Home » Netgear Manuals » Hubs & Switches » Netgear GSM7312 » Manual Viewer

Netgear GSM7312 FSM7326P User Manual - Page 228

MAC Access Control List ACL Commands

UPC - 606449030693

Add to My Manuals
Save this manual to your list of manuals

Page 228 highlights

Command Line Interface Reference for the ProSafe 7300 Series Layer-3 Switches, Software Ver- The following information is repeated for each interface and direction (only those interfaces configured with an attached policy are shown): Interface Valid slot and port number separated by forward slashes. Operational Status The current operational status of this DiffServ service interface. Policy Name The name of the policy attached to the interface. 13.7 MAC Access Control List (ACL) Commands This section describes the commands you use to configure MAC ACL settings. MAC ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources. The following rules apply to MAC ACLs: • The maximum number of ACLs you create is 100, regardless of type. • The system supports only Ethernet II frame types. • The maximum number of rules per IP ACL is hardware dependent. • If you configure an IP ACL on an interface, you cannot configure a MAC ACL on the same interface. 13.7.1 mac access-list extended This command creates a MAC Access Control List (ACL) identified by , consisting of classification fields defined for the Layer 2 header of an Ethernet frame. The parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access list. If a MAC ACL by this name already exists, this command enters Mac-Access-List config mode to allow updating the existing MAC ACL. Note: The CLI mode changes to Mac-Access-List Config mode when you successfully execute this command. 13-28 Format Mode mac access-list extended Global Config Quality of Service (QoS) Commands v1.0, December 2005

Section	Page
Command Line Interface Reference for the ProSafe 7300 Series Layer-3 Switches, Software Version 4.0	1
Contents	11
Chapter 1 About This Manual	33
1.1 Audience	33
1.2 Scope	33
1.3 Typographical Conventions	34
1.4 Special Message Formats	34
1.5 How to Use This Manual	35
1.6 How to Print this Manual	35
1.7 Revision History	36
Chapter 2 Overview	37
2.1 Scope	37
2.2 Using the Command-Line Interface	37
2.2.1 Command Syntax	38
2.2.2 Command Conventions	38
2.2.2.1 Common Parameter Values	39
2.2.3 Unit-Slot-Port Naming Convention	40
2.2.4 Using the “No” Form of a Command	41
2.2.5 Command Modes	41
2.2.6 Entering CLI Commands	44
2.2.6.1 Command Completion and Abbreviation	44
2.2.6.2 CLI Error Messages	45
2.2.6.3 CLI Line-Editing Conventions	45
2.2.7 Using CLI Help	46
2.2.8 Accessing the CLI	47
Chapter 3 Administrative Access Commands	49
3.1 Network Interface Commands	49
3.1.1 enable	50
3.1.2 serviceport ip	50
3.1.3 serviceport protocol	50
3.1.4 network parms	50
3.1.5 network mgmt_vlan	50
3.1.5.1 no network mgmt_vlan	51
3.1.6 network protocol	51
3.1.7 show network	51
3.1.8 show serviceport	52
3.2 Console Port Access Commands	53
3.2.1 configuration	53
3.2.2 lineconfig	53
3.2.3 serial baudrate	54
