Home

Mode

1. Mode Global Config lt subdomain name gt Enter a PTP subdomain name up to 16 characters Valid characters range from hex value 0x21 up to and including hex value Ox7e Enter special characters by preceding them with the escape character e g as The subdomain name must not be empty The default is _DFLT CLI L2P 380 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 13ptp v1 sync interval Configure the PTPv1 IEEE1588 2002 specific settings Configure the Precision Time Protocol sync interval The sync interval is the interval in seconds between successive sync messages issued by a master clock Valid values are sec 1 sec 2 sec 8 sec 16 and sec 64 Default is sec 2 Note Changes are only applied after the re initialize command or after a reboot if the configuration was saved Format ptp vl sync interval sec 1 sec 2 sec 8 sec 16 sec 64 Mode Global Config sec 1 Set the PTP sync interval to sec 1 1 sec sec 2 Set the PTP sync interval to sec 2 2 sec sec 8 Set the PTP sync interval to sec 8 8 sec sec 16 Set the PTP sync interval to sec 16 16 sec sec 64 Set the PTP sync interval to sec 64 64 sec CLI L2P Release 8 0 05 2013 381 4 14 PTP Precision Time Protocol 4 14 14ptp v2bc priority1 Configure the PTPv2 Boundary Clock IEEE1588 2008 specific settings Configure the priority1 value 0 255 for the BMC as de
2. 4 2 1 debug tcpdump help Run diagnostics commands With the TCP dump you run a packet analyzer for capturing network traffic This command displays the supported options and expressions for the tcpdump command Format debug tcpdump help Mode Privileged EXEC 4 2 2 debug tcpdump start cpu Run diagnostics commands With the TCP dump you run a packet analyzer for capturing network traffic This command starts a capture on the CPU interface with the options and expressions in the lt command gt parameter Without the lt command gt parameter this command starts a capture on the CPU interface using default options and no explicit filtering Format debug tcpdump start cpu lt command gt Mode Privileged EXEC CLI L2P Release 8 0 05 2013 81 CLI Commands Base 4 2 Debug Commands 4 2 3 debug tcpdump start cpu filter Run diagnostics commands With the TCP dump you run a packet analyzer for capturing network traffic This command starts a capture on the CPU interface with the options and expressions in the filter file Format debug tcpdump start cpu filter lt capturefilter gt Mode Privileged EXEC 4 2 4 debug tcpdump stop Run diagnostics commands With the TCP dump you run a packet analyzer for capturing network traffic This command stops a running capture on the CPU interface Format debug tcpdump stop Mode Privileged EXEC CLI L2P 82 Release 8 0 05 2013 CLI Commands Base 4 2 Debug Commands 4 2 5 debu
3. This chapter provides a detailed explanation of the Security commands The following Security CLI commands are available in the software Switching Package Use the security commands to configure security settings for login users and port users The commands are divided into these different groups Show commands are used to display device settings statistics and other information Configuration Commands are used to configure features and options of the switch For every configuration command there is a show command that will display the configuration setting CLI L2P Release 8 0 05 2013 509 CLI Commands Security CLI L2P 510 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 Security Commands 6 1 1 authentication login This command creates an authentication login list The lt listname gt is up to 15 alphanumeric characters and is not case sensitive Up to 10 authenti cation login lists can be configured on the switch When a list is created the authentication method local is set as the first method When the optional parameters Option1 Option2 and or Option3 are used an ordered list of methods are set in the authentication login list If the authentication login list does not exist a new authentication login list is first created and then the authentication methods are set in the authentication login list The maximum number of authentication login methods is three The possib
4. 4 9 Device Configuration Commands 4 9 111 vlan participation This command configures the degree of participation for a specific interface ina VLAN The ID is a valid VLAN identification number and the interface is a valid interface number Format vlan participation lt exclude include auto gt lt 1 4042 gt Mode Interface Config Participation options are include The interface is always a member of this VLAN This is equivalent to registration fixed exclude The interface is never a member of this VLAN This is equivalent to registration forbidden auto The interface is dynamically registered in this VLAN by GVRP The interface will not participate in this VLAN unless a join request is received on this interface This is equivalent to registration normal CLI L2P Release 8 0 05 2013 273 4 9 Device Configuration Commands 4 9 112vlian participation all This command configures the degree of participation for all interfaces ina VLAN The ID is a valid VLAN identification number Format vlan participation all lt exclude include auto gt lt 1 4042 gt Mode Global Config Participation options are include The interface is always a member of this VLAN This is equivalent to registration fixed exclude The interface is never a member of this VLAN This is equivalent to registration forbidden auto The interface is dynamically registered in this VLAN by GVRP The interface will not participate
5. CLI Commands Base 4 1 System Information and Statistics 4 1 20 show logging This command displays the trap log maintained by the switch The trap log contains a maximum of 256 entries that wrap Format show logging buffered hosts traplogs snmp reguests Mode Privileged EXEC and User EXEC buffered Display buffered in memory log entries hosts Display logging hosts traplogs Display trap records snmp requests Display logging SNMP requests and severity level CLI L2P Release 8 0 05 2013 71 CLI Commands Base 4 1 System Information and Statistics 4 1 21 show mac addr table This command displays the forwarding database entries If the command is entered with no parameter the entire table is displayed This is the same as entering the optional a11 parameter Alternatively the administrator can en ter a MAC Address to display the table entry for the requested MAC address and all entries following the requested MAC address Note This command displays only learned unicast addresses For other addresses use the command show mac filter table See show mac filter table gmrp on page 235 Format show mac addr table lt macaddr gt lt 1 4042 gt all Mode Privileged EXEC and User EXEC Mac Address A unicast MAC address for which the switch has forwarding and or filtering information The format is 6 or 8 two digit hexadecimal numbers that are separated by colons for example 01 23 45 67 89 AB Slot Port
6. CLI L2P 226 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 62 selftest reboot on hdxerror Enable or disable a restart when the device detects a half duplex mismatch error Default enabled Format selftest reboot on hdxerror disable enable Mode Global Config selftest reboot on hdxerror disable Disable the reboot on hdxerror function selftest reboot on hdxerror enable Enable the reboot on hdxerror function This is the default CLI L2P Release 8 0 05 2013 227 4 9 Device Configuration Commands 4 9 63 selftest reboot on error Enable or disable a restart due to an undefined software or hardware state Default disabled Format selftest reboot on error disable enable seriousOnly Mode Global Config selftest reboot on error disable Disable the reboot on error function This is the default selftest reboot on error enable Enable the reboot on error function selftest reboot on error seriousOnly The device will only reboot on errors considered to be critical Note Duplex mismatch errors are considered to be non critical In case of a detected duplex mismatch error the device will not reboot Reset the device to restore ports to an usable state CLI L2P 228 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 64 show auto disable brief Use this command to display the Auto Disable summary Format show auto disable brief Mode Global Config Intf Display the number of the interface in s
7. Configure the upper bound for the PTP clock synchronization unit nanoseconds min 31 max 1000000000 109 default 5000 Note The upper bound always has to be larger than the lower bound Format ptp sync upper bound lt 31 1000000000 gt Mode Global Config 4 14 10ptp v1 preferred master Configure the PTPv1 IEEE1588 2002 specific settings Specify if the local switch shall be regarded as a preferred master clock i e if it will remain master in the presence of disconnection or connection of other clocks Format ptp vl preferred master j true false Mode Global Config true The local switch shall be regarded as a preferred master clock false The local switch shall not be regarded as a preferred master clock CLI L2P Release 8 0 05 2013 379 4 14 PTP Precision Time Protocol 4 14 11ptp v1 re initialize Configure the PTPv1 IEEE1588 2002 specific settings Re initialize the clocks in the local subdomain with the currently configured settings Changes in the subdomain name or the sync interval will only take effect after this command Format ptp vl re initialize Mode Global Config 4 14 12ptp v1 subdomain name Configure the PTPv1 IEEE1588 2002 specific settings Enter a Precision Time Protocol subdomain name The default is _DFLT Note Changes are only applied after the re initialize command or after a re boot if the configuration was saved Format ptp vl subdomain name lt subdomain name gt
8. Enter the allowed MAC source address for this port format nn nn nn nn nn nn n hexadecimal digit or format nn nn nn nn nn nn m n hexadecimal digit m decimal digit 1 48 up to 50 Format port sec allowed mac remove lt MAC Address 1 gt lt MAC Address 2 gt lt MAC Address 50 gt Mode Interface Config CLI L2P Release 8 0 05 2013 483 CLI Commands Switching 5 6 Port Security 5 6 11 clear port sec Clear the MAC IP Based Port Security by setting each port s security action applied when port security is violated to None Additionally the global mode is set to MAC Based Note This does not clear the 802 1X Port Security Format clear port sec Mode User EXEC and Global Config CLI L2P 484 Release 8 0 05 2013 CLI Commands Switching 5 7 DHCP Relay Commands 5 DHCP Relay Commands These commands configure the DHCP Relay parameters The commands are divided by functionality into these different groups Configuration Commands are used to configure features and options of the switch For every configuration command there is a show command that will display the configuration setting Show commands are used to display switch settings statistics and other information Commands that start with the keyword no so called no commands are used to clear some or all of the settings to factory defaults CLI L2P Release 8 0 05 2013 485 CLI Commands Switching 5 7 DHCP Relay Commands 5 7 1 dh
9. Format network protocol none bootp dhcp hidiscovery off read only read write Mode Privileged EXEC CLI L2P Release 8 0 05 2013 127 CLI Commands Base 4 6 Management Commands 4 6 34 network priority This command configures the VLAN priority or the IP DSCP value for out going management packets The lt ipdscp gt is specified as either an integer from 0 63 or symbolically through one of the following keywords af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 be cs0 cs1 cs2 cs3 cs4 cs5 cs6 cs ef Default 0 for both values Format network priority dotlp vlan lt 0 7 gt ip dscp lt ipdscp gt Mode Privileged EXEC no network priority This command sets the VLAN priority or the IP DSCP value for outgoing management packets to default which means VLAN priority 0 or IP DSCP value 0 Best effort Format no network priority dotlp vlan ip dscp Mode Privileged EXEC CLI L2P 128 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 35 profinetio This command controls the PROFINET IO function on the switch Detailed information you can find in the User Manual Industrial Protocols Default depends on the order code standard disable Format profinetio admin state enable disable Mode Global Config Admin state disable Disables the PROFINET IO function on this device Note The relevant MIB objects are still accessible enable Enables the PROFINET IO func
10. From the Global Configuration mode the operator can enter the Sys tem Configuration mode the Physical Port Configuration mode the CLI L2P Release 8 0 05 2013 45 Mode based CLI 3 2 Mode based Command Hierarchy Interface Configuration mode or the Protocol Specific modes speci fied below The command prompt at this level is Command Prompt Hirschmann Product Config From the Global Config mode the operator may enter the following configu ration modes Interface Config Mode Many features are enabled for a particular interface The Interface commands enable or modify the operation of an interface In this mode a physical port is set up for a specific logical connection operation The Interface Config mode provides access to the router interface configuration commands The command prompt at this level is Command Prompt Hirschmann Product Interface lt slot port gt The resulting prompt for the interface configuration command entered in the Global Configuration mode is shown below Hirschmann Product Config interface 2 1 Hirschmann Product Interface 2 1 Line Config Mode This mode allows the operator to configure the console interface The operator may configure the interface from the directly connected con sole or the virtual terminal used with Telnet The command prompt at this level is Command Prompt Hirschmann Product Line MAC Access List Config Mode 46 Use the MAC Acc
11. Packets Transmitted 1519 1522 Octets The total number of pack ets including bad packets transmitted that were between 1519 and 1522 octets in length inclusive excluding framing bits but including FCS octets Max Info The maximum size of the Info non MAC field that this port will receive or transmit CLI L2P Release 8 0 05 2013 65 CLI Commands Base 4 1 System Information and Statistics Packets Transmitted Successfully Total The number of frames that have been transmitted by this port to its segment Unicast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to a subnetwork uni cast address including those that were discarded or not sent Multicast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to a Multicast address including those that were discarded or not sent Broadcast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to the Broadcast address including those that were discarded or not sent Transmit Errors Total Errors The sum of Single Multiple and Excessive Collisions Tx FCS Errors The total number of packets transmitted that had a length excluding framing bits but including FCS octets of between 64 and 1518 octets inclusive but had a bad Frame Check Sequence FCS with an integral number of octets Oversized The total number of frames th
12. 4 Format radius server retransmit lt retries gt Mode Global Config no radius server retransmit This command sets the maximum number of times a request packet is re transmitted when no response is received from the RADIUS server to the default value i e 10 Format no radius server retransmit Mode Global Config CLI L2P Release 8 0 05 2013 535 CLI Commands Security 6 1 Security Commands 6 1 30 radius server timeout This command sets the timeout value in seconds after which a request must be retransmitted to the RADIUS server if no response is received The timeout value is an integer in the range of 1 to 30 Default 6 Format radius server timeout lt seconds gt Mode Global Config no radius server timeout This command sets the timeout value in seconds after which a request must be retransmitted to the RADIUS server if no response is received to the default value i e 6 Format no radius server timeout Mode Global Config 6 1 31 show radius accounting This command is used to display the configured RADIUS accounting mode accounting server and the statistics for the configured accounting server Format show radius accounting statistics lt ipaddr gt Mode Privileged EXEC and User EXEC CLI L2P 536 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands If the optional token statistics lt ipaddr gt is not included then only the accounting mode and the RADIUS ac
13. CLI Commands Base 4 6 Management Commands 4 6 73 telnetcon maxsessions Configure the number of remote telnet connections allowed Default 5 Format telnetcon maxsessions lt 0 5 gt Mode Privileged EXEC no telnetcon maxsessions This command sets the maximum number of telnet connection sessions that can be established to the default value Format no telnetcon maxsessions Mode Privileged EXEC CLI L2P 162 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 74 telnetcon timeout This command sets the telnet connection session timeout value in minutes A session is active as long as the session has not been idle for the value set The time is a decimal value from 1 to 160 Default 5 Format telnetcon timeout lt 1 160 gt Mode Privileged EXEC no telnetcon timeout This command sets the telnet connection session timeout value to the default Changing the timeout value for active sessions does not become effec tive until the session is reaccessed Also any keystroke activates the new timeout duration Format no telnetcon timeout Mode Privileged EXEC CLI L2P Release 8 0 05 2013 163 CLI Commands Base 4 7 Syslog Commands 4 7 Syslog Commands This section provides a detailed explanation of the Syslog commands The commands are divided into two functional groups Show commands display spanning tree settings statistics and other in formation Configuration Commands configure feat
14. CLI Commands Base 4 6 Management Commands 4 6 Management Commands These commands manage the switch and show current management settings 4 6 1 telnet This command establishes a new outbound telnet connection to a remote host The host value must be a valid IP address Valid values for port should be a valid decimal integer in the range of 0 to 65535 where the default value is 23 If debug is used the current telnet options enabled is displayed The optional line parameter sets the outbound telnet operational mode as linemode where by default the operational mode is character mode The echo option enables local echo and only takes effect when the local switch is accessed via the serial connection V 24 Format telnet lt host gt lt port gt debug line echo Mode Privileged EXEC and User EXEC CLI L2P Release 8 0 05 2013 99 CLI Commands Base 4 6 Management Commands 4 6 2 transport input telnet This command regulates new telnet sessions If sessions are enabled new telnet sessions can be established until there are no more sessions available If sessions are disabled no new telnet sessions are established An established session remains active until the session is ended or an abnormal network error ends the session Default enabled Format transport input telnet Mode Line Config no transport input telnet This command disables telnet sessions If sessions are disabled no new telnet ses
15. CLI L2P 330 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 13show Ildp med interface Use this command to display a summary of the current LLDP MED configu ration for a specific interface Format show lldp med interface lt unit slot port gt all Mode Privileged EXEC lt unit slot port gt Indicates a specific physical interface all Indicates all valid LLDP interfaces Interface Displays the physical interface Link Displays the link status Value range Up Down configMED Displays if confignotification for the Media Endpoint Devices is Enabled Disabled operMED Displays if operation for the Media Endpoint Devices is Enabled Disabled ConfigNotify Displays the ConfigNotify Value range Enabled Disabled TLVsTx Displays the TLVsTx CLI L2P Release 8 0 05 2013 331 4 12 LLDP Link Layer Discovery Protocol 4 12 14show Ildp med local device detail Use this command to display detailed information about the LLDP MED data that a specific interface transmits lt unit slot port gt indicates a specific physical interface Format show lldp med local device detail lt slot port gt Mode Privileged EXEC lt slot port gt Indicates a specific physical interface Interface Displays the physical interface Network Policies Displays the Network Policies CLI L2P 332 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 15show Ildp med remote device Use this comma
16. CLI L2P 58 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics 4 1 15 show eventlog This command displays the event log which contains error messages from the system The event log is not cleared on a system reset Format show eventlog Mode Privileged EXEC and User EXEC File The file in which the event originated Line The line number of the event Task Id The task ID of the event Code The event code Time The time this event occurred Note Event log information is retained across a switch reset CLI L2P Release 8 0 05 2013 59 CLI Commands Base 4 1 System Information and Statistics 4 1 16 show interface This command displays a summary of statistics for a specific port or a count of all CPU traffic based upon the argument Format show interface lt slot port gt ethernet lt slot port gt switchport Switchport Mode Privileged EXEC and User EXEC The display parameters when the argument is lt slot port gt is as follows Packets Received Without Error The total number of packets including broadcast packets and multi cast packets received by the processor Packets Received With Error The number of inbound packets that contained errors preventing them from being deliverable to a higher layer protocol Broadcast Packets Received The total number of packets received that were directed to the broad cast address Note that this does not include multicast pac
17. When enabled the frame is discarded if this port is not a member of the VLAN with which this frame is associ ated In a tagged frame the VLAN is identified by the VLAN ID in the tag In an untagged frame the VLAN is the Port VLAN ID specified for the port that received this frame When disabled all frames are for warded in accordance with the 802 1Q VLAN bridge specification The factory default is disabled GVRP The protocol for VLAN administration GVRP GARP VLAN Registra tion Protocol is particularly used for the adjustment of terminal devices and VLAN switches In realtime it traces users log in and log off and provides updated configuration data to the network man agement system In order to be able to use this protocol GVRP has to be supported by every switch GVRP may be enabled or disabled The factory default is disabled Default Priority The 802 1p priority assigned to tagged packets arriving on the port CLI L2P 252 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 87 show voice vian Use this command to display the current global Voice VLAN Administrative Mode Voice VLAN is a feature used to automatically separate voice and data traffic on a port by VLAN and or priority A primary benefit of using Voice VLAN is to ensure that the sound quality of an IP phone is safeguarded from deterio rating when the data traffic on the port is high Format show voice vlan Mode Privileged EXEC Administrative
18. enable traps chassis 12redundancy linkmode multiusers port sec stpmode location lt loc gt sysname lt name gt Mode Global Config CLI L2P 144 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 53 snmp server community This command adds a new SNMP community name A community name is a name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level The length of name can be up to 32 case sensitive characters Note Community names in the SNMP community table must be unique When making multiple entries using the same community name the first entry is kept and processed and all duplicate entries are ignored Default Two default community names Public and Private You can replace these default community names with unique identifiers for each com munity The default values for the remaining four community names are blank Format snmp server community lt name gt Mode Global Config no snmp server community This command removes this community name from the table The name is the community name to be deleted Format no snmp server community lt name gt Mode Global Config CLI L2P Release 8 0 05 2013 145 CLI Commands Base 4 6 Management Commands 4 6 54 snmp server contact This command adds a new SNMP server contact Format snmp server contact lt con gt Mode Global Config con Enter system contact up to 63 characters in
19. is necessary In this case set JavaScript Mode to disabled Default enabled network parms Sets the IP Address subnet mask and gateway of the router The IP lt ipaddr gt lt net Address and the gateway must be on the same subnet mask gt gateway in Privileged EXEC IP Address range from 0 0 0 0 to 255 255 255 255 Table 11 Quick Start up IP Address CLI L2P 40 Release 8 0 05 2013 Quick Start up 2 2 System Info and System Setup Command Details Subnet Mask range from 0 0 0 0 to 255 255 255 255 Gateway Address range from 0 0 0 0 to 255 255 255 255 Table 11 Quick Start up IP Address Quick Start up Downloading from TFTP Server Before starting a TFTP server download the operator must complete the Quick Start up for the IP Address Command Details copy lt url gt nvram startup Sets the destination download datatype to be an config system image image system image or a configuration file nvram startup config The URL must be specified as tftp ipAddr filepath fileName The nvram startup config option downloads the configuration file using tftp and system image option downloads the code file Table 12 Quick Start up Downloading from TFTP Server Quick Start up Factory Defaults Command tai clear config Enter yes when the prompt pops up to clear all the confi in Privileged EXEC Mode gurations made to the switch copy system running _ Enter yes when the prompt pops up that asks if you want conf
20. product briefing and user training with certification The current technology and product training courses can be found at http www hicomcenter com Support ranges from the first installation through the standby service to maintenance concepts With the Hirschmann Competence Center you have decided against making any compromises Our client customized package leaves you free to choose the service components you want to use Internet http www hicomcenter com Rh HIRSCHMANN A BELDEN BRAND
21. show digital output lt slot output gt all config value Mode Global Config all Show the lO Module configuration and value for one output config Show the lO Module configuration for one output value Show the O Module value for one output Digital output lt slot output gt Value Show the value of the 1 O Module digital output Possible values Not available High Low Invalid Digital output lt slot output gt Log Event Show if Event logging is enabled or disabled for the O Module digital output Possible values Disabled Enabled Digital output lt slot output gt SNMP trap Show if SNMP traps are enabled or disabled for the O Module digital output Possible values Disabled Enabled Digital Output lt slot output gt Mirror from IP Show the IP address used for reading the input value Possible values Not configured a b c d valid IP address CLI L2P Release 8 0 05 2013 119 CLI Commands Base 4 6 Management Commands 4 6 23 ethernet ip This command controls the EtherNet IP function on the switch Detailed information you can find in the User Manual Industrial Protocols Default depends on the order code standard disable Format ethernet ip admin state enable disable Mode Global Config Admin state disable Disables the EtherNet IP function on this device Note The relevant MIB objects are still accessible enable Enables the EtherNet IP function on this device CLI L2P 120 Release 8
22. 0 0 matches all IP addresses The default value is 0 0 0 0 Client IP Mask A mask to be ANDed with the requesting entity s IP address before comparison with IP Address If the result matches with IP Address then the address is an authenticated IP address For example if the IP Address 9 47 128 0 and the corresponding Subnet Mask 255 255 255 0 a range of incoming IP addresses would match i e the incoming IP Address could equal 9 47 128 0 9 47 128 255 The default value is 0 0 0 0 Access Mode The access level for this community string Status The status of this community access entry CLI L2P 136 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 45 show snmptrap This command displays SNMP trap receivers Trap messages are sent across a network to an SNMP Network Manager These messages alert the manager to events occurring within the switch or on the network Six trap re ceivers are simultaneously supported Format show snmptrap Mode Privileged EXEC SNMP Trap Name The community string of the SNMP trap packet sent to the trap man ager This may be up to 32 alphanumeric characters This string is case sensitive IP Address The IP address to receive SNMP traps from this device Enter four numbers between 0 and 255 separated by periods Status A pull down menu that indicates the receiver s status enabled or dis abled and allows the administrator user to perform actions on this user entry
23. 181 182 297 103 104 104 105 106 106 56 107 261 264 183 clear Ildp config all 340 clear mac addr table 302 clear pass 302 clear port sec 484 clear radius statistics 514 clear ring coupling 304 clear sfp white list 313 clear signal contact 303 clear traplog 304 clear vlan 304 Competence Center 593 config commands config lags adminmode 197 config lags linktrap 198 config lags name 199 config loginsession 285 config port admin mode 255 256 config port linktrap 257 258 config port physical mode 260 config switchconfig broadcast 261 262 264 config switchconfig flowcontrol 265 266 config users add 290 291 config users delete 289 290 291 config users passwd 292 config vlan add 267 config vlan delete 267 config vlan garp jointime 199 200 201 202 203 204 205 config vlan garp leavealltime 207 config vlan garp leavetime 206 config vlan interface acceptframe 269 270 275 config vlan name 272 config vlan participation 273 274 config vlan ports ingressfilter 271 276 config vlan ports pvid 277 279 config vlan ports tagging 278 280 config port autoneg 199 config switchconfig flowcontrol 265 266 config users delete config users passwd 289 290 291 292 289 290 291 292 config vlan delete 267 config vlan ports acceptframe 279 config vlan ports ingressfilter 270 275 276 277 configuration reset 300 583 Index config watchdog 305 copy 305 copy nvram clibanner 311 copy nvram startup co
24. 4 9 105vlan This command creates a new VLAN and assigns it an ID The ID is a valid VLAN identification number ID 1 is reserved for the default VLAN VLAN range is 1 4042 Format vlan lt 1 4042 gt Mode VLAN database no vian This command deletes an existing VLAN The ID is a valid VLAN identifi cation number ID 1 is reserved for the default VLAN VLAN range is 1 4042 Format no vlan lt 1 4042 gt Mode VLAN database CLI L2P Release 8 0 05 2013 267 4 9 Device Configuration Commands 4 9 106vian0 transparent mode Activate the Transparent Mode to be able to switch priority tagged frames without a VLAN affiliation thus with VLAN ID 0 In this mode the VLAN ID 0 persists in the frame irrespective of the Port VLAN ID setting in the VLAN Port dialog Note For PowerMICE MACH100 MACH1000 and MACH4000 In transparency mode devices ignore received vlan tags Set the vian mem bership of the ports to untagged for all vlans Note For RS20 RS30 RS40 MS20 MS30 and OCTOPUS In transparency mode devices ignore the configured port vian id Set the vian membership of the ports from vlan 1 to untagged or member Format vlanO transparent mode disable enable Mode VLAN database CLI L2P 268 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 107vlan acceptframe This command sets the frame acceptance mode per interface For VLAN Only mode untagged frames or priority frames received
25. 6 dot1x dynamic vian enable Use this command to enable the switch to create VLANs dynamically when a RADIUS assigned VLAN does not exist in the switch Default disabled Format dotlx dynamic vlan enable Mode Global Config no dot1x dynamic vian enable Use this command to disable the switch to create VLANs dynamically when a RADIUS assigned VLAN does not exist in the switch Default disabled Format no dotlx dynamic vlan enable Mode Global Config CLI L2P Release 8 0 05 2013 515 CLI Commands Security 6 1 Security Commands 6 1 7 dot1x guest vian This command configures VLAN as guest vian on an interface The command specifies an active VLAN as an IEEE 802 1x guest VLAN The range is 1 to the maximum VLAN ID supported by the platform Format dotlx guest vlan lt vlan id gt Mode Interface Config lt vian id gt Enter an existing VLAN ID no dot1x guest vian This command is used to disable Guest VLAN for the port Format no dotlx guest vlan Mode Global Config CLI L2P 516 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 8 dot1x initialize This command begins the initialization sequence on the specified port This command is only valid if the control mode for the specified port is auto If the control mode is not auto an error will be returned Format dotlx initialize lt slot port gt Mode Privileged EXEC 6 1 9 dot1x login This command assigns the specif
26. Change Acknowledgement Value of flag in next Configuration Bridge Protocol Data Unit BPDU transmission indicating if a topology change is in progress for this port Hello Time The hello time in use for this port Edge Port The configured value indicating if this port is an edge port Edge Port Status The derived value of the edge port status True if operating as an edge port false otherwise Point To Point MAC Status Derived value indicating if this port is part of a point to point link CST Regional Root The regional root identifier in use for this port CST Port Cost The configured path cost for this port CLI L2P 424 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 5 show spanning tree mst port summary This command displays the settings of one or all ports within the specified multiple spanning tree instance The parameter lt mstid gt indicates a particu lar MST instance The parameter lt slot port gt all indicates the desired switch port or all ports If O defined as the default CIST ID is passed as the lt mstid gt then the status summary is displayed for one or all ports within the common and internal spanning tree Format show spanning tree mst port summary lt mstid gt lt slot port gt all Mode Privileged EXEC and User EXEC MST Instance ID The MST instance associated with this port Valid value 0 Interface Valid slot and port number separated by forw
27. Configure the 1O Module event logging for a single digital output disable Disable event logging for digital output status changes enable Enable event logging for digital output status changes snmp trap 110 This command enables or disables the sending of SNMP traps in case of output status changes for one or all digital outputs Default disable The trap will be sent to all SNMP trap receivers configured with snmptrap The output state will be checked according to the interval set with 1O lt refresh interval gt all Configure the 1 O Module SNMP trap for all digital outputs lt slot output gt Configure the O Module SNMP trap for a single digital output disable Disable SNMP traps for digital output status changes enable Enable SNMP traps for digital output status changes CLI L2P Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands mirror CLI L2P Release 8 Configure the O Module mirroring for one or all digital outputs This command determines the input mirrored to the currently selected output To disable mirroring the following commands are equivalent digital output mirror 1 2 disable digital output mirror 1 2 from 0 0 0 0 1 1 lt all gt Configure the lO Module mirroring for all digital outputs lt slot output gt Configure the 1O Module mirroring for a single digital output The lt slot gt value determines the O module slot number on the device with the selected IP address dis
28. Default enable Note Make sure that Active Protocol is Relay for both ports involved in DHCP Relaying the one connected to DHCP client and the one connected to DHCP server dhcp relay operation disable enable Enable or disable the DHCP Relay s Option 82 on this port Default enable dhcp relay hirschmann device disable enable Enable this parameter if a Hirschmann DHCP client is connected to this port It disables the forwarding of DHCP multicast requests that are received on this port It will send its own DHCP multicast requests to be relayed by the DHCP relay this will reduce the load in your network Disable this parameter if a Non Hirschmann DHCP client is con nected to this port these devices send normal broadcast DHCP requests this enables the relaying of DHCP broadcast requests that are received on this port dhcp relay hirschmann agent disable enable Enable or disable the forwarding of DHCP requests that are received on this port Enable this parameter if a Hirschmann DHCP client is connected to this port Default disable Disable this parameter if a Non Hirschmann DHCP client is con nected to this port these devices send normal broadcast DHCP requests this enables the relaying of DHCP broadcast requests that CLI L2P Release 8 0 05 2013 487 CLI Commands Switching 5 7 DHCP Relay Commands are received on this port Enable this parameter if a Hirschmann DHCP client is connected to this
