Home » Dell Manuals » Hubs & Switches » Dell PowerConnect 5316M » Manual Viewer

Dell PowerConnect 5316M CLI Reference Guide - Page 251

Default Setting, Command Mode, User Guidelines, the Local Engine ID.

View all Dell PowerConnect 5316M manuals

Add to My Manuals
Save this manual to your list of manuals

Page 251 highlights

• engineid-string - Specifies a character string that identifies the engine ID. (Range: 5 - 32 characters) • default - The engine ID is created automatically based on the device MAC address. Default Setting The engine ID is not configured. If SNMPv3 is enabled using this command, and the default is specified, the default engine ID is defined per standard as: • First 4 octets - First bit = 1, the rest is IANA Enterprise number = 674. • Fifth octet - Set to 3 to indicate the MAC address that follows. • Last 6 octets - MAC address of the device. Command Mode Global Configuration mode User Guidelines • To use SNMPv3, you have to specify an engine ID for the device. You can specify your own ID or use a default string that is generated using the MAC address of the device. If the SNMPv3 engine ID is deleted or the configuration file is erased, SNMPv3 cannot be used. By default, SNMPv1/v2 are enabled on the device. SNMPv3 is enabled only by defining the Local Engine ID. If you want to specify your own ID, you do not have to specify the entire 32-character engine ID if it contains trailing zeros. Specify only the portion of the engine ID up to the point where just zeros remain in the value. For example, to configure an engine ID of 123400000000000000000000, you can specify snmp-server engineID local 1234. Since the engine ID should be unique within an administrative domain, the following is recommended: • For a standalone device, use the default keyword to configure the engine ID. • For a stackable system, configure the engine ID and verify its uniqueness. Changing the value of the engine ID has the following important side-effect. A user's password (entered on the command line) is converted to an MD5 or SHA security digest. This digest is based on both the password and the local engine ID. The user's command line password is then destroyed, as required by RFC 2274. As a result, the security digests of SNMPv3 users become invalid if the local value of the engine ID change, and the users will have to be reconfigured. You cannot specify an engine ID that consists of all 0x0, all 0xF or 0x000000001. SNMP Commands 231

