Home » Netgear Manuals » Hubs & Switches » Netgear CSM4532 » Manual Viewer

Netgear CSM4532 CLI Manual - Page 557

flow-label <vlaue&gt

Add to My Manuals
Save this manual to your list of manuals

Page 557 highlights

eq { | } flag [+fin | -fin] [+syn | -syn] [+rst | -rst] [+psh | -psh] [+ack | -ack] [+urg | -urg] [established] dscp Specifies the layer 4 port match condition for the IP ACL rule. A port number can be used, in the range 0- 65535, or the portkey, which can be one of the following keywords: • For TCP: bgp, domain, echo, ftp, ftp-data, http, smtp, telnet, www, pop2, pop3 • For UDP: domain, echo, ntp, rip, snmp, tftp, time, who. Specifies that the IP ACL rule matches on the tcp flags. When + is specified, a match occurs if specified flag is set in the TCP header. When "-" is specified, a match occurs if specified flag is *NOT* set in the TCP header. When established is specified, a match occurs if specified either RST or ACK bits are set in the TCP header. Two rules are installed in hardware to when "established" option is specified. This option is visible only if protocol is "tcp". Specifies the dscp value to match for for the IP rule. The value range from 0 to 63 or a DSCP keyword (af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, s1, cs2, cs3, cs4, cs5, cs6, cs7, ef). flow-label Specifies the flow-label value to match for for the IP rule. The value range from 0 to 1048575. icmp-type [icmp-code | icmp-message ] This option is available only if the protocol is ICMP. Specifies a match condition for ICMP packets. When icmp-type is specified, the IP ACL rule matches on the specified ICMP message type, a number from 0 to 255. When icmp-code is specified, the IP ACL rule matches on the specified ICMP message code, a number from 0 to 255. Specifying icmp-message implies that both icmp-type and icmp-code are specified. The following icmp-messages are supported: destinationunreachable, echo-reply, echo-request, header, hop-limit, mld-query, mldreduction, mld-report, nd-na, nd-ns, next-header, no-admin, no-route, packettoo-big, port-unreachable, router-solicitation, router-advertisement, routerrenumbering, time-exceeded, and unreachable. The ICMP message is decoded into the corresponding ICMP type and ICMP code within that ICMP type. [fragments] Specifies that IP ACL rule matches on fragmented IP packets. [routing] Specifies that IP ACL rule matches on IP packets that have the routing extension header. Default None Mode IP-Access-List Config NETGEAR M4500 Series Switches CLI Command Reference Manual 557