29. EXEC and User EXEC Spanning Tree Adminmode Enabled or Disabled Bridge Priority Configured value Bridge Identifier The bridge identifier for the CST CST Classical Spanning Tree IEEE 802 1d It is made up using the bridge priority and the base MAC address of the bridge Time Since Topology Change in seconds Topology Change Count Number of times changed Topology Change Boolean value of the Topology Change parameter for the switch indi cating if a topology change is in progress on any port assigned to the common and internal spanning tree Designated Root The bridge identifier of the root bridge It is made up from the bridge priority and the base MAC address of the bridge Root Path Cost Value of the Root Path Cost parameter for the common and internal spanning tree CLI L2P Release 8 0 05 2013 417 CLI Commands Switching 5 1 Spanning Tree Commands Root Port Identifier Identifier of the port to access the Designated Root for the CST Root Port Max Age Derived value Root Port Bridge Forward Delay Derived value Hello Time Configured value Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units BPDUs CST Regional Root Bridge Identifier of the CST Regional Root It is made up using the bridge priority and the base MAC address of the bridge Regional Root Path Cost Path Cost to the CST Regional Root Associated FIDs List of forwarding database identifiers currently associ
30. Enable send traps to the receiver Disable do not send traps to the receiver Delete remove the table entry CLI L2P Release 8 0 05 2013 137 CLI Commands Base 4 6 Management Commands 4 6 46 show telnet This command displays outbound telnet settings Format show telnet Mode Privileged EXEC and User EXEC Outbound Telnet Connection Login Timeout minutes This object indicates the number of minutes a remote connection session is allowed to remain inactive before being logged off May be specified as a number from 1 to 160 The factory default is 5 Maximum Number of Outbound Telnet Sessions This object indicates the number of simultaneous outbound connec tion sessions allowed The factory default is 5 Allow New Outbound Telnet Sessions Indicates that new outbound telnet sessions will not be allowed when set to no The factory default value is yes CLI L2P 138 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 47 show telnetcon This command displays inbound telnet settings Format show telnetcon Mode Privileged EXEC and User EXEC Telnet Connection Login Timeout minutes This object indicates the number of minutes a remote connection ses sion is allowed to remain inactive before being logged off May be specified as a number from 1 to 160 The factory default is 4 Maximum Number of Remote Telnet Sessions This object indicates the number of simultaneous remote connection sessions allo
31. FDB mode The default setting is autodetect Format lldp fdb mode lt lldp only mac only 1lldp and mac autodetect gt Mode Interface Config 4 12 28lldp hm mode Configure the port s LLDP Hirschmann mode if LLDP IEEE802 1AB frames will be transmitted to and or received from the Hirschmann specific multicast address 01 80 63 2f ff 0b The default setting is tx and rx Format lldp hm mode lt tx only rx only tx and rx off gt Mode Interface Config CLI L2P Release 8 0 05 2013 341 4 12 LLDP Link Layer Discovery Protocol 4 12 29lidp max neighbors Configure the port s LLDP max no of neighbors min 1 max 50 default 10 Format lldp max neighbors lt 1 50 gt Mode Interface Config CLI L2P 342 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 30lldp med LLDP for Media Endpoint Devices LLDP MED is an extension to LLDP that operates between endpoint devices such as IP phones Voice Media Gate ways Media Servers IP Communications Controllers or other VoIP devices or servers and network devices such as switches It specifically provides support for voice over IP VoIP applications In this purpose it provides an additional set of common advertisement messages TLVs for capabilities discovery network policy Power over Ethernet inventory management and location information Use this command to enable MED By enabling MED you will be effectively enabling the trans
32. GMRP multicast packets The setting can be discard or flood The default is flood Default flood Format set gmrp forward unknown discard flood Mode Global Config discard The device discards unknown GMRP multicast packets flood The device floods unknown GMRP multicast packets no set gmrp forward unknown This command disables the GMRP Multicast Registration Protocol feature Forward Unknown for all ports Format no set gmrp forward unknown Mode Global Config CLI L2P 212 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 43 set igmp This command enables IGMP Snooping on the system The default value is disable Note The IGMP snooping application supports the following Global configuration or per interface configuration Validation of the IP header checksum as well as the IGMP header check sum and discarding of the frame upon checksum error Maintenance of the forwarding table entries based on the MAC address versus the IP address Flooding of unregistered multicast data packets to all ports in the VLAN Format set igmp Mode Global Config no set igmp This command disables IGMP Snooping on the system Format no set igmp Mode Global Config CLI L2P Release 8 0 05 2013 213 4 9 Device Configuration Commands 4 9 44 set igmp This command enables IGMP Snooping on a selected interface Default enabled Format set igmp Mode Interface Config no set igmp This command disables I
33. Mode Global Config Notification interval Configure the LLDP minimum notification interval the minimum time after a notification trap has been sent until a new trap can be sent unit seconds min 5 sec max 3600 sec default 5 sec CLI L2P Release 8 0 05 2013 337 4 12 LLDP Link Layer Discovery Protocol 4 12 21lldp config chassis re init delay Configure the LLDP re initialization delay unit seconds min 1 sec max 10 sec default 2 sec Format lldp config chassis re init delay lt re init delay gt Mode Global Config Re init delay Configure the LLDP re initialization delay unit seconds min 1 sec max 10 sec default 2 sec 4 12 22 ldp config chassis tx delay Configure the LLDP transmit delay the delay between successive LLDP frame transmissions unit seconds min 1 sec max 8192 sec default 2 sec Format lldp config chassis tx delay lt tx delay gt Mode Global Config Tx delay Configure the LLDP transmit delay the delay between successive LLDP frame transmissions unit seconds min 1 sec max 8192 sec default 2 sec CLI L2P 338 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 23lidp config chassis tx hold mult Configure the LLDP transmit hold multiplier a time to live value expressed as a multiple of the LLDP Message Tx Interval tx interval min 2 max 10 default 4 Format lldp config chassis tx hold mult lt tx hold m
34. Privileged EXEC and User EXEC PTP Global Clock Mode Show which PTP clock mode is currently configured PTP Global Sync Upper Bound Show the upper bound for the PTP clock synchronization status unit nanoseconds PTP Global Sync Lower Bound Show the lower bound for the PTP clock synchronization status unit nanoseconds 4 14 3 show ptp operation Show the global PTP IEEE 1588 operation setting the administrative set ting This command shows if PTP is enabled disabled on this device Format show ptp operation Mode Privileged EXEC and User EXEC CLI L2P 374 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 4 show ptp port This command shows the PTP IEEE 1588 port configuration settings depending on the currently configured clock mode Format show port lt slot port gt all Mode Privileged EXEC and User EXEC lt slot port gt Show the port related PTP IEEE 1588 settings for the given port all Show the port related PTP IEEE 1588 settings for all ports CLI L2P Release 8 0 05 2013 375 4 14 PTP Precision Time Protocol 4 14 5 show ptp status This command shows the device s global PTP IEEE 1588 status the oper ating states Format show ptp status Mode Privileged EXEC and User EXEC PTP Status Is Synchronized Show if the device is synchronized true or false PTP Status Offset From Master Show the device s offset from the master unit nanoseconds PTP Status Ma
35. SFP Information SFP Part ID SFP type if available SFP Serial No of the SFP module if available SFP Supported yes no SFP Temperature C F SFP Tx Pwr SFP transmit power dBm mW SFP Rx Pwr SFP receive power dBm mW SFP Rx Pwr State ok warning alarm CPU Utilization The utilization of the central processing unit Average CPU Utilization The average utilization of the central processing unit Flashdisk Free memory on flashdisk in Kbytes CLI L2P Release 8 0 05 2013 79 CLI Commands Base 4 1 System Information and Statistics 4 1 26 show temperature Note The command is available for RS20 RS30 RS40 MS20 MS30 RSR20 RSR30 MACH100 MACH1000 PowerMICE MACH4000 and OCTOPUS devices This command displays the lower and upper temperature limit for sending a trap Format show temperature Mode Privileged EXEC and User EXEC 4 1 27 utilization alarm threshold Use this command to add the alarm threshold value for monitoring bandwidth utilization of the interface Format utilization alarm threshold lower lt 0 10000 gt upper lt 0 10000 gt Mode Interface Config lower Enter lower utilization alarm threshold in the range of 0 10000 where 10000 represents 100 upper Enter upper utilization alarm threshold in the range of 0 10000 where 10000 represents 100 CLI L2P 80 Release 8 0 05 2013 CLI Commands Base 4 2 Debug Commands 4 2 Debug Commands
36. admin state 4 12 20 Ildp config chassis notification interval 4 12 21 Ildp config chassis re init delay 4 12 22 ldp config chassis tx delay 4 12 23 Ildp config chassis tx hold mult 4 12 24 Ildp chassis tx interval 4 12 25 clear lldp config all 4 12 26 Ildp admin state 4 12 27 ldp fdb mode 4 12 28 ldp hm mode 4 12 29 ldp max neighbors 4 12 30 Ildp med 4 12 31 Ildp med all 4 12 32 ldp med confignotification 4 12 33 Ildp med confignotification all 4 12 34 Ildp med faststartrepeatcount 4 12 35 Ildp med transmit tlv 4 12 36 Ildp med transmit tlv all 4 12 37 Ildp notification 4 12 38 Ildp tlv link aggregation 4 12 39 Ildp tlv mac phy config state 4 12 40 Ildp tlv max frame size 4 12 41 Ildp tlv mgmt addr 4 12 42 lldp tlv pnio 4 12 43 Ildp tlv pnio alias 4 12 44 Ildp tlv pnio mrp 4 12 45 Ildp tlv port desc 4 12 46 Ildp tlv port vian 4 12 47 lldp tlv gmrp 4 12 48 Ildp tlv igmp 4 12 49 Ildp tlv portsec 327 328 329 330 331 332 333 334 334 336 337 337 338 338 339 339 340 340 341 341 342 343 344 344 345 346 347 348 349 349 349 350 350 350 351 351 351 352 352 352 353 CLI L2P Release 8 0 05 2013 Content 4 13 4 14 4 12 50 Ildp tlv ptp 4 12 51 Ildp tlv protocol 4 12 52 Ildp tlv sys cap 4 12 53 Ildp tlv sys desc 4 12 54 Ildp tlv sys name 4 12 55 Ildp tlv vian name 4 12 56 name SNTP Simple Network Time Protocol 4 13 1 show sntp 4 13 2 show sntp anycast 4 13 3 show
37. and User EXEC Port mode Enabled or disabled Port Up Time Since Counters Last Cleared Time since port was reset displayed in days hours minutes and seconds STP BPDUs Transmitted Spanning Tree Protocol Bridge Protocol Data Units sent STP BPDUs Received Spanning Tree Protocol Bridge Protocol Data Units received RST BPDUs Transmitted Rapid Spanning Tree Protocol Bridge Protocol Data Units sent RST BPDUs Received Rapid Spanning Tree Protocol Bridge Protocol Data Units received MSTP BPDUs Transmitted Multiple Spanning Tree Protocol Bridge Protocol Data Units sent MSTP BPDUs Received Multiple Spanning Tree Protocol Bridge Protocol Data Units received CLI L2P 420 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 3 show spanning tree mst detailed This command displays settings and parameters for the specified multiple spanning tree instance The instance lt mstid gt is a number that corresponds to the desired existing multiple spanning tree instance ID The following de tails are displayed Format show spanning tree mst detailed lt mstid gt Mode Privileged EXEC and User EXEC mstid Enter a multiple spanning tree instance identifier Valid values 0 4094 MST Instance ID Valid value 0 MST Bridge Priority Valid values 0 61440 in increments of 4096 Time Since Topology Change in seconds Topology Change Count Number of times the topology has changed for this multiple spanning
38. and can be changed but is not activated Default disabled Format dotlx system auth control Mode Global Config no dot1x system auth control This command is used to disable the dot1x authentication support on the switch Format no dotlx system auth control Mode Global Config 6 1 19 dot1x timeout This command sets the value in seconds of the timer used by the authenticator state machine on this port Depending on the token used and the value in seconds passed various timeout configurable parameters are set The following tokens are supported reauth period Sets the value in seconds of the timer used by the authenticator state machine on this port to determine when re authentication of the supplicant takes place The reauth period must be a value in the range 1 65535 CLI L2P Release 8 0 05 2013 525 CLI Commands Security 6 1 Security Commands quiet period Sets the value in seconds of the timer used by the authenticator state machine on this port to define periods of time in which it will not attempt to acquire a supplicant The quiet period must be a value in the range 0 65535 tx period Sets the value in seconds of the timer used by the authenticator state machine on this port to determine when to send an EAPOL EAP Request Identity frame to the supplicant The quiet period must be a value in the range 1 65535 supp timeout Sets the value in seconds of the timer used by the authenticator stat
39. are divided by functionality into these different groups Configuration Commands are used to configure features and options of the switch For every configuration command there is a show command that will display the configuration setting Show commands are used to display switch settings statistics and other information Commands that start with the keyword no so called no commands clear some or all of the settings to factory defaults 5 8 1 DHCP server configuration example The example shown below has the following task The IP address is only to be served if a request is coming via interface 1 1 with specified Mac address lt Hirschmann PowerMICE gt gt enable lt Hirschmann PowerMICE gt configure lt Hirschmann PowerMICE gt lt Config gt dhcp server operation enable lt Hirschmann PowerMICE gt lt Config gt dhcp server pool add 1 static 192 168 0 10 lt Hirschmann PowerMICE gt lt Config gt dhcp server pool modify 1 mode interface 1 1 lt Hirschmann PowerMICE gt lt Config gt dhcp server pool modify 1 mode mac 00 80 63 12 34 56 lt Hirschmann PowerMICE gt lt Config gt dhcp server pool modify 1 option gateway 192 168 0 1 lt Hirschmann PowerMICE gt lt Config gt dhcp server pool enable 1 lt Hirschmann PowerMICE gt lt Config gt interface 1 1 lt Hirschmann PowerMICE gt lt interface 1 1 gt dhcp server oper ation enable CLI L2P 490 Release 8 0 05 2013 CLI Commands Switchin
40. but including FCS octets This object can be used as a reasonable esti mate of ethernet utilization If greater precision is desired the ether StatsPkts and etherStatsOctets objects should be sampled before and after a common interval Packets Transmitted 64 Octets The total number of packets including bad packets transmitted that were 64 octets in length excluding framing bits but including FCS octets Packets Transmitted 65 127 Octets The total number of packets including bad packets transmitted that were between 65 and 127 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 128 255 Octets The total number of packets including bad packets transmitted that were between 128 and 255 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 256 511 Octets The total number of packets including bad packets transmitted that were between 256 and 511 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 512 1023 Octets The total number of packets including bad packets transmitted that were between 512 and 1023 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 1024 1518 Octets The total number of pack ets including bad packets transmitted that were between 1024 and 1518 octets in length inclusive excluding framing bits but including FCS octets
41. command displays the maximum size of frame packet size setting Format show bridge framesize Mode Privileged EXEC and User EXEC CLI L2P Release 8 0 05 2013 55 CLI Commands Base 4 1 System Information and Statistics 4 1 10 show bridge vian learning This command displays the bridge vlan learning mode Format show bridge vlan learning Mode Privileged EXEC and User EXEC 4 1 11 bridge framesize Activation of long frames Configure 1522 or 16321 or 90222 as maximum size of frame packet size Default 1522 Format bridge framesize 1522 16321 90222 Mode Global Config bridge framesize 1522 Configure 1522 as maximum size of frame packet size bridge framesize 1632 1 Configure 1632 1 as maximum size of frame packet size bridge framesize 9022 1 Configure 9022 2 as maximum size of frame packet size jumbo frames 1 On MACH4000 MACH100 MACH1000 and PowerMICE 1552 2 Available for the MACH104 and MACH1040 devices CLI L2P 56 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics 4 1 12 show config watchdog Activating the watchdog enables you to return automatically to the last configuration after a set time period has elapsed This gives you back your access to the Switch Format show config watchdog Mode Privileged EXEC and User EXEC 4 1 13 show device status The signal device status is for displaying the monitoring functions of the switch the de
42. configured on that specific port Default guest vlan period 90 seconds Default 90 Format dotlx timeout guest vlan period lt seconds gt Mode Interface Config lt seconds gt Enter an integer in the range of 1 300 no dot1x timeout guest vlan period The no form of this command resets the timeout value for the guest vlan period to its default value 90 seconds Format no dotlx timeout guest vlan period Mode Interface Config CLI L2P Release 8 0 05 2013 527 CLI Commands Security 6 1 Security Commands 6 1 21 dot1x unauthenticated vlan Use this command to configure the unauthenticated VLAN associated with the specified interface The unauthenticated VLAN ID can be a valid VLAN ID from 0 to maximum supported VLAN ID The unauthenticated VLAN must be statically configured in the VLAN database to be operational By default the unauthenticated VLAN is 0 i e invalid and not operational Default 0 Format dotlx unauthenticated vlan lt vlan id gt Mode Interface Config lt vian id gt Enter an existing VLAN ID no dot1x unauthenticated vian The no form of this command resets the value for the unauthenticated VLAN to its default value Format no dotlx unauthenticated vlan Mode Interface Config CLI L2P 528 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 22 dot1x user This command adds the specified user to the list of users with access to the specified port o
43. data When the receiving device is ready to receive more data it sends an xon signal Forwarding When a frame is received on an input port on a switch the address is checked against the lookup table If the lookup table has recorded the destination address the frame is automatically forwarded on an output port Frame Check Sequence The extra characters added to a frame for error detection and correction FCS is used in X 25 HDLC Frame Relay and other data link layer protocols G GARP See Generic Attribute Registration Protocol on page 571 GARP Information Propagation GIP is the propagation of information between GARP participants for the same application in a bridge is carried out by a GIP component GARP Multicast Registration Protocol GMRP provides a mechanism that allows Bridges and end stations to dynamically register and subsequently de register CLI L2P Release 8 0 05 2013 Glossary Group membership information with the MAC Bridges attached to the same LAN segment and for that information to be disseminated across all Bridges in the Bridged LAN that support Extended Filtering Services The operation of GMRP relies upon the services provided by the GARP GARP VLAN Registration Protocol GVRP allows workstations to request admission to a particular VLAN for multicast purposes GE See Gigabit Ethernet on page 571 General Purpose Chip select Machine GPCM provide
44. disable enable Mode Global Config detection mode Configure the device s address conflict detection mode active only disable enable or passive only Default enable ongoing detection Disable or enable the ongoing address conflict detection Default enable CLI L2P 296 Release 8 0 05 2013 4 11 System Utilities 4 11 2 boot skip aca on boot Use this command to skip external memory AutoConfiguration Adapter ACA21 during boot phase to shorten startup duration The ACA21 functionality will be available after the boot phase Format boot skip aca on boot disable enable Mode Global Config Default disabled enable Enable ACA21 skip during boot phase disable Disable ACA21 skip during boot phase 4 11 3 show boot skip aca on boot Use this command display the status of the option of skipping external memory AutoConfiguration Adapter ACA21 during boot phase Format show boot skip aca on boot Mode Global Config Default disabled Enabled ACA21 skip during boot phase is enabled Disabled ACA21 skip during boot phase is disabled CLI L2P Release 8 0 05 2013 297 4 11 System Utilities 4 11 4 cablestatus This command tests the cable attached to an interface for short or open circuit During the test the traffic is interrupted on this port Format cablestatus lt slot port gt Mode Privileged EXEC 4 11 5 clear eventlog Clear the event log The CLI will ask for confirmation An
45. disabling HTTP See ip http server on page 555 Default disabled Format ip https server Mode Privileged EXEC no ip https server This command is used to turn off the HTTPS server 3 This command disables access to the switchs graphical user interface web based interface via a web browser When access is disabled the user can not login to the switch s web server Format no ip https server Mode Privileged EXEC CLI L2P Release 8 0 05 2013 557 CLI Commands Security 6 2 HTTP Commands 6 2 6 ip https port This command is used to set the HTTPS listening port The acceptable range is 1 65535 The default is 443 Note After this setting re enable the HTTPS server See ip http server on page 555 Default 443 Format ip https port lt port_no gt Mode Privileged EXEC no ip https port This command is used to reset the https port to the default value Format no ip https port Mode Privileged EXEC 6 2 7 ip https certgen Use this command to generate an X509 PEM certificate in place Format ip https certgen Mode Privileged EXEC CLI L2P 558 Release 8 0 05 2013 CLI Commands Security 6 2 HTTP Commands 6 2 8 show ip https This command displays the status of the HTTPS server status of the server and port number Format show ip https Mode Privileged EXEC and User EXEC HTTPS Mode Displays the status of the HTTPS server enabled disabled HTTPS Port Displays the port numb
46. emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 debug 7 Note Selecting a lower severity level larger number will include all messages from higher severity levels smaller numbers CLI L2P 170 Release 8 0 05 2013 CLI Commands Base 4 7 Syslog Commands 4 7 11 logging snmp requests set severity With this command you can define the severity level of logging SNMP SET requests Default Disabled Format logging snmp requests set severity lt level 0 7 gt Mode Global Config level 0 7 Enter Logging Severity Level emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 debug 7 Note Selecting a lower severity level larger number will include all messages from higher severity levels smaller numbers 4 7 12 logging syslog This command enables syslog logging Default disabled Format logging syslog Mode Global Config no logging syslog This command disables syslog logging Format no logging syslog CLI L2P Release 8 0 05 2013 171 CLI Commands Base 4 7 Syslog Commands 4 7 13 logging syslog port Enter the port number of the syslog server Default 514 Format logging syslog port lt portid gt Mode Global Config CLI L2P 172 Release 8 0 05 2013 CLI Commands Base 4 8 Scripting Commands 4 8 Scripting Commands Configuration Scripting allows the user to generate text formatted script files representing the current configuration These configuration script fil
47. expressions file copy nvram capturefilter lt sourcefilename gt lt url gt Save the internal packet capture filter file from the flash memory to a tftp URL using lt tftp ip filepath fileName gt sourcefilename Filename of source capture filter expressions file copy nvram errorlog lt url gt Uploads Errorlog file lt url gt Uploads Error log file using lt tftp ip filepath fileName gt copy nvram script lt sourcefilename gt aca script targetfilename Uploads configuration script file Save the script to the AutoConfigura tion Adapter sourcefilename Filename length may be max 20 characters including extension cli or CLI targetfilename Filename length may be max 20 characters including extension cli or CLI copy nvram script lt sourcefilename gt lt url gt Uploads Configuration Script file using lt tftp ip filepath fileName gt Filename length may be max 20 characters including extension cli sourcefilename Filename length may be max 20 characters including extension cli or CLI CLI L2P Release 8 0 05 2013 309 4 11 System Utilities copy nvram startup config lt url gt Uploads config file using lt tftp ip filepath fileName gt copy nvram startup config system running config Uploads Copies config file The target is the currently running configuration copy nvram traplog lt url gt Uploads Trap log file Uploads Trap log file using l
48. fh HIRSCHMANN A BELDEN BRAND Reference Manual Command Line Interface Industrial ETHERNET Gigabit Switch RS20 RS30 RS40 MS20 MS30 OCTOPUS PowerMICE RSR20 RSR30 MACH 100 MACH 1000 MACH 4000 L2P Rel 8 0 CLI L2P Technical Support Release 8 0 05 2013 HAC Support belden com The naming of copyrighted trademarks in this manual even when not specially indicated should not be taken to mean that these names may be considered as free in the sense of the trademark and tradename protection law and hence that they may be freely used by anyone 2013 Hirschmann Automation and Control GmbH Manuals and software are protected by copyright All rights reserved The copying reproduction translation conversion into any electronic medium or machine scannable form is not permitted either in whole or in part An exception is the preparation of a backup copy of the software for your own use For devices with embedded software the end user license agreement on the enc losed CD applies The performance features described here are binding only if they have been expressly guaranteed in the contract This publication has been created by Hirschmann Automation and Control GmbH according to the best of our knowledge Hirschmann reserves the right to change the contents of this manual without prior notice Hirschmann can give no guarantee in respect of the correctness or accuracy of the details in this publication Hirschmann can accept no respo
49. for all ports to enabled Default disabled Format spanning tree port mode all Mode Global Config no spanning tree port mode all This command sets the Administrative Switch Port State for all ports to disabled Format no spanning tree port mode all Mode Global Config CLI L2P 450 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 30 spanning tree stp mrp mode This command sets the spanning tree mrp Media Redundancy Protocol mode to enabled Default disabled Format spanning tree stp mrp mode Mode Global Config no spanning tree stp mrp mode This command sets the spanning tree mrp Medium Redundancy Protocol mode to disabled Format no spanning tree stp mrp mode Mode Global Config CLI L2P Release 8 0 05 2013 451 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 31 spanning tree tcnguard This command enables tcn guard on an interface Default disabled Format Spanning tree guard tcnguard Mode Interface Config no spanning tree tcnguard This command disables tcn guard for this port Format no spanning tree tcnguard Mode Interface Config CLI L2P 452 Release 8 0 05 2013 CLI Commands Switching 5 2 MRP 5 2 MRP The concept of the MRP Ring enables the construction of high availability ring shaped network structures The two ends of a backbone in a line type configuration can be closed to form a redundant ring the MRP Ring by using th
50. gt method1 method2 method3 no users login lt user gt This command removes an operator Format no users login lt user gt lt listname gt Mode Global Config Note The admin user account cannot be deleted CLI L2P Release 8 0 05 2013 289 4 10 User Account Management Commands 4 10 6 users access This command sets access for a user readonly readwrite Format users access lt username gt readonly readwrite Mode Global Config lt username gt Enter a name up to 32 alphanumeric characters in length readonly Enter the access mode as readonly readwrite Enter the access mode as readwrite no users access This command deletes access for a user Format no users access lt username gt Mode Global Config CLI L2P 290 Release 8 0 05 2013 4 10 User Account Management Commands 4 10 7 users name This command adds a new user account if space permits The account lt username gt can be up to eight characters in length The name may be com prised of alphanumeric characters as well as the dash and underscore The lt username gt is not case sensitive Six user names can be defined Format users name lt username gt Mode Global Config no users name This command removes an operator Format no users name lt username gt Mode Global Config Note The admin user account cannot be deleted CLI L2P Release 8 0 05 2013 291 4 10 User Account
51. in the IEEE1588 standard v2 boundary clock onestep Set the clock mode to v2 Boundary Clock one step This specifies the boundary clock mode as described in the IEEE1588 2008 PTPv2 standard The precise timestamp is inserted directly into the sync packet one step Mode v2 boundary clock twostep Set the clock mode to v2 Boundary Clock two step This specifies the boundary clock mode as described in the IEEE1588 2008 PTPv2 standard The precise timestamp is transmitted via a follow up packet two step Mode CLI L2P Release 8 0 05 2013 377 4 14 PTP Precision Time Protocol v2 transparent clock Set the clock mode to v2 Transparent Clock This specifies the trans parent clock mode one step as described in the IEEE1588 2008 PTPv2 standard 4 14 7 ptp operation Enable or disable the Precision Time Protocol IEEE 1588 The default is disable Format ptp operation disable enable Mode Global Config disable Disable the Precision Time Protocol IEEE 1588 enable Enable the Precision Time Protocol IEEE 1588 4 14 8 ptp sync lower bound Configure the lower bound for the PTP clock synchronization unit nanoseconds min 0 max 999999999 109 1 default 30 Note The lower bound always has to be smaller than the upper bound Format ptp sync lower bound lt 0 999999999 gt Mode Global Config CLI L2P 378 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 9 ptp sync upper bound
52. interface are admitted and forwarded to ports that are members of that VLAN Default disabled Format vlan port ingressfilter all Mode Global Config no vian port ingressfilter all This command disables ingress filtering for all ports If ingress filtering is disabled frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN Format no vlan port ingressfilter all Mode Global Config CLI L2P 276 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 115vlian port pvid all This command changes the VLAN ID for all interface Default 1 Format vlan port pvid all lt 1 4042 gt Mode Global Config no vian port pvid all This command sets the VLAN ID for all interfaces to 1 Format no vlan port pvid all lt 1 4042 gt Mode Global Config CLI L2P Release 8 0 05 2013 277 4 9 Device Configuration Commands 4 9 116vian port tagging all This command configures the tagging behavior for all interfaces in a VLAN to enabled If tagging is enabled traffic is transmitted as tagged frames If tag ging is disabled traffic is transmitted as untagged frames The ID is a valid VLAN identification number Format vlan port tagging all lt 1 4042 gt Mode Global Config no vian port tagging all This command configures the tagging behavior for all interfaces in a VLAN to disabled If tagging is disabled traffic is
53. interval Enter the interval for the RMON alarm CLI L2P 202 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 31 rmon alarm modify sample type This command modifies the sample type of an RMON alarm Format rmon alarm modify lt index gt sample type absolute delta Mode Global Config index Enter the index of the RMON alarm absolute Sample type for RMON alarm is absolute delta Sample type for RMON alarm is delta 4 9 32 rmon alarm modify startup alarm This command modifies the startup alarm of an RMON alarm Format rmon alarm modify lt index gt startup alarm rising falling risingorfalling Mode Global Config index Enter the index of the RMON alarm rising Start up alarm if the value is rising falling Start up alarm if the value is falling risingorfalling Start up alarm if the value is rising or falling CLI L2P Release 8 0 05 2013 203 4 9 Device Configuration Commands 4 9 33 rmon alarm modify rising event This command modifies the rising event of an RMON alarm Format rmon alarm modify lt index gt rising event lt rising event index gt Mode Global Config index Enter the index of the RMON alarm rising event index Enter the index for the rising event for the RMON alarm 4 9 34 rmon alarm modify falling event This command modifies the falling event of an RMON alarm Format rmon alarm modify lt index gt falling event lt falling event index gt Mode Global
54. ip https server on page 557 Default enabled Format ip http server Mode Privileged EXEC no ip http server This command disables access to the switch s graphical user interface web based interface via a web browser When access is disabled the user can not login to the switch s web server Format no ip http server Mode Privileged EXEC CLI L2P Release 8 0 05 2013 555 CLI Commands Security 6 2 HTTP Commands 6 2 4 show ip http This command displays the http settings for the switch Format show ip http Mode Privileged EXEC and User EXEC Secure Server Administrative Mode This field indicates whether the administrative mode of secure HTTP is enabled or disabled Secure Protocol Level The protocol level may have the values of SSL3 TSL1 or both SSL3 and TSL1 Secure Port This field specifies the port configured for SSLT HTTP Mode THis field indicates whether the HTTP mode is enabled or disabled CLI L2P 556 Release 8 0 05 2013 CLI Commands Security 6 2 HTTP Commands 6 2 5 ip https server This command is used to turn on the HTTPS server 3 This command enables access to the switch s graphical user interface web based interface via a web browser When access is enabled the user can login to the switch from the web interface When access is disabled the user cannot login to the switch s web server Note First enable HTTP before enabling HTTPS First disable the HTTPS web server before
55. length If the name contains spaces enclose it in quotation marks no snmp server contact This command removes this SNMP server contact from the table lt con gt is the SNMP server contact to be deleted Format no Snmp server contact lt con gt Mode Global Config CLI L2P 146 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 55 snmp server community ipaddr This command sets a client IP address for an SNMP community The ad dress is the associated community SNMP packet sending address and is used along with the client IP mask value to denote a range of IP addresses from which SNMP clients may use that community to access the device A value of 0 0 0 0 allows access from any IP address Otherwise this value is ANDed with the mask to determine the range of allowed client IP addresses The name is the applicable community name Default 0 0 0 0 Format snmp server community ipaddr lt ipaddr gt lt name gt Mode Global Config no snmp server community ipaddr This command sets a client IP address for an SNMP community to 0 0 0 0 The name is the applicable community name Format no snmp server community ipaddr lt name gt Mode Global Config CLI L2P Release 8 0 05 2013 147 CLI Commands Base 4 6 Management Commands 4 6 56 snmp server community ipmask This command sets a client IP mask for an SNMP community The address is the associated community SNMP packet sending address and is used a
