Home » Netgear Manuals » Hubs & Switches » Netgear FSM7328PS » Manual Viewer

Netgear FSM7328PS FSM7328PS Command line reference manual - Page 250

IP Access Control List ACL Commands

UPC - 606449051810

Add to My Manuals
Save this manual to your list of manuals

Page 250 highlights

Command Line Interface Reference for the ProSafe 7300S Series Layer-3 Stackable Switches, Action Source MAC Address Destination MAC Address Ethertype VLAN ID COS Assign Queue Redirect Interface Displays the action associated with each rule. The possible values are Permit or Deny. Displays the source MAC address for this rule. Displays the destination MAC address for this rule. Displays the Ethertype keyword or custom value for this rule. Displays the VLAN identifier value or range for this rule. Displays the COS (802.1p) value for this rule. Displays the queue identifier to which packets matching this rule are assigned. Displays the unit/slot/port to which packets matching this rule are forwarded. 13.8 IP Access Control List (ACL) Commands This section describes the commands you use to configure IP ACL settings. IP ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources. The following rules apply to IP ACLs: • The 7300S Series Stackable Switch does not support IP ACL configuration for IP packet fragments. • The maximum number of ACLs you can create is 100, regardless of type. • The maximum number of rules per IP ACL is hardware dependent. • If you configure a MAC ACL on an interface, you cannot configure an IP ACL on the same interface. • Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is in essence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's) in the bit positions that are used for the network address, and has zeros (0's) for the bit positions that are not used. In contrast, a wildcard mask has (0's) in a bit position that must be checked. A '1' in a bit position of the ACL mask indicates the corresponding bit can be ignored. 13-36 Quality of Service (QoS) Commands v3.0, January 2008

Section	Page
Command Line Interface Reference for the ProSafe 7300S Series Layer-3 Stackable Switches, Software Version 7.1	1
Contents	5
Chapter 1 About This Manual	25
1.1 Audience	25
1.2 Scope	25
1.3 Typographical Conventions	26
1.4 Special Message Formats	26
1.5 How to Use This Manual	27
1.6 How to Print this Manual	27
1.7 Revision History	28
Chapter 2 Overview	29
2.1 Scope	29
2.2 Product Concept	29
2.3 Using the Command-Line Interface	30
2.3.1 Command Syntax	30
2.3.2 Command Conventions	31
2.3.3 Unit-Slot-Port Naming Convention	33
2.3.4 Using the “No” Form of a Command	34
2.3.5 Command Modes	34
2.3.6 Entering CLI Commands	37
2.3.7 Using CLI Help	38
2.3.8 Accessing the CLI	39
Chapter 3 Administrative Access Commands	41
3.1 Network Interface Commands	41
3.1.1 enable	41
3.1.2 network parms (parameter)	42
3.1.3 network mgmt_vlan	42
3.1.4 network protocol	42
3.1.5 show network	43
3.2 Configuring the Switch Management CPU (ezconfig)	45
3.3 Console Port Access Commands	47
3.3.1 configuration	47
3.3.2 lineconfig	47
3.3.3 serial baudrate	48
3.3.4 serial timeout	48
3.3.5 show serial	49
3.4 Telnet Commands	50
3.4.1 telnet	50
3.4.2 transport input telnet	50
3.4.3 transport output telnet	51
3.4.4 session-limit	51
3.4.5 session-timeout	52
3.4.6 telnetcon maxsessions	52
3.4.7 telnetcon timeout	53
3.4.8 show telnet	53
3.4.9 show telnetcon	54
3.5 Secure Shell (SSH) Command	55
3.5.1 ip ssh	55
3.5.2 ip ssh protocol	55
3.5.3 sshcon maxsessions	56
3.5.4 sshcon timeout	56
3.5.5 show ip ssh	57