Section	Page
1. Introduction	63
1.1. Product Overview	63
1.1.1. Simplicity	63
1.1.2. High Availability	63
1.1.3. High-Performance L2/L3 Access Deployments	63
1.1.4. Advance IPv4 and IPv6 Routing	64
1.1.5. Data Center Application	64
1.2. Features	64
1.3. Management Options	66
1.4. Command Line Console Interface Through The Serial Port or Telnet	66
1.5. SNMP-Based Management	67
2. Quick Startup	70
2.1. Quick-Start the Switch	70
2.2. Methods to Access the Switch CLI	70
2.2.1. Switch CLI Access Using a Console	71
2.2.2. Switch CLI Access Using SSH Standard Port 22	72
2.2.3. Switch CLI Access Using SSH Special Port 1234	72
2.2.4. Switch CLI Access Using Telnet Special Port 1223	73
2.2.5. Limitations for a Guest User Login	73
2.2.6. Limitations for SNMP Login	73
2.3. System Information Setup	73
2.3.1. Quick Startup Software Version Information	73
2.3.2. Quick Startup Physical Port Data	73
2.3.3. Quick Startup User Account Management	74
2.3.4. Quick Startup IP Address	74
2.3.5. Quick Startup Downloading from TFTP Server	75
2.3.6. Quick Startup Factory Defaults	76
3. Console and Telnet Administration Interface	77
3.1. Local Console Management	77
3.2. Setup Your Switch Using Console Access	77
3.3. Setup Your Switch Using Telnet Access	78
3.3.1. Accessing the Switch CLI through the Network	78
3.3.2. Using the Service Port or Network Interface for Remote Management	79
3.3.2.1. Configuring Service Port Information	80
3.3.2.2. Configuring the In-Band Network Interface	80
3.3.2.3. Firmware Image Update	81
4. Command Line Interface Structure and Mode-based CLI	82
4.1. CLI Command Format	82
4.2. CLI Mode-based Topology	83
4.2.1. Parameters	83
4.2.2. Values	83
4.2.3. Conventions	84
4.2.4. Annotations	84
5. Switching Commands	86
5.1. System Information and Statistics Commands	86
5.1.1. show arp	86
5.1.2. show calendar	86
5.1.3. show process cpu	87
5.1.4. show process cpu threshold	88
5.1.5. show eventlog	88
5.1.6. show running-config	89
5.1.7. show sysinfo	90
5.1.8. POST Diagnostic Commands	92
5.1.8.1. show system self-test	92
5.1.8.2. run system self-test	92
5.1.9. show system	93
5.1.10. show tech-support	93
5.1.11. show hardware	94
5.1.12. show version	95
5.1.13. show logingsessin	96
5.1.14. show command filter	96
5.1.15. show transceiver device	98
5.1.16. show transceiver interface	98
5.1.17. show process memory	99
5.1.18. show process app-list	100
5.1.19. show process app-resource-list	101
5.1.20. show process proc-list	102
5.1.21. show environment	102
5.1.22. show configuration files	104
5.1.23. process cpu threshold	104
5.1.24. memory free low-watermark processor	105
5.1.25. show supported cardtype	106
5.1.26. show supported cardtype <cardindex>	106
5.1.27. pager	107
5.1.28. show pager	107
5.2. Device Configuration Commands	108
5.2.1. Interface commands	108
5.2.1.1. show interface status	108
5.2.1.1.1. show interface status	108
5.2.1.1.2. show interface status <slot/port>	109
5.2.1.1.3. show interface status err-disabled	110
5.2.1.1.4. show interface status loopback <0-63>	110
5.2.1.1.5. show interface status port-channel <1-64>	111
5.2.1.1.6. show interface status tunnel <0-7>	112
5.2.1.1.7. show interface status vlan <1-4093>	112
5.2.1.2. show interface counters	113
5.2.1.2.1. show interface counters	114
5.2.1.2.2. show interface counters detailed	115
5.2.1.2.3. show interface counters detailed switchport	119
5.2.1.3. show interface dampening	121
5.2.1.4. show interface loopback	121
5.2.1.5. show interface port-channel	122
5.2.1.6. show interface port-mode	123
5.2.1.7. show interface priority flow control	124
5.2.1.8. show interface switch	125
5.2.1.9. show interface switchport	126
5.2.1.10. show interface tunnel	128
5.2.1.11. show interface description	129
5.2.1.12. show interface fec	129
5.2.1.13. show interface advertise	130
5.2.1.14. Interface configuraton commands	131
5.2.1.14.1. interface	131
5.2.1.14.2. description	132