56. lt slot gt lt input gt Mode Global Config admin state This command enables or disables the polling task for digital outputs of the MICE IlO Module When disabled no event logging or SNMP traps will work Default disable disable Disable the l O Module digital outputs admin state enable Enable the lO Module digital outputs admin state refresh interval This command configures the O Module digital outputs refresh interval Each output configured for input mirroring is refreshed input is polled with this interval lt refresh interval gt The refresh interval is in the range of 1 10 seconds Default 1 retry count This command configures the number of retry counts for setting digi tal outputs of the MICE lO Module Each output configured for input mirroring is set to the default value low when after the number of configured retries no SNMP get request was answered lt refresh interval gt The refresh interval is in the range of 1 10 seconds Default 1 log event This command enables or disables the event logging of output status changes for one or all digital outputs Default disable The output state will be checked according to the interval set with 1O CLI L2P Release 8 0 05 2013 109 CLI Commands Base 4 6 Management Commands lt refresh interval gt Configure the O Module event logging for one or all digital outputs all Configure the 1O Module event logging for all digital outputs lt slot output gt
57. lt sourcefilename gt nvram capturefilter lt destfilename gt copy lt url gt nvram script lt destfilename gt copy lt url gt nvram startup config copy lt url gt system image copy lt url gt system running config copy lt url gt system bootcode Mode Privileged EXEC CLI L2P 306 Release 8 0 05 2013 4 11 System Utilities copy aca script lt sourcefilename gt nvram script targetfilename Copies the script from the Auto Configuration Adapter sourcefilename Filename of source configuration Script File name length may be max 20 characters including extension cli or CLI targetfilename Filename on the switch s NVRAM Filename length may be max 20 characters including extension cli copy aca capturefilter lt sourcefilename gt nvram capturefilter targetfilename Copies a capture filter file from the Auto Configuration Adapter sourcefilename Filename of source capture filter expressions file targetfilename Filename on the switch s NVRAM copy aca sfp white list lt sourcefilename gt nvram sfp white list Use this command to load the SFP white list file from a ACA21 Note In order to delete the SFP white list file from the flash memory use the command clear sfp white list The clear config factory command deletes the SFP white list too copy nvram backup image system image Use this command to swap current and backup images The backup image backup bin and curren
58. mirroring is when the data traffic of a source port is copied to a specified destination port The data traffic at the source port is not influenced by port mirroring A management tool connected at the specified port e g an RMON probe can thus monitor the data traffic of the source port This command can be called multiple times with different ports to add more than one source port to the session It is possible to add remove ports to from an active session Note The device supports a maximum of one session The maximum number of source ports is 8 Ports configured as mirror source or destination ports have to be physical ports Note In active port mirroring the specified destination port is used solely for observation purposes Default none Format monitor session lt session id gt source destination interface lt slot port gt Mode Global Config session id Session number currently session number 1 is supported CLI L2P Release 8 0 05 2013 195 4 9 Device Configuration Commands no monitor session lt session id gt source destination This command resets the monitor session port monitoring source desti nation The port will be removed from port mirroring Format no monitor session lt session id gt source destina tion interface Mode Global Config session id Session number currently session number 1 is supported 4 9 20 link aggregation This command configures a new Link Aggregat
59. mode for SNMPv1 and SNMPv2 Format snmp access version all vl v2 disable enable Mode Global Config all Enable or disable SNMP access by all protocol versions v1 and v2 v1 Enable or disable SNMP access by v1 v2 Enable or disable SNMP access by v2 CLI L2P 142 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 51 snmp access version v3 encryption Use this command to activate deactivate SNMPv3 data encryption Format snmp access version v3 encryption readonly readwrite enable disable Mode Global Config disable Disable SNMP access to this switch by SNMPv3 protocol version enable Enable SNMP read and write access to this switch by SNMPv3 protocol version readonly Enable SNMP read only access to this switch disable write access by SNMPv33 protocol version readwrite Enable SNMP read write access to this switch enable write access by SNMPv3 protocol version CLI L2P Release 8 0 05 2013 143 CLI Commands Base 4 6 Management Commands 4 6 52 snmp server This command sets the name and the physical location of the switch and the organization responsible for the network The range for name location and contact is from 0 to 64 alphanumeric characters Default None Format snmp server community lt name gt ipaddr lt ipaddr gt lt name gt ipmask lt ipmask gt lt name gt mode lt name gt ro lt name gt rw lt name gt contact lt con gt
60. mode setting Possible values Disabled Enabled Protocol Levels Display the SSH protocol levels setting Possible values Versions 1 and 2 Version 1 Version 2 default setting Versions 1 and 2 SSH Sessions Currently Active Display the number of SSH sessions being currently set up Possible values 1 5 Max SSH Sessions Allowed Display the max number of SSH sessions that can be set up simultaneously Possible values 1 5 default setting 5 SSH Timeout Display the SSH timeout in minutes Possible values 1 160 default setting 5 CLI L2P Release 8 0 05 2013 547 CLI Commands Security 6 1 Security Commands 6 1 38 show radius This command is used to display the various RADIUS configuration items for the switch as well as the configured RADIUS servers If the optional token servers is not included the following RADIUS configuration items will be dis played Format show radius servers Mode Privileged EXEC and User EXEC Primary Server IP Address Indicates the configured server currently in use for authentication Number of configured servers The configured IP address of the authentication server Max number of retransmits The configured value of the maximum number of times a request packet is retransmitted Timeout Duration The configured timeout value in seconds for request re transmis sions Accounting Mode Yes or No If the optional token servers is included the following inform
61. number of EAPOL frames that have been received by this authenticator in which the frame type is not recognized 6 1 35 show dot1x users This command displays 802 1X port security user information for locally con figured users Format show dotlix users lt slot port gt Mode Privileged EXEC and User EXEC User Users configured locally to have access to the specified port CLI L2P Release 8 0 05 2013 545 CLI Commands Security 6 1 Security Commands 6 1 36 show dot1x clients This command displays 802 1X port security client information for locally configured clients Format show dot1lx clients lt slot port gt Mode Privileged EXEC Logical Interface Display the Logical Interface Interface Display the Interface User Name Display the User Name Supp MAC Address Display the Supp MAC Address Session Time Display the Session Time Value range Vian Id Display the Vlan Id Possible values Vian Assigned Reason Display the Vlan Assigned Reason Possible values RADIUS Session Timeout Display the Session Timeout Value range Session Termination Action Display the Session Termination Action Possible values Reauthenticate CLI L2P 546 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 37 show ip ssh This command displays the IP secure shell SSH information Format show ip ssh Mode Privileged EXEC Administrative Mode Display the SSH administrative
62. of its slot port number There are 3 special functions Forward All Static Query Port and Learned Query Port Querier Status the administrative state This displays the IGMP Snooping Querier s administrative status Querier Mode the actual state read only This displays the IGMP Snooping Querier s operating status Querier Transmit Interval This displays the IGMP Snooping Querier s transmit interval in seconds Querier Max Response Time This displays the IGMP Snooping Querier s maximum response time in seconds Querier Protocol Version This displays the IGMP Snooping Querier s protocol version number CLI L2P 234 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 70 show mac filter table gmrp This command displays the GARP Multicast Registration Protocol GMRP entries in the Multicast Forwarding Database MFDB table Format show mac filter table gmrp Mode Privileged EXEC and User EXEC Mac Address A unicast MAC address for which the switch has forwarding and or filtering information The format is 6 or 8 two digit hexadecimal num bers that are separated by colons for example 01 23 45 67 89 AB In an IVL system the MAC address will be displayed as 8 bytes Type This displays the type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as a result of a learning process or protocol Description The text description of this multicast table entry In
63. physical ports only Max length is 20 characters Note If it contains blanks or exclamation marks enclose it in quo tation marks The description itself must not contain any quotation marks or question marks or backslashes no name Delete the descriptive name for the current interface physical ports only Format no name Mode Interface Config CLI L2P Release 8 0 05 2013 355 4 13 SNTP Simple Network Time Protocol 4 13 SNTP Simple Network Time Protocol These commands show and configure the SNTP parameters 4 13 1 show sntp This command shows all SNTP settings Format show sntp Mode Privileged EXEC and User EXEC SNTP Server Anycast Address Show SNTP Server Anycast Address a b c d SNTP Server Anycast Transmit Interval Show SNTP Anycast Transmit Interval in seconds SNTP Server Anycast VLAN Show SNTP Server Anycast VLAN SNTP Server Disable if Timesource is local Show SNTP Server Disable if Timesource is local Yes No SNTP Client Accepts Broadcasts Show SNTP Client Accepts Broadcasts Yes No SNTP Client Disable after Synchronization Show SNTP Client Disable after Synchronization Yes No SNTP Client Request Interval Show SNTP Client Request Interval in seconds CLI L2P 356 Release 8 0 05 2013 4 13 SNTP Simple Network Time Protocol SNTP Client Local Time Offset Show SNTP Client Local Time Offset in minutes SNTP Client Primary Server IP Address Show SNTP Client Prim
64. places a protocol analyzer on the port receiving the CLI L2P Release 8 0 05 2013 mirrored data to monitor each segment separately The analyzer captures and evaluates the data without affecting the client on the original port The monitor port may be a port on the same SwitchModule with an attached RMON probe a port on a different SwitchModule in the same hub or the SwitchModule processor Port mirroring can consume significant CPU resources while active Better choices for long term monitoring may include a passive tap like an optical probe or an Ethernet repeater Protocol Data Unit PDU is a packet of data passed across a network The term implies a specific layer of the OSI model and a specific protocol Q QoS See Quality of Service on page 577 Quality of Service QoS is a networking term that specifies a guaranteed level of throughput Throughput is the amount of data transferred from one device to another or processed in a specified amount of time typically throughputs are measured in bytes per second Bps 577 Glossary R Real Time Operating System RTOS is a component of the OSAPI module that abstracts operating systems with which other systems can interface RFC Request For Comment RMON Short for remote monitoring a network management protocol that allows network information to be gathered ata single workstation Whereas SNMP gathers network data from a single type of Mana
65. probe port and the destination monitored port and removes the probe port from all VLANs The port must be manually re added to any desired VLANs Format no monitor session lt session id gt mode Mode Global Config session id Session number currently session number 1 is supported CLI L2P Release 8 0 05 2013 193 4 9 Device Configuration Commands 4 9 18 monitor session lt session id gt mode This command configures the monitor session port monitoring mode to en able The probe and monitored ports must be configured before monitor ses sion port monitoring can be enabled If enabled the probe port will monitor all traffic received and transmitted on the physical monitored port It is not necessary to disable port monitoring before modifying the probe and moni tored ports Default disabled Format monitor session lt session id gt mode Mode Global Config session id Session number currently session number 1 is supported no monitor session lt session id gt mode This command sets the monitor session port monitoring mode to disable Format no monitor session lt session id gt mode Mode Global Config session id Session number currently session number 1 is supported CLI L2P 194 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 19 monitor session lt session id gt source destination This command allows you to configure and activate the port mirroring func tion of the switch Port
66. profinetio serial timeout set prompt show ethernet ip show network show network mgmt access show profinetio show serial show snmp access show snmpcommunity show snmptrap show telnet show telnetcon show trapflags snmp access global snmp access version snmp access version v3 encryption snmp server snmp server community snmp server contact snmp server community ipaddr snmp server community ipmask snmp server community mode snmp server community ro snmp server community rw snmp server location snmp server sysname snmp server enable traps snmp server enable traps chassis snmp server enable traps I2redundancy snmp server enable traps linkmode snmp server enable traps multiusers snmp server enable traps port sec snmp server enable traps stpmode snmptrap snmptrap ipaddr snmptrap mode snmptrap snmpversion 127 127 128 129 130 130 131 131 133 134 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 150 150 151 151 152 153 154 155 156 157 158 159 160 161 CLI L2P Release 8 0 05 2013 Content 4 6 73 4 6 74 telnetcon maxsessions telnetcon timeout 4 7 Syslog Commands 4 7 1 4 7 2 4 7 3 4 7 4 4 7 5 4 7 6 4 7 7 4 7 8 4 7 9 4 7 10 4 7 11 4 7 12 4 7 13 logging buffered logging buffered wrap logging cli command logging console logging host logging host reconfigure logging host remove logging snmp requests get operation logging snmp r
67. ring delete ring 5 9 10 sub ring new ring CLI Commands Security Security Commands 6 1 1 authentication login 6 1 2 authorization network radius 6 1 3 clear dot1x statistics 6 1 4 clear radius statistics 6 1 5 dot1x defaultlogin 6 1 6 dot1x dynamic vian enable 6 1 7 dot1x guest vlan 6 1 8 dot1x initialize 6 1 9 dot1x login 6 1 10 dot1x mac auth bypass 6 1 11 dot1x max req 6 1 12 dot1x max users 6 1 13 dot1x port control 6 1 14 dot1x port control all 6 1 15 dot1x re authenticate 6 1 16 dot1x re authentication 6 1 17 dot1x safe vian 6 1 18 dot1x system auth control 6 1 19 dot1x timeout 6 1 20 dot1x timeout guest vlan period 6 1 21 dot1x unauthenticated vian 6 1 22 dot1x user 6 1 23 ip ssh protocol 6 1 24 radius accounting mode 500 500 501 501 503 504 504 505 505 506 507 508 508 509 511 511 513 513 514 514 515 516 517 517 518 519 520 521 522 523 523 524 525 525 527 528 529 530 531 CLI L2P Release 8 0 05 2013 Content 6 2 7 1 7 2 10 6 1 25 6 1 26 6 1 27 6 1 28 6 1 29 6 1 30 6 1 31 6 1 32 6 1 33 6 1 34 6 1 35 6 1 36 6 1 37 6 1 38 6 1 39 6 1 40 6 1 41 radius server host radius server key radius server msgauth radius server primary radius server retransmit radius server timeout show radius accounting show authentication show authentication users show dot1x show dot1x users show dot1x clients show ip ssh show radius show radius sta
68. ring manager Set the switch s HIPER Ring mode to Ring Manager rm Abbreviation of Ring Manager ring switch Set the switch s HIPER Ring mode to Ring Switch rs Abbreviation of Ring Switch Default none Format hiper ring mode lt ring manager ring switch rm rs gt Mode Global Config CLI L2P Release 8 0 05 2013 463 CLI Commands Switching 5 3 HIPER Ring 5 3 4 hiper ring port primary Enter the switch s primary HIPER Ring port Default n a not set Format hiper ring port primary lt primary ring port gt Mode Global Config primary ring port Enter the switch s primary HIPER Ring port lt slot port gt 5 3 5 hiper ring port secondary Enter the switch s secondary HIPER Ring port Default n a not set Format hiper ring port secondary lt secondary ring port gt Mode Global Config secondary ring port Enter the switch s secondary HIPER Ring port lt slot port gt CLI L2P 464 Release 8 0 05 2013 CLI Commands Switching 5 3 HIPER Ring 5 3 6 hiper ring recovery delay Defines the maximum recovery delay of ring recovery in the HIPER Ring 500 or 300 ms Default n a not set Format hiper ring recovery delay lt 500 300 gt Mode Global Config CLI L2P Release 8 0 05 2013 465 CLI Commands Switching 5 4 Fast HIPER Ring 5 4 Fast HIPER Ring The concept of the Fast HIPER Ring enables the construction of high avail ability ring shaped network structures Within such a ring topology network
69. slot and port number of a configured Link Aggregation Note Before adding a port to a Link Aggregation set the physical mode of the port See speed command Format addport lt logical slot port gt Mode Interface Config CLI L2P Release 8 0 05 2013 177 4 9 Device Configuration Commands 4 9 2 adminmode This command enables the whole Link Aggregation as one single port Note Before adding a port to a Link Aggregation set the physical mode of the port See speed command Format adminmode Mode Interface Config no adminmode This command disables the whole Link Aggregation as one single port Format no adminmode Mode Interface Config CLI L2P 178 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 3 auto disable reason This command enables the port disabling on this device by reason Default Disabled Format auto disable reason link flap crc error overload detection Mode Global Config link flap Enable the port disabling on this device by link flap crc error Enable the port disabling on this device by CRC error overload detection Enable the port disabling on this device by overload detection no auto disable reason This command disables the port disabling on this device by reason Default Disabled Format no auto disable reason link flap crc error overload detection Mode Global Config link flap Disable the port disabling on this device by link f
70. spanning tree bpduguard spanning tree bpdumigrationcheck spanning tree configuration name spanning tree configuration revision spanning tree edgeport spanning tree forceversion CLI L2P Release 8 0 05 2013 141 251 251 253 254 255 256 317 317 257 258 142 142 144 145 147 148 149 150 150 146 151 154 155 156 157 150 151 158 159 160 161 356 362 362 363 363 364 364 365 366 367 368 369 370 429 430 431 259 432 433 434 435 spanning tree forward time 436 438 spanning tree guard loop 437 spanning tree guard none 438 spanning tree guard root 439 spanning tree hello time 440 spanning tree hold count 441 spanning tree max age 442 spanning tree max hops 443 spanning tree mst 444 spanning tree mst instance 448 spanning tree mst priority 446 spanning tree mst vlan 447 spanning tree port mode 449 spanning tree port mode all 450 spanning tree stp mrp mode 451 spanning tree tcnguard 452 speed 260 speeds 260 statistics switch related 201 commands 60 62 68 storm control broadcast 261 storm control broadcast port related 263 storm control egress limit 263 storm control egress limiting 261 storm control flowcontrol 265 storm control flowcontrol per port 266 storm control ingress limit 264 storm control ingress limiting 262 storm control ingress mode 262 264 sub ring mode 503 sub ring mrp domainID 507 sub ring operation 504 sub ring port 505 sub ring protocol 504 sub ring ring n
71. that the requested value was not internally acces sible The value of designates that the value is unknown CLI L2P Release 8 0 05 2013 27 Command Structure 1 1 Format 1 1 5 Annotations The CLI allows the user to type single line annotations at the command prompt for use when writing test or configuration scripts and for better read ability The exclamation point character flags the beginning of a com ment The comment flag character can begin a word anywhere on the command line and all input following this character is ignored Any command line that begins with the character is recognized as a comment line and ig nored by the parser Some examples are provided below Script file for setting the CLI prompt set prompt example switch End of the script file CLI L2P 28 Release 8 0 05 2013 Command Structure 1 1 Format 1 1 6 Special keys The following list of special keys may be helpful to enter command lines BS Ctrl A Ctrl E Ctrl F Ctrl B Ctrl D Ctrl H Ctrl U X Ctrl K Ctrl W Ctrl T Ctrl P Ctrl R Ctrl N Ctrl Y Ctrl Q Ctrl S Ctrl Z Tab lt SPACE gt Exit CLI L2P Release 8 0 05 2013 delete previous character go to beginning of line go to end of line go forward one character go backward one character delete current character display command history or retrieve a command delete to beginning of line delete to end of lin
72. the sys tem The Group Membership Interval time is the amount of time in seconds that a switch will wait for a report from a particular group on a particular inter face before deleting the interface from the entry This value must be greater than the IGMP Maximum Response time value The range is 3 to 3 600 seconds Default 260 Format set igmp groupmembershipinterval lt 3 3600 gt Mode Global Config no set igmp groupmembershipinterval This command sets the IGMP Group Membership Interval time on the system to 260 seconds Format no set igmp groupmembershipinterval Mode Global Config CLI L2P Release 8 0 05 2013 219 4 9 Device Configuration Commands 4 9 51 set igmp interfacemode This command enables IGMP Snooping on all interfaces If an interface which has IGMP Snooping enabled is enabled for port based routing or is en listed as a member of a link aggregation LAG IGMP Snooping functionality will be disabled on that interface IGMP Snooping functionality will subse quently be re enabled if routing is disabled or link aggregation LAG mem bership is removed from an interface that has IGMP Snooping enabled Format set igmp interfacemode Mode Global Config no set igmp interfacemode This command disables IGMP Snooping on all interfaces Format no set igmp interfacemode Mode Global Config 4 9 52 set igmp lookup interval unknown This command configures the IGMP Snooping lookup response time for unknown multica
73. to track VLANs The first three bits of the 802 1Q tag are used by 802 1P to establish priority for the packet VLAN See Virtual Local Area Network on page 580 vMAN Virtual Metropolitan Area Network W WAN See Wide Area Network on page 580 Web Also known as World Wide Web WWW or W3 An Internet 580 client server system to distribute information based upon the hypertext transfer protocol HTTP Wide Area Network A WAN is a computer network that spans a relatively large geographical area Typically a WAN consists of two or more local area networks LANs X X 500 A directory standard that enables applications like e mail to access information that can either be central or distributed The benefit of a directory is the ability to minimize the impact on the user of changes to a network The standard is broken down under subsequent standards as follows X 501 Models X 509 Authentication framework X 511 Abstract service definition X 518 Procedures for distributed operation X 519 Protocol specifications X 520 Selected attribute types X 521 Selected object types XModem One of the most popular file transfer protocols FTPs Xmodem is fairly effective at detecting errors It sends blocks of data together with a checksum and then waits for acknowledgment of the block s receipt The waiting CLI L2P Release 8 0 05 2013 Glossary slows down the rate of data transmission consider
74. to transmit RST or MST BPDUs The all option enables BPDU migration check on all interfaces Format spanning tree bpdumigrationcheck lt slot port gt all Mode Global Config no spanning tree bpdumigrationcheck This command disables BPDU migration check on a given interface The all option disables BPDU migration check on all interfaces Format no spanning tree bpdumigrationcheck lt slot port gt ally Mode Global Config CLI L2P Release 8 0 05 2013 259 4 9 Device Configuration Commands 4 9 94 speed This command sets the speed and duplex setting for the interface Format speed lt 100 10 gt lt half duplex full duplex gt 1000 full duplex Mode Interface Config Acceptable values are 1000f 1000BASE T full duplex 100h 1OOBASE T half duplex 100f 1LOOBASE T full duplex 10h 1OBASE T half duplex 10f 1OOBASE T full duplex CLI L2P 260 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 95 storm control broadcast This command enables the egress broadcast limiter globally Format storm control broadcast Mode Global Config no storm control broadcast This command disables the egress broadcast limiter globally Format no storm control broadcast Mode Global Config 4 9 96 storm control egress limiting This command enables or disables the egress limiter globally for all frame types Format storm control egress limiting disable enable Mode Global Config CLI L
75. transmitted as untagged frames The ID is a valid VLAN identification number Format no vlan port tagging all lt 1 4042 gt Mode Global Config CLI L2P 278 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 117vian pvid This command changes the VLAN ID per interface Default 1 Format vlan pvid lt 1 4042 gt Mode Interface Config no vian pvid This command sets the VLAN ID per interface to 1 Format no vlan pvid lt 1 4042 gt Mode Interface Config CLI L2P Release 8 0 05 2013 279 4 9 Device Configuration Commands 4 9 118vlan tagging This command configures the tagging behavior for a specific interface in a VLAN to enabled If tagging is enabled traffic is transmitted as tagged frames If tagging is disabled traffic is transmitted as untagged frames The ID is a valid VLAN identification number Format vlan tagging lt 1 4042 gt Mode Interface Config no vian tagging This command configures the tagging behavior for a specific interface in a VLAN to disabled If tagging is disabled traffic is transmitted as untagged frames The ID is a valid VLAN identification number Format no vlan tagging lt 1 4042 gt Mode Interface Config CLI L2P 280 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 119voice vian Global Config Mode This command enables the Voice VLAN feature Voice VLAN is a feature used to automatically separate voice and data traffic on a port by VLAN a
76. trap Show if SNMP traps are enabled or disabled for the O Module digital inputs Possible values Disabled Enabled CLI L2P 112 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 16 show digital input config This command shows the O Module digital inputs global configuration Format show digital input config Mode Global Config Digital Input System Information Admin State Show the lO Module digital inputs Admin State Possible values Disabled Enabled Refresh Interval s Show the lO Module digital inputs Refresh Interval in seconds Value range 1 10 CLI L2P Release 8 0 05 2013 113 CLI Commands Base 4 6 Management Commands 4 6 17 show digital input all This command shows the O Module value or configuration for all inputs Format show digital input all all config value Mode Global Config all Show the lO Module configuration and value for all inputs config Show the O Module configuration for all inputs value Show the lO Module value for all inputs Digital Input Information Input Show numbers of the O Module digital input Possible values example 1 1 1 2 1 3 1 4 3 1 3 2 3 3 3 4 Value Show the value of the O Module digital inputs Possible values Not available High Low Log Event Show if Event logging is enabled or disabled for the O Module digital inputs Possible values Disabled Enabled SNMP trap Show if SNMP traps are enabled or di
77. traps or sets the MAC notification interval in seconds Format mac notification operation interval lt 0 2147483647 gt Mode Global Config operation Enable sending of MAC notification traps interval Set the MAC notification interval lt 0 2147483647 gt MAC notification interval in seconds no mac notification operation This command disables sending of MAC notification traps globally Format no mac notification operation Mode Global Config CLI L2P 190 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 16 mac notification Interface Config Use this command to change the settings for MAC address change notifica tion for one port This command enables MAC notification for this port or sets the mode for which action the device sends a MAC notification Format mac notification operation mode add remove all Mode Interface Config operation Enable sending of MAC notification traps mode Set the mode for which action the device sends a MAC notification add The device sends MAC notification traps when entries are added to the FDB remove The device sends MAC notification traps when entries are removed from the FDB all The device sends MAC notification traps when entries are changed in the FDB no mac notification operation This command disables sending of MAC notification traps for this port Format no mac notification operation Mode Interface Config CLI L2P Release
78. v1 operation 4 14 23 ptp v2bc operation 4 14 24 ptp v2bc announce interval 4 14 25 ptp v2bc announce timeout 4 14 26 ptp v2bc sync interval 4 14 27 ptp v2bc delay mechanism 4 14 28 ptp v2bc pdelay interval 4 14 29 ptp v2bc network protocol 4 14 30 ptp v2bc v1 compatibility mode 4 14 31 ptp v2bc asymmetry 4 14 32 ptp v2tc asymmetry 4 14 33 ptp v2tc delay mechanism 4 14 34 ptp v2tc management 4 14 35 ptp v2tc multi domain mode 4 14 36 ptp v2tc network protocol 4 14 37 ptp v2tc operation 4 14 38 ptp v2tc pdelay interval 4 14 39 ptp v2tc primary domain 4 14 40 ptp v2tc profile 4 14 41 ptp v2tc syntonization 4 14 42 ptp v2tc vian 4 14 43 ptp v2tc power tlv check 4 14 44 ptp v2tc vian priority 4 14 45 ptp v2tc sync local clock PoE Power over Ethernet 4 15 1 show inlinepower 4 15 2 show inlinepower port 4 15 3 inlinepower Global Config 379 380 380 381 382 382 383 383 383 384 384 385 385 386 386 387 387 387 388 388 388 389 389 389 390 390 391 391 392 392 393 393 394 394 395 395 396 396 396 397 CLI L2P Release 8 0 05 2013 Content 4 15 4 inlinepower Interface Config 398 4 15 5 clear inlinepower 398 4 16 PoE Power over Ethernet Plus 399 4 16 1 show inlinepower slot 399 4 16 2 inlinepower budget slot 400 4 16 3 inlinepower threshold slot 401 4 16 4 inlinepower trap slot 401 4 17 Port monitor 402 4 17 1 show port monitor 403 4 17 2 show port monitor lt slot port gt 404 4 17 3 s
79. v2bc asymmetry Specifies the asymmetrie in nanoseconds of the link connected to this port 1000000000 Format ptp v2bc asymmetry lt value in ns gt Mode Interface Config 4 14 32ptp v2tc asymmetry Specifies the asymmetrie in nanoseconds of the link connected to this port 1000000000 Format ptp v2tc asymmetry lt value in ns gt Mode Interface Config 4 14 33ptp v2tc delay mechanism Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Configure the delay mechanism e2e p2p disabled of the transparent clock Format ptp v2tc delay mechanism e2e p2p Mode Global Config CLI L2P Release 8 0 05 2013 389 4 14 PTP Precision Time Protocol 4 14 34ptp v2tc management Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Enable or disable the management of the transparent clock disable for fast packet rates Format ptp v2tc management enable disable Mode Global Config 4 14 35ptp v2tc multi domain mode Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Enable or disable the transparent clock for one primary domain or all do main numbers Format ptp v2tc multi domain mode enable disable Mode Global Config CLI L2P 390 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 36ptp v2tc network protocol Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Configure the network protocol ieee802_3 udp
80. value of 0 disables the timeout CLI L2P 134 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 43 show snmp access This command displays SNMP access information related to global and SNMP version settings SNMPv3 is always enabled Format show snmp access Mode Privileged EXEC CLI L2P Release 8 0 05 2013 135 CLI Commands Base 4 6 Management Commands 4 6 44 show snmpcommunity This command displays SNMP community information Six communities are supported You can add change or delete communities The switch does not have to be reset for changes to take effect The SNMP agent of the switch complies with SNMP Version 1 for more about the SNMP specification see the SNMP RFCs The SNMP agent sends traps through TCP IP to an external SNMP manager based on the SNMP configuration the trap receiver and other SNMP community parameters Format show snmpcommunity Mode Privileged EXEC SNMP Community Name The community string to which this entry grants access A valid entry is a case sensitive alphanumeric string of up to 32 characters Each row of this table must contain a unique community name Client IP Address An IP address or portion thereof from which this device will accept SNMP packets with the associated community The requesting entity s IP address is ANDed with the Subnet Mask before being com pared to the IP Address Note that if the Subnet Mask is set to 0 0 0 0 an IP Address of 0 0
81. 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 24 iec61850 mms Note This command is available for the RSR20 RSR30 and MACH1000 devices This command is used to configure the IEC61850 MMS server functionality on this device Default disable Format 1ec61850 mms admin state enable disable write access enable disable Mode Global Config Admin state Disable Disables the EC61850 MMS Server functionality on this device This is the default Note The relevant MIB objects are still accessible Enable Enables the IEC61850 MMS Server functionality on this device Write access Disable Disables the write access of the IEC61850 MMS Server on this device This is the default Enable Enables the write access of the IEC61850 MMS Server on this device Note Write Access via the IEC61850 MMS Server will be non authenticated This could be a possible security risk CLI L2P Release 8 0 05 2013 121 CLI Commands Base 4 6 Management Commands 4 6 25 show iec61850 mms Note This command is available for the RSR20 RSR30 and MACH1000 devices This command is used to show the IEC61850 MMS server settings on this device Default disable Format show iec61850 mms Mode Global Config IEC61850 MMS Server Admin State Display the IEC61850 MMS Server Admin State Possible values Enable Disable IEC61850 MMS Server Write Access State Show the IEC61850 MMS Server Write Access State Possible values En
82. 0 RS40 MS20 MS30 RSR20 RSR30 MACH1000 PowerMICE and OCTOPUS devices Use this command to enable or disable the cable crossing function Note The cable crossing settings become effective for a certain port if auto negotiate Is disabled for this port The cable crossing settings are irrelevant for a certain port if auto negotiate Is enabled for this port Format cable crossing enable disable Mode Interface Config cable crossing enable The device swaps the port output and port input of the TP port cable crossing disable The device does not swap the port output and port input of the TP port CLI L2P Release 8 0 05 2013 183 4 9 Device Configuration Commands 4 9 8 media module Use this command to logically configure media modules Default media module enable all Format media module remove lt 1 7 gt enable lt 1 7 gt all disable lt 1 7 gt all Mode Global Config remove Logically remove a media module that has already been physically removed lt 1 7 gt Enter the number of a media module that has already been physically removed but is logically still present in the configuration enable Enable a media module slot lt 1 7 gt Enter the number of the media module to be enabled all Enable all media modules on the device disable Disable a media module slot lt 1 7 gt Enter the number of the media module to be disabled all Disable all media modules on the de
83. 0000000 or auto If auto is specified the pathcost value will be set based on Link Speed If the port priority token is specified this command sets the priority for this port within a specific multiple spanning tree instance or the common and in ternal spanning tree instance depending on the lt mstid gt parameter The port priority value is a number in the range of 0 to 240 in increments of 16 Default cost auto external cost auto port priority 128 Format spanning tree mst lt mstid gt cost lt 1 200000000 gt auto external cost lt 1 200000000 gt auto port priority lt 0 240 gt Mode Interface Config CLI L2P 444 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands no spanning tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the common and internal spanning tree to the respective default values If the lt mstid gt parameter corre sponds to an existing multiple spanning tree instance then the configura tions are done for that multiple spanning tree instance If however 0 defined as the default CIST ID is passed as the lt mstid gt then the con figurations are performed for the common and internal spanning tree instance This command accepts the value 0 for the mstid meaning the common and internal spanning tree If the cost token is specified this command sets the path cost for this por
