Home » Netgear Manuals » Hubs & Switches » Netgear GSM7324 » Manual Viewer

Netgear GSM7324 FSM7326P Command line reference manual - Page 235

IP Access Control List ACL Commands

UPC - 606449029062

Add to My Manuals
Save this manual to your list of manuals

Page 235 highlights

Command Line Interface Reference for the ProSafe 7300 Series Layer-3 Switches, Software Ver- Format Mode Rule Number Action Source MAC Address Destination MAC Address Ethertype VLAN ID COS Assign Queue Redirect Interface show mac access-lists [name] Privileged EXEC The ordered rule number identifier defined within the MAC ACL. Displays the action associated with each rule. The possible values are Permit or Deny. Displays the source MAC address for this rule. Displays the destination MAC address for this rule. Displays the Ethertype keyword or custom value for this rule. Displays the VLAN identifier value or range for this rule. Displays the COS (802.1p) value for this rule. Displays the queue identifier to which packets matching this rule are assigned. Displays the slot/port to which packets matching this rule are forwarded. 13.8 IP Access Control List (ACL) Commands This section describes the commands you use to configure IP ACL settings. IP ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources. The following rules apply to IP ACLs: • The 7300 Series Managed Switch does not support IP ACL configuration for IP packet fragments. • The maximum number of ACLs you can create is 100, regardless of type. • The maximum number of rules per IP ACL is hardware dependent. • If you configure a MAC ACL on an interface, you cannot configure an IP ACL on the same interface. Quality of Service (QoS) Commands v1.0, February 2007 13-35

Section	Page
Command Line Interface Reference for the ProSafe 7300 Series Layer-3 Switches, Software Version 6.0	1
Contents	5
Chapter 1 About This Manual	25
1.1 Audience	25
1.2 Scope	25
1.3 Typographical Conventions	26
1.4 Special Message Formats	26
1.5 How to Use This Manual	27
1.6 How to Print this Manual	27
1.7 Revision History	28
Chapter 2 Overview	29
2.1 Scope	29
2.2 Using the Command-Line Interface	29
2.2.1 Command Syntax	30
2.2.2 Command Conventions	31
2.2.3 Slot-Port Naming Convention	33
2.2.4 Using the “No” Form of a Command	33
2.2.5 Command Modes	34
2.2.6 Entering CLI Commands	36
2.2.7 Using CLI Help	38
2.2.8 Accessing the CLI	39
Chapter 3 Administrative Access Commands	41
3.1 Network Interface Commands	41
3.1.1 enable	41
3.1.2 network parms (parameter)	42
3.1.3 network mgmt_vlan	42
3.1.4 network protocol	42
3.1.5 show network	43
3.2 Configuring the Switch Management CPU (ezconfig)	45
3.3 Console Port Access Commands	47
3.3.1 configuration	47
3.3.2 lineconfig	47
3.3.3 serial baudrate	48
3.3.4 serial timeout	48
3.3.5 show serial	49
3.4 Telnet Commands	50
3.4.1 telnet	50
3.4.2 transport input telnet	50
3.4.3 transport output telnet	51
3.4.4 session-limit	51
3.4.5 session-timeout	52
3.4.6 telnetcon maxsessions	52
3.4.7 telnetcon timeout	53
3.4.8 show telnet	53
3.4.9 show telnetcon	54
3.5 Secure Shell (SSH) Command	55
3.5.1 ip ssh	55
3.5.2 ip ssh protocol	55
3.5.3 sshcon maxsessions	56
3.5.4 sshcon timeout	56
3.5.5 show ip ssh	57
3.6 Hypertext Transfer Protocol (HTTP) Commands	57
3.6.1 ip http secure-port	57
3.6.2 ip http secure-protocol	58
3.6.3 ip http secure-server	58
3.6.4 ip http server	58
3.6.5 network javamode	59
3.6.6 show ip http	59
3.7 User Account Commands	60
3.7.1 users name	60