5.2.1.14.3. no description	132
5.2.1.14.4. flowcontrol	132
5.2.1.14.5. no flowcontrol	133
5.2.1.14.6. mtu	133
5.2.1.14.7. no mtu	133
5.2.1.14.8. port-mode	133
5.2.1.14.9. no port-mode	134
5.2.1.14.10. shutdown	134
5.2.1.14.11. shutdown all	135
5.2.1.14.12. fec	135
5.2.1.14.13. negotiate	135
5.2.1.15. show port status all	136
5.2.1.16. Show flowcontrol	136
5.2.2. Show BMC Commands	138
5.2.2.1. show bmc	138
5.2.2.2. bmc account password	139
5.2.2.3. bmc ip	139
5.2.2.4. bmc watchdog	139
5.2.3. L2 MAC Address and Multicast Forwarding Database Tables	140
5.2.3.1. show mac-addr-table	140
5.2.3.2. show mac-addr-table count	140
5.2.3.3. show mac-addr-table interface	141
5.2.3.4. show mac-address-table igmpsnooping	141
5.2.3.5. show mac-address-table multicast	142
5.2.3.6. show mac-address-table status	142
5.2.3.7. show mac-addr-table agetime	143
5.2.3.8. mac-addr-table aging-time	143
5.2.3.9. no mac-addr-table aging-time	143
5.2.3.10. clear mac-addr-table dynamic	143
5.2.4. VLAN Commands	144
5.2.4.1. vlan database	144
5.2.4.2. vlan	144
5.2.4.3. no vlan	144
5.2.4.4. vlan makestatic	144
5.2.4.5. vlan name	145
5.2.4.6. no vlan name	145
5.2.4.7. switchport acceptable-frame-types	145
5.2.4.8. no switchport acceptable-frame-types	145
5.2.4.9. switchport acceptbale-frame-type all	146
5.2.4.10. no switchport acceptable-frame-types all	146
5.2.4.11. switchport ingress-filtering	146
5.2.4.12. no switchport ingress-filtering	146
5.2.4.13. switchport ingress-filtering all	147
5.2.4.14. no switchport ingress-filtering all	147
5.2.4.15. switchport native vlan	147
5.2.4.16. no switchport native vlan	147
5.2.4.17. switchport native vlan all	148
5.2.4.18. no switchport native vlan all	148
5.2.4.19. switchport allowed vlan	148
5.2.4.20. switchport allowed vlan all	148
5.2.4.21. switchport tagging	148
5.2.4.22. no switchport tagging	149
5.2.4.23. switchport tagging all	149
5.2.4.24. no switchport tagging all	149
5.2.4.25. show vlan	149
5.2.4.26. show vlan id	150
5.2.4.27. show vlan internal usage	151
5.2.4.28. show interface switchport	151
5.2.4.29. show vlan private-vlan	152
5.2.4.30. show vlan remote-span	152
5.2.5. Private VLAN Commands	152
5.2.5.1. switchport private-vlan	153
5.2.5.2. no switchport private-vlan	153
5.2.5.3. switchport mode private-vlan	153
5.2.5.4. no switchport mode private-vlan	154
5.2.5.5. private-vlan	154
5.2.5.6. no private-vlan	154
5.2.6. Switch Ports	154
5.2.6.1. switchport mode	154
5.2.6.2. no switchport mode	155
5.2.6.3. switchport trunk allowed vlan	155
5.2.6.4. no switchport trunk allowed vlan	156
5.2.6.5. switchport trunk native vlan	156
5.2.6.6. no switchport trunk native vlan	156
5.2.6.7. switchport access vlan	156
5.2.6.8. no switchport access vlan	157
5.2.6.9. show interfaces switchport	157
5.2.7. Double VLAN Commands	157
5.2.7.1. dvlan-tunnel ethertype	157
5.2.7.2. no dvlan-tunnel ethertype	158
5.2.7.3. dot1q-tunnel ethertype	158
5.2.7.4. no dot1q-tunnel ethertype	158
5.2.7.5. mode dot1q-tunnel	158
5.2.7.6. no mode dot1q-tunnel	159
5.2.7.7. mode dvlan-tunnel	159
5.2.7.8. no mode dvlan-tunnel	159
5.2.7.9. show dot1q-tunnel	159
5.2.7.10. show dvlan-tunnel	160
5.2.8. IGMP snooping commands	161
5.2.8.1. ip igmp snooping	161
5.2.8.2. no ip igmp snooping	161
5.2.8.3. clear igmp snooping	162
5.2.8.4. ip igmp snooping interfacemode	162
5.2.8.5. no ip igmp snooping interfacemode	162
5.2.8.6. ip igmp snooping interfacemode all	162
5.2.8.7. no ip igmp snooping interfacemode all	163
5.2.8.8. ip igmp snooping fast-leave	163
5.2.8.9. no ip igmp snooping fast-leave	163
5.2.8.10. ip igmp snooping groupmembershipinterval	163
5.2.8.11. no ip igmp snooping groupmembershipinterval	164
5.2.8.12. ip igmp snooping mcrtrexpiretime	164
5.2.8.13. no ip igmp snooping mcrtrexpiretime	164
5.2.8.14. ip igmp snooping mrouter	164
5.2.8.15. no ip igmp snooping mrouter	165
5.2.8.16. set igmp	165
5.2.8.17. no set igmp	165