3.2.3.1 no serial baudrate	54
3.2.4 serial timeout	54
3.2.4.1 no serial timeout	54
3.2.5 show serial	55
3.3 Telnet Commands	56
3.3.1 telnet	56
3.3.2 transport input telnet	56
3.3.2.1 no transport input telnet	56
3.3.3 transport output telnet	57
3.3.3.1 no transport output telnet	57
3.3.4 session-limit	57
3.3.4.1 no session-limit	57
3.3.5 session-timeout	58
3.3.5.1 no session-timeout	58
3.3.6 telnetcon maxsessions	58
3.3.6.1 no telnetcon maxsessions	58
3.3.7 telnetcon timeout	59
3.3.7.1 no telnetcon timeout	59
3.3.8 show telnet	59
3.3.9 show telnetcon	60
3.4 Secure Shell (SSH) Command	61
3.4.1 ip ssh	61
3.4.1.1 no ip ssh	61
3.4.2 ip ssh protocol	61
3.4.3 sshcon maxsessions	62
3.4.3.1 no sshcon maxsessions	62
3.4.4 sshcon timeout	62
3.4.4.1 no sshcon timeout	62
3.4.5 show ip ssh	63
3.5 Hypertext Transfer Protocol (HTTP) Commands	63
3.5.1 ip http secure-port	63
3.5.1.1 no ip http secure-port	63
3.5.2 ip http secure-protocol	64
3.5.3 ip http secure-server	64
3.5.3.1 no ip http secure-server	64
3.5.4 ip http server	64
3.5.4.1 no ip http server	64
3.5.5 network javamode	65
3.5.5.1 no network javamode	65
3.5.6 show ip http	65
3.6 User Account Commands	66
3.6.1 users name	66
3.6.1.1 no users name	66
3.6.2 users passwd	67
3.6.2.1 no users passwd	67
3.6.3 users snmpv3 accessmode	67
3.6.3.1 no users snmpv3 accessmode	67
3.6.4 users snmpv3 authentication	68
3.6.4.1 no users snmpv3 authentication	68
3.6.5 users snmpv3 encryption	68
3.6.5.1 no users snmpv3 encryption	69
3.6.6 show loginsession	69
3.6.7 show users	69
3.6.8 disconnect	70
Chapter 4 Port and System Setup Commands	71
4.1 Port Configuration Commands	71
4.1.1 interface	71
4.1.2 cablestatus	72
4.1.3 auto-negotiate	72
4.1.3.1 no auto-negotiate	72
4.1.4 auto-negotiate all	72
4.1.4.1 no auto-negotiate all	72
4.1.5 mtu	73
4.1.5.1 no mtu	73
4.1.6 shutdown	73
4.1.6.1 no shutdown	74
4.1.7 shutdown all	74
4.1.7.1 no shutdown all	74
4.1.8 speed	74
4.1.9 speed all	75
4.1.10 monitor session	75
4.1.10.1 no monitor session	76
4.1.11 no monitor	76
4.1.12 show monitor session	76
4.1.13 show port	77
4.1.14 show port protocol	77
4.2 Pre-login Banner and System Prompt Commands	78
4.2.1 copy	78
4.2.2 set prompt	78
4.3 Keying for Advanced Features	79
4.3.1 license advanced	79
4.3.1.1 no license advanced	79
4.3.2 show key-features	79
4.4 Simple Network Time Protocol (SNTP) Commands	80
4.4.1 sntp broadcast client poll-interval	80
4.4.1.1 no sntp broadcast client poll-interval	80
4.4.2 sntp client mode	80
4.4.2.1 sntp client mode	80
4.4.3 sntp client port	81
4.4.3.1 no sntp client port	81
4.4.4 sntp unicast client poll-interval	81
4.4.4.1 no sntp unicast client poll-interval	81
4.4.5 sntp unicast client poll-timeout	81
4.4.5.1 no sntp unicast client poll-timeout	82
4.4.6 sntp unicast client poll-retry	82
4.4.6.1 no sntp unicast client poll-retry	82
4.4.7 sntp multicast client poll-interval	82
4.4.7.1 no sntp multicast client poll-interval	82
4.4.8 sntp server	83
4.4.8.1 no sntp server	83
4.4.9 show sntp	83
4.4.10 show sntp client	83
4.4.11 show sntp server	84