3.7.2 users passwd	61
3.7.3 users snmpv3 accessmode	61
3.7.4 users snmpv3 authentication	62
3.7.5 users snmpv3 encryption	62
3.7.6 show loginsession	63
3.7.7 show users	63
3.7.8 disconnect	64
Chapter 4 Port and System Setup Commands	65
4.1 Port Configuration Commands	65
4.1.1 interface	65
4.1.2 interface range	66
4.1.3 interface vlan	66
4.1.4 interface lag	66
4.1.5 auto-negotiate	66
4.1.6 auto-negotiate all	67
4.1.7 mtu	67
4.1.8 shutdown	68
4.1.9 shutdown all	69
4.1.10 speed	69
4.1.11 speed all	70
4.1.12 monitor session	70
4.1.13 no monitor	71
4.1.14 show monitor session	71
4.1.15 show port	71
4.1.16 show port protocol	72
4.1.17 show port status	72
4.2 Pre-login Banner and System Prompt Commands	73
4.2.1 copy	73
4.2.2 set prompt	73
4.3 Simple Network Time Protocol (SNTP) Commands	74
4.3.1 sntp broadcast client poll-interval	74
4.3.2 sntp client mode	74
4.3.3 sntp client port	75
4.3.4 sntp unicast client poll-interval	75
4.3.5 sntp unicast client poll-timeout	75
4.3.6 sntp unicast client poll-retry	76
4.3.7 sntp multicast client poll-interval	76
4.3.8 sntp server	77
4.3.9 show sntp	77
4.3.10 show sntp client	77
4.3.11 show sntp server	78
4.3.12 clock timezone	79
4.4 MAC Address and MAC Database Commands	79
4.4.1 network mac-address	80
4.4.2 network mac-type	80
4.4.3 bridge aging-time	81
4.4.4 show forwardingdb agetime	82
4.4.5 show mac-address-table multicast	82
4.4.6 show mac-address-table static	83
4.4.7 show mac-address-table staticfiltering	84
4.4.8 show mac-address-table stats	84
4.5 DNS Client Commands	85
4.5.1 ip domain-lookup	86
4.5.2 ip domain-name	86
4.5.3 ip name-server	86
4.5.4 ip host	86
4.5.5 clear host	87
4.5.6 show hosts	87
Chapter 5 Spanning Tree Protocol Commands	89
5.1 STP Configuration Commands	89
5.1.1 spanning-tree	89
5.1.2 spanning-tree bpdumigrationcheck	90
5.1.3 spanning-tree configuration name	90
5.1.4 spanning-tree configuration revision	91
5.1.5 spanning-tree edgeport	91
5.1.6 spanning-tree edgeport all	91
5.1.7 spanning-tree forceversion	92
5.1.8 spanning-tree forward-time	92
5.1.9 spanning-tree hello-time	93
5.1.10 spanning-tree max-age	93
5.1.11 spanning-tree max-hops	94
5.1.12 spanning-tree mst	94
5.1.13 spanning-tree mst instance	95
5.1.14 spanning-tree mst priority	96
5.1.15 spanning-tree mst vlan	96
5.1.16 spanning-tree port mode	97
5.1.17 spanning-tree port mode all	97
5.1.18 spanning-tree bpduforwarding	98
5.2 STP Show Commands	98
5.2.1 show spanning-tree	98
5.2.2 show spanning-tree summary	100
5.2.3 show spanning-tree interface	101
5.2.4 show spanning-tree mst port detailed	102
5.2.5 show spanning-tree mst port summary	104
5.2.6 show spanning-tree mst summary	104
5.2.7 show spanning-tree vlan	105
Chapter 6 VLAN Commands	107
6.1 VLAN Configuration Commands	107
6.1.1 vlan database	107
6.1.2 network mgmt_vlan	108
6.1.3 vlan	108
6.1.4 vlan acceptframe	108
6.1.5 vlan ingressfilter	109
6.1.6 vlan makestatic	109
6.1.7 vlan name	110
6.1.8 vlan participation	110
6.1.9 vlan participation all	111
6.1.10 vlan port acceptframe all	111
6.1.11 vlan port pvid all	112
6.1.12 vlan port tagging all	112
6.1.13 vlan port ingressfilter all	113
6.1.14 Global Config	113
6.1.15 vlan protocol group	113
6.1.16 vlan protocol group add protocol	113
6.1.17 vlan protocol group remove	114
6.1.18 protocol group	114
6.1.19 protocol vlan group	115
6.1.20 protocol vlan group all	115
6.1.21 vlan pvid	116
6.1.22 vlan tagging	116
6.2 VLAN Show Commands	117
6.2.1 show vlan	117
6.2.2 show vlan <vlan_id>	117