5.2.8.18. set igmp fast-leave	165
5.2.8.19. no set igmp fast-leave	166
5.2.8.20. set igmp groupmembership-interval	166
5.2.8.21. no set igmp groupmembership-interval	166
5.2.8.22. set igmp maxresponse	166
5.2.8.23. no set igmp maxresponse	167
5.2.8.24. set igmp mcrtrexpiretime	167
5.2.8.25. no set igmp mcrtrexpiretime	167
5.2.8.26. set igmp report-suppression	167
5.2.8.27. no set igmp report-suppression	168
5.2.8.28. set snoop-vlan-block	168
5.2.8.29. no set snoop-vlan-block	168
5.2.8.30. ip igmp snooping static	168
5.2.8.31. no ip igmp snooping static	169
5.2.8.32. ip igmp snooping router-alert-check	169
5.2.8.33. no ip igmp snooping router-alert-check	169
5.2.8.34. show ip igmp snooping	169
5.2.8.35. show ip igmp snooping mrouter interface	171
5.2.8.36. show ip igmp snooping mrouter vlan	171
5.2.8.37. show ip igmp snooping static	171
5.2.8.38. show mac-address-table igmpsnooping	172
5.2.8.39. show ip igmp snooping ssm entries	172
5.2.8.40. show ip igmp snooping ssm groups	173
5.2.8.41. show ip igmp snooping ssm stats	173
5.2.8.42. ip igmp snooping maxresponse	173
5.2.8.43. no ip igmp snooping maxresponse	174
5.2.9. IGMP snooping querier commands	174
5.2.9.1. ip igmp snooping querier	174
5.2.9.2. no ip igmp snooping querier	174
5.2.9.3. ip igmp snooping querier address	174
5.2.9.4. no ip igmp snooping querier address	175
5.2.9.5. ip igmp snooping querier query-interval	175
5.2.9.6. no ip igmp snooping querier query-interval	175
5.2.9.7. ip igmp snooping querier querier-expiry-interval	175
5.2.9.8. no ip igmp snooping querier querier-expiry-interval	176
5.2.9.9. ip igmp snooping querier version	176
5.2.9.10. no ip igmp snooping querier version	176
5.2.9.11. ip igmp snooping querier vlan	176
5.2.9.12. no ip igmp snooping querier vlan <vlan-id>	176
5.2.9.13. ip igmp snooping querier vlan address	177
5.2.9.14. no ip igmp snooping querier vlan address	177
5.2.9.15. ip igmp snooping querier vlan election participate	177
5.2.9.16. no ip igmp snooping querier vlan election participate	177
5.2.9.17. show ip igmp snooping querier	178
5.2.9.18. show ip igmp snooping querier vlan	178
5.2.9.19. show ip igmp snooping querier detail	179
5.2.10. MLD Snooping Commands	180
5.2.10.1. show ipv6 mld snooping	180
5.2.10.2. show ipv6 mld snooping mrouter interface	181
5.2.10.3. show ipv6 mld snooping mrouter vlan	181
5.2.10.4. show ipv6 mld snooping static	182
5.2.10.5. show mac-address-table mldsnooping	182
5.2.10.6. show ipv6 mld snooping ssm entries	182
5.2.10.7. show ipv6 mld snooping ssm groups	183
5.2.10.8. show ipv6 mld snooping ssm stats	183
5.2.10.9. ipv6 mld snooping	183
5.2.10.10. no ipv6 mld snooping	184
5.2.10.11. clear mld snooping	184
5.2.10.12. ipv6 mld snooping interfacemode	184
5.2.10.13. no ipv6 mld snooping interfacemode	184
5.2.10.14. ipv6 mld snooping interfacemode all	185
5.2.10.15. no ipv6 mld snooping interfacemode all	185
5.2.10.16. ipv6 mld snooping fast-leave	185
5.2.10.17. no ipv6 mld snooping fast-leave	185
5.2.10.18. ipv6 mld snooping groupmembershipinterval	186
5.2.10.19. no ipv6 mld snooping groupmembershipinterval	186
5.2.10.20. ipv6 mld snooping mcrtrexpiretime	186
5.2.10.21. no ipv6 mld snooping mcrtrexpiretime	186
5.2.10.22. ipv6 mld snooping mrouter	187
5.2.10.23. no ipv6 mld snooping mrouter	187
5.2.10.24. ipv6 mld snooping static	187
5.2.10.25. no ipv6 mld snooping static	187
5.2.10.26. set mld	188
5.2.10.27. no set mld	188
5.2.10.28. set mld fast-leave	188
5.2.10.29. no set mld fast-leave	188
5.2.10.30. set mld groupmembership-interval	189
5.2.10.31. no set mld groupmembership-interval	189
5.2.10.32. set mld maxresponse	189
5.2.10.33. no set mld maxresponse	189
5.2.10.34. set mld mcrtrexpiretime	190
5.2.10.35. no set mld mcrtrexpiretime	190
5.2.11. MLD Snooping Querier Commands	190
5.2.11.1. show ipv6 mld snooing querier	190
5.2.11.2. show ipv6 mld snooping querier vlan	191
5.2.11.3. show ipv6 mld snooping querier detail	191