Section	Page
Contents	3
Command Groups	21
Introduction	21
Command Groups	21
AAA Commands	23
Address Table Commands	23
Clock Commands	24
Configuration and Image Files Commands	25
Ethernet Configuration Commands	26
GVRP Commands	27
IGMP Snooping Commands	28
IP Addressing	28
LACP Commands	29
Line Commands	29
LLDP Commands	30
Management ACL Commands	31
PHY Diagnostics Commands	31
Port Channel Commands	32
Port Monitor Commands	32
QoS Commands	32
Radius Commands	33
RMON Commands	34
SNMP Commands	34
Spanning Tree Commands	35
SSH Commands	37
Syslog Commands	38
System Management Commands	39
TACACS Commands	39
User Interface Commands	40
VLAN Commands	40
Web Server Commands	42
802.1x Commands	42
Command Modes	45
GC (Global Configuration) Mode	45
IC (Interface Configuration) Mode	48
LC (Line Configuration) Mode	50
MA (Management Access-level) Mode	51
PE (Privileged EXEC) Mode	51
SP (SSH Public Key) Mode	53
UE (User EXEC) Mode	53
VC (VLAN Configuration) Mode	55
Using the CLI	57
CLI Command Modes	57
Starting the CLI	60
Editing Features	62
AAA Commands	67
aaa authentication login	67
aaa authentication enable	68
login authentication	69
enable authentication	70
ip http authentication	71
ip https authentication	71
show authentication methods	72
password	73
enable password	74
username	75
show users accounts	75
Address Table Commands	77
bridge address	77
bridge multicast filtering	78
bridge multicast address	78
bridge multicast forbidden address	80
bridge multicast forward-all	81
bridge multicast forbidden forward-all	81
bridge aging-time	82
clear bridge	83
port security	83
port security routed secure-address	84
show bridge address-table	85
show bridge address-table static	86
show bridge address-table count	87
show bridge multicast address-table	88
show bridge multicast filtering	90
show ports security	90
Clock	93
clock set	93
clock source	93
clock timezone	94
clock summer-time	95
sntp authentication-key	96
sntp authenticate	97
sntp trusted-key	98
sntp client poll timer	98
sntp broadcast client enable	99
sntp anycast client enable	100
sntp client enable (interface)	100
sntp unicast client enable	101
sntp unicast client poll	102
sntp server	102
show clock	103
show sntp configuration	105
show sntp status	106
Configuration and Image Files	109
delete startup-config	109
copy	109
boot system	113
show running-config	114
show startup-config	115
show backup-config	116
show bootvar	117
Ethernet Configuration Commands	119
interface ethernet	119
interface range ethernet	119
shutdown	120
description	121
speed	121
duplex	122
negotiation	123
flowcontrol	123
mdix	124
back-pressure	125
port jumbo-frame	126
clear counters	126
set interface active	127
show interfaces configuration	127
show interfaces status	129
show interfaces description	131
show interfaces counters	132
show ports jumbo-frame	135
port storm-control include-multicast	136
port storm-control broadcast enable	137
port storm-control broadcast rate	137
show ports storm-control	138
nic-redundancy	139
show nic-redundancy	139
GVRP Commands	141
gvrp enable (global)	141
gvrp enable (interface)	141
garp timer	142
gvrp vlan-creation-forbid	143
gvrp registration-forbid	144
clear gvrp statistics	144
show gvrp configuration	145
show gvrp statistics	146
show gvrp error-statistics	147
IGMP Snooping Commands	149
ip igmp snooping (Global)	149
ip igmp snooping	149
ip igmp snooping mrouter learn-pim-dvmrp	150
ip igmp snooping host-time-out	150
ip igmp snooping mrouter-time-out	151
ip igmp snooping leave-time-out	152
show ip igmp snooping mrouter	153
show ip igmp snooping interface	153
show ip igmp snooping groups	154
IP Addressing Commands	157
clear host dhcp	157
ip address	157
ip address dhcp	158
ip default-gateway	159
show ip interface	160
arp	161
arp timeout	162
clear arp-cache	163
show arp	163
ip domain-lookup	164
ip domain-name	164
ip name-server	165
ip host	166
clear host	166
show hosts	167
LACP Commands	169
lacp system-priority	169
lacp port-priority	169
lacp timeout	170
show lacp ethernet	171
show lacp port-channel	173
Line Commands	175
line	175
exec-timeout	175
show line	176
LLDP Commands	179
lldp enable (global)	179
lldp enable (interface)	179
lldp timer	180
lldp hold-multiplier	181
lldp reinit-delay	182
lldp tx-delay	182
lldp optional-tlv	183
lldp management-address	184
clear lldp rx	184
show lldp configuration	185
show lldp local	186
show lldp neighbors	186
Management ACL	189
management access-list	189
permit (management)	190
deny (management)	191
management access-class	192
show management access-list	193
show management access-class	193
PHY Diagnostics Commands	195
test copper-port tdr	195
show copper-ports tdr	195
show copper-ports cable-length	196
Port Channel Commands	199
interface port-channel	199
interface range port-channel	199
channel-group	200
port channel load balance	201
show interfaces port-channel	201
Port Monitor Commands	203
port monitor	203
show ports monitor	204
QoS Commands	207
qos	207
show qos	207
wrr-queue cos-map	208
wrr-queue bandwidth	209
priority-queue out num-of-queues	210
show qos interface	211
qos map dscp-queue	212
qos trust (Global)	213
qos trust (Interface)	213
qos cos	214
show qos map	214
Radius Commands	217
radius-server host	217
radius-server key	218
radius-server retransmit	219
radius-server source-ip	219
radius-server timeout	220
radius-server deadtime	221
show radius-servers	221
RMON Commands	223
show rmon statistics	223
rmon collection history	225
show rmon collection history	226
show rmon history	227
rmon alarm	230
show rmon alarm-table	231
show rmon alarm	232
rmon event	234
show rmon events	235
show rmon log	236
rmon table-size	237
SNMP Commands	239
snmp-server community	239
snmp-server view	240
snmp-server filter	241
snmp-server contact	242
snmp-server location	243
snmp-server enable traps	243
snmp-server trap authentication	244
snmp-server host	244
snmp-server set	246
snmp-server group	246
snmp-server user	248
snmp-server v3-host	249
snmp-server engineID local	250
show snmp engineid	252
show snmp	252
show snmp views	253
show snmp groups	254
show snmp filters	255
show snmp users	256
Spanning-Tree Commands	259
spanning-tree	259
spanning-tree mode	259
spanning-tree forward-time	260
spanning-tree hello-time	261
spanning-tree max-age	261
spanning-tree priority	262
spanning-tree disable	262
spanning-tree cost	263
spanning-tree port-priority	264
spanning-tree portfast	264
spanning-tree link-type	265
spanning-tree pathcost method	266
spanning-tree bpdu	266
clear spanning-tree detected-protocols	267
show spanning-tree	268
spanning-tree mst priority	275
spanning-tree mst max-hops	275
spanning-tree mst port-priority	276
spanning-tree mst cost	277
spanning-tree mst configuration	277
instance (mst)	278
name (mst)	279
revision (mst)	279
show (mst)	280
exit (mst)	281
abort (mst)	281
spanning-tree mst mstp-rstp	282
spanning-tree guard root	283
SSH Commands	285
ip ssh server	285
ip ssh port	285
crypto key generate dsa	286
crypto key generate rsa	286
ip ssh pubkey-auth	287
crypto key pubkey-chain ssh	288
user-key	288
key-string	289
show ip ssh	290
show crypto key mypubkey	291
show crypto key pubkey-chain ssh	292
Syslog Commands	295
logging on	295
logging	295
logging console	296
logging buffered	297
logging buffered size	297
clear logging	298
logging file	299
clear logging file	299
show logging	300
show logging file	301
show syslog-servers	302
System Management	305
ping	305
traceroute	306
telnet	309
resume	312
reload	313
hostname	313
show users	314
show sessions	314
show system	316
show version	316
asset-tag	317
show system id	317
TACACS Commands	319
tacacs-server host	319
tacacs-server key	320
tacacs-server timeout	320
tacacs-server source-ip	321
show tacacs	322
User Interface	323
enable	323
disable	323
login	324
configure	324
exit(configuration)	325
exit(EXEC)	326
end	326
help	327
history	327
history size	328
debug-mode	328
show history	329
show privilege	330
terminal history	330
terminal history size	331
VLAN Commands	333
vlan database	333
vlan	333
interface vlan	334
interface range vlan	334
name	335
switchport mode	336
switchport access vlan	337
switchport customer vlan	337
switchport trunk allowed vlan	338
switchport trunk native vlan	339
switchport general allowed vlan	339
switchport general pvid	340
switchport general ingress-filtering disable	341
switchport general acceptable-frame-type tagged-only	341
switchport forbidden vlan	342
map protocol protocols-group	343
switchport general map protocols-group vlan	344
show vlan	344
show vlan protocols-groups	345
show interfaces switchport	346
Web Server	349
ip http server	349
ip http port	349
ip https server	350
ip https port	350
crypto certificate generate	351
crypto certificate request	352
crypto certificate import	353
ip https certificate	355
show crypto certificate mycertificate	356
show ip http	357
show ip https	358
802.1x Commands	361
aaa authentication dot1x	361
dot1x system-auth-control	362
dot1x port-control	362
dot1x re-authentication	363
dot1x timeout re-authperiod	364
dot1x re-authenticate	364
dot1x timeout quiet-period	365
dot1x timeout tx-period	366
dot1x max-req	367
dot1x timeout supp-timeout	367
dot1x timeout server-timeout	368
show dot1x	369
show dot1x users	371
show dot1x statistics	372
ADVANCED FEATURES	374
dot1x auth-not-req	374
dot1x multiple-hosts	375
dot1x single-host-violation	376