84. 013 4 12 LLDP Link Layer Discovery Protocol 4 12 43lldp tiv pnio alias Configure the port s LLDP TLV inclusion of PROFINET IO Alias on or off default on Format lldp tlv pnio alias lt off on gt Mode Interface Config 4 12 44lidp tiv pnio mrp Configure the port s LLDP TLV inclusion of PROFINET IO MRP on or off default on Format lldp tlv pnio mrp lt off on gt Mode Interface Config 4 12 45lldp tiv port desc Configure the port s LLDP TLV inclusion of Port Description on or off default on Format lldp tlv port desc lt off on gt Mode Interface Config CLI L2P Release 8 0 05 2013 351 4 12 LLDP Link Layer Discovery Protocol 4 12 46llidp tiv port vian Configure the port s LLDP TLV inclusion of Port VLAN on or off default on Format lldp tlv port vlan lt off on gt Mode Interface Config 4 12 47ildp tly gmrp Configure the port s LLDP TLV inclusion of GMRP on or off default on Format lldp tlv gmrp lt off on on gt Mode Interface Config 4 12 48lldp tiv igmp Configure the port s LLDP TLV inclusion of IGMP on or off default on Format lldp tlv igmp lt offlon on gt Mode Interface Config CLI L2P 352 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 49lldp tiv portsec Configure the port s LLDP TLV inclusion of PortSec on or off default on Format lldp tiv portsec lt fort lon on gt Mode Interface Con
85. 013 4 9 Device Configuration Commands 4 9 59 set igmp query ports to filter This command enables or disables the addition of query ports to multicast fil ter portmasks The setting can be enable or disable Default Disable Format set igmp gquery ports to filter enable disable Mode Global Config enable Addition of query ports to multicast filter portmasks disable No addition of query ports to multicast filter portmasks CLI L2P Release 8 0 05 2013 225 4 9 Device Configuration Commands 4 9 60 set pre login banner text Use this command to set the text for the pre login banner The device displays this banner additionally before login in the CLI and before login in the graphical user interface Default Empty string Format set pre login banner text lt text gt Mode Privileged Exec text Enter the text for the pre login banner Possible values Max 255 characters in the range ASCII code 0x20 space character to ASCII code 0x7E tilde except ASCII code 0x25 percent sign Use n for new line and t for tab 4 9 61 selftest ramtest Enable or disable the RAM test for a cold start of the device Deactivating the RAM test reduces the booting time for a cold start of the de vice Default enabled Format selftest ramtest disable enable Mode Global Config selftest ramtest disable Disable the ramtest selftest ramtest enable Enable the ramtest This is the default
86. 0BASE5 and section 10 3 1 4 10BASE2 These documents define jabber as the condition where any packet exceeds 20 ms The allowed range to detect jabber is between 20 ms and 150 ms Fragments Undersize Received The total number of packets received that were less than 64 octets in length excluding framing bits but including FCS octets CLI L2P Release 8 0 05 2013 63 CLI Commands Base 4 1 System Information and Statistics Alignment Errors The total number of packets received that had a length excluding framing bits but including FCS octets of between 64 and 1518 octets inclusive but had a bad Frame Check Sequence FCS with a non integral number of octets Rx FCS Errors The total number of packets received that had a length excluding framing bits but including FCS octets of between 64 and 1518 octets inclusive but had a bad Frame Check Sequence FCS with an integral number of octets Overruns The total number of frames discarded as this port was overloaded with incoming packets and could not keep up with the inflow Received Packets not forwarded 64 Total A count of valid frames received which were discarded i e fil tered by the forwarding process Local Traffic Frames The total number of frames dropped in the forwarding process because the destination address was located off of this port 802 3x Pause Frames Received A count of MAC Control frames received on this interface with an opcode indicating th
87. 1 4 6 22 4 6 23 4 6 24 4 6 25 4 6 26 4 6 27 4 6 28 4 6 29 4 6 30 4 6 31 CLI L2P Release 8 0 05 2013 telnet transport input telnet transport output telnet session limit session timeout bridge address learning bridge address relearn detect operation bridge address relearn detect threshold bridge aging time bridge fast link detection bridge duplex mismatch detect operation bridge vlan learning digital input digital output show digital input show digital input config show digital input all show digital input lt slot input gt show digital output show digital output config show digital output all show digital output lt slot output gt ethernet ip iec61850 mms show iec61850 mms network javascriptmode network mgmt access add network mgmt access delete network mgmt access modify network mgmt access operation network mgmt access status 92 93 94 95 96 97 98 99 99 100 101 102 103 103 104 104 105 106 106 107 107 109 112 113 114 115 116 117 118 119 120 121 122 123 124 124 125 126 126 Content 4 6 32 4 6 33 4 6 34 4 6 35 4 6 36 4 6 37 4 6 38 4 6 39 4 6 40 4 6 41 4 6 42 4 6 43 4 6 44 4 6 45 4 6 46 4 6 47 4 6 48 4 6 49 4 6 50 4 6 51 4 6 52 4 6 53 4 6 54 4 6 55 4 6 56 4 6 57 4 6 58 4 6 59 4 6 60 4 6 61 4 6 62 4 6 63 4 6 64 4 6 65 4 6 66 4 6 67 4 6 68 4 6 69 4 6 70 4 6 71 4 6 72 network parms network protocol network priority
88. 1000 MACH4000 the a fix mapping table see Reference Manual GUI Graphical User Interface Web based Interface for further details Format classofservice trust dotlp ip dscp Mode Global Config or Interface Config PowerMICE MACH1000 MACH4000 no classofservice trust This command sets the interface mode to untrusted i e the packet prior ity marking is ignored and the default port priority is used instead Format no classofservice trust Modes Global Config or Interface Config PowerMICE MACH1000 MACH4000 CLI L2P Release 8 0 05 2013 89 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 4 show classofservice dot1p mapping This command displays the current 802 1p priority mapping to internal traffic classes for a specific interface The slot port parameter is required on platforms that support priority to traffic class mapping on a per port basis Platforms that support priority to traffic class mapping on a per port basis Format show classofservice dotlp mapping Platforms that do not support priority to traffic class mapping on a per port basis Format Show classofservice dotlp mapping Mode Privileged EXEC and User EXEC CLI L2P 90 Release 8 0 05 2013 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 5 show classofservice ip dscp mapping This command displays the current IP DSCP mapping to internal traffic class es for the global configuration settings Form
89. 102storm control ingress mode Note This command is available for the RS20 RS30 RS40 MS20 MS30 OCTOPUS devices This command sets the frame type for the ingress limiter to All BC BC MC BC MC uUC Format storm control ingress mode all bec mctbc uuctmce tbc Mode Interface Config CLI L2P 264 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 103storm control flowcontrol This command enables 802 3x flow control for the switch Note This command only applies to full duplex mode ports Default disabled Format storm control flowcontrol Mode Interface Config Global Config no storm control flowcontrol This command disables 802 3x flow control for the switch Note This command only applies to full duplex mode ports Format no storm control flowcontrol Mode Interface Config Global Config CLI L2P Release 8 0 05 2013 265 4 9 Device Configuration Commands 4 9 104storm control flowcontrol per port This command enables 802 3x flow control for the port Note This command only applies to full duplex mode ports Default enabled Format storm control flowcontrol Mode Interface Config no storm control flowcontrol per port This command disables 802 3x flow control for the port Note This command only applies to full duplex mode ports Format no storm control flowcontrol Mode Interface Config CLI L2P 266 Release 8 0 05 2013 4 9 Device Configuration Commands
90. 138 show monitor session 242 show telnetcon 139 show mrp 453 show temperature 80 show mrp current domain 454 show trapflags 140 show network 105 131 show users 287 show network mgmt access 133 show users authentication 551 show port 243 265 266 show vlan 248 CLI L2P 588 Release 8 0 05 2013 Index show vlan brief show vlan port show voice vian show voice vlan interface shutdown shutdown all signal contact signal contact connection error slot port snmp trap link status snmp trap link status all snmp access global snmp access version v3 encryption snmp server 81 snmp server community snmp server community ipaddr snmp server community ipmask snmp server community mode snmp server community ro snmp server community rw snmp server contact snmp server enable traps snmp server enable traps linkmode snmp server enable traps multiusers snmp server enable traps port sec snmp server enable traps stpmode snmp server location snmp server sysname snmptrap snmptrap ipaddr snmptrap mode snmptrap snmpversion SNTP Simple Network Time Protocol sntp anycast address sntp anycast transmit interval sntp anycast vian sntp client accept broadcast sntp client disable after sync sntp client offset sntp client request interval sntp client server primary sntp client server secondary sntp client threshold sntp operation sntp server disable if local sntp time system spanning tree spanning tree auto edgeport
91. 2 clear igmpsnooping 4 11 13 clear mac addr table 4 11 14 clear pass 4 11 15 clear link aggregation 4 11 16 clear signal contact 4 11 17 clear traplog 4 11 18 clear ring coupling 4 11 19 clear vian 4 11 20 config watchdog 4 11 21 copy 4 11 22 device status connection error 4 11 23 device status monitor 4 11 24 logout 4 11 25 ping 4 11 26 signal contact connection error 4 11 27 signal contact 4 11 28 temperature 4 11 29 reboot 4 11 30 show reboot 4 11 31 reload 4 11 32 show reload LLDP Link Layer Discovery Protocol 4 12 1 show lldp 4 12 2 show lldp config 4 12 3 show lldp config chassis 4 12 4 show lldp config chassis admin state 4 12 5 show lldp config chassis notification interval 4 12 6 show lldp config chassis re init delay 4 12 7 show lldp config chassis tx delay 4 12 8 show lldp config chassis tx hold mult CLI L2P Release 8 0 05 2013 297 297 298 298 299 299 300 300 300 301 301 302 302 303 303 304 304 304 305 305 314 315 316 316 317 317 319 320 321 322 323 324 324 324 325 325 325 326 326 326 11 Content 12 4 12 9 show lldp config chassis tx interval 4 12 10 show Ildp config port 4 12 11 show Ildp config port tlv 4 12 12 show Ildp med 4 12 13 show Ildp med interface 4 12 14 show Ildp med local device detail 4 12 15 show Ildp med remote device 4 12 16 show Ildp med remote device detail 4 12 17 show Ildp remote data 4 12 18 Ildp 4 12 19 Ildp config chassis
92. 21sntp server disable if local With this option enabled the switch disables the SNTP Server Function if it is not synchronized to a time server itself Format sntp server disable if local lt on off gt Mode Global Config off Enable the SNTP Server even if it is not synchronized to a time server itself on Disable the SNTP Server if it is not synchronized to a time server itself 4 13 22sntp time system Set the current sntp time Format sntp time system lt YYYY MM DD HH MM SS gt Mode Global Config CLI L2P 370 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 PTP Precision Time Protocol These commands show and configure the PTP IEEE 1588 parameters Note The operation parameter is available for all devices All other parameters are additionally available for MS20 MS30 MACH1040 MACH104 and PowerMICE 4 14 1 show ptp This command shows all PTP settings Format show ptp Mode Privileged EXEC and User EXEC PTP Global Operation Show the global PTP IEEE 1588 operation setting This field shows if PTP is enabled disabled on this device Possible values Enabled Disabled PTP Global Clock Mode Show which PTP clock mode is currently configured Possible values vl simple mode v2 simple mode vil boundary clock v2 boundary clock onestep v2 boundary clock twostep v2 transparent clock CLI L2P Release 8 0 05 2013 371 4 14 PTP Precision Time Protocol PTP Global Sync Up
93. 267 270 271 45 272 273 274 275 276 92 277 278 93 279 280 268 adding changing the name of deleting details frame acceptance mode IDs ingress filtering 267 272 267 248 269 270 275 277 279 271 276 jointime 199 200 201 202 203 204 205 leave all time leave time participation in port information resetting parameters summary information tagging voice vlan Global Config Mode voice vlan Interface Config Mode voice vlan auth WwW Web connections displaying 207 206 273 274 251 304 251 278 280 281 282 284 286 CLI L2P Release 8 0 05 2013 Further support Technical Questions For technical questions please contact any Hirschmann dealer in your area or Hirschmann directly You will find the addresses of our partners on the Internet at http www hirschmann com Contact our support at https hirschmann support belden eu com You can contact us in the EMEA region at Tel 49 0 1805 14 1538 E mail hac support belden com in the America region at Tel 1 717 217 2270 E mail inet support us belden com in the Asia Pacific region at Tel 65 6854 9860 E mail inet ap belden com Hirschmann Competence Center The Hirschmann Competence Center is ahead of its competitors Consulting incorporates comprehensive technical advice from system evaluation through network planning to project planning Training offers you an introduction to the basics
94. 2P 398 Release 8 0 05 2013 4 16 PoE Power over Ethernet Plus 4 16 PoE t Power over Ethernet Plus Additionally to the PoE Power over Ethernet commands these commands show and configure the Power over Ethernet Plus IEEE 802 3at parameters Note PoE is available for MACH104 16TX PoEP devices MACH 102 devices with media module M1 8TP RJ45 PoEP 4 16 1 show inlinepower slot This command shows the PoE configuration settings and states per slot Format show inlinepower slot lt slot gt all Mode Privileged EXEC and User EXEC Slot For MACH102 devices with M1 8TP RJ45 PoEP media modules Slot Slot number of the PoE module valid range 1 2 For MACH104 16TX PoEP devices Slot 1 Nominal Power Shows the configured nominal power budget which the device provides for the PoE ports of the PoE module Maximum Power Shows the nominal power which the device provides for the PoE ports of the PoE module valid range 0 248 W CLI L2P Release 8 0 05 2013 399 4 16 PoE Power over Ethernet Plus Reserved Power Shows the maximum power which the device provides for all PoE devices together which are connected to the PoE module based on their classification Delivered Power Shows the current demand for power on all PoE ports of the module valid range 0 248 W Send Traps Shows if the function is enabled disabled If send traps is enabled the device will send a trap if the power threshold
95. 2P Release 8 0 05 2013 261 4 9 Device Configuration Commands 4 9 97 storm control ingress limiting This command enables or disables the ingress limiter globally Format storm control ingress limiting disable enable Mode Global Config 4 9 98 storm control ingress mode Note This command is available for the MACH4000 and PowerMICE devices This command sets the frame type for the ingress limiter globally to BC or BC MC Format storm control ingress mode bc mctbc Mode Global Config CLI L2P 262 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 99 storm control broadcast port related This command enables the broadcast limiter per port Enter the maximum number of broadcasts that the given port is allowed to send unit frames per second min O no limit default O no limit Format storm control broadcast lt max broadcast rate gt Mode Interface Config 4 9 100storm control egress limit Note This command is available for the RS20 RS30 RS40 MS20 MS30 and OCTOPUS devices Sets the egress rate limit in kbit s O means no limit Format storm control egress limit lt max egress rate gt Mode Interface Config CLI L2P Release 8 0 05 2013 263 4 9 Device Configuration Commands 4 9 101storm control ingress limit Sets the ingress rate limit in kbit s O means no limit Format storm control ingress limit lt max ingress rate gt Mode Interface Config 4 9
96. 3 ingress filtering 271 276 link traps 257 258 physical mode 260 tagging 278 280 VLAN IDs 277 279 VLAN information 251 port sec action 480 port sec allowed ip 481 port sec allowed ip add 481 port sec allowed ip remove 482 port sec allowed mac 482 port sec allowed mac add 483 port sec allowed mac remove 483 port sec mode 479 Privileged Exec Mode 45 profinetio 129 Protocol Data Units See PDUs PTP Precision Time Protocol 371 ptp clock mode 377 ptp operation 378 586 ptp sync lower bound ptp sync upper bound ptp v1 burst ptp v1 operation ptp v1 preferred master ptp v1 re initialize ptp v1 subdomain name ptp v1 sync interval ptp v2bc announce interval ptp v2bc announce timeout ptp v2bc asymmetry ptp v2bc delay mechanism ptp v2bc domain ptp v2bc network protocol ptp v2bc operation ptp v2bc pdelay interval ptp v2bc priority1 ptp v2bc priority2 ptp v2bc sync interval ptp v2bc utc offset ptp v2bc utc offset valid ptp v2bc v1 compatibility mode ptp v2bc vlan ptp v2bc vlan priority ptp v2tc asymmetry ptp v2tc delay mechanism ptp v2tc management ptp v2tc multi domain mode ptp v2tc network protocol ptp v2tc operation ptp v2tc pdelay interval ptp v2tc power tlv check ptp v2tc primary domain ptp v2tc profile ptp v2tc sync local clock ptp v2tc syntonization ptp v2tc vlan ptp v2tc vlan priority R radius accounting mode radius server host radius server key radius server msgauth radius server pr
97. 4 14 PTP Precision Time Protocol 4 14 44ptp v2tc vian priority Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Use the command to configure the VLAN priority of tagged ptp packets Format ptp v2tc vlan priority lt 0 7 gt Mode Global Config 4 14 45ptp v2tc sync local clock Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Use the command to enable or disable synchronisation of the local clock only valid if syntonization is enabled Format ptp v2tc sync local clock enable disable Mode Global Config CLI L2P Release 8 0 05 2013 395 4 15 PoE Power over Ethernet 4 15 PoE Power over Ethernet These commands show and configure the Power over Ethernet IEEE 802 3af parameters 4 15 1 show inlinepower This command shows global Inline Power settings PoE Format show inlinepower Mode Privileged EXEC and User EXEC 4 15 2 show inlinepower port This command shows the configuration settings and states per port Format show inlinepower port lt slot port gt all Mode Privileged EXEC and User EXEC CLI L2P 396 Release 8 0 05 2013 4 15 PoE Power over Ethernet 4 15 3 inlinepower Global Config Configure the global Inline Power parameters Format inlinepower admin mode disable enable trap disable enable threshold lt 1 99 gt fast startup enable disable Mode Global Config admin mode Configure the global Inline Power adminis
98. 4 9 95 4 9 96 4 9 97 4 9 98 CLI L2P Release 8 0 05 2013 set igmp querier tx interval set igmp query ports to filter set pre login banner text selftest ramtest selftest reboot on hdxerror selftest reboot on error show auto disable brief show auto disable reasons show dip switch show garp show gmrp configuration show igmpsnooping show mac filter table gmrp show mac filter table igmpsnooping show mac filter table multicast show mac filter table static show mac filter table staticfiltering show mac filter table stats show mac notification show monitor session show port show link aggregation show rmon alarm show selftest show storm control show storm control limiters port show vlan show vlan brief show vlan port show voice vlan show voice vlan interface shutdown shutdown all snmp trap link status snmp trap link status all spanning tree bpdumigrationcheck speed storm control broadcast storm control egress limiting storm control ingress limiting storm control ingress mode 224 225 226 226 227 228 229 230 231 232 232 233 235 236 237 238 239 240 240 242 243 244 245 246 247 248 248 251 251 253 254 255 256 257 258 259 260 261 261 262 262 Content 4 10 4 11 10 4 9 99 storm control broadcast port related 4 9 100 storm control egress limit 4 9 101 storm control ingress limit 4 9 102 storm control ingress mode 4 9 103 storm control flowcontrol 4 9 104 storm
99. 5 2013 25 Command Structure slot port logical slot port 26 1 1 Format sub netted network may be used for the area ID Valid slot and port number separated by forward slashes For example 1 1 repre sents slot number 1 and port number 1 Logical slot and port number This is appli cable in the case of a link aggregation LAG and vlan router interfaces 9 x The operator can use the logical slot port to configure the link aggregation CLI L2P Release 8 0 05 2013 Command Structure 1 1 Format 1 1 4 Conventions Network addresses are used to define a link to a remote host workstation or network Network addresses are shown using the following syntax Address Type Format Range ipaddr 192 168 11 110 0 0 0 0 to 255 255 255 255 decimal macaddr A7 C9 89 DD A9 B3 hexadecimal digit pairs Table 1 Network Address Syntax Double quotation marks such as System Name with Spaces set off user de fined strings If the operator wishes to use spaces as part of aname param eter then it must be enclosed in double quotation marks Empty strings are not valid user defined strings Command completion finishes spelling the command when enough letters of a command are typed to uniquely identify the command word The command may be executed by typing lt enter gt command abbreviation or the com mand word may be completed by typing the lt tab gt or lt space bar gt command completion The value Err designates
100. 5 2013 363 4 13 SNTP Simple Network Time Protocol 4 13 13sntp client disable after sync If this option is activated the SNTP client disables itself once it is synchro nised to a server Format sntp client disable after sync lt on off gt Mode Global Config off Do not disable SNTP client when it is synchronised to a time server on Disable SNTP client as soon as it is synchronised to a time server 4 13 14sntp client offset The offset between UTC and local time in minutes default 60 Format sntp client offset lt 1000 to 1000 gt Mode Global Config CLI L2P 364 Release 8 0 05 2013 4 13 SNTP Simple Network Time Protocol 4 13 15sntp client request interval The synchronization interval in seconds default 30 Format sntp client request interval lt 1 3600 gt Mode Global Config 4 13 16no sntp client server Disable the SNTP client servers Format no sntp client server Mode Global Config CLI L2P Release 8 0 05 2013 365 4 13 SNTP Simple Network Time Protocol 4 13 17sntp client server primary Set the SNTP Client s primary server IP Address default 0 0 0 0 none Format sntp client server primary lt IP Address gt Mode Global Config no sntp client server primary Disable the primary SNTP client server Format no sntp client server primary Mode Global Config CLI L2P 366 Release 8 0 05 2013 4 13 SNTP Simple Network Time Protocol 4 13 18sntp client server sec
101. 506 Release 8 0 05 2013 CLI Commands Switching 5 9 Sub Ring Commands 5 9 8 sub ring lt id gt mrp domainID Set an MRP domain ID for the given Sub Ring ID Format sub ring lt id gt mrp domainID lt id gt default domainID Mode Global Config lt id gt sub ring lt id gt Specify the Sub Ring ID whose settings you want to configure lt id gt Enter an MRP domainlD for the given Sub Ring ID The ID has to be 16 bytes long and contain only printable characters default domainID Enter the default MRP domainID for the given Sub Ring ID The MRP domainID will be set to 255 255 255 255 255 255 259 255 255 255 255 255 255 255 255 255 CLI L2P Release 8 0 05 2013 507 CLI Commands Switching 5 9 Sub Ring Commands 5 9 9 sub ring delete ring Delete all existing Sub Rings IDs or a specific Sub Ring ID Format sub ring delete ring all ids lt id gt Mode Global Config all ids Delete all existing Sub Ring IDs lt id gt Delete the given Sub Ring ID Format a number in the range 1 2147483647 231 1 An ID of 0 is invalid 5 9 10 sub ring new ring Create a new Sub Ring ID The configuration will consist of default parameters and its operation will be disabled Format sub ring new ring lt id gt Mode Global Config lt id gt Enter a new Sub Ring ID Format a number in the range 1 2147483647 231 1 An ID of 0 is invalid CLI L2P 508 Release 8 0 05 2013 CLI Commands Security 6 CLI Commands Security
102. 768 Format spanning tree mst priority lt mstid gt lt 0 61440 gt Mode Global Config no spanning tree mst priority This command sets the bridge priority for a specific multiple spanning tree instance to the default value i e 32768 The instance lt mstid gt is a number that corresponds to the desired existing multiple spanning tree instance This command accepts the value 0 for the mstid If O defined as the default CIST ID is passed as the lt mstid gt then this command sets the Bridge Priority parameter for the common and internal spanning tree to the default value i e 32768 Format spanning tree mst priority lt mstid gt Mode Global Config CLI L2P 446 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 26 spanning tree mst vian This command adds an association between a multiple spanning tree instance and a VLAN The VLAN will no longer be associated with the common and internal spanning tree The instance lt mstid gt is a number that corresponds to the desired existing multiple spanning tree instance The lt vlanid gt corresponds to an existing VLAN ID 1 4042 This command accepts the value 0 for the mstid Format spanning tree mst vlan lt mstid gt lt vlanid gt Mode Global Config no spanning tree mst vian This command removes an association between a multiple spanning tree instance and a VLAN The VLAN will again be associated with the com mon and internal spann
103. 8 0 05 2013 4 13 SNTP Simple Network Time Protocol disable after sync Show if the SNTP client will be disabled once it is synchronized to the time server offset Show the local time s offset in minutes with respect to UTC positive values for locations east of Greenwich request interval Show the SNTP Client s request interval unit seconds server Show the SNTP Client s server IP addresses server primary Show the SNTP Client s primary server IP addresses server secondary Show the SNTP Client s redundant server IP addresses server threshold Show the SNTP Client s threshold in milliseconds 4 13 4 show sntp operation This command shows if the SNTP function is enabled or disabled Format show sntp operation Mode Privileged EXEC and User EXEC CLI L2P Release 8 0 05 2013 359 4 13 SNTP Simple Network Time Protocol 4 13 5 show sntp server This command shows the SNTP Server s configuration parameters Format show sntp server disable if local Mode Privileged EXEC and User EXEC disable if local Show if the server will be disabled if the time is running from the local clock and not synchronized to an external time source 4 13 6 show sntp status This command shows the SNTP state synchronization and error messages Format show sntp status Mode Privileged EXEC and User EXEC CLI L2P 360 Release 8 0 05 2013 4 13 SNTP Simple Network Time Protocol 4 13 7 show sntp time This com
104. 8 0 05 2013 191 4 9 Device Configuration Commands 4 9 17 monitor session lt session id gt This command configures a probe port and a monitored port for monitor ses sion port monitoring The first slot port is the source monitored port and the second slot port is the destination probe port If this command is executed while port monitoring is enabled it will have the effect of changing the probe and monitored port values Format monitor session lt session id gt mode source interface lt slot port gt direction rx tx tx rx 3 destination interface lt slot port gt Mode Global Config session id Session number currently session number 1 is supported mode Enable Disable port mirroring session Note does not affect the source or destination interfaces source interface lt slot port gt Configure the source interface in slot port notation direction Configure the direction of the interface rx Configure the direction of the interface as rx receive tx Configure the direction of the interface as tx transmit rx tx Configure the direction of the interface as rx tx receive and transmit destination interface lt slot port gt Configure the probe interface in slot port notation CLI L2P 192 Release 8 0 05 2013 4 9 Device Configuration Commands no monitor session lt session id gt This command removes the monitor session port monitoring designa tion from both the source
105. Almost every configuration command has a no form In general use the no form to reverse the action of a command or reset a value back to the default For example the no shutdown interface configuration command re verses the shutdown of an interface Use the command without the keyword no to re enable a disabled feature or to enable a feature that is disabled by default 3 4 2 Behavior of Command Help The no form is treated as a specific form of an existing command and does not represent a new or distinct command However the behavior of the and help text differ for the no form the help message shows only options that apply to the no form The help message is the same for all forms of the command The help string may be augmented with details about the no form behavior For the no interface and no inte cases of the the options displayed are identical to the case when the no token is not specified as in interface and inte CLI L2P Release 8 0 05 2013 49 Mode based CLI 3 4 No Form of a Command CLI L2P 50 Release 8 0 05 2013 CLI Commands Base 4 CLI Commands Base This chapter provides detailed explanation of the Switching commands The commands are divided into five functional groups Show commands display switch settings statistics and other information Configuration commands configure features and options of the switch For every configura
106. C and User EXEC CLI L2P Release 8 0 05 2013 327 4 12 LLDP Link Layer Discovery Protocol 4 12 10show Ildp config port This command shows all LLDP configuration settings and states concerning one or all ports Format show lldp config port lt slot port all gt admin state fdb mode hm mode max neighbors notification tlv Mode Privileged EXEC and User EXEC admin state Display the port s LLDP admin state if LLDP IEEE802 1AB frames will be transmitted and or received fdb mode Display the port s LLDP FDB mode hm mode Display the port s LLDP Hirschmann mode max neighbors Display the port s max no of LLDP neighbors notification Display the port s LLDP notification trap setting tlv Display the port s LLDP TLV settings they determine which informa tion is included in the LLDP frames that are sent The command is a group command and will output several lines of data CLI L2P 328 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 11show Ildp config port tiv This command shows all LLDP TLV configuration settings if the given infor mation is included in the sent LLDP frames or not concerning one or all ports Format show lldp config port lt slot port all gt tlv Mode Privileged EXEC and User EXEC inlinepower Enable or disable the sending of the port s Power over Ethernet capa bilities PoE IEEE 802 3af Note This command is available for devices supporting Po
107. CA the removal of a media module the temperature limits the defective link status of at least one port With the switch the indication of link status can be masked by the management for each port Link status is not monitored in the delivery condition the loss of Redundancy guarantee Ring network coupling The following conditions are reported in Stand by mode interrupted control line partner device running in Stand by mode HIPER Ring The following condition is reported in RM mode additionally Ring redundancy guaranteed Ring redundancy is not monitored in the delivery condition CLI L2P Release 8 0 05 2013 73 CLI Commands Base 4 1 System Information and Statistics Signal contact manual setting closed The signal contact s manual setting is closed open The signal contact s manual setting is open Signal contact operating state closed The signal contact is currently closed open The signal contact is currently open Signal contact trap enabled A trap is sent if the signal contact state changes disabled No trap is sent if the signal contact state changes Note To show the signal contact s port related settings use the command show port lt slot port gt all see show port on page 243 CLI L2P 74 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics 4 1 23 show slot This command is used to display information about slot s For slot ente
108. CH1000 RSR20 RSR30 Specify that you want to show the current Fast HIPER Ring ID s settings Format show fast hiper ring current id id info mode operation port port primary secondary summary ring name nodes vlan Mode Privileged EXEC and User EXEC id Display the given Fast HIPER Ring s ID info Display status information for the given Fast HIPER Ring ID mode Display the switch s mode for the given Fast HIPER Ring ID operation Display the switch s operative setting for the given Fast HIPER Ring ID Note In case of configuration problems this value may differ from the administrative setting may become Disabled port Display the ports for the given Fast HIPER Ring ID port primary Display the primary port for the given Fast HIPER Ring ID port secondary Display the secondary port for the given Fast HIPER Ring ID summary Display a summary for the given Fast HIPER Ring ID ring name Display the ring name for the given Fast HIPER Ring ID CLI L2P 468 Release 8 0 05 2013 CLI Commands Switching 5 4 Fast HIPER Ring nodes Display the number of nodes in the ring for the given Fast HIPER Ring ID vian Display the VLAN ID for the given Fast HIPER Ring ID 5 4 3 fast hiper ring Configure the Fast HIPER Ring Format fast hiper ring current id mode ring manager ring switch rm rs operation disable enable port primary secondary lt slot port gt ring name lt rin
109. Commands 4 9 78 show port This command displays port information Format show port lt slot port gt all name Mode Privileged EXEC and User EXEC Slot Port Valid slot and port number separated by forward slashes Name When the optional command parameter name was specified the out put is different It specifically includes the Interface Name as the sec ond column followed by other basic settings that are also shown by the normal command without the command parameter name Type If not blank this field indicates that this port is a special type of port The possible values are Mon this port is a monitoring port Look at the Port Monitoring screens to find out more information LA Mbr this port is a member of a Link Aggregation LAG Probe this port is a probe port Admin Mode Indicates the Port control administration state The port must be enabled in order for it to be allowed into the network May be enabled or disabled The factory default is enabled Physical Mode Indicates the desired port speed and duplex mode If auto negotiation support is selected then the duplex mode and speed will be set from the auto negotiation process Note that the port s maximum capability full duplex 100M will be advertised Otherwise this object will deter mine the port s duplex mode and transmission rate The factory default is Auto Physical Status Indicates the port speed and duplex mode Link Status Indica
110. Config enable Enable the restricted management access function globally disable Disable the restricted management access function globally 4 6 31 network mgmt access status This command is used to configure the restricted management access feature RMA It activates deactivates an existing rule with lt index gt Format network mgmt access status lt index gt enable disable Mode Global Config lt index gt Index of the entry in the range 1 16 enable Allow the service to have management access disable Do not allow the service to have management access CLI L2P 126 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 32 network parms This command sets the IP Address subnet mask and gateway of the router The IP Address and the gateway must be on the same subnet Format network parms lt ipaddr gt lt netmask gt gateway Mode Privileged EXEC 4 6 33 network protocol This command specifies the network configuration protocol to be used If you modify this value change is effective immediately after you saved your changes The parameter bootp indicates that the switch periodically sends requests to a Bootstrap Protocol BootP server or a DHCP server until a response is received none indicates that the switch should be manually configured with IP infor mation Independently of the BootP and DHCP settings HiDiscovery can be configured as an additional protocol Default DHCP