6.2.3 show vlan port	119
6.3 Provisioning (IEEE 802.1p) Commands	120
6.3.1 vlan port priority all	120
6.3.2 vlan priority	120
Chapter 7 DHCP Commands	121
7.1 DHCP Server Commands (DHCP Config Pool Mode)	122
7.1.1 ip dhcp pool	122
7.1.2 client-identifier	122
7.1.3 client-name	123
7.1.4 default-router	123
7.1.5 dns-server	124
7.1.6 hardware-address	124
7.1.7 host	124
7.1.8 lease	125
7.1.9 network	126
7.1.10 bootfile	126
7.1.11 domain-name	126
7.1.12 netbios-name-server	127
7.1.13 netbios-node-type	127
7.1.14 next-server	128
7.1.15 option	128
7.2 DHCP Server Commands (Global Config Mode)	129
7.2.1 ip dhcp excluded-address	129
7.2.2 ip dhcp ping packets	130
7.2.3 service dhcp	130
7.2.4 ip dhcp bootp automatic	131
7.2.5 ip dhcp conflict logging	131
7.3 DHCP Server Clear and Show Commands	132
7.3.1 clear ip dhcp binding	132
7.3.2 clear ip dhcp server statistics	132
7.3.3 clear ip dhcp conflict	132
7.3.4 show ip dhcp binding	132
7.3.5 show ip dhcp global configuration	133
7.3.6 show ip dhcp pool configuration	133
7.3.7 show ip dhcp server statistics	134
7.3.8 show ip dhcp conflict	135
7.4 DHCP and BOOTP Relay Commands	136
7.4.1 ip dhcp relay information option	136
7.4.2 bootpdhcprelay	136
7.4.3 bootpdhcprelay maxhopcount	137
7.4.4 bootpdhcprelay minwaittime	137
7.4.5 bootpdhcprelay serverip	138
7.4.6 show bootpdhcprelay	138
7.4.7 bootpdhcprelay backup-serverip	139
Chapter 8 GARP, GVRP, and GMRP Commands	141
8.1 GARP Commands	142
8.1.1 set garp timer join	142
8.1.2 set garp timer leave	143
8.1.3 set garp timer leaveall	144
8.1.4 show garp	145
8.2 GVRP Commands	145
8.2.1 set gvrp adminmode	145
8.2.2 set gvrp interfacemode	146
8.2.3 show gvrp configuration	146
8.3 GMRP Commands	147
8.3.1 set gmrp adminmode	147
8.3.2 set gmrp interfacemode	148
8.3.3 show gmrp configuration	148
8.3.4 show mac-address-table gmrp	149
Chapter 9 Port-Based Traffic Control Commands	151
9.1 Port Security Commands	151
9.1.1 port-security	152
9.1.2 port-security max-dynamic	152
9.1.3 port-security max-static	153
9.1.4 port-security mac-address	153
9.1.5 port-security mac-address move	153
9.1.6 show port-security	154
9.1.7 show port-security	154
9.1.8 show port-security dynamic	154
9.1.9 show port-security static	154
9.1.10 show port-security violation	155
9.2 Storm Control Commands	155
9.2.1 storm-control broadcast	155
9.2.2 storm-control multicast all	156
9.2.3 storm-control unicast all	156
9.2.4 storm-control broadcast	157
9.2.5 storm-control multicast	157
9.2.6 storm-control unicast	158
9.2.7 storm-control flowcontrol	158
9.2.8 show storm-control	159
Chapter 10 SNMP Commands	161
10.1 SNMP Configuration Commands	161
10.1.1 snmp-server	161
10.1.2 snmp-server community	162
10.1.3 snmp-server community ipaddr	162
10.1.4 snmp-server community ipmask	163
10.1.5 snmp-server community mode	163
10.1.6 snmp-server community ro	164
10.1.7 snmp-server community rw	164
10.1.8 snmp-server traps violation	164
10.1.9 snmp-server traps	165
10.1.10 snmp-server traps bcaststorm	165
10.1.11 snmp-server traps linkmode	166
10.1.12 snmp-server traps multiusers	166
10.1.13 snmp-server traps stpmode	166
10.1.14 snmptrap	167
10.1.15 snmptrap snmpversion	168
10.1.16 snmptrap ipaddr	168
10.1.17 snmptrap mode	168
10.1.18 snmp trap link-status	169
10.1.19 snmp trap link-status all	169
10.2 SNMP Show Commands	170
10.2.1 show snmpcommunity	170
10.2.2 show snmptrap	171
10.2.3 show trapflags	171
Chapter 11 Port-Based Access and Authentication Commands	173