5.2.11.4. ipv6 mld snooping querier	192
5.2.11.5. no ipv6 mld snooping querier	192
5.2.11.6. ipv6 mld snooping querier address	192
5.2.11.7. no ipv6 mld snooping querier address	193
5.2.11.8. ipv6 mld snooping querier query-interval	193
5.2.11.9. no ipv6 mld snooping querier querier-interval	193
5.2.11.10. ipv6 mld snooping querier querier-expiry-interval	193
5.2.11.11. no ipv6 mld snooping querier querier-expiry-interval	193
5.2.11.12. ipv6 mld snooping querier vlan	194
5.2.11.13. no ipv6 mld snooping querier vlan	194
5.2.11.14. ipv6 mld snooping querier vlan address	194
5.2.11.15. no ipv6 mld snooping querier vlan address	194
5.2.11.16. ipv6 mld snooping querier vlan election participate	195
5.2.11.17. no ipv6 mld snooping querier vlan election participate	195
5.2.12. Port-Channel/LAG (802.3ad) Commands	195
5.2.12.1. show interface port-channel brief	196
5.2.12.2. show interface port-channel	197
5.2.12.3. show interface port-channel system priority	200
5.2.12.4. show lacp actor	201
5.2.12.5. show lacp interface	201
5.2.12.6. interface port-channel	201
5.2.12.7. staticcapability	202
5.2.12.8. no staticcapability	202
5.2.12.9. port-channel linktrap	202
5.2.12.10. no port-channel linktrap	202
5.2.12.11. port-channel load-balance	203
5.2.12.12. no port-channel load-balance	203
5.2.12.13. load-balance	203
5.2.12.14. no load-balance	204
5.2.12.15. port-channel system priority	204
5.2.12.16. no port-channel system priorty	205
5.2.12.17. lacp	205
5.2.12.18. no lacp	205
5.2.12.19. lacp all	205
5.2.12.20. no lacp	205
5.2.12.21. lacp admin key	206
5.2.12.22. no lacp admin key	206
5.2.12.23. lacp actor admin key	206
5.2.12.24. no lacp actor admin key	206
5.2.12.25. lacp actor admin state	207
5.2.12.26. no lacp actor admin state	207
5.2.12.27. lacp actor port priority	207
5.2.12.28. no lacp actor port priority	208
5.2.12.29. min-links	208
5.2.12.30. no min-links	208
5.2.12.31. lacp fallback	208
5.2.12.32. no lacp fallback	209
5.2.12.33. lacp fallback timeout	209
5.2.12.34. no lacp fallback timeout	209
5.2.12.35. channel-group	209
5.2.12.36. no channel-group	210
5.2.12.37. delete-channel-group	210
5.2.12.38. port lacpmode enable all	210
5.2.12.39. port lacptimeout	210
5.2.13. Storm Control	211
5.2.13.1. show storm-control	211
5.2.13.2. storm-control Configuration	213
5.2.13.3. storm-control broadcast	213
5.2.13.4. no storm-control broadcast	213
5.2.13.5. storm-control broadcast action	214
5.2.13.6. no storm-control broadcast action	214
5.2.13.7. storm-control broadcast rate	214
5.2.13.8. no storm-control broadcast rate	215
5.2.13.9. storm-control broadcast level	215
5.2.13.10. no storm-control broadcast level	215
5.2.13.11. storm-control multicast	216
5.2.13.12. no storm-control multicast	216
5.2.13.13. storm-control multicast action	216
5.2.13.14. no storm-control multicast action	217
5.2.13.15. storm-control multicast level	217
5.2.13.16. no storm-control multicast level	217
5.2.13.17. storm-control multicast rate	217
5.2.13.18. no storm-control multicast rate	218
5.2.13.19. storm-control unicast	218
5.2.13.20. no storm-control unicast	218
5.2.13.21. storm-control unicast action	219
5.2.13.22. no storm-control unicast action	219
5.2.13.23. storm-control unicast level	219
5.2.13.24. no storm-control unicast level	220
5.2.13.25. storm-control unicast rate	220
5.2.13.26. no storm-control unicast rate	220
5.2.14. Port Mirror Commands	221
5.2.14.1. show port-mirror session	221
5.2.14.2. port-monitor session source	222
5.2.14.3. no port-monitor session source	223
5.2.14.4. port-monitor session destination	223
5.2.14.5. no port-monitor session destination	224
5.2.14.6. port-monitor session filter	224
5.2.14.7. no port-monitor session filter	225
5.2.14.8. port-monitor session mode	225
5.2.14.9. no port-monitor session mode	225
5.2.14.10. no port-monitor session	225
5.2.14.11. no port-monitor	226