4.5 MAC Address and MAC Database Commands	85
4.5.1 network mac-address	85
4.5.2 network mac-type	85
4.5.2.1 no network mac-type	86
4.5.3 macfilter	86
4.5.3.1 no macfilter	86
4.5.4 macfilter adddest	86
4.5.4.1 no macfilter adddest	87
4.5.5 macfilter adddest all	87
4.5.5.1 no macfilter adddest all	87
4.5.6 macfilter addsrc	87
4.5.6.1 no macfilter addsrc	88
4.5.7 macfilter addsrc all	88
4.5.7.1 no macfilter addsrc all	88
4.5.8 bridge aging-time	88
4.5.8.1 no bridge aging-time	89
4.5.9 show forwardingdb agetime	89
4.5.10 show mac-address-table multicast	90
4.5.11 show mac-address-table static	90
4.5.12 show mac-address-table staticfiltering	91
4.5.13 show mac-address-table stats	92
Chapter 5 Spanning Tree Protocol Commands	93
5.1 STP Configuration Commands	93
5.1.1 spanning-tree	93
5.1.1.1 no spanning-tree	94
5.1.2 spanning-tree bpdumigrationcheck	94
5.1.2.1 no spanning-tree bpdumigrationcheck	94
5.1.3 spanning-tree configuration name	94
5.1.3.1 no spanning-tree configuration name	94
5.1.4 spanning-tree configuration revision	95
5.1.4.1 no spanning-tree configuration revision	95
5.1.5 spanning-tree edgeport	95
5.1.5.1 no spanning-tree edgeport	95
5.1.6 spanning-tree forceversion	96
5.1.6.1 no spanning-tree forceversion	96
5.1.7 spanning-tree forward-time	96
5.1.7.1 no spanning-tree forward-time	96
5.1.8 spanning-tree hello-time	97
5.1.8.1 no spanning-tree hello-time	97
5.1.9 spanning-tree max-age	97
5.1.9.1 no spanning-tree max-age	97
5.1.10 spanning-tree max-hops	98
5.1.10.1 no spanning-tree max-hops	98
5.1.11 spanning-tree mst	98
5.1.11.1 no spanning-tree mst	99
5.1.12 spanning-tree mst instance	99
5.1.12.1 no spanning-tree mst instance	100
5.1.13 spanning-tree mst priority	100
5.1.13.1 no spanning-tree mst priority	100
5.1.14 spanning-tree mst vlan	101
5.1.14.1 no spanning-tree mst vlan	101
5.1.15 spanning-tree port mode	101
5.1.15.1 no spanning-tree port mode	101
5.1.16 spanning-tree port mode all	101
5.1.16.1 no spanning-tree port mode all	102
5.2 STP Show Commands	102
5.2.1 show spanning-tree	102
5.2.2 show spanning-tree summary	104
5.2.3 show spanning-tree interface	104
5.2.4 show spanning-tree mst port detailed	105
5.2.5 show spanning-tree mst port summary	107
5.2.6 show spanning-tree mst summary	108
5.2.7 show spanning-tree vlan	108
Chapter 6 VLAN Commands	109
6.1 VLAN Configuration Commands	109
6.1.1 vlan database	109
6.1.2 network mgmt_vlan	110
6.1.2.1 no network mgmt_vlan	110
6.1.3 vlan	110
6.1.3.1 no vlan	110
6.1.4 vlan acceptframe	110
6.1.4.1 no vlan acceptframe	111
6.1.5 vlan ingressfilter	111
6.1.5.1 no vlan ingressfilter	111
6.1.6 vlan makestatic	111
6.1.7 vlan name	112
6.1.7.1 no vlan name	112
6.1.8 vlan participation	112
6.1.9 vlan participation all	113
6.1.10 vlan port acceptframe all	113
6.1.10.1 no vlan port acceptframe all	114
6.1.11 vlan port pvid all	114
6.1.11.1 no vlan port pvid all	114
6.1.12 vlan port tagging all	114
6.1.12.1 no vlan port tagging all	114
6.1.13 vlan port ingressfilter all	115
6.1.13.1 no vlan port ingressfilter all	115
6.1.14 Global Config	115