111. Config index Enter the index of the RMON alarm falling event index Enter the index for the falling event for the RMON alarm CLI L2P 204 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 35 set garp timer join This command sets the GVRP join time per port and per GARP Join time is the interval between the transmission of GARP Protocol Data Units PDUs registering or re registering membership for a VLAN or multicast group This command has an effect only when GVRP is enabled The time is from 10 to 100 centiseconds The value 20 centiseconds is 0 2 seconds Default 20 Format set garp timer join lt 10 100 gt Mode Global Config Interface Config no set garp timer join This command sets the GVRP join time per port and per GARP to 20 centiseconds 0 2 seconds This command has an effect only when GVRP is enabled Format no set garp timer join Mode Global Config Interface Config CLI L2P Release 8 0 05 2013 205 4 9 Device Configuration Commands 4 9 36 set garp timer leave This command sets the GVRP leave time per port Leave time is the time to wait after receiving an unregister request for a VLAN or a multicast group be fore deleting the VLAN entry This can be considered a buffer time for anoth er station to assert registration for the same attribute in order to maintain uninterrupted service time is 20 to 600 centiseconds The value 60 centi seconds is 0 6 seconds Note This command has an
112. Configure the crc fragment counter Default 1 000 Value range 1 1 000 000 interval Configure the measure interval in seconds for crc fragment detection Default 10 seconds Value range 5 180 seconds 4 17 15port monitor condition crc fragment Interface Config Use this command to enable or disable crc fragment settings on a port to trigger an action Default Disable Format port monitor condition crc fragment enable disable Mode Interface Config CLI L2P Release 8 0 05 2013 413 4 17 Port monitor CLI L2P 414 Release 8 0 05 2013 CLI Commands Switching 5 CLI Commands Switching This section provides detailed explanation of the Switching commands The commands are divided into two functional groups Show commands display spanning tree settings statistics and other information Configuration Commands configure features and options of the switch For every configuration command there is a show command that displays the configuration setting CLI L2P Release 8 0 05 2013 415 CLI Commands Switching CLI L2P 416 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 Spanning Tree Commands 5 1 1 show spanning tree This command displays spanning tree settings for the common and internal spanning tree when the optional parameter brief is not included in the com mand The following details are displayed Format show spanning tree brief Mode Privileged
113. Coupling s partner coupling port in single mode configuration Default none Format ring coupling port lt control local partner gt lt slot ports Mode Global Config 5 5 7 ring coupling redundancy mode Configure the Ring Coupling s redundancy mode Possible values are extended Slave responds to a failure in the remote ring or network normal Slave does not respond to a failure in the remote ring or network Default extended Format ring coupling redundancy mode lt extended normal gt Mode Global Config CLI L2P Release 8 0 05 2013 477 CLI Commands Switching 5 6 Port Security 5 6 Port Security With the Port Securitiy function you can specify for each port from which terminal devices data can be received and sent to other ports This function helps to protect the network from unauthorized access 5 6 1 show port sec mode Display the MAC IP Based Port Security global setting for all ports Format show port sec mode Mode Privileged EXEC and User EXEC 5 6 2 show port sec port Display the MAC IP Based Port Security port related settings allowed MAC address current MAC address allowed IP address current action and current port state Format show port sec port lt all lt slot port gt gt Mode Privileged EXEC and User EXEC CLI L2P 478 Release 8 0 05 2013 CLI Commands Switching 5 6 Port Security 5 6 3 port sec mode Configure the global MAC IP Based Port Security mode ip
114. E link aggregation Display the port s LLDP TLV inclusion of Link Aggregation mac phy config state Display the port s LLDP TLV inclusion of MAC Phy Cfg State max frame size Display the port s LLDP TLV inclusion of Max Frame Size PROFINET IO Status Display the port s LLDP TLV inclusion of PROFINET IO Status PROFINET IO Alias Display the port s LLDP TLV inclusion of PROFINET IO Alias PROFINET IO MRP Display the port s LLDP TLV inclusion of PROFINET IO MRP mgmt addr Display the port s LLDP TLV inclusion of Management Address port desc Display the port s LLDP TLV inclusion of Port Description port vlan Display the port s LLDP TLV inclusion of Port VLAN protocol Display the port s LLDP TLV inclusion of Protocol CLI L2P Release 8 0 05 2013 329 4 12 LLDP Link Layer Discovery Protocol sys cap Display the port s LLDP TLV inclusion of System Capabilities sys desc Display the port s LLDP TLV inclusion of System Description sys name Display the port s LLDP TLV inclusion of System Name vian name Display the port s LLDP TLV inclusion of VLAN Name 4 12 12show lIldp med Use this command to display a summary of the current LLDP MED global configuration Format show lldp med Mode Privileged EXEC Fast Start Repeat Count Display the Fast Start Repeat Count e g the number of LLDP PDUs that will be transmitted when the product is enabled The range is 1 to 10 Device class Display the Device class
115. GMP Snooping on a selected interface Format no set igmp Mode Interface Config 4 9 45 set igmp aging time unknown This command configures the IGMP Snooping aging time for unknown multicast frames unit seconds min 3 max 3 600 default 260 Format set igmp aging time unknown lt 3 3600 gt Mode Global Config CLI L2P 214 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 46 set igmp automatic mode If enabled this port is allowed to be set as static query port automatically if the LLDP protocol has found a switch or router connected to this port Use the command s normal form to enable the feature the no form to disable it Default disabled Format set igmp automatic mode Mode Interface Config CLI L2P Release 8 0 05 2013 215 4 9 Device Configuration Commands 4 9 47 set igmp forward all This command activates the forwarding of multicast frames to this interface even if the given interface has not received any reports by hosts N B this applies only to frames that have been learned via IGMP Snooping The pur pose is that an interface e g a HIPER Ring s ring port may need to forward all such frames even if no reports have been received on it This enables fast er recovery from ring interruptions for multicast frames Default disabled Format set igmp forward all Mode Interface Config no set igmp forward all This command disables the forwarding of all multicast frames
116. I Commands Base 4 6 Management Commands 4 6 29 network mgmt access modify This command is used to configure the restricted management access feature RMA The command modifies an existing rule with lt index gt to change IP address net mask and allowed services Format network mgmt access modify lt index gt ip lt address gt mask lt netmask gt http enable disable snmp enable disable telnet enable disable ssh enable disable Mode Global Config lt index gt Index of the entry in the range 1 16 lt ip gt Configure IP address which should have access to management lt mask gt Configure network mask to allow a subnet for management access lt http gt Configure if HTTP is allowed to have management access lt snmp gt Configure if SNMP is allowed to have management access lt telnet gt Configure if TELNET is allowed to have management access lt ssh gt Configure if SSH is allowed to have management access enable Allow the service to have management access disable Do not allow the service to have management access CLI L2P Release 8 0 05 2013 125 CLI Commands Base 4 6 Management Commands 4 6 30 network mgmt access operation This command is used to configure the restricted management access feature RMA It enables or disables the service to have management access The default value is disable Format network mgmt access operation disable enable Mode Global
117. LI Commands Switching 5 5 Redundant Coupling 5 5 Redundant Coupling The control intelligence built into the switch allows the redundant coupling of HIPER Rings and network segments Two network segments can be connected via two separate paths with one of the following switches RS2 16M RS20 RS30 RS40 RSR20 RSR30 MICE Rel 3 0 or higher MS20 MS30 PowerMICE MACH1000 MACH3000 Rel 3 3 or higher MACH4000 The switch in the redundant line and the switch in the main line inform each other about their operating states by using control frames via the ethernet or via the control line Note For redundancy security reasons the Rapid Spanning Tree protocol and redundant network ring coupling may not be enabled simultaneously Note The network that connects the master and the slave must always be a HiPER Ring The coupling switch in single mode also must have a HiPER Ring Configured Further information concerning this function you will find in the User Manual Redundancy Configuration These commands allow you to configure the redundant coupling of network segments CLI L2P Release 8 0 05 2013 471 CLI Commands Switching 5 5 Redundant Coupling 5 5 1 show ring coupling This command displays the settings and states of the network coupling ring coupling To set up a new Ring Coupling configuration when no configuration is cur rently present e g after a clear command always set the local port first Please r
118. Limiter Mode Note This command is available for the MACH4000 and PowerMICE devices Sets the global mode for the ingress limiter The factory default is Broadcasts only Egress Broadcast Limiting May be enabled or disabled The factory default is disabled Egress Limiting all traffic May be enabled or disabled The factory default is disabled 802 3x Flow Control Mode May be enabled or disabled The factory default is disabled CLI L2P Release 8 0 05 2013 247 4 9 Device Configuration Commands 4 9 83 show storm control limiters port This command displays the limiter settings per port 0 means that the re spective limiter is disabled Format show storm control limiters port lt slot port gt all Mode Privileged EXEC and User EXEC Ingress Mode Note This command is available for the devices RS20 RS30 RS40 MS20 MS30 and OCTOPUS Shows the mode for the ingress limiter The factory default is Broad casts only Ingress Limit Shows the ingress rate limit The factory default is 0 Egress Broadcast Limit Shows the egress broadcast rate limit The factory default is 0 Egress Limit all traffic Note This command is available for the devices RS20 RS30 RS40 MS20 MS30 and OCTOPUS Shows the egress rate limit for all frame types The factory default is 0 4 9 84 show vlan This command displays detailed information including interface information for a specific VLAN The ID is a valid VLAN identification
119. Management Commands 4 10 8 users passwd This command is used to change a password The password should not be more than eight alphanumeric characters in length If a user is authorized for authentication or encryption is enabled the password must be at least eight alphanumeric characters in length The username and password are case sensitive When a password is changed a prompt will ask for the former password If none press enter Note Make sure that the passwords of the users differ from each other If two or more users try to choose the same password the CLI will display an error message Default No Password Format users passwd lt username gt lt password gt Mode Global Config no users passwd This command sets the password of an existing operator to blank When a password is changed a prompt will ask for the operator s former pass word If none press enter Format no users passwd lt username gt lt password gt Mode Global Config CLI L2P 292 Release 8 0 05 2013 4 10 User Account Management Commands 4 10 9 users snmpv3 accessmode This command specifies the snmpv3 access privileges for the specified login user The valid accessmode values are readonly or readwrite The lt username gt is the login user name for which the specified access mode applies The default is readwrite for admin user readonly for all other users Default admin readwrite other readonly Format users snmpv3 ac
120. Mode Possible values Disable Enable CLI L2P Release 8 0 05 2013 253 4 9 Device Configuration Commands 4 9 88 show voice vlan interface Use this command to display Use this command to display a summary of the current Voice VLAN configuration for a specific interface lt slot port gt indicates a specific physical interface all indicates all valid interfaces Format show voice vlan interface lt slot port gt all Mode Privileged EXEC lt slot port gt Indicates a specific physical interface all Indicates all valid interfaces Interface Displays the physical interface Voice VLAN Interface Mode Displays the Voice VLAN Interface Mode Value range Disabled Enabled Voice VLAN Authentication Displays the Voice VLAN Authentication Value range Disabled Enabled Voice VLAN Port Status Displays the Voice VLAN Port Status Value range Disabled Enabled CLI L2P 254 Release 8 0 05 2013 4 9 89 shutdown This command disables a port Default enabled Format shutdown Mode Interface Config no shutdown This command enables a port Format no shutdown Mode Interface Config CLI L2P Release 8 0 05 2013 4 9 Device Configuration Commands 255 4 9 90 shutdown all This command disables all ports Default enabled Format shutdown all Mode Global Config no shutdown all This command enables all ports Format no shutdown all Mode Global Config 256 4 9 Device C
121. N entries on this switch that have been created statically Dynamic VLAN Entries The number of presently active VLAN entries on this switch that have been created by GVRP registration VLAN Deletes The number of VLANs on this switch that have been created and then deleted since the last reboot Time Since Counters Last Cleared The elapsed time in days hours minutes and seconds since the statistics for this switch were last cleared 4 1 18 show interface switchport This command displays data concerning the internal port to the management agent Format show interface switchport Mode Privileged EXEC and User EXEC CLI L2P Release 8 0 05 2013 69 CLI Commands Base 4 1 System Information and Statistics 4 1 19 show interface utilization This command displays the utilization statistics for the entire device Format show interface utilization Mode Global Config Interface Display port number in lt slot port gt notation Utilization Display the utilization on this port Possible values 0 100 00 Lower threshold Display the lower threshold setting for the utilization statistics on this port Possible values 0 100 00 Upper threshold Display the upper threshold setting for the utilization statistics on this port Possible values 0 100 00 Alarm condition Display the alarm condition setting for the utilization statistics on this port Possible values true false CLI L2P 70 Release 8 0 05 2013
122. P server address probe setting Possible values Enabled Disabled DHCP Port Related Settings Port Display the port number in lt slot port gt notation Mode Display the DCHP server interface information Possible values enable disable DHCP Pools Display the DCHP server pool related information CLI L2P 492 Release 8 0 05 2013 CLI Commands Switching 5 8 DHCP Server Commands 5 8 3 show dhcp server operation Display DHCP Server global information Format show dhcp server operation Mode Privileged EXEC and User EXEC DHCP Server Display the DCHP server operation setting Possible values Enabled Disabled DHCP Address Probe Display the DCHP server address probe setting Possible values Enabled Disabled 5 8 4 show dhcp server port Display the DCHP port related settings for all ports or specific port only Format show dhcp server port all lt slot port gt Mode Privileged EXEC and User EXEC show dhcp server port all Display the DCHP port related settings for all ports show dhcp server port lt slot port gt Display the DCHP port related settings for the specified port only CLI L2P Release 8 0 05 2013 493 CLI Commands Switching 5 8 DHCP Server Commands 5 8 5 show dhcp server pool Display DHCP server pool information for all pool or detailed information for a specific pool Format show dhcp server pool all lt id gt Mode Privileged EXEC and User EXEC show dhcp server pool all Displa
123. PTP v2TC parameters to match the default of a profile end to end transparent clock default p2p Configure the PTP v2TC parameters to match the default of a profile peer to peer transparent clock power Configure the PTP v2TC parameters to match the default of a profile power profile C37 238 4 14 41ptp v2tc syntonization Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Enable or disable the syntonization of the transparent clock Format ptp v2tc syntonization enable disable Mode Global Config CLI L2P Release 8 0 05 2013 393 4 14 PTP Precision Time Protocol 4 14 42ptp v2tc vlan Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Use the command to configure the VLAN in which PTP packets are send With a value of none all packets are send untagged Format ptp v2tc vlan none lt 0 4042 gt Mode Global Config 4 14 43ptp v2tc power tiv check Note This command is available for the devices of the MACH104 MACH1040 PowerMICE and MS20 MS30 family Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Use the command to configure the Power TLV Check Default Disable Format ptp v2tc power tlv check enable disable Mode Global Config enable Only announce messages including the TLVs specified in the power profile C37 238 are accepted for syntonization disable Disable v2tc power tlv check CLI L2P 394 Release 8 0 05 2013
124. Possible values Ring is open Already Configured Loop Source Multiple RM Configuration failed Port not in full duplex mode ARC not supported by the ring devices Last Check result Display the Result of the last check Nr Display the number of the check result Mac Address Display the concerned MAC address IP Address Display the concerned IP address Type Display the type of the result Possible values Error Warning Possible check results examples Error Ring is open Warning Already Configured HIPER Ring Portl Tel POrt2 te e2 Warning Already Configured MRP Porti 1 9 Port2 1 10 VLAN ID 0 Warning Already Configured Fast HIPER Ring Port le sh 3 Ports L4 Error Loop Source Hop count 1 Portis 1 1 Portz hee Porte TL5 Error Multiple RM MRP Error Configuration failed MRP Warning Port not in full duplex mode Portl 1 1 Half Portz 142 Fal Warning ARC not supported by the ring devices CLI L2P 460 Release 8 0 05 2013 CLI Commands Switching 5 3 HIPER Ring 5 3 HIPER Ring The concept of the HIPER Ring enables the construction of high availability ring shaped network structures Within such a ring topology network compo nents supporting the HIPER Ring are connected with each other via their ring ports Exactly one redundancy manager assumes control of the ring These commands are for configuring the Hirschmann High Performance
125. Redundancy Ring Further information concerning this function you will find in the User Manual Redundancy Configuration CLI L2P Release 8 0 05 2013 461 CLI Commands Switching 5 3 HIPER Ring 5 3 1 show hiper ring This command displays the settings and states of the HIPER Ring The fol lowing details are displayed on execution of the command Format show hiper ring info mode port primary secondary redundancy state rm state recovery delay Mode Privileged EXEC and User EXEC info Display the information about the HIPER Ring configuration cabling mode Display the HIPER Ring mode settings port Display the HIPER Ring s primary and secondary port properties port primary Display the HIPER Ring s primary port properties port secondary Display the HIPER Ring s secondary port properties redundancy state Display the actual state of the HIPER Ring redundancy rm state Display the state of the HIPER Ring redundancy manager recovery delay Display the value of the recovery delay CLI L2P 462 Release 8 0 05 2013 CLI Commands Switching 5 3 HIPER Ring 5 3 2 hiper ring Configure the HIPER Ring Press Enter for a list of valid commands and their recommended order Format hiper ring Mode Global Config no hiper ring Clear the HIPER Ring configuration delete it Format no hiper ring Mode Global Config 5 3 3 hiper ring mode This command sets the HIPER Ring mode Possible values are
126. Ring ID Format sub ring lt id gt protocol standard mrp Mode Global Config lt id gt Specify the Sub Ring ID whose settings you want to configure standard_mrp Set MRP as sub ring protocol for the given Sub Ring ID CLI L2P 504 Release 8 0 05 2013 CLI Commands Switching 5 9 Sub Ring Commands 5 9 5 sub ring lt id gt port Specify the switch s ports for the given Sub Ring ID Format sub ring lt id gt port lt slot port gt Mode Global Config lt id gt Specify the Sub Ring ID whose settings you want to configure lt slot port gt Specify the port in slot port notation 5 9 6 sub ring lt id gt ring name Set a ring name for the given Sub Ring ID Format sub ring lt id gt ring name lt ring name gt Mode Global Config lt id gt Specify the Sub Ring ID whose settings you want to configure lt ring name gt Enter a name for the given Sub Ring ID The name may be up to 254 characters long and contain only printable characters If you do not give a name the current name will be set to an empty string CLI L2P Release 8 0 05 2013 505 CLI Commands Switching 5 9 Sub Ring Commands 5 9 7 sub ring lt id gt vian Specify the VLAN for the given Sub Ring ID Format sub ring lt id gt vlan lt 0 4042 gt Mode Global Config lt id gt Specify the Sub Ring ID whose settings you want to configure lt 0 4042 gt Enter the VLAN for the given Sub Ring ID min 0 max 4042 default 0 CLI L2P
127. TX PoEP devices Slot 1 CLI L2P Release 8 0 05 2013 401 4 17 Port monitor 4 17 Port monitor These commands show and configure the port monitor parameters The port monitor feature monitors certain port or global states or changes and performs a certain action when the specified condition occurs Using this commands you can disable a port and send a trap see port ad min shutdown Disabling a port by condition will not modify the configuration and therefore not keep the port in disabled state after reload reboot To enable the action if a port state occurs enable the port monitor globally enable the port monitor on the port configure condition s that is are performed in port state on a port and an action that is performed on that port when the condition complies The condition can be link flapping or CRC Fragments error an action can be sending a trap or disabling that port and send a trap If a port was disabled by the Port Monitor the port can be enabled again with a port monitor reset command see port monitor reset CLI L2P 402 Release 8 0 05 2013 4 17 Port monitor 4 17 1 show port monitor Use this command to display the global Port Monitor settings Format show port monitor Mode Global Config Port Monitor Display if Port Monitor function is enabled or disabled Condition crc fragment interval seconds Display the condition of the CRC fragment interval in seconds Condition cr
128. The Force Protocol Version can be one of the following 802 1d ST BPDUs are transmitted 802 1Q 2005 functionality supported 802 1s ST BPDUs are transmitted 802 1Q 2005 functionality supported 802 1w RST BPDUs are transmitted 802 1Q 2005 functionality supported Default 802 1w Format Spanning tree forceversion lt 802 1d 802 1s 802 1w gt Mode Global Config no spanning tree forceversion This command sets the Force Protocol Version parameter to the default value i e 802 1w Format no spanning tree forceversion Mode Global Config CLI L2P Release 8 0 05 2013 435 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 16 spanning tree forward time This command sets the Bridge Forward Delay parameter to a new value for the common and internal spanning tree The forward time value is in seconds within a range of 4 to 30 with the value being greater than or equal to Bridge Max Age 2 1 Default 15 Format spanning tree forward time lt 4 30 gt Mode Global Config no spanning tree forward time This command sets the Bridge Forward Delay parameter for the com mon and internal spanning tree to the default value i e 15 Format no spanning tree forward time Mode Global Config CLI L2P 436 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 17 spanning tree guard loop This command enables loop guard and disables root guard guard on an interface Default disabled F
129. The port which this address was learned if Index This object indicates the iflndex of the interface table entry associated with this port Status The status of this entry The meanings of the values are Learned The value of the corresponding instance was learned by observing the source MAC addresses of incoming traffic and is cur rently in use Management The value of the corresponding instance system MAC address is also the value of an existing instance of dotidStaticAddress CLI L2P 72 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics 4 1 22 show signal contact The signal contact is for displaying the manual setting and the current state of the signal contact the monitoring functions of the switch the signal contacts trap setting Format show signal contact 1 2 all mode monitor state trap Mode Privileged EXEC and User EXEC Signal contact mode Auto The signal contact monitors the functions of the switch which makes it possible to perform remote diagnostics A break in contact is reported via the zero potential signal contact relay contact closed circuit Device Status The signal contact monitors the device status Manual This command gives you the option of remote switching the signal contact Signal contact monitor Displays the possible monitored events and which of them are moni tored the detected failure of at least one of the supply voltages the removal of the A
130. This will allow this port to transition to Forwarding State without delay Format spanning tree auto edgeport Mode Interface Config no spanning tree auto edgeport This command specifies that this port is not an Edge Port within the com mon and internal spanning tree Format no spanning tree auto edgeport Mode Interface Config CLI L2P 430 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 11 spanning tree bpduguard This command sets the BPDU Bridge Protocol Data Units Guard on the switch to enabled Default disabled Format Spanning tree bpduguard Mode Global Config no spanning tree bpduguard This command sets the BPDU Bridge Protocol Data Units Guard to disabled Format no spanning tree bpduguard Mode Global Config CLI L2P Release 8 0 05 2013 431 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 12 spanning tree configuration name This command sets the Configuration Identifier Name for use in identifying the configuration that this switch is currently using The lt name gt is a string of at most 32 characters Default The base MAC address displayed using hexadecimal notation as specified in IEEE 802 standard Format Spanning tree configuration name lt name gt Mode Global Config no spanning tree configuration name This command resets the Configuration Identifier Name to its default Format no spanning tree configuration name Mode Global Config CLI L2P 432 Rele
131. _ipv4 of the transparent clock Format ptp v2tc network protocol ieee802 3 udp ipv4 Mode Global Config 4 14 37ptp v2tc operation Enable or disable the sending and receiving processing of PTP synchroni zation messages Format ptp v2tc operation disable enable Mode Interface Config enable Port sends and receives processes PTP synchronization messages disable Port blocks PTP synchronization messages CLI L2P Release 8 0 05 2013 391 4 14 PTP Precision Time Protocol 4 14 38ptp v2tc pdelay interval Configure the Peer Delay Interval in seconds 1 2 4 8 16 32 This interval is used if delay mechanism is set to p2p Format ptp v2tc pdelay interval 1 2 4 8 16 32 Mode Interface Config 4 14 39ptp v2tc primary domain Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Configure the primary domain for syntonization of the transparent clock Format ptp v2tc primary domain lt 0 255 gt Mode Global Config CLI L2P 392 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 40ptp v2tc profile Note This command is available for the devices of the MACH104 MACH1040 PowerMICE and MS20 MS30 family Configure the PTPv2 Transparent Clock IEEE1588 2008 specific settings Use this command to configure the PTP v2TC parameters to match the default of a profile Format ptp v2tc profile power default e2e default p2p Mode Global Config default e2e Configure the
132. able Disable CLI L2P 122 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 26 network javascriptmode When the user accesses the switch s graphical user interface web based in terface the switch s web server will deliver a HTML page that contains JavaScript Default enabled Format network javascriptmode Mode Privileged EXEC no network javascriptmode When the user accesses the switch s graphical user interface web based interface the switch s web server will deliver a HTML page that contains no JavaScript Format no network javascriptmode Mode Privileged EXEC CLI L2P Release 8 0 05 2013 123 CLI Commands Base 4 6 Management Commands 4 6 27 network mgmt access add This command is used to configure the restricted management access feature RMA It creates a new empty entry at the lt index gt if you enter the command with parameter lt index gt or at the next free index if you enter the command without parameter lt index gt Format network mgmt access add index Mode Global Config index Index of the entry in the range 1 16 4 6 28 network mgmt access delete This command is used to configure the restricted management access feature RMA It deletes an existing entry with lt index gt Format network mgmt access delete lt index gt Mode Global Config lt index gt Index of the entry in the range 1 16 CLI L2P 124 Release 8 0 05 2013 CL
133. able Disable the l O Module mirroring for a single digital output from Enable the lO Module mirroring for a single digital output from lt P address gt lt slot input gt lt IPaddress gt The IP address value detemines the IP address used for reading the input value Use IP address 127 0 0 1 or the sys tem IP address to mirror inputs from a local IO module When IP address is 0 0 0 0 no input is mirrored to the output the output value is set to low Default 0 0 0 0 lt slot input gt The lt input gt value determines the input number on this device Default 1 1 0 05 2013 111 CLI Commands Base 4 6 Management Commands 4 6 15 show digital input This command shows the input value or configuration from all available digital inputs of the MICE I O Module Format show digital input Mode Global Config Digital Input System Information Admin State Show the O Module digital inputs Admin State Possible values Disabled Enabled Refresh Interval s Show the O Module digital inputs Refresh Interval in seconds Value range 1 10 Digital Input Information Input Show numbers of the O Module digital input Possible values example 1 1 1 2 1 3 1 4 3 1 3 2 3 3 3 4 Value Show the value of the O Module digital inputs Possible values Not available High Low Log Event Show if Event logging is enabled or disabled for the O Module digital inputs Possible values Disabled Enabled SNMP
134. ably but it ensures accurate transmission Xmodem can be implemented either in software or in hardware Many modems and almost all communications software packages support Xmodem However it is useful only at relatively slow data transmission speeds less than 4 800 bps Enhanced versions of Xmodem that work at higher transmission speeds are known as Ymodem and Zmodem CLI L2P Release 8 0 05 2013 581 Glossary CLI L2P 582 Release 8 0 05 2013 Index 9 Index A addport address conflict adminmode arc areaid authentication login authorization network radius auto disable reason auto disable timer auto negotiate auto negotiate all B boot skip aca on boot bridge address learning bridge address relearn detect operation bridge address relearn detect threshold bridge aging time bridge duplex mismatch detect operation bridge fast link detection bridge framesize bridge vian learning broadcasts broadcast storm recovery mode 262 297 Cc cable crossing cablestatus classofservice dot1pmapping classofservice ip dscp mapping classofservice trus clear arp table switch clear commands clear arp table switch clear config clear pass clear traplog clear vlan clear config clear config factory clear counters clear dot1x statistics clear eventlog clear hiper ring clear igmpsnooping clear inlinepower clear link aggregation 303 CLI L2P Release 8 0 05 2013 177 296 178 458 25 511 513 179 180
135. age Protocol on page 572 571 Glossary IGMP See Internet Group Management Protocol on page 572 IGMP Snooping A series of operations performed by intermediate systems to add logic to the network to optimize the flow of multicast traffic these intermediate systems such as Layer 2 switches listen for IGMP messages and build mapping tables and associated forwarding filters in addition to reducing the IGMP protocol traffic See Internet Group Management Protocol on page 572 for more information Internet Control Message Protocol ICMP is an extension to the Internet Protocol IP that supports packets containing error control and informational messages The PING command for example uses ICMP to test an Internet connection Internet Group Management Protocol IGMP is the standard for IP Multicasting on the Internet IGMP is used to establish host memberships in particular multicast groups on a single network The mechanisms of the protocol allow a host to inform its local router using Host Membership Reports that it wants to receive messages addressed to a specific multicast group All hosts conforming to Level 2 of the IP Multicasting specification require IGMP 572 IP See Internet Protocol on page 572 IP Multicasting Sending out data to distributed servers on the MBone Multicast Backbone For large amounts of data IP Multicast is more efficient than normal Internet transmis
136. ame lt ipaddr gt lt netmask gt are the required values for the command gateway is the optional value for the command Example 2 snmp server location lt loc gt snmp server location is the command name lt loe gt is the required parameter for the command Example 3 clear vlan clear vlan is the command name CLI L2P 24 Release 8 0 05 2013 Command Structure 1 1 Format 1 1 1 Command The text in courier font is to be typed exactly as shown 1 1 2 Parameters Parameters are order dependent Parameters may be mandatory values optional values choices or a combi nation lt parameter gt The lt gt angle brackets indicate that a mandatory param eter is to be entered in place of the brackets and text inside them parameter The square brackets indicate that an optional parame ter may be entered in place of the brackets and text inside them choicel choice2 The indicates that only one of the parameters should be entered The curly braces indicate that a parameter must be chosen from the list of choices 1 1 3 Values macaddr The MAC address format is six hexadeci mal numbers separated by colons for example 00 06 29 32 81 40 areaid Area IDs may be entered in dotted decimal notation for example 0 0 0 1 An area ID of 0 0 0 0 is reserved for the backbone Area IDs have the same form as IP addresses but are distinct from IP addresses The IP network address of the CLI L2P Release 8 0 0
137. ame 505 sub ring vlan 506 Sub Ring Commands 501 sub ring delete ring 508 sub ring new ring 508 switch information related 201 commands 245 246 247 248 inventory 231 232 233 235 236 237 239 240 511 resetting 320 322 statistics related 201 commands 60 62 68 System Information and Statistics Commands 85 System Utilities 296 511 system utilities 296 316 589 Index T tagging telnet sessions closing sessions displaying telnetcon maxsessions telnetcon timeout temperature traceroute transport input telnet transport output telnet trap log clearing trunks See LAGs U 278 285 303 User Account Management Commands user account management commands 201 commands User Exec Mode users adding deleting displaying passwords users access users defaultlogin users login users name users passwd users snmpv3 accessmode users snmpv3 authentication users snmpv3 encryption utilization alarm threshold v vlan vlan acceptframe vlan ingressfilter VLAN Mode vlan name vlan participation vlan participation all vlan port acceptframe all vlan port ingressfilter all vlan port priority all vlan port pvid all vlan port tagging all vlan priority vlan pvid vlan tagging vlan0 transparent mode VLANs 590 290 289 290 292 289 269 280 99 316 286 162 163 319 299 100 101 304 285 285 45 291 291 287 302 290 288 552 291 292 293 294 295 80
138. andmaster Universally Unique Dentifier i e the MAC address of the grandmaster clock Unique Universal Identifier Possible values 32 hexadecimal numbers hh hh hh hh hh hh hh hh PTP Status Parent UUID Show parent Universally Unique Dentifier i e the MAC address of the master clock with which the local time is directly synchronized Possible values 32 hexadecimal numbers hh hh hh hh hh hh hh hh PTP Status Clock Stratum Show the qualification of the local clock PTP Status Clock Identifier Show the device s clock properties e g accuracy epoch etc PTPv1 Boundary Clock Ports Show port number operation status burst status of the PTPv1 Boundary Clock Ports Port Show the number of the interface in slot port notation Operation Show if sending and receiving processing PTP synchronization messages is enabled or disabled on the device Possible values Enabled Disabled Burst Show the status of the burst feature for synchronization running during a synchronization interval Possible values Enabled Disabled Status Show the ports PTP status Possible values Initializing faulty disabled listening pre master master passive uncalibrated slave CLI L2P Release 8 0 05 2013 373 4 14 PTP Precision Time Protocol 4 14 2 show ptp configuration This command shows the configured PTP IEEE 1588 values depending on the currently configured clock mode Format show ptp configuration Mode