5.2.15. Link State	226
5.2.15.1. show link state	226
5.2.15.2. link state group action	227
5.2.15.3. link state group	227
5.2.16. Port-backup Commands	228
5.2.16.1. show port-backup	228
5.2.16.2. port-backup	228
5.2.16.3. no port-backup	228
5.2.16.4. port-backup group	229
5.2.16.5. no port-backup group	229
5.2.16.6. port-backup group active	229
5.2.16.7. no port-backup group active	229
5.2.16.8. port-backup group backup	229
5.2.16.9. no port-backup group backup	230
5.2.16.10. port-backup group enable	230
5.2.16.11. port-backup group mac-move-update	230
5.2.16.12. no port-backup group mac-move-update	230
5.2.16.13. port-backup group failback-time	231
5.2.16.14. no port-backup group failback-time	231
5.3. Provisioning (IEEE 802.1p) Commands	232
5.3.1. switchport priority all	232
5.3.2. no switchport priority all	232
5.3.3. switchport priority	232
5.3.4. no switchport priority	232
5.4. Management Commands	233
5.4.1. Network Commands	233
5.4.1.1. show ip interface	233
5.4.1.2. show ip filter	233
5.4.1.3. mtu	234
5.4.1.4. no mtu	234
5.4.1.5. interface vlan	234
5.4.1.6. ip address	234
5.4.1.7. no ip addess	235
5.4.1.8. ip default-gateway	235
5.4.1.9. ip address dhcp	236
5.4.1.10. no ip address dhcp	236
5.4.1.11. ip filter	236
5.4.1.12. no ip filter	237
5.4.1.13. ip filter <name> {ipv4\|ipv6}<ipAddr>[<mask>]	237
5.4.1.14. no ip filter<name>	237
5.4.2. Serial Interface Commands	237
5.4.2.1. show line console	237
5.4.2.2. line console	238
5.4.2.3. baudrate	238
5.4.2.4. no baudrate	239
5.4.2.5. exec-timeout	239
5.4.2.6. no exec-timeout	239
5.4.2.7. password-threshold	239
5.4.2.8. no password-threshold	240
5.4.2.9. silent-time	240
5.4.2.10. no silent-time	240
5.4.2.11. terminal length	240
5.4.2.12. line password	241
5.4.3. Telnet Session Commands	241
5.4.3.1. telnet	241
5.4.3.2. show line vty	242
5.4.3.3. line vty	242
5.4.3.4. exec-timeout	242
5.4.3.5. no exec-time out	243
5.4.3.6. password-threshold	243
5.4.3.7. no password-threshold	244
5.4.3.8. maxsessions	244
5.4.3.9. no maxsessions	244
5.4.3.10. server enable	244
5.4.3.11. no server enable	245
5.4.3.12. sessions	245
5.4.3.13. no sessions	245
5.4.3.14. telnet sessions	245
5.4.3.15. no telnet sessions	246
5.4.3.16. telnet maxsessions	246
5.4.3.17. no telnet maxsessions	246
5.4.3.18. telnet exec-timeout	246
5.4.3.19. no telnet exec-timeout	247
5.4.3.20. show telnet	247
5.4.4. SNMP Server Commands	247
5.4.4.1. show snmp	247
5.4.4.2. snmp-server sysname	249
5.4.4.3. snmp-server location	249
5.4.4.4. snmp-server contact	250
5.4.4.5. snmp-server community	250
5.4.4.6. no snmp-server community <community-string>	251
5.4.4.7. snmp-server community-group	251
5.4.4.8. no snmp-server community-group <community-string>	251
5.4.4.9. show snmp engineid	251
5.4.4.10. snmp-server engineid	252
5.4.4.11. no snmp-server engineid	252
5.4.4.12. show snmp filters	253
5.4.4.13. snmp-server filter	253
5.4.4.14. no snmp-server filter <filter-name> [<oid-tree >]	254
5.4.4.15. show snmp user	254
5.4.4.16. snmp-server user	255
5.4.4.17. no snmp-server user	255
5.4.4.18. show snmp group	255
5.4.4.19. snmp-server group	257
5.4.4.20. no snmp-server group	257
5.4.4.21. show snmp views	257
5.4.4.22. snmp-server view	258
5.4.4.23. no snmp-server view	259
5.4.5. SNMP Trap Commands	259
5.4.5.1. snmp-server host <host-addr> traps	259
5.4.5.2. no snmp-server host <host-addr>	260
5.4.5.3. show trapflags	260
5.4.5.4. snmp trap link-status all	261
5.4.5.5. no snmp trap link-status all	262
5.4.5.6. snmp-server enable traps acl-trapflags	262
5.4.5.7. no snmp-server enable traps acl-trapflags	262
5.4.5.8. snmp-server enable traps authentication	262
5.4.5.9. no snmp-server enable traps authentication	263
5.4.5.10. snmp-server enable traps bgp state-changes limited	263
5.4.5.11. no snmp-server enable traps bgp state-changes limited	263
5.4.5.12. snmp-server enable traps fan	263
5.4.5.13. no snmp-server enable traps fan	263