3.6 Hypertext Transfer Protocol (HTTP) Commands	57
3.6.1 ip http secure-port	57
3.6.2 ip http secure-protocol	58
3.6.3 ip http secure-server	58
3.6.4 ip http server	58
3.6.5 ip http java	59
3.6.6 ip http session hard-timeout	59
3.6.7 ip http session maxsessions	59
3.6.8 ip http session soft-timeout	60
3.6.9 ip http secure-session hard-timeout	60
3.6.10 ip http secure-session maxsessions	61
3.6.11 ip http secure-session soft-timeout	61
3.6.12 network javamode	61
3.6.13 show ip http	62
3.7 User Account Commands	64
3.7.1 users name	64
3.7.2 users passwd	65
3.7.3 users snmpv3 accessmode	65
3.7.4 users snmpv3 authentication	66
3.7.5 users snmpv3 encryption	66
3.7.6 show loginsession	67
3.7.7 show users	67
3.7.8 disconnect	68
Chapter 4 Port and System Setup Commands	69
4.1 Port Configuration Commands	69
4.1.1 interface	69
4.1.2 interface range	70
4.1.3 interface vlan	70
4.1.4 interface lag	70
4.1.5 auto-negotiate	70
4.1.6 auto-negotiate all	71
4.1.7 description	71
4.1.8 mtu	72
4.1.9 shutdown	72
4.1.10 shutdown all	73
4.1.11 speed	73
4.1.12 speed all	74
4.1.13 monitor session	74
4.1.14 no monitor	75
4.1.15 show monitor session	75
4.1.16 show port	76
4.1.17 show port description	76
4.1.18 show port protocol	77
4.1.19 show port status	77
4.2 Pre-login Banner and System Prompt Commands	78
4.2.1 copy	78
4.2.2 set prompt	78
4.3 Simple Network Time Protocol (SNTP) Commands	79
4.3.1 sntp broadcast client poll-interval	79
4.3.2 sntp client mode	79
4.3.3 sntp client port	80
4.3.4 sntp unicast client poll-interval	80
4.3.5 sntp unicast client poll-timeout	80
4.3.6 sntp unicast client poll-retry	81
4.3.7 sntp multicast client poll-interval	81
4.3.8 sntp server	82
4.3.9 show sntp	82
4.3.10 show sntp client	82
4.3.11 show sntp server	83
4.3.12 clock timezone	84
4.4 MAC Address and MAC Database Commands	85
4.4.1 network mac-address	85
4.4.2 network mac-type	85
4.4.3 macfilter	86
4.4.4 macfilter adddest	86
4.4.5 macfilter adddest all	87
4.4.6 macfilter addsrc	87
4.4.7 macfilter addsrc all	88
4.4.8 bridge aging-time	89
4.4.9 show forwardingdb agetime	90
4.4.10 show mac-address-table multicast	90
4.4.11 show mac-address-table static	91
4.4.12 show mac-address-table stats	91
4.5 DNS Client Commands	92
4.5.1 ip domain-lookup	93
4.5.2 ip domain-name	93
4.5.3 ip name-server	93
4.5.4 ip host	94
4.5.5 clear host	94
4.5.6 show hosts	94
Chapter 5 Spanning Tree Protocol Commands	95
5.1 STP Configuration Commands	95
5.1.1 spanning-tree	95
5.1.2 spanning-tree bpdumigrationcheck	96
5.1.3 spanning-tree configuration name	96
5.1.4 spanning-tree configuration revision	97
5.1.5 spanning-tree edgeport	97
5.1.6 spanning-tree edgeport all	97
5.1.7 spanning-tree forceversion	98
5.1.8 spanning-tree forward-time	98
5.1.9 spanning-tree hello-time	99
5.1.10 spanning-tree max-age	99
5.1.11 spanning-tree max-hops	100
5.1.12 spanning-tree mst	100
5.1.13 spanning-tree mst instance	101
5.1.14 spanning-tree mst priority	102
5.1.15 spanning-tree mst vlan	103
5.1.16 spanning-tree port mode	103
5.1.17 spanning-tree port mode all	103
5.1.18 spanning-tree bpduforwarding	104
5.2 STP Show Commands	104
5.2.1 show spanning-tree	104
5.2.2 show spanning-tree summary	106
5.2.3 show spanning-tree interface	107
5.2.4 show spanning-tree mst port detailed	108
5.2.5 show spanning-tree mst port summary	110
5.2.6 show spanning-tree mst summary	110
5.2.7 show spanning-tree vlan	111
Chapter 6 VLAN Commands	113
6.1 VLAN Configuration Commands	113
6.1.1 vlan association mac	113
6.1.2 vlan database	114
6.1.3 network mgmt_vlan	114