139. ard slashes STP Mode Current STP mode of this port in the specified spanning tree instance Type Currently not used Port Forwarding State The forwarding state of the port in the specified spanning tree instance Port Role The role of the specified port within the spanning tree CLI L2P Release 8 0 05 2013 425 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 6 show spanning tree mst summary This command displays settings and parameters for the specified multiple spanning tree instance The following details are displayed Format show spanning tree mst summary Mode Privileged EXEC and User EXEC MST Instance ID Valid value 0 Associated FIDs List of forwarding database identifiers associated with this instance Associated VLANs List of VLAN IDs associated with this instance CLI L2P 426 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 7 show spanning tree summary This command displays spanning tree settings and parameters for the switch The following details are displayed on execution of the command Format show spanning tree summary Mode Privileged EXEC and User EXEC Spanning Tree Adminmode Enabled or disabled Spanning Tree Version Version of 802 1 currently supported IEEE 802 1Q 2005 IEEE 802 1D 2004 based upon the Force Protocol Version parameter Configuration Name Configured name Configuration Revision Level Configured value Configuration Digest Key Calculated val
140. arm delete lt index gt Mode Global Config index Enter the index of the RMON alarm 4 9 26 rmon alarm enable This command enables an RMON alarm Format rmon alarm enable lt index gt Mode Global Config index Enter the index of the RMON alarm CLI L2P 200 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 27 rmon alarm disable This command disables an RMON alarm Format rmon alarm disable lt index gt Mode Global Config index Enter the index of the RMON alarm 4 9 28 rmon alarm modify mib variable This command modifies the mib variable of an RMON alarm Format rmon alarm modify lt index gt mib variable lt mib variable gt Mode Global Config index Enter the index of the RMON alarm mib variable Enter the MIB variable CLI L2P Release 8 0 05 2013 201 4 9 Device Configuration Commands 4 9 29 rmon alarm modify thresholds This command modifies the thresholds of an RMON alarm Format rmon alarm modify lt index gt thresholds lt rising threshold gt lt falling threshold gt Mode Global Config index Enter the index of the RMON alarm rising threshold Enter the rising threshold for the RMON alarm falling threshold Enter the falling threshold for the RMON alarm 4 9 30 rmon alarm modify interval This command modifies the interval of an RMON alarm Format rmon alarm modify lt index gt interval lt interval gt Mode Global Config index Enter the index of the RMON alarm
141. art of the string becomes part of the string becomes part of the string Tab 3 Special characters escaped CLI L2P 30 Release 8 0 05 2013 Command Structure 1 1 Format The commands with strings that may contain these special characters are listed below Note Not every string is allowed to contain special characters The string that is output with the escape characters if necessary is shown as Command Note System Description At the beginning of the script System Version At the beginning of the script Tab 4 Commands in Privileged Exec mode Command Note snmp server location snmp server contact snmp server community snmp server community ipaddr lt ip gt snmp server community ipmask lt ip gt snmp server community ro snmp server community rw no snmp server community mode no snmp server community link aggregation spanning tree configuration name ptp subdomain name Tab 5 Commands in Global Contig mode Command Note name Tab 6 Commands in Interface Config mode CLI L2P Release 8 0 05 2013 31 Command Structure 1 1 Format Command Note vlan name lt p gt Tab 7 Commands in VLAN Database mode When a device creates a script a human readable header is included that lists the special characters and the escape characters Parameter string escape handling 1 Characters to be pre
142. ary Server IP Address a b c d SNTP Client Secondary Server IP Address Show SNTP Client Secondary Server IP Address a b c d SNTP Client Threshold to Server Time Show SNTP Client Threshold to Server Time in milliseconds SNTP Operation Global Show SNTP Operation Global Disabled or Enabled SNTP Operation Server Show SNTP Operation Server Disabled or Enabled SNTP Operation Client Show SNTP Operation Client Disabled or Enabled SNTP Status Show SNTP Status SNTP Time Show SNTP Time yyyy mm dd hh mm ss SNTP System Time Show SNTP system Time yyyy mm dd hh mm ss CLI L2P Release 8 0 05 2013 357 4 13 SNTP Simple Network Time Protocol 4 13 2 show sntp anycast This command shows all SNTP anycast configuration settings Format show sntp anycast address transmit interval vlan Mode Privileged EXEC and User EXEC address Show the SNTP server s anycast destination IP Address transmit interval Show the SNTP Server s interval for sending Anycast messages unit seconds vlan Show the SNTP server s Anycast VLAN ID used for sending Anycast messages 4 13 3 show sntp client This command shows all SNTP anycast configuration settings Format show sntp client accept broadcast disable after sync offset request interval server lt primary secondary gt threshold Mode Privileged EXEC and User EXEC accept broadcast Show if the SNTP Client accepts SNTP broadcasts CLI L2P 358 Release
143. ase 8 0 05 2013 4 11 System Utilities 4 11 26signal contact connection error This command configures the signal contact link error monitoring for this port Format Signal contact connection error disable enable Mode Interface Config disable A link down event on this port will be not monitored by a signal con tact default enable A link down event on this port will be monitored by a signal contact 4 11 27signal contact This command configures the signal contacts Format signal contact 1 2 all mode auto device status manual monitor aca removal all connection error hiper ring module removal power supply 1 power supply 2 power supply 3 1 power supply 3 2 power supply 4 1 power supply 4 2 ring coupling temperature disable enable state closed open trap disable enable Mode Global Config CLI L2P Release 8 0 05 2013 317 4 11 System Utilities Contact No mode Selection of the signal contact 1 signal contact 1 2 signal contact 2 all signal contact 1 and signal contact 2 Selection of the operational mode auto function monitoring device status the device status determines the signal contact s status manual manually setting the signal contact monitor state trap 318 Enables or disables the monitoring of the selected event or all events enable monitoring disable no monitoring Set the manual setting of the sig
144. ase 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 13 spanning tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using The Configu ration Identifier Revision Level is a number in the range of 0 to 65535 Default 0 Format spanning tree configuration revision lt 0 65535 gt Mode Global Config no spanning tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using to the default value i e 0 Format no spanning tree configuration revision Mode Global Config CLI L2P Release 8 0 05 2013 433 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 14 spanning tree edgeport This command specifies that this port is an Edge Port within the common and internal spanning tree This will allow this port to transition to Forwarding State without delay Format spanning tree edgeport Mode Interface Config no spanning tree edgeport This command specifies that this port is not an Edge Port within the com mon and internal spanning tree Format no spanning tree edgeport Mode Interface Config CLI L2P 434 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 15 spanning tree forceversion This command sets the Force Protocol Version parameter to a new value
145. at reboot delay lt seconds gt Mode Privileged EXEC lt seconds gt The number of seconds after which the switch will reboot Value range None no reboot sceduled 0 2 147 483 sec 596 h 31 min 23 sec clear reboot This command cancels a scheduled reboot CLI L2P 320 Release 8 0 05 2013 4 11 System Utilities 4 11 30show reboot This command displays if a reboot is sceduled for the device If sceduled the command displays the number of seconds after which the switch will reboot Format show reboot Modes Privileged EXEC User Exec lt seconds gt The number of seconds after which the switch will reboot Value range None no reboot sceduled 0 2 147 483 sec 596 h 31 min 23 sec CLI L2P Release 8 0 05 2013 321 4 11 System Utilities 4 11 31reload This command enables you to reset the switch warm start after a given time delay for cold start See reboot on page 320 Note First the device is checking the software in the flash memory and then it resets If a warm start is not possible the device automatically executes a cold start Reset means that all network connections are terminated and the boot code executes The switch uses the stored configuration to initialize the switch You are prompted to confirm that the reset should proceed A successful reset is indicated by the LEDs on the switch Format reload delay lt seconds gt Mode Privileged EXEC lt seconds g
146. at show classofservice ip dscp mapping lt slot port gt Mode Privileged EXEC The following information is repeated for each user priority IP DSCP The IP DSCP value Traffic Class The traffic class internal queue identifier to which the IP DSCP value is mapped slot port Valid slot and port number separated by forward slashes CLI L2P Release 8 0 05 2013 91 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 6 show classofservice trust This command displays the current trust mode for the specified interface The slot port parameter is optional If specified the trust mode of the inter face is displayed If omitted the most recent global configuration settings are displayed Format show classofservice trust slot port Mode Privileged EXEC Class of Service Trust Mode The current trust mode Dot1p IP DSCP or Untrusted Untrusted Traffic Class The traffic class used for all untrusted traffic This is only displayed when the COS trust mode is set to untrusted slot port Valid slot and port number separated by forward slashes 4 4 7 vlan port priority all This command configures the port priority assigned for untagged packets for all ports presently plugged into the device The range for the priority is 0 7 Any subsequent per port configuration will override this configuration setting Format vlan port priority all lt priority gt Mode Global Config CLI L2P 92 Release 8 0 05 2013 CLI C
147. at exceeded the max per mitted frame size This counter has a max increment rate of 815 counts per sec at 10 Mb s Underrun Errors The total number of frames discarded because the transmit FIFO buffer became empty during frame transmission Transmit Discards 66 Total Discards The sum of single collision frames discarded multi ple collision frames discarded and excessive frames discarded Single Collision Frames A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by exactly one collision Multiple Collision Frames A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision Excessive Collisions A count of frames for which transmission on a particular interface is discontinued due to excessive collisions Port Membership The number of frames discarded on egress for this port due to egress filtering being enabled VLAN Viable Discards The number of frames discarded on this port when a lookup on a particular VLAN occurs while that entry in the VLAN table is being modified or if the VLAN has not been configured CLI L2P Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics Protocol Statistics BPDUs received The count of BPDUs Bridge Protocol Data Units received in the spanning tree layer BPDUs Transmitted The count of BPDUs Bridge Protoc
148. ated with this instance Associated VLANs List of VLAN IDs currently associated with this instance CLI L2P 418 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands show spanning tree brief When the brief optional parameter is included this command displays a brief overview of the spanning tree settings for the bridge In this case the following details are displayed Bridge Priority Configured value Bridge Identifier The bridge identifier for the selected MST instance It is made up using the bridge priority and the base MAC address of the bridge Bridge Max Age Configured value Bridge Hello Time Configured value Bridge Forward Delay Configured value Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units BPDUs Rstp Mrp Mode Rapid spanning tree mrp Media Redundancy Protocol mode Enabled Disabled Rstp Mrp configuration error Configuration error in Rapid spanning tree mrp Media Redundancy Protocol No Yes CLI L2P Release 8 0 05 2013 419 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 2 show spanning tree interface This command displays the settings and parameters for a specific switch port within the common and internal spanning tree The lt slot port gt is the desired switch port The following details are displayed on execution of the com mand Format show spanning tree interface lt slot port gt Mode Privileged EXEC
149. ating the MIB databases in the devices Local Area Network A group of computers that are located in one area and are connected by less than 1 000 feet of cable A typical LAN might interconnect computers and peripherals on a single floor or in a single building LANs can be connected together but if modems and telephones connect two or more LANs the larger network constitutes 574 what is called a WAN or Wide Area Network MAC 1 Medium Access Control In LANs the sublayer of the data link control layer that supports medium dependent functions and uses the services of the physical layer to provide services to the logical link control LLC sublayer The MAC sublayer includes the method of determing when a device has access to the transmission medium 2 Message Authentication Code In computer security a value that is a part of a message or accompanies a message and is used to determine that the contents origin author or other attributes of all or part of the message are as they appear to be IBM Glossary of Computing Terms Management Information Base When SNMP devices send SNMP messages to the management console the device managing SNMP messages it stores information in the MIB MBONE See Multicast Backbone on page 575 MDC Management Data Clock MDI Management Data Interface MDIO Management Data Input Output CLI L2P Release 8 0 05 2013 Glossary MDIX Management Dependent I
150. ation regarding the configured RADIUS servers is displayed IP Address IP Address of the configured RADIUS server Port The port in use by this server Type Primary or secondary Secret Configured Yes No CLI L2P 548 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 39 show radius statistics This command is used to display the statistics for RADIUS or configured server To show the configured RADIUS server statistic the IP Address specified must match that of a previously configured RADIUS server On ex ecution the following fields are displayed Format show radius statistics ipaddr Mode Privileged EXEC and User EXEC If ip address is not specified than only Invalid Server Address field is dis played Otherwise other listed fields are displayed Invalid Server Addresses The number of RADIUS Access Response packets received from unknown addresses Server IP Address Round Trip Time The time interval in hundredths of a second between the most recent Access Reply Access Challenge and the Access Request that matched it from the RADIUS authentication server Access Requests The number of RADIUS Access Request packets sent to this server This number does not include retransmissions Access Retransmission The number of RADIUS Access Request packets retransmitted to this RADIUS authentication server Access Accepts The number of RADIUS Access Accept packets including both valid and
151. atory parameters are entered any additional parameters entered are treated as optional parameters If any of the parameters are not recognized a syntax error message will be displayed After the command is successfully parsed and validated the control of execution goes to the corresponding CLI callback function CLI L2P Release 8 0 05 2013 47 Mode based CLI 3 3 Flow of Operation For mandatory parameters the command tree extends till the mandatory parameters make the leaf of the branch The callback function is only in voked when all the mandatory parameters are provided For optional pa rameters the command tree extends till the mandatory parameters and the optional parameters make the leaf of the branch However the call back function is associated with the node where the mandatory parame ters are fetched The call back function then takes care of the optional pa rameters Once the control has reached the callback function the callback function has complete information about the parameters entered by the operator CLI L2P 48 Release 8 0 05 2013 Mode based CLI 3 4 No Form of a Command 3 4 No Form of a Command No is a specific form of an existing command and does not represent a new or distinct command Only the configuration commands are available in the no form The behavior and the support details of the no form is captured as part of the mapping sheets 3 4 1 Support for No Form
152. available data Note most important data is output first not in alphabetic order of command names This is the default command if no specific command is given CLI L2P 334 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol ether port info Display the remote data s port Ethernet properties only group com mand outputs Port Autoneg Supported Port Autoneg Enabled Port Autoneg Advertized Capabilities and Port Operational MAU Type inlinepower Displays the remote port s Power over Ethernet capabilities PoE IEEE 802 3af Included are if the remote device is a PSE Power Source Device or a PD Powered Device if POE is supported and if the power pairs are selectable link aggregation info Display the remote data s link aggregation information only group command outputs Link Agg Status and Link Agg Port ID mgmt addr Display the remote data s management address only profinetio port info Display the remote data s Port ProfinetlO properties only port desc Display the port s LLDP TLV inclusion of Port Description port id Display the remote data s port ID only summary Display remote data in summary format table with most important data only strings will be truncated if necessary indicated by an appended gt character sys desc Display the remote data s system description only sys name Display the remote data s system name only vian info Display the remote data s VLAN information only group c
153. based Port security is based on a given allowed source IP address mac based Port security is based on a given allowed source MAC address Format port sec mode lt ip based mac based gt Mode Global Config CLI L2P Release 8 0 05 2013 479 CLI Commands Switching 5 6 Port Security 5 6 4 port sec action Configure the action to be taken if port security is violated at this port none No action is taken if port security is violated at this port port disable The port is disabled for traffic if port security is violated trap only A trap is sent if port security is violated at this port this port remains open for traffic Configure the allowed IP source address for this port Configure the allowed MAC source address for this port Format port sec action none port disable trap only allowed ip lt IP1 gt IP2 IP3 IP4 IP5 ELES iPr LIPS EPS PLO la allowed mac lt MAC1 gt MAC2 MAC3 MAC4 MAC5 MAC6 MAC7 MAC8 MAC9 MAC10 1111111 3 Mode Interface Config no port sec No action is taken if port security is violated at this port Format no port sec Mode Interface Config CLI L2P 480 Release 8 0 05 2013 CLI Commands Switching 5 6 Port Security 5 6 5 port sec allowed ip Enter the allowed IP source address for this port format nnn nnn nnn nnn nnn decimal number 0 255 up to 10 Format port sec allowed ip lt IP Address 1 gt lt IP Address 2 gt lt IP Address 10 gt Mode Interface C
154. ble or disable the switch s advanced mode for the given MRP domain CLI L2P Release 8 0 05 2013 455 CLI Commands Switching 5 2 MRP manager priority Configure the given MRP domain s manager priority 0 65535 mode Configure the switch s MRP mode for the given domain client or manager client Switch is client for the given MRP domain manager Switch is manager for the given MRP domain name Set a name for the given MRP domain recovery delay Configure the MRP recovery delay for the given domain 500ms Recovery delay is 500 ms for the given MRP domain 200ms Recovery delay is 200 ms for the given MRP domain operation Enable or disable the switch for the given MRP domain port Specify the switch s ports for the given MRP domain in slot port nota tion primary Specify the switch s primary port for the given MRP domain secondary Specify the switch s secondary port for the given MRP domain vlan Enter the VLAN for the given MRP domain 0 4042 default 0 CLI L2P 456 Release 8 0 05 2013 CLI Commands Switching 5 2 MRP 5 2 4 mrp delete domain Delete current MRP domain Format mrp delete domain current domain Mode Global Config 5 2 5 mrp new domain Create a new MRP domain The configuration will consist of default parame ters and its operation will be disabled Default n a not set Format mrp new domain lt domain id gt default domain Mode Global Config domain id E
155. c fragment count Display the condition of the CRC fragment count Condition link flap interval seconds Display the condition of the link flap interval in seconds Condition link flap count Display the condition of the link flap count Condition overload detect interval seconds Note This command is available for the MACH1040 and MACH104 devices Display the condition of the overload detect interval in seconds CLI L2P Release 8 0 05 2013 403 4 17 Port monitor 4 17 2 show port monitor lt slot port gt Use this command to display the Port Monitor details for the port Format show port monitor lt slot port gt Mode Global Config Port Monitor Display if Port Monitor is enabled or disabled Link Flap Display if Link Flap is enabled or disabled Crc Fragment Display if CRC Fragment is enabled or disabled Overload detection Note This command is available for the MACH1040 and MACH104 devices Display the condition of the overload detection state Possible values Enabled Disabled Active Condition Display the active condition for the port Possible values Link Flap None Action Display the action disable port or send trap to be triggered on the port Possible values Disable Port Trap Only Port Oper State Display the link state of the port Possible values Up Down CLI L2P 404 Release 8 0 05 2013 4 17 Port monitor 4 17 3 show port monitor brief Use this command to display the Port Monitor b
156. cation Trap Flag Format no snmp server enable traps Mode Global Config CLI L2P Release 8 0 05 2013 151 CLI Commands Base 4 6 Management Commands 4 6 63 snmp server enable traps chassis Configures whether traps that are related to the chassis functionality of the switch will be sent These functions include the signal contacts the ACA temperature limits exceeded changes in the module map addition or removal of SFP modules status of power supply has changed and the LLDP and SNTP features May be enabled or disabled Default enabled Default enabled Format snmp server enable traps chassis Mode Global Config no snmp server enable traps chassis This command disables chassis traps for the entire switch Format no snmp server enable traps chassis Mode Global Config CLI L2P 152 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 64 snmp server enable traps I2redundancy Indicates whether traps that are related to the layer 2 redundancy features of the switch will be sent The HiPER Ring and the Redundant Coupling will tell you with these traps when the main line has become inoperative or returned May be enabled or disabled Default enabled Default enabled Format snmp server enable traps 12redundancy Mode Global Config no snmp server enable traps I 2redundancy This command disables layer 2 redundancy traps for the entire switch Format no snmp server enable traps 12redundan
157. ceded with escape char 1 1 8 Secrets in scripts A configuration may include secrets e g passwords When creating a script these secrets are written to it in a scrambled form not in clear text These secrets may be up to 31 characters long The format for a scrambled secret is v1 lt scrambled secret gt without the quotes they were added for readability v1 denotes the scrambling method v1 in this case the value of the scrambled secret is a 64 digit hex string The following commands produce scrambled secrets if necessary Command Note radius server key acct lt ip gt lt password gt radius server key auth lt ip gt lt password gt users passwd lt username gt lt password gt users snmpv3 encryption lt username gt des lt password gt Tab 8 Commands in Global Contig mode Applying or validating a script requires the following conditions for a scram bled secret else it will be considered invalid usually only relevant if a script is edited manually CLI L2P 32 Release 8 0 05 2013 Command Structure 1 1 Format string must not be longer than 64 hex digits string must only contain the digits 0 9 and the characters A F or a f string length must be even CLI L2P Release 8 0 05 2013 33 Command Structure 1 1 Format CLI L2P 34 Release 8 0 05 2013 Quick Start up 2 Quick Start up The CLI Quick Start up details procedures to quickly become acquainted with the s
158. cessmode lt username gt lt readonly readwrite gt Mode Global Config no users snmpv3 accessmode This command sets the snmpv3 access privileges for the specified login user as readwrite for the admin user readonly for all other users The lt username gt is the login user name for which the specified access mode will apply Format no users snmpv3 accessmode lt username gt Mode Global Config CLI L2P Release 8 0 05 2013 293 4 10 User Account Management Commands 4 10 10users snmpv3 authentication This command specifies the authentication protocol to be used for the specified login user The valid authentication protocols are none md5 or sha If md5 or sha are specified the user login password is also used as the snmpv3 authentication password and therefore must be at least eight characters in length The lt username gt is the login user name associated with the authentication pro tocol Default no authentication Format users snmpv3 authentication lt username gt lt none md5 sha gt Mode Global Config no users snmpv3 authentication This command sets the authentication protocol to be used for the speci fied login user to none The lt username gt is the login user name for which the specified authentication protocol will be used Format users snmpv3 authentication lt username gt Mode Global Config CLI L2P 294 Release 8 0 05 2013 4 10 User Account Management Commands 4 10 11 use
159. chassis tx hold mult Ildp fdb mode Ildp hm mode Ildp max neighbors Ildp med Ildp med al Ildp med confignotification Ildp med confignotification all Ildp med faststartrepeatcount Ildp med transmit tlv Ildp med transmit tlv all lldp notification lidp tlv gmrp lidp tlv igmp Ildp tlv link aggregation lldp tlv mac phy config state Ildp tlv max frame size lidp tlv mgmt addr lidp tlv pnio lidp tlv pnio alias lidp tlv pnio mrp lidp tlv port desc lidp tlv portsec lidp tlv port vlan lidp tlv protocol CLI L2P Release 8 0 05 2013 205 197 198 199 244 207 97 258 198 196 197 198 199 336 324 340 339 337 337 338 339 341 341 342 343 344 344 345 346 347 348 349 352 352 349 349 350 350 350 351 351 351 353 352 353 lidp tlv ptp lidp tlv sys cap lidp tlv sys desc lidp tlv sys name IIdp tlv vian name logging buffered logging buffered wrap logging cli command logging console logging host logging host reconfigure logging host remove logging snmp requests get operation logging snmp requests get severity logging snmp requests set operation logging snmp requests set severity logging syslog logging syslog port logical slot port logout logout command mac notification Global Config mac notification Interface Config macaddr macfilter macfilter adddest macfilter adddest all media module media module remove mode dvlan tunnel monitor session monitor session mode m
160. cified port This command is only valid if the control mode for the specified port is auto If the control mode is not auto an error will be returned Format dotlx re authenticate lt slot port gt Mode Privileged EXEC 6 1 16 dot1x re authentication This command enables re authentication of the supplicant for the specified port Default disabled Format dotlx re authentication Mode Interface Config no dot1x re authentication This command disables re authentication of the supplicant for the speci fied port Format no dotlx re authentication Mode Interface Config CLI L2P Release 8 0 05 2013 523 CLI Commands Security 6 1 Security Commands 6 1 17 dot1x safe vian Use this command to enable the safe vian assignment on the switch Note This command is available for the RS20 RS30 RS40 RSB20 MS20 MS30 RSR20 RSR30 MACH100 MACH1000 PowerMICE MACH4000 OCTOPUS devices Default disabled Format dotlx safe vlan Mode Global Config no dot1x safe vian Use this command to disable the safe vlan assignment on the switch Default disabled Format no dotlx safe vlan Mode Global Config CLI L2P 524 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 18 dot1x system auth control This command is used to enable the dot1x authentication support on the switch By default the authentication support is disabled While disabled the dot1x configuration is retained
161. commands A list of valid commands is provided below The command can be used to the save the running configuration to nvram by specifying the source as system running config and the destination as nvram startup config Default none Format copy copy aca script lt sourcefilename gt nvram script targetfilename copy aca capturefilter lt sourcefilename gt nvram capturefilter targetfilename CLI L2P Release 8 0 05 2013 305 4 11 System Utilities copy aca sfp white list lt sourcefilename gt nvram sfp white list copy nvram backup image system image copy nvram clibanner lt url gt copy nvram capture acavcapture copy nvram capture lt url gt copy nvram capturefilter lt sourcefilename gt aca capturefilter lt targetfilename gt copy nvram capturefilter lt sourcefilename gt copy nvram errorlog lt url gt copy nvram script lt sourcefilename gt aca script targetfilename copy nvram script lt sourcefilename gt lt url gt copy nvram startup config lt url gt copy nvram startup config system running config copy nvram traplog lt url gt copy system running config nvram startup config lt url gt copy system running config lt url gt copy lt tftp ip filepath fileName gt nvram sfp white list copy tftp lt server ip gt lt path to pem gt nvram httpscert copy lt url gt nvram clibanner copy lt url gt nvram capturefilter lt destfilename gt copy aca capturefilter
162. components supporting the Fast HIPER Ring are connected with each other via their ring ports Exactly one redundancy manager assumes control of the ring These commands are for configuring the Hirschmann Fast High Perfor mance Redundancy Ring Further information concerning this function you will find in the User Manual Redundancy Configuration CLI L2P 466 Release 8 0 05 2013 CLI Commands Switching 5 4 Fast HIPER Ring 5 4 1 show fast hiper ring MACH1000 RSR20 RSR30 This command displays the settings and states of the HIPER Ring The fol lowing details are displayed on execution of the command Format show fast hiper ring Mode Privileged EXEC and User EXEC Ring ID Display the Ring ID Mode of Switch administrative setting Display the HIPER Ring mode administrative settings Mode of Switch real operating state Display the HIPER Ring operation mode Ring Name Display theFast HIPER Ring s name Number of nodes in the ring Display the number of nodes in the ring Port Number Primary Display the HIPER Ring s primary port number and its properties Port Number Secondary Display the HIPER Ring s secondary port number and its properties Operation Display the admin state of the HIPER Ring configuration General Operating States Display general information concerning the fast hiper ring state CLI L2P Release 8 0 05 2013 467 CLI Commands Switching 5 4 Fast HIPER Ring 5 4 2 show fast hiper ring current id MA
163. control flowcontrol per port 4 9 105 vlan 4 9 106 vlanO transparent mode 4 9 107 vlan acceptframe 4 9 108 vlan database 4 9 109 vlan ingressfilter 4 9 110 vlan name 4 9 111 vlan participation 4 9 112 vlan participation all 4 9 113 vlan port acceptframe all 4 9 114 vlan port ingressfilter all 4 9 115 vlan port pvid all 4 9 116 vlan port tagging all 4 9 117 vlan pvid 4 9 118 vlan tagging 4 9 119 voice vlan Global Config Mode 4 9 120 voice vlan lt id gt 4 9 121 voice vlan dot1p 4 9 122 voice vlan none 4 9 123 voice vlan untagged 4 9 124 voice vian auth User Account Management Commands 4 10 1 disconnect 4 10 2 show loginsession 4 10 3 show users 4 10 4 users defaultlogin 4 10 5 users login lt user gt 4 10 6 users access 4 10 7 users name 4 10 8 users passwd 4 10 9 users snmpv3 accessmode 4 10 10 users snmpv3 authentication 4 10 11 users snmpv3 encryption System Utilities 4 11 1 address conflict 263 263 264 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 283 284 284 285 285 286 287 288 289 290 291 292 293 294 295 296 296 CLI L2P Release 8 0 05 2013 Content 4 12 4 11 2 boot skip aca on boot 4 11 3 show boot skip aca on boot 4 11 4 cablestatus 4 11 5 clear eventlog 4 11 6 traceroute 4 11 7 clear arp table switch 4 11 8 clear config 4 11 9 clear config factory 4 11 10 clear counters 4 11 11 clear hiper ring 4 11 1
164. counting server details are displayed Mode Enabled or disabled IP Address The configured IP address of the RADIUS accounting server Port The port in use by the RADIUS accounting server Secret Configured Yes or No If the optional token statistics lt ipaddr gt is included the statistics for the configured RADIUS accounting server are displayed The IP address parameter must match that of a previously configured RADIUS accounting server The following information regarding the statistics of the RADIUS accounting server is displayed Accounting Server IP Address IP Address of the configured RADIUS accounting server Round Trip Time The time interval in hundredths of a second between the most recent Accounting Response and the Accounting Request that matched it from the RADIUS accounting server Requests The number of RADIUS Accounting Request packets sent to this accounting server This number does not include retransmissions Retransmission The number of RADIUS Accounting Request packets retransmitted to this RADIUS accounting server Responses The number of RADIUS packets received on the accounting port from this server Malformed Responses The number of malformed RADIUS Accounting Response packets received from this server Malformed packets include packets with an CLI L2P Release 8 0 05 2013 537 CLI Commands Security 6 1 Security Commands invalid length Bad authenticators and unknown types ar
165. cp relay Set different options for BOOTP DHCP relay and option 82 inclusion Format dhcp relay opt82 operation disable enable man id lt Manual Remote ID gt remote id type client id ip mac other server address lt Server ID 1 4 gt lt Server IP Address gt Mode Global Config dhcp relay opt82 operation disable enable Enable Disable option 82 globally Default enable dhcp relay opt82 man id lt Manual Remote ID gt Configure the DCHP Relay s Option 82 Manual Value for the Remote ID Type only effective if Remote ID is set to other Default no ID dhcp relay opt82 remote id type client id ip mac other Configure the DCHP Relay s Option 82 Remote ID Type Default mac dhcp relay server address lt Server ID 1 4 gt lt Server IP Address gt Set the server IP address for one of the 4 possible server IDs Default 0 0 0 0 no dhcp relay Clear the DCHP Relay configuration set all server addresses to 0 0 0 0 Format no dhcp relay Mode Global Config CLI L2P 486 Release 8 0 05 2013 CLI Commands Switching 5 7 DHCP Relay Commands 5 7 2 dhcp relay Set different port specific options for option 82 inclusion Format dhcp relay admin state disable enable operation disable enable hirschmann device disable enable hirschmann agent disable enable Mode Interface Config dhcp relay admin state disable enable Enable or disable the DHCP Realy s Admin State on this port