6.1.15 vlan protocol group	115
6.1.16 vlan protocol group add protocol	115
6.1.16.1 no vlan protocol group add protocol	116
6.1.17 vlan protocol group remove	116
6.1.18 protocol group	116
6.1.18.1 no protocol group	116
6.1.19 protocol vlan group	117
6.1.19.1 no protocol vlan group	117
6.1.20 protocol vlan group all	117
6.1.20.1 no protocol vlan group all	117
6.1.21 vlan pvid	118
6.1.21.1 no vlan pvid	118
6.1.22 vlan tagging	118
6.1.22.1 no vlan tagging	118
6.2 VLAN Show Commands	119
6.2.1 show vlan	119
6.2.2 show vlan brief	120
6.2.3 show vlan port	121
6.3 Provisioning (IEEE 802.1p) Commands	122
6.3.1 vlan port priority all	122
6.3.2 vlan priority	122
Chapter 7 DHCP Commands	123
7.1 DHCP Server Commands (DHCP Config Pool Mode)	124
7.1.1 ip dhcp pool	124
7.1.1.1 no ip dhcp pool	124
7.1.2 client-identifier	124
7.1.2.1 no client-identifier	125
7.1.3 client-name	125
7.1.3.1 no client-name	125
7.1.4 default-router	125
7.1.4.1 no default-router	125
7.1.5 dns-server	126
7.1.5.1 no dns-server	126
7.1.6 hardware-address	126
7.1.6.1 no hardware-address	126
7.1.7 host	127
7.1.7.1 no host	127
7.1.8 lease	127
7.1.8.1 no lease	127
7.1.9 network	128
7.1.9.1 no network	128
7.1.10 bootfile	128
7.1.10.1 no bootfile	128
7.1.11 domain-name	128
7.1.11.1 no domain-name	129
7.1.12 netbios-name-server	129
7.1.12.1 no netbios-name-server	129
7.1.13 netbios-node-type	129
7.1.13.1 no netbios-node-type	130
7.1.14 next-server	130
7.1.14.1 no next-server	130
7.1.15 option	130
7.1.15.1 no option	131
7.2 DHCP Server Commands (Global Config Mode)	131
7.2.1 ip dhcp excluded-address	131
7.2.1.1 no ip dhcp excluded-address	131
7.2.2 ip dhcp ping packets	132
7.2.2.1 no ip dhcp ping packets	132
7.2.3 service dhcp	132
7.2.3.1 no service dhcp	132
7.2.4 ip dhcp bootp automatic	133
7.2.4.1 no ip dhcp bootp automatic	133
7.2.5 ip dhcp conflict logging	133
7.2.5.1 no ip dhcp conflict logging	133
7.3 DHCP Server Clear and Show Commands	134
7.3.1 clear ip dhcp binding	134
7.3.2 clear ip dhcp server statistics	134
7.3.3 clear ip dhcp conflict	134
7.3.4 show ip dhcp binding	135
7.3.5 show ip dhcp global configuration	135
7.3.6 show ip dhcp pool configuration	136
7.3.7 show ip dhcp server statistics	137
7.3.8 show ip dhcp conflict	138
7.4 DHCP and BOOTP Relay Commands	138
7.4.1 bootpdhcprelay cidoptmode	138
7.4.1.1 no bootpdhcprelay cidoptmode	138
7.4.2 bootpdhcprelay enable	139
7.4.2.1 no bootpdhcprelay enable	139
7.4.3 bootpdhcprelay maxhopcount	139
7.4.3.1 no bootpdhcprelay maxhopcount	139
7.4.4 bootpdhcprelay minwaittime	140
7.4.4.1 no bootpdhcprelay minwaittime	140
7.4.5 bootpdhcprelay serverip	140
7.4.5.1 no bootpdhcprelay serverip	140
7.4.6 show bootpdhcprelay	141
Chapter 8 GARP, GVRP, and GMRP Commands	143
8.1 GARP Commands	144
8.1.1 set garp timer join	144
8.1.1.1 no set garp timer join	144
8.1.2 set garp timer leave	145
8.1.2.1 no set garp timer leave	145
8.1.3 set garp timer leaveall	146
8.1.3.1 no set garp timer leaveall	146
8.1.4 show garp	146
8.2 GVRP Commands	147
8.2.1 set gvrp adminmode	147
8.2.1.1 no set gvrp adminmode	147