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1,000
1,001
1,002
1,003
1,004
1,005
1,006
1,007
1,008
1,009
1,010
1,011
1,012
1,013
1,014
1,015
1,016
1,017
1,018
1,019
1,020
1,021
1,022

Match case Limit results 1 per page

NETGEAR M4500 Series Switches CLI Command Reference Manual

557

Default

None

Mode

IP-Access-List Config

eq {<0-65535> | <portkey>}

Specifies the layer 4 port match condition for the IP ACL rule. A port number can

be used, in the range 0- 65535, or the portkey, which can be one of the

following keywords:

• For TCP: bgp, domain, echo, ftp, ftp

-data, http, smtp, telnet, www, pop2,

pop3

• For UDP: doma

in, echo, ntp, rip, snmp, tftp, time, who.

flag [+fin | -fin] [+syn | -syn]

[+rst | -rst] [+psh | -psh]

[+ack | -ack] [+urg | -urg]

[established]

Specifies that the IP ACL rule matches on the tcp flags. When +<tcpflagname> is

specified, a match occurs if specified <tcpflagname> flag is set in the TCP

header. When “

<tcpflagname>” is specified, a match occurs if specified

<tcpflagname> flag is *NOT* set in the TCP header. When established is

specified, a match occurs if specified either RST or ACK bits are set in the TCP

header. Two rules are installed in hardware to when “established” option is

specified. This option is vis

ible only if protocol is “tcp”.

dscp <value>

Specifies the dscp value to match for for the IP rule. The value range from 0 to

63 or a DSCP keyword (af11, af12, af13, af21, af22, af23, af31, af32, af33, af41,

af42, af43, be, cs0, s1, cs2, cs3, cs4, cs5, cs6, cs7, ef).

flow-label <vlaue>

Specifies the flow-label value to match for for the IP rule. The value range from

0 to 1048575.

icmp-type <icmp-type>

[icmp-code <icmp-code> |

icmp-message <icmp-

message>]

This option is available only if the protocol is ICMP.

Specifies a match condition for ICMP packets.

When

icmp-type

is specified, the IP ACL rule matches on the specified ICMP

message type, a number from 0 to 255.

When

icmp-code

is specified, the IP ACL rule matches on the specified ICMP

message code, a number from 0 to 255.

Specifying

icmp-message

implies that both

icmp-type

and

icmp-code

are

specified. The following icmp-messages are supported: destination-

unreachable, echo-reply, echo-request, header, hop-limit, mld-query, mld-

reduction, mld-report, nd-na, nd-ns, next-header, no-admin, no-route, packet-

too-big, port-unreachable, router-solicitation, router-advertisement, router-

renumbering, time-exceeded, and unreachable.

The ICMP message is decoded into the corresponding ICMP type and ICMP code

within that ICMP type.

[fragments]

Specifies that IP ACL rule matches on fragmented IP packets.

[routing]

Specifies that IP ACL rule matches on IP packets that have the routing extension

header.