166. cross the Internet Packets can arrive in a different order than they were sent The Internet Protocol just delivers them It s up to another protocol the Transmission Control Protocol TCP to put them back in the right order IP is a connectionless protocol which means that there is no continuing connection between the end points that are communicating Each packet that travels through the Internet is treated as an independent unit of data without any relation to any other unit of data The reason the packets do get put in the right order is because of TCP the connection oriented protocol that keeps track of the packet sequence in a message In the Open Systems Interconnection OSI communication model IP is in Layer 3 the Networking Layer The most widely used version of IP today is IP version 4 IPv4 However IP version 6 IPv6 is also beginning to be supported IPv6 provides for much longer addresses and therefore for the possibility of many more Internet users IPv6 includes the capabilities of IPv4 and any CLI L2P Release 8 0 05 2013 server that can support IPv6 packets can also support IPv4 packets J Joint Test Action Group An IEEE group that specifies test framework standards for electronic logic components JTAG See Joint Test Action Group on page 573 L LAN See Local Area Network on page 574 LDAP See Lightweight Directory Access Protocol on page 573 Lightweight Direc
167. ction lower threshold Display the lower threshold for the port monitor overload detection Possible values 0 10000000 Overload detection upper threshold Display the upper threshold for the port monitor overload detection Possible values 0 10000000 CLI L2P Release 8 0 05 2013 411 4 17 Port monitor 4 17 12port monitor condition link flap Global Config Use this command to configure the Link Flap settings Link Flap counter and interval for Link Flap detection Default Disable Format port monitor condition link flap count lt 1 100 gt interval lt 1 180 gt Mode Global Config count Configure the Link Flap counter Default 5 Value range 1 100 interval Configure the measure interval in seconds for Link Flap detection Default 10 seconds Value range 1 180 seconds 4 17 13port monitor condition link flap Interface Config Use this command to enable or disable Link Flap condition on a port to trigger an action Default Disable Format port monitor condition link flap enable disable Mode Interface Config CLI L2P 412 Release 8 0 05 2013 4 17 Port monitor 4 17 14port monitor condition crc fragment Global Config Use this command to configure the crc fragment settings crc fragment counter and interval for crc fragment detection Default Disable Format port monitor condition crce fragment count lt 1 1000000 gt interval lt 5 180 gt Mode Global Config count
168. curs applies to MAC IP Port Security as well as to 802 1X Port Security Default enabled Format snmp server enable traps port sec Mode Global Config no snmp server enable traps port sec This command disables Port Security traps Format no snmp server enable traps port sec Mode Global Config CLI L2P 156 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 68 snmp server enable traps stpmode This command enables the sending of new root traps and topology change notification traps Default enabled Format snmp server enable traps stpmode Mode Global Config no snmp server enable traps stpmode This command disables the sending of new root traps and topology change notification traps Format no snmp server enable traps stpmode Mode Global Config CLI L2P Release 8 0 05 2013 157 CLI Commands Base 4 6 Management Commands 4 6 69 snmptrap This command adds an SNMP trap name The maximum length of name is 32 case sensitive alphanumeric characters Default The default name for the six undefined community names is Delete Format snmptrap lt name gt lt ipaddr gt snmpversion snmpv1l Mode Global Config no snmptrap This command deletes trap receivers for a community Format no snmptrap lt name gt lt ipaddr gt Mode Global Config CLI L2P 158 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 70 snmptrap ipaddr This command assigns an IP address to a spec
169. cy Mode Global Config CLI L2P Release 8 0 05 2013 153 CLI Commands Base 4 6 Management Commands 4 6 65 snmp server enable traps linkmode This command enables Link Up Down traps for the entire switch When en abled link traps are sent only if the Link Trap flag setting associated with the port is enabled see snmp trap link status command Default enabled Format snmp server enable traps linkmode Mode Global Config no snmp server enable traps linkmode This command disables Link Up Down traps for the entire switch Format no snmp server enable traps linkmode Mode Global Config CLI L2P 154 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 66 snmp server enable traps multiusers This command enables Multiple User traps When the traps are enabled a Multiple User Trap is sent when a user logs in to the terminal interface EIA 232 serial port or telnet and there is an existing terminal interface session Default enabled Format snmp server enable traps multiusers Mode Global Config no snmp server enable traps multiusers This command disables Multiple User traps Format no snmp server enable traps multiusers Mode Global Config CLI L2P Release 8 0 05 2013 155 CLI Commands Base 4 6 Management Commands 4 6 67 snmp server enable traps port sec This command enables port security traps When the traps are enabled a Port Security Trap is sent if a port security event oc
170. d by functionality into these different groups Configuration commands are used to configure features and options of the switch For every configuration command there is a show command that will display the configuration setting Show commands are used to display switch settings statistics and other information 5 9 1 show sub ring Display sub ring information for all sub rings or detailed information for a specific sub ring Format show sub ring all ids lt id gt id info mode operation protocol port summary ring name vlan mrp domainID partner mac Mode Privileged EXEC and User EXEC show sub ring Display the sub ring information show sub ring all ids Display the sub ring information for all existing Sub Ring IDs show sub ring lt id gt Display the sub ring information for the specified ID id Display the given Sub Ring s ID CLI L2P Release 8 0 05 2013 501 CLI Commands Switching 5 9 Sub Ring Commands info Display status information for the given Sub Ring ID mode Display the switch s mode for the given Sub Ring ID operation Display the switch s operative setting for the given Sub Ring ID Note In case of configuration problems this value may differ from the administrative setting may become Disabled protocol Display the switch s protocol setting for the given Sub Ring ID Note In case of configuration problems this value may differ from the administrative setting may beco
171. dress Resolution Protocol cache of the switch Format show arp switch Mode Privileged EXEC and User EXEC 4 1 4 show bridge address learning This command displays the address learning setting The setting can be enable or disable Format show bridge address learning Mode Privileged EXEC and User EXEC CLI L2P Release 8 0 05 2013 53 CLI Commands Base 4 1 System Information and Statistics 4 1 5 show bridge address relearn detect This command displays the Bridge Address Relearn Detection setting and the Bridge Address Relearn Threshold Format show bridge address relearn detect Mode Privileged EXEC and User EXEC Bridge Address Relearn Detection Setting can be enable or disable Bridge Address Relearn Threshold The threshold can be 1 to 1024 4 1 6 show bridge aging time This command displays the timeout for address aging Format show bridge aging time Mode Privileged EXEC and User EXEC CLI L2P 54 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics 4 1 7 show bridge duplex mismatch detect This command displays the Bridge Duplex Mismatch Detection setting Enabled or Disabled Format show bridge duplex mismatch detect Mode Privileged EXEC and User EXEC 4 1 8 show bridge fast link detection This command displays the Bridge Fast Link Detection setting Format show bridge fast link detection Mode Privileged EXEC and User EXEC 4 1 9 show bridge framesize This
172. dule within the System Support software that provides a set of interfaces to OS support functions OS Operating System OSAPI See Operating System Application Programming Interface on page 576 OSI See Open Systems Interconnection on page 576 CLI L2P Release 8 0 05 2013 Glossary P PDU See Protocol Data Unit on page 577 PHY The OSI Physical Layer The physical layer provides for transmission of cells over a physical medium connecting two ATM devices This physical layer is comprised of two sublayers the Physical Medium Dependent PMD sublayer and the Transmission Convergence TC sublayer PMC Packet Mode Channel Port Mirroring Also known as a roving analysis port This is a method of monitoring network traffic that forwards a copy of each incoming and outgoing packet from one port of a network switch to another port where the packet can be studied A network administrator uses port mirroring as a diagnostic tool or debugging feature especially when fending off an attack It enables the administrator to keep close track of switch performance and alter it if necessary Port mirroring can be managed locally or remotely An administrator configures port mirroring by assigning a port from which to copy all packets and another port where those packets will be sent A packet bound for or heading away from the first port will be forwarded onto the second port as well The administrator
173. dvlan tunnel ethertype 94 E ethernet ip 120 F fast hiper ring 469 flow control 265 266 frame acceptance mode 269 270 275 G Global Config Mode 45 GVRP join time 199 200 201 202 203 204 205 leave time 206 H hiper ring 463 hiper ring mode 463 hiper ring port primary 464 hiper ring port secondary 464 hiper ring recovery delay 465 l iec61850 mms 121 IEEE 802 1Q 269 270 275 ingress filtering 271 276 inlinepower Global Config 397 inlinepower Interface Config 398 inlinepower budget slot 400 inlinepower threshold slot 401 inlinepower trap slot 401 Interface Config Mode 46 inventory 231 232 233 235 236 237 239 240 511 ip http secure port 553 ip http secure protocol 554 ip http server 555 ip https certgen 558 ip https port 558 ip https server 557 ip ssh protocol 530 CLI L2P Release 8 0 05 2013 Index J jointime 199 200 201 202 203 204 L LAGs enabling or disabling link traps name summary information leave time 206 Line Config Mode Link Aggregation 802 3ad Commands link aggregations See LAGs link traps interface 257 LAG link aggregation link aggregation adminmode link aggregation linktrap link aggregation name link aggregation staticcapability IIdp LLDP Link Layer Discovery Protocol Ildp admin state Ildp chassis tx interval lldp config chassis admin state Ildp config chassis notification interval lldp config chassis re init delay lldp config chassis tx delay Ildp config
174. e delete previous word transpose previous character go to previous line in history buffer rewrites or pastes the line go to next line in history buffer print last deleted character enables serial flow disables serial flow return to root command prompt command line completion go to next lower command prompt list choices 29 Command Structure 1 1 Format 1 1 7 Special characters in scripts Some of the configuration parameters are strings that can contain special characters When the switch creates a script from the running configuration by use of the command show running config lt scriptname cli gt these spe cial characters are written to the script with a so called escape character pre ceding them This ensures that when applying the script these characters are regarded as a normal part of the configuration parameter not having the special meaning they usually have Character plain Meaning when entered in the CLI Begin of a comment and the rest of the line will be ignored J Begin or end of a string that may contain space characters Begin or end of a string that may contain space characters Shows possible command keywords or parameters The backslash is used as an escape character to mask characters that normally have a special meaning Tab 2 Special characters Character escaped Meaning when entered in the CLI becomes part of the string becomes part of the string becomes p
175. e Commands 5 1 23 spanning tree max hops This command sets the Bridge Max Hops parameter to a new value for the common and internal spanning tree The max hops value is an integer within a range of 1 to127 Format spanning tree max hops lt 1 127 gt Mode Global Config no spanning tree max hops This command sets the Bridge Max Hops parameter for the common and internal spanning tree to the default value i e 20 Format no spanning tree max age Mode Global Config CLI L2P Release 8 0 05 2013 443 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 24 spanning tree mst This command sets the Path Cost or Port Priority for this port within the mul tiple spanning tree instance or in the common and internal spanning tree If the lt mstid gt parameter corresponds to an existing multiple spanning tree in stance then the configurations are done for that multiple spanning tree in stance If however 0 defined as the default CIST ID is passed as the lt mstid gt then the configurations are performed for the common and internal spanning tree instance This command accepts the value 0 for the mstid meaning the common and internal spanning tree If the cost token is specified this command sets the path cost for this port within a multiple spanning tree instance or the common and internal span ning tree instance depending on the lt mstid gt parameter The pathcost can be specified as a number in the range of 1 to 20
176. e PAUSE oper ation This counter does not increment when the interface is operating in half duplex mode Unacceptable Frame Type The number of frames discarded from this port due to being an unacceptable frame type VLAN Membership Mismatch The number of frames discarded on this port due to ingress filtering VLAN Viable Discards The number of frames discarded on this port when a lookup on a particular VLAN occurs while that entry in the VLAN table is being modified or if the VLAN has not been configured Multicast Tree Viable Discards The number of frames discarded when a lookup in the multicast tree for a VLAN occurs while that tree is being modified Reserved Address Discards The number of frames discarded that are destined to an IEEE 802 1 reserved address and are not sup ported by the system Broadcast Storm Recovery The number of frames discarded that are destined for FF FF FF FF FF FF when Broadcast Storm Recovery is enabled CFI Discards The number of frames discarded that have CFI bit set and the addresses in RIF are in non canonical format CLI L2P Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics Upstream Threshold The number of frames discarded due to lack of cell descriptors available for that packet s priority level Packets Transmitted Octets Total Bytes The total number of octets of data including those in bad packets transmitted into the network excluding framing bits
177. e RM function Redundancy Manager of the Switch It is possible to mix the devices that support this function in any combination within the MRP ring If a line section becomes inoperable the ring structure of up to 50 switches typically transforms back to a line type configuration within 150 ms maxi mum 500 ms 5 2 1 show mrp This command displays the settings and states of the MRP Ring The follow ing details are displayed on execution of the command Format show mrp current domain Mode Privileged EXEC and User EXEC current domain Specify the optional keyword current domain to show the current MRP domain s settings If you omit the keyword current domain the show command will display the settings of all existing MRP domains Note Currently it is only possible to configure one MRP domain so the keyword keyword current domain can be omitted it exists for future compatibility reasons CLI L2P Release 8 0 05 2013 453 CLI Commands Switching 5 2 MRP 5 2 2 show mrp current domain This command displays the settings and states of the MRP Ring s current domain The following details are displayed on execution of the command If you omit the optional keywords e g advanced mode all settings will be displayed Format show mrp current domain advanced mode domain id info manager priority mode name recovery delay operation port primary secondary summary vlan Mode Privi
178. e a packet is received from a node the timestamp is updated The switch has a user configurable timer that erases the entry after a certain length of time with no activity from that node Application Programming Interface An API is an interface used by an programmer to interface with functions provided by an application AVL tree Binary tree having the property that for any node in the tree the difference in height between the left and right subtrees of that node is no more than 1 B BPDU See Bridge Protocol Data Unit on page 568 BootP See Bootstrap Protocol on page 568 Bootstrap Protocol An Internet protocol that enables a diskless workstation to discover its own IP address the IP address of a BootP server on the network and a file to be loaded into memory to boot the machine This enables the workstation to boot without requiring a hard or floppy disk drive Bridge Protocol Data Unit BPDU is the IEEE 802 1D MAC Bridge Management protocol that is the 568 standard implementation of STP Spanning Tree Protocol It uses the STP algorithm to insure that physical loops in the network topology do not result in logical looping of network traffic Using one bridge configured as root for reference the BPDU switches one of two bridges forming a network loop into standby mode so that only one side of a potential loop passes traffic By examing frequent 802 1d configuration updates a bridge in t
179. e available The commands are divided into these different groups Configuration Commands are used to configure features and options of the switch For every configuration command there is a show command that will display the configuration setting Show commands are used to display device settings statistics and other information Note The Interface Config mode only affects a single interface whereas the Global Config mode is applied to all interfaces CLI L2P 86 Release 8 0 05 2013 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 1 classofservice dot1p mapping This command maps an 802 1p priority to an internal traffic class for a device when in Global Config mode The number of available traffic classes may vary with the platform Userpriority and trafficclass can both be the range from 0 7 The command is only available on platforms that support priority to traffic class mapping on a per port basis and the number of available traffic classes may vary with the platform Format classofservice dotlp mapping lt userpriority gt lt trafficclass gt Mode Global Config or Interface Config userpriority Enter the 802 1p priority 0 7 trafficclass Enter the traffic class to map the 802 1p priority 0 3 no classofservice dot1p mapping This command restores the default mapping of the 802 1p priority to an internal traffic class Format no classofservice dotlp mapping Modes Global Co
180. e machine on this port to timeout the supplicant The supp timeout must be a value in the range 1 65535 server timeout Sets the value in seconds of the timer used by the authenticator state machine on this port to timeout the authentication server The supp timeout must be a value in the range 1 65535 Defaults reauth period 3600 seconds quiet period 60 seconds tx period 30 seconds Ssupp timeout 30 seconds server timeout 30 seconds Format dotlx timeout reauth period lt seconds gt quiet period lt seconds gt tx period lt seconds gt supp timeout lt seconds gt server timeout lt seconds gt Mode Interface Config no dot1x timeout This command sets the value in seconds of the timer used by the authenticator state machine on this port to the default values Depending on the token used the corresponding default values are set Format no dotlx timeout reauth period quiet period tx period supp timeout server timeout Mode Interface Config CLI L2P 526 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 20 dot1x timeout guest vlan period Use this command to configure the timeout value for the guest vlan period The time in seconds for which the authenticator waits to see if any EAPOL packets are received on a port before authorizing the port and placing the port in the guest vlan if configured The guest vlan timer is only relevant when guest vian has been
181. e not included as malformed accounting responses Bad Authenticators The number of RADIUS Accounting Response packets containing invalid authenticators received from this accounting server Pending Requests The number of RADIUS Accounting Request packets sent to this server that have not yet timed out or received a response Timeouts The number of accounting timeouts to this server Unknown Types The number of RADIUS packets of unknown types which were received from this server on the accounting port Packets Dropped The number of RADIUS packets received from this server on the accounting port and dropped for some other reason CLI L2P 538 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 32 show authentication This command displays the ordered authentication methods for all authenti cation login lists Format show authentication Mode Privileged EXEC and User EXEC Authentication Login List This displays the authentication login listname Method 1 This displays the first method in the specified authentication login list if any Method 2 This displays the second method in the specified authentication login list if any Method 3 This displays the third method in the specified authentication login list if any CLI L2P Release 8 0 05 2013 539 CLI Commands Security 6 1 Security Commands 6 1 33 show authentication users This command displays information about the users assigned to the s
182. e user and up to five Read Only users show loginsession Displays all of the login session information in User EXEC Table 10 Quick Start up User Account Management 38 CLI L2P Release 8 0 05 2013 Quick Start up Command users passwd lt user name gt in Global Config copy system running config nvram startup config in Privileged EXEC logout in User EXEC and Privileged EXEC 2 2 System Info and System Setup Details Allows the user to set passwords or change passwords needed to login A prompt will appear after the command is entered requesting the users old password In the absence of an old password leave the area blank The operator must press enter to execute the command The system then prompts the user for a new password then a prompt to confirm the new password If the new password and the confirmed password match a message will be displayed User password should not be more than eight characters in length Make sure that the passwords of the users differ from each other If two or more users try to choose the same password the CLI will display an error message This will save passwords and all other changes to the device If you do not save the configuration by doing this com mand all configurations will be lost when a power cycle is performed on the switch or when the switch is reset Logs the user out of the switch Table 10 Quick Start up User Account Management CLI L2P Relea
183. earning With independent you set the Shared VLAN Learning mode to Indepen dent The switch will treat equal MAC source addresses from different VLANs as separate addresses With shared you set the Shared VLAN Learning mode to Shared The switch will treat equal MAC source addresses from different VLANs as the same adress Format bridge vlan learning independent shared Mode Global Config 4 6 13 digital input This command configures the MICE O Module digital inputs Format digi tal input admin state enable disable refresh interval lt refresh interval gt log event all lt slot input gt enable disable snmp trap all lt slot input gt enable disable Mode Global Config admin state This command enables or disables the polling task for digital inputs of the MICE lO Module When disabled no event logging or SNMP traps will work Default disable disable Disable the l O Module digital inputs admin state enable Enable the l O Module digital inputs admin state CLI L2P Release 8 0 05 2013 107 CLI Commands Base 4 6 Management Commands refresh interval This command configures the digital inputs refresh interval Each input configured for event logging or SNMP traps is polled with this interval lt refresh interval gt The refresh interval is in the range of 1 10 seconds Default 1 log event This command enables or disables the event logging of input status changes for one or all digital i
184. eartion for RMA is enabled or not The options are Enabled Disabled ID Index of the entry for restricted management access 1 to max 16 IP Address The IP address which should have access to management The factory default value is 0 0 0 0 Netmask The network mask to allow a subnet for management access The factory default value is 0 0 0 0 HTTP Indicates whether HTTP is allowed to have management access or not The options are Yes No SNMP Indicates whether SNMP is allowed to have management access or not The options are Yes No TELNET Indicates whether TELNETis allowed to have management access or not The options are Yes No SSH Indicates whether SSH is allowed to have management access or not The options are Yes No Active Indicates whether the feature is active or not The options are x Wa CLI L2P Release 8 0 05 2013 133 CLI Commands Base 4 6 Management Commands 4 6 41 show profinetio This command displays the admin state of the PROFINET IO function Format show profinetio Mode Privileged EXEC and User EXEC 4 6 42 show serial This command displays serial communication settings for the switch Format show serial Mode Privileged EXEC and User EXEC Serial Port Login Timeout minutes Specifies the time in minutes of inactivity on a Serial port connection after which the Switch will close the connection Any numeric value between 0 and 160 is allowed the factory default is 5 A
185. efer to ring coupling port local lt slot port gt The following details are displayed on execution of the command Format show ring coupling lt config info net coupling operation partner ip port all control local partner redundancy mode gt Mode Privileged EXEC and User EXEC config Display the Ring Coupling s configuration single dual master inband dual master outband dual slave inband dual slave outband info Display information about the Ring Coupling s states configuration failure Extended diagnosis redundancy guaranteed net coupling Display the Ring Coupling s ring network coupling setting network ring only operation Display the Ring Coupling s operation setting on off CLI L2P 472 Release 8 0 05 2013 CLI Commands Switching 5 5 Redundant Coupling partner IP Display the switch s Ring Coupling partner IP address only valid for remote configurations port Display the switch s Ring Coupling ports all local partner only takes effect in dual configurations control only takes effect in outband configurations redundancy mode Display the Ring Coupling s redundancy mode normal extended Ring Network Coupling Mode Display the Ring Network Coupling mode ring on1y if you wish to couple a HIPER Ring network if you wish to couple a line type configuration CLI L2P Release 8 0 05 2013 473 CLI Command
186. effect only when GVRP is enabled Default 60 Format set garp timer leave lt 20 600 gt Mode Global Config Interface Config no set garp timer leave TThis command sets the GVRP leave time per port to 60 centiseconds 0 6 seconds Note This command has an effect only when GVRP is enabled Format no set garp timer leave Mode Global Config Interface Config CLI L2P 206 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 37 set garp timer leaveall This command sets how frequently Leave All PDUs are generated per port A Leave All PDU indicates that all registrations will be unregistered Participants would need to rejoin in order to maintain registration The value applies per port and per GARP participation The time may range from 200 to 6000 cen tiseconds The value 1000 centiseconds is 10 seconds Note This command has an effect only when GVRP is enabled Default 1000 Format set garp timer leaveall lt 200 6000 gt Mode Global Config Interface Config no set garp timer leaveall This command sets how frequently Leave All PDUs are generated per port to 1000 centiseconds 10 seconds Note This command has an effect only when GVRP is enabled Format no set garp timer leaveall Mode Global Config Interface Config CLI L2P Release 8 0 05 2013 207 4 9 Device Configuration Commands 4 9 38 set gmrp adminmode This command enables GARP Multicast Registration Protocol GMRP on the syst
187. elay 486 488 show dhcp server 492 show dhcp server operation 493 show dhcp server pool 494 show dhcp server port 493 show digital input 112 115 show digital input all 114 show digital input config 113 show digital output 116 119 show digital output all 118 show digital output config 117 show dip switch 231 show dot1x 540 show dot1x clients 546 show dot1x users 545 show dvlan tunnel 96 show ethernet ip 131 134 show eventlog show fast hiper ring Index show fast hiper ring current id 468 show port monitor 403 404 show garp 232 show port monitor brief 405 show gmrp configuration 232 show port monitor crc fragment 406 show hiper ring 462 show port monitor link flap 406 show hiper ring info 463 show port sec mode 478 show iec61850 mms 122 show port sec port 478 show igmpsnooping 233 show ptp 371 show inlinepower 396 show ptp configuration 374 show inlinepower port 396 show ptp operation 374 show inlinepower slot 399 show ptp port 375 show interface 60 show ptp status 376 show interface ethernet 62 show radius 548 show interface switchport 69 show radius accounting 536 show interface utilization 70 show radius statistics 549 show inventory 271 show reboot 321 show ip http 556 show reload 323 show ip https 559 show ring coupling 472 show ip ssh 547 show rmon alarm 245 show link aggregation 244 show running config 76 show link aggregation brief 98 show selftest 246 show Ildp 324 show serial 134 show Ildp chassis tx interval 327 show
188. eld displays the DIP Switch Redundancy Manager status Possible values Enabled Disabled DIP Switch Standby This field displays the DIP Switch Standby status Possible values Enabled Disabled DIP Switch RingPort Note This command is available for the MICE devices This field displays the DIP Switch RingPort numbers Possible values Interface number in slot port notation DIP Switch SW config Note This command is available for the MICE devices This field displays the DIP Switch SW config status Possible values Enabled Disabled CLI L2P Release 8 0 05 2013 231 4 9 Device Configuration Commands 4 9 67 show garp This command displays Generic Attributes Registration Protocol GARP in formation Format show garp Mode Privileged EXEC and User EXEC GMRP Admin Mode This displays the administrative mode of GARP Multicast Registration Protocol GMRP for the system 4 9 68 show gmrp configuration This command displays Generic Attributes Registration Protocol GARP in formation for one or all interfaces Format show gmrp configuration lt slot port gt all Mode Privileged EXEC and User EXEC Interface This displays the slot port of the interface that this row in the table describes Join Timer Specifies the interval between the transmission of GARP PDUs regis tering or re registering membership for an attribute Current attri butes are a VLAN or multicast group There is an instance of this
189. em The default value is disable Format set gmrp adminmode Mode Privileged EXEC and Global Config no set gmrp adminmode This command disables GARP Multicast Registration Protocol GMRP on the system Format no set gmrp adminmode Mode Privileged EXEC and Global Config CLI L2P 208 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 39 set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a selected interface If an interface which has GARP enabled is enlisted as a member of a Link Aggregation LAG GARP functionality will be disabled on that in terface GARP functionality will subsequently be re enabled if Link Aggrega tion LAG membership is removed from an interface that has GARP enabled Default enabled Format set gmrp interfacemode Mode Interface Config no set gmrp interfacemode This command disables GARP Multicast Registration Protocol ona selected interface If an interface which has GARP enabled is enlisted as a member of a Link Aggregation LAG GARP functionality will be dis abled on that interface GARP functionality will subsequently be re enabled if Link Aggregation LAG membership is removed from an inter face that has GARP enabled Format no set gmrp interfacemode Mode Interface Config CLI L2P Release 8 0 05 2013 209 4 9 Device Configuration Commands 4 9 40 set gmrp interfacemode This command enables GARP Multicast Registration Protocol
190. equests set operation logging snmp requests get severity logging snmp requests set severity logging syslog logging syslog port 4 8 Scripting Commands 4 8 1 4 8 2 4 8 3 4 8 4 4 8 5 script apply script delete script list script show script validate 4 9 Device Configuration Commands 4 9 1 4 9 2 4 9 3 4 9 4 4 9 5 4 9 6 4 9 7 4 9 8 4 9 9 4 9 10 4 9 11 4 9 12 4 9 13 4 9 14 4 9 15 4 9 16 CLI L2P Release 8 0 05 2013 addport adminmode auto disable reason auto disable timer auto negotiate auto negotiate all cable crossing media module deleteport deleteport all dip switch operation macfilter macfilter adddest macfilter adddest all mac notification Global Config mac notification Interface Config 162 163 164 164 165 166 167 168 169 169 169 170 170 171 171 172 173 173 174 174 175 175 177 177 178 179 180 181 182 183 184 185 185 186 187 188 189 190 191 Content 4 9 17 4 9 18 4 9 19 4 9 20 4 9 21 4 9 22 4 9 23 4 9 24 4 9 25 4 9 26 4 9 27 4 9 28 4 9 29 4 9 30 4 9 31 4 9 32 4 9 33 4 9 34 4 9 35 4 9 36 4 9 37 4 9 38 4 9 39 4 9 40 4 9 41 4 9 42 4 9 43 4 9 44 4 9 45 4 9 46 4 9 47 4 9 48 4 9 49 4 9 50 4 9 51 4 9 52 4 9 53 4 9 54 4 9 55 4 9 56 4 9 57 monitor session lt session id gt monitor session lt session id gt mode monitor session lt session id gt source destination link aggregation link aggregation adminmode l
191. equivalent to registration normal in the IEEE 802 1Q standard Configured Determines the configured degree of participation of this port in this VLAN The permissible values are Include This port is always a member of this VLAN This is equivalent to registration fixed in the IEEE 802 1Q standard Exclude This port is never a member of this VLAN This is equiv alent to registration forbidden in the IEEE 802 1Q standard CLI L2P Release 8 0 05 2013 249 4 9 Device Configuration Commands Autodetect Specifies to allow the port to be dynamically regis tered in this VLAN via GVRP The port will not participate in this VLAN unless a join request is received on this port This is equivalent to registration normal in the IEEE 802 1Q standard Tagging Select the tagging behavior for this port in this VLAN Tagged specifies to transmit traffic for this VLAN as tagged frames Untagged specifies to transmit traffic for this VLAN as untagged frames CLI L2P 250 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 85 show vlan brief This command displays a list of all configured VLANs Format show vlan brief Mode Privileged EXEC and User EXEC VLAN ID There is a VLAN Identifier vianid associated with each VLAN The range of the VLAN ID is 1 to 4042 VLAN Name A string associated with this VLAN as a convenience It can be up to 32 alphanumeric characters long including blanks The default is blank VLAN ID 1 al
192. er pool modify lt id gt option vendor specific lt string gt Option vendor specific information Enter vendor specific information CLI L2P 498 Release 8 0 05 2013 CLI Commands Switching 5 8 DHCP Server Commands 5 8 11 dhcp server pool modify leasetime Modify pool leasetime Enter the leasetime in seconds Format dhcp server pool modify leasetime lt seconds gt Mode Global Config 5 8 12 dhcp server pool modify lt id gt hirschmann de vice Set this pool to Hirschmann devices only or to all devices Format dhcp server pool modify lt id gt hirschmann device enable disable Mode Global Config dhcp server pool modify lt id gt hirschmann device disable Use pool for all devices dhcp server pool modify lt id gt hirschmann device enable Use pool for Hirschmann devices only CLI L2P Release 8 0 05 2013 499 CLI Commands Switching 5 8 DHCP Server Commands 5 8 13 dhcp server pool enable Enable a specific pool Format dhcp server pool enable lt id gt Mode Global Config 5 8 14 dhcp server pool disable Disable a specific pool Format dhcp server pool disable lt id gt Mode Global Config 5 8 15 dhcp server pool delete Delete a specific pool Format dhcp server pool delete lt id gt Mode Global Config CLI L2P 500 Release 8 0 05 2013 CLI Commands Switching 5 9 Sub Ring Commands 5 9 Sub Ring Commands These commands configure the sub ring parameters The commands are divide