6.1.4 vlan	115
6.1.5 vlan acceptframe	115
6.1.6 vlan ingressfilter	116
6.1.7 vlan makestatic	116
6.1.8 vlan name	117
6.1.9 vlan participation	117
6.1.10 vlan participation all	118
6.1.11 vlan port acceptframe all	118
6.1.12 vlan port pvid all	119
6.1.13 vlan port tagging all	119
6.1.14 vlan port ingressfilter all	120
6.1.15 Global Config	120
6.1.16 vlan protocol group	120
6.1.17 vlan protocol group add protocol	120
6.1.18 vlan protocol group remove	121
6.1.19 protocol group	121
6.1.20 protocol vlan group	122
6.1.21 protocol vlan group all	122
6.1.22 vlan pvid	123
6.1.23 vlan tagging	123
6.2 VLAN Show Commands	124
6.2.1 show vlan	124
6.2.2 show vlan <vlan_id>	124
6.2.3 show vlan association mac	126
6.2.4 show vlan port	126
6.3 Double VLAN Commands	127
6.3.1 dvlan-tunnel customer-id	127
6.3.2 dvlan-tunnel etherType	128
6.3.3 mode dot1q-tunnel	128
6.3.4 mode dvlan-tunnel	128
6.3.5 show dot1q-tunnel	130
6.3.6 show dot1q-tunnel interface	130
6.3.7 show dvlan-tunnel	131
6.3.8 show dvlan-tunnel interface	131
6.4 Provisioning (IEEE 802.1p) Commands	132
6.4.1 vlan port priority all	132
6.4.2 vlan priority	132
Chapter 7 DHCP Commands	133
7.1 DHCP Server Commands (DHCP Config Pool Mode)	134
7.1.1 ip dhcp pool	134
7.1.2 client-identifier	134
7.1.3 client-name	135
7.1.4 default-router	135
7.1.5 dns-server	136
7.1.6 hardware-address	136
7.1.7 host	137
7.1.8 lease	137
7.1.9 network	138
7.1.10 bootfile	138
7.1.11 domain-name	138
7.1.12 netbios-name-server	139
7.1.13 netbios-node-type	139
7.1.14 next-server	140
7.1.15 option	140
7.2 DHCP Server Commands (Global Config Mode)	141
7.2.1 ip dhcp excluded-address	141
7.2.2 ip dhcp ping packets	142
7.2.3 service dhcp	142
7.2.4 ip dhcp bootp automatic	143
7.2.5 ip dhcp conflict logging	143
7.3 DHCP Server Clear and Show Commands	144
7.3.1 clear ip dhcp binding	144
7.3.2 clear ip dhcp server statistics	144
7.3.3 clear ip dhcp conflict	144
7.3.4 show ip dhcp binding	144
7.3.5 show ip dhcp global configuration	145
7.3.6 show ip dhcp pool configuration	145
7.3.7 show ip dhcp server statistics	146
7.3.8 show ip dhcp conflict	147
7.4 DHCP and BOOTP Relay Commands	147
7.4.1 ip dhcp relay information option	148
7.4.2 bootpdhcprelay	148
7.4.3 bootpdhcprelay maxhopcount	149
7.4.4 bootpdhcprelay minwaittime	149
7.4.5 bootpdhcprelay serverip	150
7.4.6 show bootpdhcprelay	150
7.4.7 bootpdhcprelay backup-serverip	151
Chapter 8 GARP, GVRP, and GMRP Commands	153
8.1 GARP Commands	154
8.1.1 set garp timer join	154
8.1.2 set garp timer leave	155
8.1.3 set garp timer leaveall	156
8.1.4 show garp	156
8.2 GVRP Commands	157
8.2.1 set gvrp adminmode	157
8.2.2 set gvrp interfacemode	157
8.2.3 show gvrp configuration	158
8.3 GMRP Commands	159
8.3.1 set gmrp adminmode	159
8.3.2 set gmrp interfacemode	160
8.3.3 show gmrp configuration	160
8.3.4 show mac-address-table gmrp	162
Chapter 9 Port-Based Traffic Control Commands	163
9.1 Port Security Commands	163
9.1.1 port-security	164
9.1.2 port-security max-dynamic	164
9.1.3 port-security max-static	165
9.1.4 port-security mac-address	165
9.1.5 port-security mac-address move	165
9.1.6 show port-security	166
9.1.7 show port-security	166
9.1.8 show port-security dynamic	166
9.1.9 show port-security static	166
9.1.10 show port-security violation	167
9.2 Storm Control Commands	167
9.2.1 storm-control broadcast	167
9.2.2 storm-control multicast all	168
9.2.3 storm-control unicast all	168
9.2.4 storm-control broadcast	169
9.2.5 storm-control multicast	169
9.2.6 storm-control unicast	170
9.2.7 storm-control flowcontrol	170