8.2.2 set gvrp interfacemode	147
8.2.2.1 no set gvrp interfacemode	148
8.2.3 show gvrp configuration	148
8.3 GMRP Commands	149
8.3.1 set gmrp adminmode	149
8.3.1.1 no set gmrp adminmode	149
8.3.2 set gmrp interfacemode	150
8.3.2.1 no set gmrp interfacemode	150
8.3.3 show gmrp configuration	150
8.3.4 show mac-address-table gmrp	152
Chapter 9 Port-Based Traffic Control Commands	153
9.1 Port Security Commands	153
9.1.1 port-security	154
9.1.1.1 no port-security	154
9.1.2 port-security max-dynamic	154
9.1.2.1 no port-security max-dynamic	154
9.1.3 port-security max-static	155
9.1.3.1 no port-security max-static	155
9.1.4 port-security mac-address	155
9.1.4.1 no port-security mac-address	155
9.1.5 port-security mac-address move	155
9.1.6 show port-security	156
9.1.7 show port-security	156
9.1.8 show port-security dynamic	156
9.1.9 show port-security static	156
9.1.10 show port-security violation	157
9.2 Storm Control Commands	157
9.2.1 storm-control broadcast	157
9.2.1.1 no storm-control broadcast	158
9.2.2 storm-control flowcontrol	158
9.2.2.1 no storm-control flowcontrol	158
9.2.3 show storm-control	159
Chapter 10 SNMP Commands	161
10.1 SNMP Configuration Commands	161
10.1.1 snmp-server	161
10.1.2 snmp-server community	162
10.1.2.1 no snmp-server community	162
10.1.3 snmp-server community ipaddr	162
10.1.3.1 no snmp-server community ipaddr	163
10.1.4 snmp-server community ipmask	163
10.1.4.1 no snmp-server community ipmask	163
10.1.5 snmp-server community mode	164
10.1.5.1 no snmp-server community mode	164
10.1.6 snmp-server community ro	164
10.1.7 snmp-server community rw	164
10.1.8 snmp-server enable traps violation	165
10.1.8.1 no snmp-server enable traps violation	165
10.1.9 snmp-server enable traps	165
10.1.9.1 no snmp-server enable traps	165
10.1.10 snmp-server enable traps bcaststorm	166
10.1.10.1 no snmp-server enable traps bcaststorm	166
10.1.11 snmp-server enable traps linkmode	166
10.1.11.1 no snmp-server enable traps linkmode	166
10.1.12 snmp-server enable traps multiusers	166
10.1.12.1 no snmp-server enable traps multiusers	167
10.1.13 snmp-server enable traps stpmode	167
10.1.13.1 no snmp-server enable traps stpmode	167
10.1.14 snmptrap	167
10.1.14.1 no snmptrap	168
10.1.15 snmptrap snmpversion	168
10.1.16 snmptrap ipaddr	168
10.1.17 snmptrap mode	168
10.1.17.1 no snmptrap mode	169
10.1.18 snmp trap link-status	169
10.1.18.1 no snmp trap link-status	169
10.1.19 snmp trap link-status all	169
10.1.19.1 no snmp trap link-status all	170
10.2 SNMP Show Commands	170
10.2.1 show snmpcommunity	170
10.2.2 show snmptrap	171
10.2.3 show trapflags	172
Chapter 11 Port-Based Access and Authentication Commands	173
11.1 Port-Based Network Access Control Commands	173
11.1.1 authentication login	173
11.1.1.1 no authentication login	174
11.1.2 clear dot1x statistics	175
11.1.3 clear radius statistics	175
11.1.4 dot1x defaultlogin	175
11.1.5 dot1x initialize	175
11.1.6 dot1x login	175
11.1.7 dot1x max-req	176
11.1.7.1 no dot1x max-req	176
11.1.8 dot1x port-control	176
11.1.8.1 no dot1x port-control	177