11.1 Port-Based Network Access Control Commands	173
11.1.1 authentication login	173
11.1.2 clear dot1x statistics	175
11.1.3 clear radius statistics	175
11.1.4 dot1x defaultlogin	175
11.1.5 dot1x initialize	175
11.1.6 dot1x login	175
11.1.7 dot1x max-req	176
11.1.8 dot1x port-control	176
11.1.9 dot1x port-control all	177
11.1.10 dot1x re-authenticate	177
11.1.11 dot1x re-authentication	178
11.1.12 dot1x system-auth-control	178
11.1.13 dot1x timeout	178
11.1.14 dot1x user	179
11.1.15 users defaultlogin	180
11.1.16 users login	180
11.1.17 show authentication	180
11.1.18 show authentication users	181
11.1.19 show dot1x	181
11.1.20 show dot1x users	185
11.1.21 show users authentication	185
11.2 RADIUS Commands	185
11.2.1 radius accounting mode	185
11.2.2 radius server host	186
11.2.3 radius server key	187
11.2.4 radius server msgauth	187
11.2.5 radius server primary	188
11.2.6 radius server retransmit	188
11.2.7 radius server timeout	188
11.2.8 show radius	189
11.2.9 show radius accounting	190
11.2.10 show radius statistics	191
Chapter 12 Port-Channel/LAG (802.3ad) Commands	193
12.1 Port-Channel Configuration Commands	194
12.1.1 addport	194
12.1.2 deleteport (Interface Config)	194
12.1.3 deleteport (Global Config)	194
12.1.4 port-channel	195
12.1.5 clear port-channel	195
12.1.6 port-channel staticcapability	195
12.1.7 port lacpmode	196
12.1.8 port lacpmode all	196
12.1.9 port-channel adminmode	196
12.1.10 port-channel name	197
12.1.11 port-channel linktrap	197
12.2 Port-Channel Show Commands	198
12.2.1 show port-channel	198
12.2.2 show port-channel	198
Chapter 13 Quality of Service (QoS) Commands	201
13.1 Class of Service (CoS) Commands	201
13.1.1 classofservice dot1p-mapping	202
13.1.2 classofservice ip-precedence-mapping	202
13.1.3 classofservice ip-dscp-mapping	203
13.1.4 classofservice trust	203
13.1.5 cos-queue min-bandwidth	204
13.1.6 cos-queue strict	204
13.1.7 traffic-shape	205
13.1.8 show classofservice dot1p-mapping	205
13.1.9 show classofservice ip-precedence-mapping	205
13.1.10 show classofservice ip-dscp-mapping	206
13.1.11 show classofservice trust	207
13.1.12 show interfaces cos-queue	207
13.2 Differentiated Services (DiffServ) Commands	208
13.2.1 diffserv	209
13.3 DiffServ Class Commands	210
13.3.1 class-map	210
13.3.2 class-map rename	211
13.3.3 match ethertype	211
13.3.4 match any	211
13.3.5 match class-map	212
13.3.6 match cos	213
13.3.7 match destination-address mac	213
13.3.8 match dstip	213
13.3.9 match dstl4port	213
13.3.10 match ip dscp	214
13.3.11 match ip precedence	215
13.3.12 match ip tos	215
13.3.13 match protocol	216
13.3.14 match source-address mac	216
13.3.15 match srcip	217
13.3.16 match srcl4port	217
13.3.17 match vlan	217
13.4 DiffServ Policy Commands	217
13.4.1 policy-map	218
13.4.2 assign-queue	219
13.4.3 drop	219
13.4.4 conform-color	219
13.4.5 class	220
13.4.6 mark cos	220
13.4.7 mark ip-dscp	221
13.4.8 mark ip-precedence	221
13.4.9 police-simple	221
13.4.10 policy-map rename	222
13.5 DiffServ Service Commands	223
13.5.1 service-policy	223
13.6 DiffServ Show Commands	224
13.6.1 show class-map	224
13.6.2 show diffserv	225
13.6.3 show policy-map	226
13.6.4 show diffserv service	228
13.6.5 show diffserv service brief	229
13.6.6 show policy-map interface	229
13.6.7 show service-policy	231
13.7 MAC Access Control List (ACL) Commands	231
13.7.1 mac access-list extended	231
13.7.2 mac access-list extended rename	232
13.7.3 {deny\|permit}	232
13.7.4 mac access-group	234