9.2.8 show storm-control	171
Chapter 10 SNMP Commands	173
10.1 SNMP Configuration Commands	173
10.1.1 snmp-server	173
10.1.2 snmp-server community	174
10.1.3 snmp-server community ipaddr	174
10.1.4 snmp-server community ipmask	175
10.1.5 snmp-server community mode	175
10.1.6 snmp-server community ro	176
10.1.7 snmp-server community rw	176
10.1.8 snmp-server traps violation	176
10.1.9 snmp-server traps	177
10.1.10 snmp-server traps bcaststorm	177
10.1.11 snmp-server traps linkmode	178
10.1.12 snmp-server traps multiusers	178
10.1.13 snmp-server traps stpmode	178
10.1.14 snmptrap	179
10.1.15 snmptrap snmpversion	180
10.1.16 snmptrap ipaddr	180
10.1.17 snmptrap mode	180
10.1.18 snmp trap link-status	181
10.1.19 snmp trap link-status all	181
10.2 SNMP Show Commands	182
10.2.1 show snmpcommunity	182
10.2.2 show snmptrap	183
10.2.3 show trapflags	183
Chapter 11 Port-Based Access and Authentication Commands	185
11.1 Port-Based Network Access Control Commands	185
11.1.1 authentication login	185
11.1.2 clear dot1x statistics	187
11.1.3 clear radius statistics	187
11.1.4 dot1x defaultlogin	187
11.1.5 dot1x initialize	187
11.1.6 dot1x login	187
11.1.7 dot1x max-req	188
11.1.8 dot1x port-control	188
11.1.9 dot1x port-control all	189
11.1.10 dot1x re-authenticate	189
11.1.11 dot1x re-authentication	190
11.1.12 dot1x system-auth-control	190
11.1.13 dot1x timeout	190
11.1.14 dot1x port-method	192
11.1.15 dot1x user	192
11.1.16 users defaultlogin	192
11.1.17 users login	193
11.1.18 show authentication	193
11.1.19 show authentication users	193
11.1.20 show dot1x	194
11.1.21 show dot1x users	198
11.1.22 show users authentication	198
11.2 RADIUS Commands	198
11.2.1 radius accounting mode	198
11.2.2 radius server host	199
11.2.3 radius server key	200
11.2.4 radius server msgauth	200
11.2.5 radius server primary	201
11.2.6 radius server retransmit	201
11.2.7 radius server timeout	201
11.2.8 show radius	202
11.2.9 show radius accounting	203
11.2.10 show radius statistics	204
Chapter 12 Port-Channel/LAG (802.3ad) Commands	207
12.1 Port-Channel Configuration Commands	207
12.1.1 addport	208
12.1.2 deleteport (Interface Config)	208
12.1.3 deleteport (Global Config)	208
12.1.4 port-channel	209
12.1.5 clear port-channel	209
12.1.6 port lacpmode	209
12.1.7 port lacpmode all	210
12.1.8 port-channel adminmode	210
12.1.9 port-channel name	210
12.1.10 port-channel linktrap	211
12.1.11 hashing-mode	211
12.2 Port-Channel Show Commands	212
12.2.1 show port-channel	212
12.2.2 show port-channel	212
Chapter 13 Quality of Service (QoS) Commands	215
13.1 Class of Service (CoS) Commands	215
13.1.1 classofservice dot1p-mapping	216
13.1.2 classofservice ip-precedence-mapping	216
13.1.3 classofservice ip-dscp-mapping	217
13.1.4 classofservice trust	217
13.1.5 cos-queue min-bandwidth	218
13.1.6 cos-queue strict	218
13.1.7 traffic-shape	219
13.1.8 show classofservice dot1p-mapping	219
13.1.9 show classofservice ip-precedence-mapping	219
13.1.10 show classofservice ip-dscp-mapping	220
13.1.11 show classofservice trust	220
13.1.12 show interfaces cos-queue	221
13.2 Differentiated Services (DiffServ) Commands	222
13.2.1 diffserv	223
13.3 DiffServ Class Commands	223
13.3.1 class-map	224
13.3.2 class-map rename	225
13.3.3 match ethertype	225
13.3.4 match any	225
13.3.5 match class-map	225
13.3.6 match cos	226
13.3.7 match destination-address mac	227
13.3.8 match dstip	227
13.3.9 match dstl4port	227
13.3.10 match ip dscp	228
13.3.11 match ip precedence	228
13.3.12 match ip tos	229