11.1.9 dot1x port-control all	177
11.1.9.1 no dot1x port-control all	177
11.1.10 dot1x re-authenticate	177
11.1.11 dot1x re-authentication	178
11.1.11.1 no dot1x re-authentication	178
11.1.12 dot1x system-auth-control	178
11.1.12.1 no dot1x system-auth-control	178
11.1.13 dot1x timeout	178
11.1.13.1 no dot1x timeout	179
11.1.14 dot1x user	179
11.1.14.1 no dot1x user	180
11.1.15 users defaultlogin	180
11.1.16 users login	180
11.1.17 show authentication	180
11.1.18 show authentication users	181
11.1.19 show dot1x	181
11.1.20 show dot1x users	184
11.1.21 show users authentication	185
11.2 RADIUS Commands	185
11.2.1 radius accounting mode	185
11.2.1.1 no radius accounting mode	185
11.2.2 radius server host	186
11.2.2.1 no radius server host	187
11.2.3 radius server key	187
11.2.4 radius server msgauth	187
11.2.4.1 no radius server msgauth	187
11.2.5 radius server primary	188
11.2.6 radius server retransmit	188
11.2.6.1 no radius server retransmit	188
11.2.7 radius server timeout	188
11.2.7.1 no radius server timeout	189
11.2.8 show radius	189
11.2.9 show radius accounting	190
11.2.10 show radius statistics	191
Chapter 12 Port-Channel/LAG (802.3ad) Commands	193
12.1 Port-Channel Configuration Commands	193
12.1.1 addport	194
12.1.2 deleteport (Interface Config)	194
12.1.3 deleteport (Global Config)	194
12.1.4 port-channel	195
12.1.4.1 no port-channel	195
12.1.5 clear port-channel	195
12.1.6 port-channel staticcapability	195
12.1.6.1 no port-channel staticcapability	196
12.1.7 port lacpmode	196
12.1.7.1 no port lacpmode	196
12.1.8 port lacpmode all	196
12.1.8.1 no port lacpmode all	196
12.1.9 port-channel adminmode	196
12.1.9.1 no port-channel adminmode	197
12.1.10 port-channel name	197
12.1.11 port-channel linktrap	197
12.1.11.1 no port-channel linktrap	197
12.2 Port-Channel Show Commands	198
12.2.1 show port-channel brief	198
12.2.2 show port-channel	198
Chapter 13 Quality of Service (QoS) Commands	201
13.1 Class of Service (CoS) Commands	201
13.1.1 classofservice dot1p-mapping	202
13.1.1.1 no classofservice dot1p-mapping	202
13.1.2 classofservice ip-precedence-mapping	202
13.1.2.1 no classofservice ip-precedence-mapping	202
13.1.3 classofservice ip-dscp-mapping	203
13.1.3.1 no classofservice ip-dscp-mapping	203
13.1.4 classofservice trust	203
13.1.4.1 no classofservice trust	203
13.1.5 cos-queue min-bandwidth	204
13.1.5.1 no cos-queue min-bandwidth	204
13.1.6 cos-queue strict	204
13.1.6.1 no cos-queue strict	204
13.1.7 traffic-shape	205
13.1.7.1 no traffic-shape	205
13.1.8 show classofservice dot1p-mapping	205
13.1.9 show classofservice ip-precedence-mapping	206
13.1.10 show classofservice ip-dscp-mapping	206
13.1.11 show classofservice trust	207
13.1.12 show interfaces cos-queue	207
13.2 Differentiated Services (DiffServ) Commands	208
13.2.1 diffserv	209
13.2.1.1 no diffserv	209
13.3 DiffServ Class Commands	210
13.3.1 class-map	210
13.3.1.1 no class-map	211
13.3.2 class-map rename	211
13.3.3 match any	211
13.3.4 match class-map	211
13.3.4.1 no match class-map	212
13.3.5 match dstip	212