13.7.5 show mac access-lists	234
13.8 IP Access Control List (ACL) Commands	235
13.8.1 access-list	236
13.8.2 ip access-group	237
13.8.3 show ip access-lists	238
13.8.4 show access-lists	238
Chapter 14 Routing Commands	241
14.1 Address Resolution Protocol (ARP) Commands	241
14.1.1 arp	241
14.1.2 ip proxy-arp	242
14.1.3 arp cachesize	242
14.1.4 arp dynamicrenew	243
14.1.5 arp purge	243
14.1.6 arp resptime	243
14.1.7 arp retries	244
14.1.8 arp timeout	244
14.1.9 clear arp-cache	244
14.1.10 show arp	245
14.1.11 show arp brief	246
14.2 IP Routing Commands	247
14.2.1 routing	247
14.2.2 ip routing	247
14.2.3 ip address	248
14.2.4 ip route	248
14.2.5 ip route default	249
14.2.6 ip route distance	250
14.2.7 ip forwarding	250
14.2.8 ip netdirbcast	251
14.2.9 ip mtu	251
14.2.10 encapsulation	252
14.2.11 clear ip route all	252
14.2.12 clear ip route mpls	252
14.2.13 clear ip route mpls <ip-address>	253
14.2.14 clear ip route ospf	253
14.2.15 clear ip route ospf <ip-address>	253
14.2.16 clear ip route rip	254
14.2.17 clear ip route rip <ip-address>	254
14.2.18 show ip	254
14.2.19 show ip interface	255
14.2.20 show ip interface	256
14.2.21 show ip route	256
14.2.22 show ip route bestroutes	257
14.2.23 show ip route entry	257
14.2.24 show ip route preferences	258
14.2.25 show ip stats	259
14.3 Router Discovery Protocol Commands	259
14.3.1 ip irdp	259
14.3.2 ip irdp address	259
14.3.3 ip irdp holdtime	260
14.3.4 ip irdp maxadvertinterval	260
14.3.5 ip irdp minadvertinterval	261
14.3.6 ip irdp preference	261
14.3.7 show ip irdp	261
14.4 Virtual LAN Routing Commands	262
14.4.1 vlan routing	262
14.4.2 show ip vlan	263
14.5 Virtual Router Redundancy Protocol (VRRP) Commands	263
14.5.1 ip vrrp	263
14.5.2 ip vrrp	264
14.5.3 ip vrrp mode	264
14.5.4 ip vrrp ip	265
14.5.5 ip vrrp authentication	265
14.5.6 ip vrrp preempt	266
14.5.7 ip vrrp priority	266
14.5.8 ip vrrp timers advertise	267
14.5.9 show ip vrrp interface stats	267
14.5.10 show ip vrrp	269
14.5.11 show ip vrrp interface	269
14.5.12 show ip vrrp interface <slot/port>	270
14.6 Open Shortest Path First (OSPF) Commands	270
14.6.1 router ospf	270
14.6.2 enable (OSPF)	271
14.6.3 ip ospf	271
14.6.4 1583compatibility	271
14.6.5 area default-cost	272
14.6.6 area nssa	272
14.6.7 area nssa default-info-originate	272
14.6.8 area nssa no-redistribute (OSPF)	273
14.6.9 area nssa no-summary (OSPF)	273
14.6.10 area nssa translator-role (OSPF)	273
14.6.11 area nssa translator-stab-intv	273
14.6.12 area range	274
14.6.13 area stub	274
14.6.14 area stub summarylsa	275
14.6.15 area virtual-link	275
14.6.16 area virtual-link authentication	276
14.6.17 area virtual-link dead-interval	276
14.6.18 area virtual-link hello-interval	277
14.6.19 area virtual-link retransmit-interval	277
14.6.20 area virtual-link transmit-delay	278
14.6.21 default-information originate (OSPF)	278
14.6.22 default-metric (OSPF)	279
14.6.23 distance ospf	279
14.6.24 distribute-list out	280
14.6.25 exit-overflow-interval	280
14.6.26 external-lsdb-limit	281
14.6.27 ip ospf areaid	281
14.6.28 ip ospf authentication	282
14.6.29 ip ospf cost	282
14.6.30 ip ospf dead-interval	283
14.6.31 ip ospf hello-interval	284
14.6.32 ip ospf priority	284
14.6.33 ip ospf retransmit-interval	285
14.6.34 ip ospf transmit-delay	285
14.6.35 ip ospf mtu-ignore	286
14.6.36 router-id	286
14.6.37 redistribute	286
14.6.38 maximum-paths	287
14.6.39 trapflags	287
14.6.40 show ip ospf	288
14.6.41 show ip ospf area	290
14.6.42 show ip ospf database	291