13.3.13 match protocol	230
13.3.14 match source-address mac	230
13.3.15 match srcip	230
13.3.16 match srcl4port	231
13.3.17 match vlan	231
13.4 DiffServ Policy Commands	231
13.4.1 policy-map	232
13.4.2 assign-queue	233
13.4.3 drop	233
13.4.4 conform-color	234
13.4.5 class	234
13.4.6 mark cos	235
13.4.7 mark ip-dscp	235
13.4.8 mark ip-precedence	236
13.4.9 police-simple	236
13.4.10 policy-map rename	237
13.5 DiffServ Service Commands	238
13.5.1 service-policy	238
13.6 DiffServ Show Commands	239
13.6.1 show class-map	239
13.6.2 show diffserv	240
13.6.3 show policy-map	241
13.6.4 show diffserv service	243
13.6.5 show diffserv service brief	244
13.6.6 show policy-map interface	244
13.6.7 show service-policy	245
13.7 MAC Access Control List (ACL) Commands	245
13.7.1 mac access-list extended	246
13.7.2 mac access-list extended rename	247
13.7.3 {deny\|permit}	247
13.7.4 mac access-group	249
13.7.5 show mac access-lists	249
13.8 IP Access Control List (ACL) Commands	250
13.8.1 access-list	251
13.8.2 ip access-group	252
13.8.3 show ip access-lists	253
13.8.4 show access-lists	253
Chapter 14 Routing Commands	255
14.1 Address Resolution Protocol (ARP) Commands	255
14.1.1 arp	256
14.1.2 ip proxy-arp	256
14.1.3 arp cachesize	257
14.1.4 arp dynamicrenew	257
14.1.5 arp purge	257
14.1.6 arp resptime	258
14.1.7 arp retries	258
14.1.8 arp timeout	258
14.1.9 clear arp-cache	259
14.1.10 show arp	259
14.1.11 show arp brief	260
14.2 IP Routing Commands	261
14.2.1 routing	261
14.2.2 ip routing	262
14.2.3 ip address	262
14.2.4 ip route	262
14.2.5 ip route default	263
14.2.6 ip route distance	264
14.2.7 ip forwarding	264
14.2.8 ip netdirbcast	265
14.2.9 ip mtu	265
14.2.10 encapsulation	266
14.2.11 clear ip route all	267
14.2.12 clear ip route ospf	267
14.2.13 clear ip route ospf <ip-address>	267
14.2.14 clear ip route rip	268
14.2.15 clear ip route rip <ip-address>	268
14.2.16 show ip	268
14.2.17 show ip interface	269
14.2.18 show ip interface	270
14.2.19 show ip route	270
14.2.20 show ip route bestroutes	271
14.2.21 show ip route entry	271
14.2.22 show ip route preferences	272
14.2.23 show ip stats	273
14.3 Router Discovery Protocol Commands	273
14.3.1 ip irdp	273
14.3.2 ip irdp address	274
14.3.3 ip irdp holdtime	275
14.3.4 ip irdp maxadvertinterval	275
14.3.5 ip irdp minadvertinterval	276
14.3.6 ip irdp preference	276
14.3.7 show ip irdp	276
14.4 Virtual LAN Routing Commands	277
14.4.1 vlan routing	277
14.4.2 show ip vlan	278
14.5 Virtual Router Redundancy Protocol (VRRP) Commands	278
14.5.1 ip vrrp	279
14.5.2 ip vrrp	279
14.5.3 ip vrrp mode	280
14.5.4 ip vrrp ip	280
14.5.5 ip vrrp authentication	280
14.5.6 ip vrrp preempt	281
14.5.7 ip vrrp priority	281
14.5.8 ip vrrp timers advertise	282
14.5.9 show ip vrrp interface stats	282
14.5.10 show ip vrrp	284
14.5.11 show ip vrrp interface	284
14.5.12 show ip vrrp interface <unit/slot/port>	285
14.6 Open Shortest Path First (OSPF) Commands	285
14.6.1 router ospf	286
14.6.2 enable (OSPF)	286
14.6.3 ip ospf	286
14.6.4 1583compatibility	287
14.6.5 area default-cost	287
14.6.6 area nssa	287
14.6.7 area nssa default-info-originate	288
14.6.8 area nssa no-redistribute (OSPF)	288
14.6.9 area nssa no-summary (OSPF)	288
14.6.10 area nssa translator-role (OSPF)	288
14.6.11 area nssa translator-stab-intv	289
14.6.12 area range	289
14.6.13 area stub	289
14.6.14 area stub summarylsa	290
14.6.15 area virtual-link	290
14.6.16 area virtual-link authentication	291
14.6.17 area virtual-link dead-interval	291
14.6.18 area virtual-link hello-interval	292