Certification Authority, use the crypto certificate import Global Configuration mode command to import the certificate into the device. This certificate replaces the self-signed certificate. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Web Server 429 - Dell K0670 | CLI Guide - Page 430
www.dell.com | support.dell.com Examples The following example generates and displays a certificate . (Range: 1 - 2) Default Configuration This command has no default configuration. Command Mode Global Configuration mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 430 Web Server - Dell K0670 | CLI Guide - Page 431
2003 GMT Valid to: Dec 31 02:44:50 2004 GMT Subject: CN= router.gm.com, 0= General Motors, C= US Finger print: DC789788 DC88A988 127897BC BB789788 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Web Server 431 - Dell K0670 | CLI Guide - Page 432
www.dell.com | support.dell.com ip https certificate The ip https certificate Global Configuration mode command configures . Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 432 Web Server - Dell K0670 | CLI Guide - Page 433
ip http Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Web Server 433 - Dell K0670 | CLI Guide - Page 434
www.dell.com | support.dell.com Example The following example displays the HTTP server configuration. Console# show ip http : CN= router.gm.com, 0= General Motors, C= US Finger print: DC789788 DC88A988 127897BC BB789788 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 434 Web Server - Dell K0670 | CLI Guide - Page 435
Certificate 2 is inactive Valid From: Jan 1 02:44:50 2004 GMT Valid to: Dec 31 02:44:50 2005 GMT Subject: CN= router.gm.com, 0= General Motors, C= US Finger print: 1873B936 88DC3411 BC8932EF 782134BA DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Web Server 435 - Dell K0670 | CLI Guide - Page 436
www.dell.com | support.dell.com DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 436 Web Server - Dell K0670 | CLI Guide - Page 437
ensure that authentication succeeds even if all methods return an error, specify none as the final method in the command line. • The RADIUS server must support MD-5 challenge and EAP type frames. • The device accepts EAP frames with a priority tag and also accepts EAP packets with VLAN tags - Dell K0670 | CLI Guide - Page 438
www.dell.com | support.dell.com Examples The following example uses the aaa authentication dot1x -auth-control dot1x port-control The dot1x port-control Interface Configuration mode command enables manually controlling the authorization state of the port. To return to the default configuration, - Dell K0670 | CLI Guide - Page 439
all attempts by the client to authenticate. The device cannot provide authentication services to the client through the interface. Default Configuration Port is in the configuration, use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 439 - Dell K0670 | CLI Guide - Page 440
www.dell.com | support.dell.com Syntax dot1x re-authentication no dot1x re-authentication Default Configuration Periodic re- Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 440 802.1x Commands - Dell K0670 | CLI Guide - Page 441
authperiod 300 dot1x re-authenticate The dot1x re-authenticate Privileged EXEC mode command manually initiates a reauthentication of all 802.1X-enabled ports or the specified , use the no form of this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 441 - Dell K0670 | CLI Guide - Page 442
www.dell.com | support.dell.com Syntax dot1x timeout quiet-period seconds no dot1x timeout only be changed to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with certain clients and authentication servers. • To provide a faster response time to the - Dell K0670 | CLI Guide - Page 443
User Guidelines • The default value of this command should be changed only to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with certain clients. and authentication servers DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 443 - Dell K0670 | CLI Guide - Page 444
www.dell.com | support.dell.com Examples The following example sets the number of times that the only to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with certain clients. and authentication servers Examples The following example sets the timeout - Dell K0670 | CLI Guide - Page 445
: unit/port) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 445 - Dell K0670 | CLI Guide - Page 446
www.dell.com | support.dell.com Example The following example displays the status of 802.1X-enabled Ethernet ports. Console# show dot1x 802. : 30 Seconds Session Time (HH:MM:SS): 08:19:17 MAC Address: 00:08:78:32:98:78 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 446 802.1x Commands - Dell K0670 | CLI Guide - Page 447
switch waits for a response from the authentication server before resending the request. The amount of time the user is logged in. The supplicant MAC address. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 447 - Dell K0670 | CLI Guide - Page 448
www.dell.com | support.dell.com Authentication Method Termination Cause State Authentication success Authentication fails The authentication Auth Method ----------Remote None MAC Address 0008:3b79:8787 0008:3b89:3127 DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 448 802.1x Commands - Dell K0670 | CLI Guide - Page 449
: unit/port) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 449 - Dell K0670 | CLI Guide - Page 450
www.dell.com | support.dell.com Examples The following example displays 802.1X statistics for the specified interface. Console# show The number of EAP Req/Id frames that have been transmitted by this Authenticator. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 450 802.1x Commands - Dell K0670 | CLI Guide - Page 451
be accepted in the unauthorized state.) Examples The following example enables access to the VLAN to unauthorized devices. Console(config-if)# dot1x auth-not-req DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 451 - Dell K0670 | CLI Guide - Page 452
www.dell.com | support.dell.com dot1x multiple-hosts The dot1x multiple-hosts Interface Configuration mode command enables multiple . • discard - Discards frames with source addresses that are not the supplicant address. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 452 802.1x Commands - Dell K0670 | CLI Guide - Page 453
this command. Syntax dot1x guest-vlan no dot1x guest-vlan Default Configuration No VLAN is defined as a guest VLAN. Command Mode Interface Configuration (VLAN) mode DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 453 - Dell K0670 | CLI Guide - Page 454
www.dell.com | support.dell.com User Guidelines • Use the dot1x guest-vlan enable Interface Configuration mode command to VLAN. The guest VLAN is defined using the dot1x guest-vlan Interface Configuration mode command. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 454 802.1x Commands - Dell K0670 | CLI Guide - Page 455
features for the device. Console# show dot1x advanced Guest VLAN: 2 Unauthenticated VLANs: 91,92 Interface --------1/e1 1/e2 Multiple Hosts Disabled Enabled Guest VLAN ---------Enabled Disabled DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY 802.1x Commands 455 - Dell K0670 | CLI Guide - Page 456
.dell.com | support.dell.com Console# show dot1x advanced ethernet 1/e1 Interface --------1/e1 Multiple Hosts Disabled Guest VLAN ---------Enabled Single host parameters Violation action: Discard Trap: Enabled Trap frequency: 100 Status: Single-host locked Violations since last trap: 9 DELL
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
 |
 |
www.dell.com | support.dell.com
Dell™ PowerConnect™ 3400 Series
CLI Reference Guide