Match case Limit results 1 per page

SNMP Commands

231

•

engineid-string

— Specifies a character string that identifies the engine ID. (Range: 5 - 32

characters)

•

default

— The engine ID is created automatically based on the device MAC address.

Default Setting

The engine ID is not configured.

If SNMPv3 is enabled using this command, and the default is specified, the default engine ID

is defined per standard as:

•

First 4 octets — First bit = 1, the rest is IANA Enterprise number = 674.

•

Fifth octet — Set to 3 to indicate the MAC address that follows.

•

Last 6 octets — MAC address of the device.

Command Mode

Global Configuration mode

User Guidelines

•

To use SNMPv3, you have to specify an engine ID for the device. You can specify your own ID

or use a default string that is generated using the MAC address of the device.

If the SNMPv3 engine ID is deleted or the configuration file is erased, SNMPv3 cannot be

used. By default, SNMPv1/v2 are enabled on the device. SNMPv3 is enabled only by defining

the Local Engine ID.

If you want to specify your own ID, you do not have to specify the entire 32-character engine

ID if it contains trailing zeros. Specify only the portion of the engine ID up to the point where

just zeros remain in the value. For example, to configure an engine ID of

123400000000000000000000, you can specify snmp-server engineID local 1234.

Since the engine ID should be unique within an administrative domain, the following is

recommended:

•

For a standalone device, use the default keyword to configure the engine ID.

•

For a stackable system, configure the engine ID and verify its uniqueness.

Changing the value of the engine ID has the following important side-effect. A user's

password (entered on the command line) is converted to an MD5 or SHA security digest. This

digest is based on both the password and the local engine ID. The user’s command line

password is then destroyed, as required by RFC 2274. As a result, the security digests of

SNMPv3 users become invalid if the local value of the engine ID change, and the users will

have to be reconfigured.

You cannot specify an engine ID that consists of all 0x0, all 0xF or 0x000000001.