193. er s max response time was also set It is always the same value as the IGMP Snooping max response time no set igmp maxresponse This command sets the IGMP Maximum Response time on the system to 10 seconds Format no set igmp maxresponse Mode Global Config CLI L2P 222 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 55 set igmp querier max response time Configure the IGMP Snooping Querier s maximum response time The range is 1 to 3 598 seconds The default value is 10 seconds Default 10 Format set igmp gquerier max response time lt 1 3598 gt Mode Global Config Note The IGMP Snooping max response time was also set It is always the same value as the IGMP Querier s max response time 4 9 56 set igmp querier protocol version Configure the IGMP Snooping Querier s protocol version 1 2 or 3 Default 2 Format set igmp querier protocol version 1 2 3 Mode Global Config CLI L2P Release 8 0 05 2013 223 4 9 Device Configuration Commands 4 9 57 set igmp querier status Configure the IGMP Snooping Querier s administrative status enable or disable Default disable Format set igmp gquerier status enable disable Mode Global Config 4 9 58 set igmp querier tx interval Configure the IGMP Snooping Querier s transmit interval The range is 2 to 3 599 seconds Default T25 Format set igmp querier tx interval lt 2 3599 gt Mode Global Config CLI L2P 224 Release 8 0 05 2
194. erof the HTTPS server default 443 CLI L2P Release 8 0 05 2013 559 CLI Commands Security 6 2 HTTP Commands CLI L2P 560 Release 8 0 05 2013 Appendix VLAN Example 7 Appendix VLAN Example LAN switches can segment networks into logically defined virtual work groups This logical segmentation is commonly referred as a virtual LAN VLAN This logical segmentation of devices provides better LAN adminis tration security and management of broadcast activity over the network Vir tual LANs have become an integral feature of switched LAN solutions The VLAN example below demonstrates a simple VLAN configuration If a single port is a member of VLANs 2 3 and 4 the port expects to see traffic tagged with either VLAN 2 3 or 4 The PVID Port Virtual Identification could be something entirely different for example 12 and things would still work fine just so incoming traffic was tagged Example Project A VLAN2 ports 1 2 Project B VLANS ports 3 4 Project C VLAN4 ports 5 6 Project P VLAN 9 port 7 VLAN Command create VLAN2 vlan database vlan 2 exit config interface 1 1 vlan participation include 2 exit interface 1 2 vlan participation include 2 exit Table 16 Creating VLANs CLI L2P Release 8 0 05 2013 561 Appendix VLAN Example VLAN create VLAN 3 create VLAN 4 create VLAN 9 Command vlan database vian 3 exit config interface 0 3 vian participation include 3 exi
195. es can be uploaded to a PC and edited downloaded to the system and applied to the system Configuration scripts can be applied to one or more switches with no minor modifications Use the show running config command to capture the running configuration into a script Use the copy command to transfer the configuration script to and from the switch Scripts are intended to be used on systems with default configuration but users are not prevented from applying scripts on systems with non default configurations Note The file extension must be cli A maximum of ten scripts are allowed on the switch The combined size of all script files on the switch shall not exceed 1024 KB 4 8 1 script apply This command applies the commands in the script to the switch We recom mend that the system have default configurations but users are not prevent ed from applying scripts on systems with non default configurations The lt scriptname gt parameter is the name of the script to apply Format Script apply lt scriptname gt Mode Privileged EXEC CLI L2P Release 8 0 05 2013 173 CLI Commands Base 4 8 Scripting Commands 4 8 2 script delete This command deletes a specified script where the lt scriptname gt parameter is the name of the script to be deleted The all option deletes all the scripts present on the switch Format script delete lt scriptname gt all Mode Privileged EXEC 4 8 3 script list This comma
196. ess List Config mode to create a MAC Access List and to enter the mode containing Mac Access List configuration com mands Hirschmann Product Config mac access list extended lt name gt Command Prompt Hirschmann Product Config mac access list CLI L2P Release 8 0 05 2013 Mode based CLI 3 3 Flow of Operation 3 3 Flow of Operation This section captures the flow of operation for the CLI The operator logs into the CLI session and enters the User Exec mode In the User Exec mode the Hirschmann Product exec gt prompt is displayed on the screen The parsing process is initiated whenever the operator types a command and presses lt ENTER gt The command tree is searched for the command of in terest If the command is not found the output message indicates where the offending entry begins For instance command node A has the command show spanning tree but the operator attempts to execute the com mand show arpp brief then the output message would be Hirschmann Product exec gt show sspanning tree Hirschmann Product Invalid input detected at mark er If the operator has given an invalid input parameter in the command then the message conveys to the operator an invalid input was detected The lay out of the output is depicted below Hirschmann Product exec show sspanning tree AA Hirschmann Product Invalid input detected at marker Fig 2 Syntax Error Message After all the mand
197. est granularity of specifica tion is 1 centisecond 0 01 seconds Port GMRP Mode Indicates the GMRP administrative mode for the port It may be enabled or disabled If this parameter is disabled Join Time Leave Time and Leave All Time have no effect The factory default is dis abled 4 9 69 show igmpsnooping This command displays IGMP Snooping information Configured information is displayed whether or not IGMP Snooping is enabled Status information is only displayed when IGMP Snooping is enabled Format show igmpsnooping CLI L2P Release 8 0 05 2013 233 4 9 Device Configuration Commands Mode Privileged EXEC and User EXEC Admin Mode This indicates whether or not IGMP Snooping is globally enabled on the switch Forwarding of Unknown Frames This displays if and how unknown multicasts are forwarded The setting can be Discard Flood or Query Ports The default is Query Ports Group Membership Interval This displays the IGMP Group Membership Interval This is the amount of time a switch will wait for a report for a particular group on a particular interface before it sends a query on that interface This value may be configured Multicast Control Frame Count This displays the number of multicast control frames that are processed by the CPU Interfaces Enabled for IGMP Snooping This is the list of interfaces on which IGMP Snooping is enabled Additionally if a port has a special function it will be shown to the right
198. et igmp maxresponse set igmp querier max response time set igmp querier protocol version set igmp querier status set igmp querier tx interval set igmp query ports to filter set igmp static query port set pre login banner text CLI L2P Release 8 0 05 2013 285 209 213 477 477 199 200 201 200 204 202 201 204 203 203 202 593 173 174 174 175 175 226 228 227 130 102 316 286 103 205 206 207 208 211 212 210 214 214 215 216 217 219 220 220 221 222 223 223 224 224 225 218 226 set prompt 130 show 52 show address conflict 52 show arc 459 show arp switch 53 59 show authentication 58 539 show authentication users 540 show auto disable brief 229 show auto disable reasons 230 show boot skip aca on boot 297 297 show bridge address learning 53 show bridge address relearn detect 54 show bridge aging time 54 show bridge duplex mismatch detect 55 show bridge fast link detection 55 show bridge framesize 55 show bridge vlan learning 56 show classofservice dot1pmapping 90 show classofservice ip dscp mapping 91 show classofservice trust 92 show commands show inventory 231 232 233 235 236 237 239 240 511 show lags summary 244 show loginsession 286 show port 243 show stats switch detailed 60 62 68 show switchconfig 245 246 247 248 show users 287 show vlan detailed 248 show vlan interface 251 show vlan summary 251 show config watchdog 57 show device status 57 show dhcp r
199. evice can only have one banner file at the moment Save the CLI banner file as bnr CLI L2P Release 8 0 05 2013 311 4 11 System Utilities no clibanner This command deletes an existing CLI banner file copy lt url gt nvram capturefilter lt destfilename gt Load a Capture Filter file from a tftp URL into the flash memory using lt tftp ip filepath fileName gt destfilename Destination filename of capture filter expressions file copy aca capturefilter lt sourcefilename gt nvram capturefilter lt targetfilename gt Load a capture filter file from AutoConfiguration Adapter ACA21 into the flash memory sourcefilename Filename of source capture filter expressions file targetfilename Specify the file name on the switch s NVRAM copy lt url gt nvram script lt destfilename gt Downloads Configuration Script file using lt tftp ip filepath fileName gt destfilename Filename length may be max 20 characters including extension cli or CLI copy lt url gt nvram sshkey dsa Downloads IP secure shell SSH DSA key file by tftp using lt tftp ip filepath fileName gt copy lt url gt nvram sshkey rsa 1 Downloads IP secure shell SSH RSA1 key file by tftp using lt tftp ip filepath fileName gt CLI L2P 312 Release 8 0 05 2013 4 11 System Utilities copy lt url gt nvram sshkey rsa2 Downloads IP secure shell SSH RSA2 key file by tftp using lt tftp ip filepath
200. exceeds or falls below the power limit or if the PoE power supply is switched on off on one or more ports Power Threshold Power threshold in per cent of the nominal power If the power is exceeding falling below this threshold the device will send a trap 4 16 2 inlinepower budget slot Configure the available power budget per slot in Watts Format inlinepower budget slot lt slot gt lt 0 1000 gt Mode Global Config Slot For MACH102 devices with M1 8TP RJ45 PoEP media modules Slot Slot number of the PoE module valid range 1 2 For MACH104 16TX PoEP devices Slot 1 CLI L2P 400 Release 8 0 05 2013 4 16 PoE Power over Ethernet Plus 4 16 3 inlinepower threshold slot Configure the usage power threshold expressed in per cents for comparing the measured power for this slot and initiating an alarm if the threshold is exceeded Format inlinepower threshold slot lt slot gt lt 0 99 gt Mode Global Config Slot For MACH102 devices with M1 8TP RJ45 PoEP media modules Slot Slot number of the PoE module valid range 1 2 For MACH104 16TX PoEP devices Slot 1 4 16 4 inlinepower trap slot Configure the alarm that is send if the configured threshold for this slot is ex ceeded Format inlinepower trap slot lt slot gt enable disable Mode Global Config Slot For MACH102 devices with M1 8TP RJ45 PoEP media modules Slot Slot number of the PoE module valid range 1 2 For MACH104 16
201. f the optional parameter summary lt slot port gt all is used the dot1x con figuration for the specified port or all ports are displayed Port The interface whose configuration is displayed Control Mode The configured control mode for this port Possible values are force unauthorized force authorized auto mac based Operating Control Mode The control mode under which this port is operating Possible values are authorized unauthorized Reauthentication Enabled Indicates whether re authentication is enabled on this port Key Transmission Enabled Indicates if the key is transmitted to the supplicant for the specified port If the optional parameter detail lt slot port gt is used the detailed dot1x configuration for the specified port are displayed Port The interface whose configuration is displayed CLI L2P Release 8 0 05 2013 541 CLI Commands Security 6 1 Security Commands Protocol Version The protocol version associated with this port The only possible value is 1 corresponding to the first version of the dot1x specification PAE Capabilities The port access entity PAE functionality of this port Possible values are Authenticator or Supplicant Control Mode Display the state of the Control Mode Possible values auto forceauthorized Authenticator PAE State Current state of the authenticator PAE state machine Possible values are Initialize Disconnected Connecting Authenticat
202. f valid EAPOL frames of any type that have been received by this authenticator EAPOL Frames Transmitted The number of EAPOL frames of any type that have been transmitted by this authenticator EAPOL Start Frames Received The number of EAPOL start frames that have been received by this authenticator EAPOL Logoff Frames Received The number of EAPOL logoff frames that have been received by this authenticator Last EAPOL Frame Version The protocol version number carried in the most recently received EAPOL frame Last EAPOL Frame Source The source MAC address carried in the most recently received EAPOL frame CLI L2P 544 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands EAP Response ld Frames Received The number of EAP response identity frames that have been received by this authenticator EAP Response Frames Received The number of valid EAP response frames other than resp id frames that have been received by this authenticator EAP Request Id Frames Transmitted The number of EAP request identity frames that have been transmitted by this authenticator EAP Request Frames Transmitted The number of EAP request frames other than request identity frames that have been transmitted by this authenticator Invalid EAPOL Frames Received The number of EAPOL frames that have been received by this authenticator in which the frame type is not recognized EAP Length Error Frames Received The
203. face Config Global Config no spanning tree hello time This command sets the Hello Time parameter for the common and internal spanning tree to the default value i e 2 Format no spanning tree hello time Mode Interface Config Global Config CLI L2P 440 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 21 spanning tree hold count This command sets the bridge hold count parameter Default disabled Format spanning tree hold count lt 1 40 gt Mode Global Config lt 1 40 gt Enter the bridge parameter for hold count as an integer in the range 1 40 no spanning tree hold count This command sets bridge hold count to disabled Format no spanning tree hold count Mode Global Config CLI L2P Release 8 0 05 2013 441 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 22 spanning tree max age This command sets the Bridge Max Age parameter to a new value for the common and internal spanning tree The max age value is in seconds within a range of 6 to 40 with the value being less than or equal to 2 times Bridge Forward Delay 1 Default 20 Format Sspanning tree max age lt 6 40 gt Mode Global Config no spanning tree max age This command sets the Bridge Max Age parameter for the common and internal spanning tree to the default value i e 20 Format no spanning tree max age Mode Global Config CLI L2P 442 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tre
204. fig 4 12 50lldp tiv ptp Configure the port s LLDP TLV inclusion of PTP on or off default on Format lldp tlv ptp lt off on on gt Mode Interface Config 4 12 51lidp tiv protocol Configure the port s LLDP TLV inclusion of Protocol on or off default on Format lldp tlv protocol lt off on on gt Mode Interface Config CLI L2P Release 8 0 05 2013 353 4 12 LLDP Link Layer Discovery Protocol 4 12 52lldp tiv sys cap Configure the port s LLDP TLV inclusion of System Capabilities on or off default on Format lldp tlv sys cap lt off on gt Mode Interface Config 4 12 53lldp tly sys desc Configure the port s LLDP TLV inclusion of System Description on or off default on Format Lids tlv sys desc lt off on gt Mode Interface Config 4 12 54lldp tiv sys name Configure the port s LLDP TLV inclusion of System Name on or off default on Format lldp tlv sys name lt off on gt Mode Interface Config CLI L2P 354 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 55ildp tly vian name Configure the port s LLDP TLV inclusion of VLAN Name Format lidp tlv vlan name lt off on gt Mode Interface Config 4 12 56name Set or remove a descriptive name for the current interface physical ports only Format name lt descriptive name gt Mode Interface Config lt descriptive name gt Enter a descriptive name for the current interface
205. fig CLI L2P Release 8 0 05 2013 283 4 9 Device Configuration Commands 4 9 123voice vian untagged Use this command to configure the phone to send untagged voice traffic Format voice vlan untagged Mode Interface Config 4 9 124voice vian auth Use this command to set Voice VLAN Authentication Mode If disabled VOIP devices which are detected via LLDP med will have access to the Voice VLAN without authentication Default Enabled Format voice vlan auth enabled disabled Mode Interface Config disable VOIP devices which are detected via LLDP MED will have access to the Voice VLAN without authentication enable VOIP devices which are detected via LLDP MED will not have access to the Voice VLAN without authentication CLI L2P 284 Release 8 0 05 2013 4 10 User Account Management Commands 4 10 User Account Management Commands These commands manage user accounts 4 10 1 disconnect This command closes a telnet session Format disconnect lt sessionID gt all Mode Privileged EXEC Session ID Enter the session ID 1 11 CLI L2P Release 8 0 05 2013 285 4 10 User Account Management Commands 4 10 2 show loginsession This command displays current telnet and serial port connections to the switch Format show loginsession Mode Privileged EXEC and User EXEC ID Login Session ID User Name The name the user will use to login using the serial port or Telnet A new user may be added to the s
206. fileName gt copy lt url gt nvram startup config Downloads Config file by tftp using lt tftp ip filepath fileName gt copy lt url gt system image Downloads code file by tftp using lt tftp ip filepath fileName gt copy lt url gt system running config Downloads Code Config file using lt tftp ip filepath fileName gt The target is the currently running configuration copy lt url gt system bootcode Use the copy lt url gt system bootcode command to load the boot code file via tftp into the device For lt url gt enter the path of the tftp server using the following notation lt tftp ip filepath fileName gt e g tftp 10 1 112 214 switch switch01 cfg clear sfp white list Use this command to delete the SFP white list file from the flash memory Note The clear config factory command deletes the SFP white list too CLI L2P Release 8 0 05 2013 313 4 11 System Utilities 4 11 22device status connection error This command configures the device status link error monitoring for this port Default ignore Format device status connection error ignore propagate Mode Interface Config CLI L2P 314 Release 8 0 05 2013 4 11 System Utilities 4 11 23device status monitor This command configures the device status Format device status monitor aca removal all connection error hiper ring module removal power supply 1 power supply 2 power supply 3 1 power supply 3 2
207. for configuring and checking check Check the topology All important values will be taken from the current ring configuration on the devices configure Configure the topology All important values will be taken from the current ring configuration of the ARC manager CLI L2P 458 Release 8 0 05 2013 CLI Commands Switching 5 2 MRP 5 2 7 show arc This command displays the current ARC configuration and the result of the last action Format show arc Mode Global Config Client Settings Display the Client Settings for the current ARC configuration Admin Status Display if the ARC client is enabled or disabled MAC address of the ARC Manager Display the MAC address of the ARC Client IP address of the ARC Manager Display the IP address of the ARC Client Port 1 Display the number of Ring Port 1 for the client slot port Port 2 Display the number of Ring Port 2 for the client slot port Manager Settings Display the Manager Settings for the current ARC configuration Admin Status Display the ARC manager is enabled or disabled Protocol Display the Protocol Possible values mrp Port 1 Display the number of Ring Port 1 for the manager slot port Port 2 Display the number of Ring Port 2 for the manager slot port VLAN ID Display the VLAN ID Possible values 0 CLI L2P Release 8 0 05 2013 459 CLI Commands Switching 5 2 MRP Last Action Result Display the Result of the Last Action
208. from the address table for this interface Possible values Valid MAC address in aa bb cc dd ee ff notation Last MAC status This field displays the status of the last MAC address on this inter face Possible values added removed other CLI L2P Release 8 0 05 2013 241 4 9 Device Configuration Commands 4 9 77 show monitor session This command displays the port monitoring information for the system Format show monitor session lt Session Number gt Mode Global Config Privileged EXEC User EXEC Session Display port monitor session settings Session Number Session number Enter 1 for the session number Session ID Displays the session number of the port monitor session Possible values 1 Admin Mode Displays the status of the port monitoring feature Possible values Enable Disable Probe Port Displays the interface configured as the probe port in slot port nota tion If this value has not been configured Not Configured will be displayed Mirrored Port Displays the interface configured as the mirrored port in slot port notation If this value has not been configured Not Configured will be displayed Direction Displays the direction which has been configured for the port Possible values rx receive tx transmit rx tx receive and transmit If this value has not been configured Not Configured will be displayed CLI L2P 242 Release 8 0 05 2013 4 9 Device Configuration
209. g 5 8 DHCP Server Commands lt Hirschmann PowerMICE gt lt config gt dhcp server pool modify 1 option vendor specific lt f1 08 Oa 7e 7e 02 Oa 7f 7f 02 gt This configuration leads to the following result lt Hirschmann PowerMICE gt show dhcp server pool 1 TOT ees Aaa aay Sos oh bic Rs Oe ee a ace G0 Ne sea ate Oe LETA a a GS Nance 1 SCA US as ae i E a a we A Enabled Start Addresse sua eoa n ete a Ta 192 168 0 10 PAA Adr rESS endi sacked Swe E Bake bak 192 168 0 10 Ee Ser Ineco beraa Se ee OE ead She adi 86400 Hirschmann Devit eesse niae Se eis Disabled Modema ram a a ese Sher a A A eae a Interface 1 1 MAC ei an be eon Ab ee ee es os ee 00 80 63 12 34 56 Options COMPO petites tre ennt eaa wes ett Gee Pate hia St darter et Ria ite ew tate at Rel wes hens LOZ Looe Ol Su bret Mas eo sated Fe oa Goat oe yy aban He aoa Heat Os 255 6255 25 560 WU MAN Oan ess o Oh ied oa ea ira ae Wace baal rants ee 0 0 0 0 TIN Seah ais eas ee ere es Ga ere a 0 0 0 0 HOS EN AMC wets ous a a a 4 ee oe a Boar le Vendor Specific Information fl 08 Oa 7e 7e 02 Oa 7f 7f 02 CLI L2P Release 8 0 05 2013 491 CLI Commands Switching 5 8 DHCP Server Commands 5 8 2 show dhcp server Display DHCP Server global and interface information Format show dhcp server Mode Privileged EXEC and User EXEC DHCP Server Display the DCHP server operation setting Possible values Enabled Disabled DHCP Address Probe Display the DCH
210. g bad packets received that were lt 64 octets in length excluding framing bits but including FCS octets Packets Received 64 Octets The total number of packets includ ing bad packets received that were 64 octets in length excluding framing bits but including FCS octets Packets Received 65 127 Octets The total number of packets including bad packets received that were between 65 and 127 octets in length inclusive excluding framing bits but including FCS octets Packets Received 128 255 Octets The total number of packets including bad packets received that were between 128 and 255 octets in length inclusive excluding framing bits but including FCS octets Packets Received 256 511 Octets The total number of packets including bad packets received that were between 256 and 511 octets in length inclusive excluding framing bits but including FCS octets Packets Received 512 1023 Octets The total number of packets including bad packets received that were between 512 and 1023 CLI L2P 62 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics octets in length inclusive excluding framing bits but including FCS octets Packets Received 1024 1518 Octets The total number of packets including bad packets received that were between 1024 and 1518 octets in length inclusive excluding framing bits but including FCS octets Packets Received 1519 1522 Octets The total number of packets includin
211. g bad packets received that were between 1519 and 1522 octets in length inclusive excluding framing bits but including FCS octets Packets Received gt 1522 Octets The total number of packets received that were longer than 1522 octets excluding framing bits but including FCS octets and were otherwise well formed Packets Received Successfully Total The total number of packets received that were without errors Unicast Packets Received The number of subnetwork unicast packets delivered to a higher layer protocol Multicast Packets Received The total number of good packets received that were directed to a multicast address Note that this number does not include packets directed to the broadcast address Broadcast Packets Received The total number of good packets received that were directed to the broadcast address Note that this does not include multicast packets Packets Received with MAC Errors Total The total number of inbound packets that contained errors pre venting them from being deliverable to a higher layer protocol Jabbers Received The total number of packets received that were longer than 1518 octets excluding framing bits but including FCS octets and had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non inte gral number of octets Alignment Error Note that this definition of jabber is different than the definition in IEEE 802 3 section 8 2 1 5 1
212. g name gt nodes lt l n gt vlan lt 0 4042 gt delete 1d current id new id lt id gt default id Mode Global Config current id Specify that you want to configure the current Fast HIPER Ring ID s settings mode Configure the switch s Fast HIPER Ring mode for the given ID ring manager or ring switch rm Abbreviation for ring manager rs Abbreviation for ring switch mode ring manager Switch is ring manager for the given Fast HIPER Ring ID CLI L2P Release 8 0 05 2013 469 CLI Commands Switching 5 4 Fast HIPER Ring mode ring switch Switch is ring switch for the given Fast HIPER Ring ID mode rm Abbreviation for ring manager mode rs Abbreviation for ring switch operation Enable or disable the switch for the given Fast HIPER Ring ID port Specify the switch s ports for the given Fast HIPER Ring ID ring name Set a ring name for the given Fast HIPER Ring ID nodes Specify the number of nodes in the ring for the given Fast HIPER Ring ID vlan Specify the VLAN for the given Fast HIPER Ring ID delete id Delete the given Fast HIPER Ring ID new id Create a new Fast HIPER Ring ID The configuration will consist of default parameters and its operation will be disabled lt id gt Enter a new Fast HIPER Ring ID Format a number in the range 1 2147483647 2 31 1 An ID of 0 is invalid default id Create a default Fast HIPER Ring ID 1 CLI L2P 470 Release 8 0 05 2013 C
213. g tcpdump filter show Run diagnostics commands With the TCP dump you run a packet analyzer for capturing network traffic This command shows a saved filter file stored in flash memory Format debug tcpdump filter show lt capturefilter gt Mode Privileged EXEC 4 2 6 debug tcpdump filter list Run diagnostics commands With the TCP dump you run a packet analyzer for capturing network traffic This command lists all saved filter files stored in flash memory Format debug tcpdump filter list Mode Privileged EXEC CLI L2P Release 8 0 05 2013 83 CLI Commands Base 4 2 Debug Commands 4 2 7 debug tcpdump filter delete Run diagnostics commands With the TCP dump you run a packet analyzer for capturing network traffic This command removes a saved filter file from the flash memory Format debug tcpdump filter delete lt capturefilter gt Mode Privileged EXEC CLI L2P 84 Release 8 0 05 2013 CLI Commands Base 4 3 Management VLAN Commands 4 3 Management VLAN Com mands 4 3 1 network mgmt_vian This command configures the Management VLAN ID If you enter the VLAN ID 0 the agent can be accessed by all VLANs Default 1 Format network mgmt_vlan lt 0 4042 gt Mode Privileged EXEC CLI L2P Release 8 0 05 2013 85 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 Class of Service CoS Commands This chapter provides a detailed explanation of the QoS CoS commands The following commands ar
214. ged EXEC and User EXEC System IP Address The IP address of the interface The factory default value is 0 0 0 0 Subnet Mask The IP subnet mask for this interface The factory default value is 0 0 0 0 Default Gateway The default gateway for this IP interface The factory default value is 0 0 0 0 Burned In MAC Address The burned in MAC address used for in band connectivity CLI L2P Release 8 0 05 2013 131 CLI Commands Base 4 6 Management Commands Network Configuration Protocol BootP DHCP Indicates which network protocol is being used The options are bootp dhcp none DHCP Client ID same as SNMP System Name Displays the DHCP Client ID Network Configuration Protocol HiDiscovery Indicates in which way the HiDiscovery protocol is being used The options are off read only read write Management VLAN ID Specifies the management VLAN ID Management VLAN Priority Specifies the management VLAN Priority Management VLAN IP DSCP Value Specifies the management VLAN IP DSCP value Java Script Mode Specifies if the Switch will use Java Script to start the Management Applet The factory default is enabled CLI L2P 132 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 40 show network mgmt access This command displays the operating status and entries for restricted management access RMA Format show network mgmt access Mode Privileged EXEC and User EXEC Operation Indicates whether the op
215. ged EXEC and User EXEC Total Entries This displays the total number of entries that can possibly be in the Multicast Forwarding Database table Most MFDB Entries Ever Used This displays the largest number of entries that have been present in the Multicast Forwarding Database table This value is also known as the MFDB high water mark Current Entries This displays the current number of entries in the Multicast Forward ing Database table 4 9 76 show mac notification This command displays the MAC address change notification configuration Format show mac notification Mode Privileged EXEC MAC notification settings This table displays the MAC notification settings status and interval for the device CLI L2P 240 Release 8 0 05 2013 4 9 Device Configuration Commands MAC notification status This field displays the status of MAC notification traps for the device Possible values enabled disabled MAC notification interval This field displays the MAC notification interval for the device Possible values 1 2147483647 Interface This field displays the number of the interface in slot port format MAC notify This field displays the status of MAC notification traps for this port Possible values enabled disabled Mode This field displays the mode for which action the device sends a MAC notification trap Possible values add remove all Last MAC address This field displays the last MAC address added or removed
216. gement Information Base MIB RMON 1 defines nine additional MIBs that provide a much richer set of data about network usage For RMON to work network devices such as hubs and switches must be designed to support it The newest version of RMON RMON 2 provides data about traffic at the network layer in addition to the physical layer This allows administrators to analyze traffic by protocol RP Rendezvous Point Used with IP Multicast RPU Remote Power Unit RTOS See Real Time Operating System on page 578 S SDL Synchronous Data Link 578 Simple Network Management Protocol SNMP is the protocol governing network management and the monitoring of network devices and their functions It is not necessarily limited to TCP IP networks The versions have the following differences SNMPxv 1 full Security is based on community strings SNMPsec historic Security is based on parties Few if any vendors implemented this version of the protocol which is now largely forgotten SNMPyv2p historic For this version much work was done to update the SNMPv1 protocol and the SMlv1 and not just security The result was updated protocol operations new protocol operations and data types and party based security from SNMPsec SNMPyv2c experimental This version of the protocol is called community string based SNMPvz2 It is an update of the protocol operations and data types of SNMPv2p and uses com
217. h Interval in seconds Value range 1 10 Retry Count Show the value of the O Module digital outputs Retry count Value range 1 10 Digital output Information Output Show numbers of the O Module digital output Possible values example 1 1 1 2 1 3 1 4 3 1 3 2 3 3 3 4 Value Show the value of the 1O Module digital outputs Possible values Not available High Low Log Event Show if Event logging is enabled or disabled for the O Module digital outputs Possible values Disabled Enabled SNMP trap Show if SNMP traps are enabled or disabled for the O Module digital outputs Possible values Disabled Enabled CLI L2P 116 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands Mirror from IP Show the IP address used for reading the input value Possible values None a b c d valid IP address Input Show the input number of the device used for reading the input value Possible values example 1 1 1 2 1 3 1 4 3 1 3 2 3 3 3 4 4 6 20 show digital output config This command shows the O Module digital outputs global configuration Format show digital output config Mode Global Config Digital output System Information Admin State Show the lO Module digital outputs Admin State Possible values Disabled Enabled Refresh Interval s Show the O Module digital outputs Refresh Interval in seconds Value range 1 10 Retry Count Show the value of the 1O Module digital output
218. he standby mode can switch automatically into the forward mode if the other bridge forming the loop fails C Checksum A simple error detection scheme in which each transmitted message is identified with a numerical value based on the number of set bits in the message The receiving station then applies a formula to the message and checks to make sure the accompanying numerical value is the same If not the receiver can assume that the message has been corrupted CLI See Command Line Interface on page 568 Command Line Interface CLI is a line item interface for configuring systems Complex Programmable Logic Device CPLD is a programmable circuit on which a logic network can CLI L2P Release 8 0 05 2013 Glossary be programmed after its construction CPLD See Complex Programmable Logic Device on page 568 D DAPI See Device Application Programming Interface on page 569 Device Application Programming Interface DAPI is the software interface that facilitates communication of both data and control information between the Application Layer and HAPI with support from System Support DHCP See Dynamic Host Configuration Protocol on page 569 Differentiated Services Diffserv is a protocol for specifying and controlling network traffic by class so that certain types of traffic get precedence for example voice traffic which requires a relatively uninterrupted flow of da
219. how port monitor brief 405 4 17 4 show port monitor crc fragment 406 4 17 5 show port monitor link flap 406 4 17 6 port monitor Global Config 407 4 17 7 port monitor Interface Config 407 4 17 8 port monitor action 408 4 17 9 port monitor condition overload detection polling interval Global Config 409 4 17 10 port monitor condition overload detection Interface Config 409 4 17 11 show port monitor overload detection 411 4 17 12 port monitor condition link flap Global Config 412 4 17 13 port monitor condition link flap Interface Config 412 4 17 14 port monitor condition crc fragment Global Config 413 4 17 15 port monitor condition crc fragment Interface Config 413 5 CLI Commands Switching 415 5 1 Spanning Tree Commands 417 5 1 1 show spanning tree 417 5 1 2 show spanning tree interface 420 5 1 3 show spanning tree mst detailed 421 5 1 4 show spanning tree mst port detailed 422 5 1 5 show spanning tree mst port summary 425 5 1 6 show spanning tree mst summary 426 5 1 7 show spanning tree summary 427 5 1 8 show spanning tree vlan 428 5 1 9 spanning tree 429 5 1 10 spanning tree auto edgeport 430 5 1 11 spanning tree bpduguard 431 CLI L2P Release 8 0 05 2013 15 Content 5 2 5 3 5 4 16 5 1 12 spanning tree configuration name 432 5 1 13 spanning tree configuration revision 433 5 1 14 spanning tree edgeport 434 5 1 15 spanning tree forceversion 435 5 1 16 spanning tree forward time 436 5 1 17 spanning t
220. ick Start up Physical Port Data Quick Start up User Account Management Quick Start up IP Address Quick Start up Uploading from Switch to Out of Band PC Only XMODEM Quick Start up Downloading from Out of Band PC to Switch Only XMODEM Quick Start up Downloading from TFTP Server Quick Start up Factory Defaults CLI L2P Release 8 0 05 2013 37 Quick Start up 2 2 System Info and System Setup Quick Start up Physical Port Data Command show port all in Privileged EXEC Details Displays the Ports slot port Type Indicates if the port is a special type of port Admin Mode Selects the Port Control Administration State Physical Mode Selects the desired port speed and duplex mode Physical Status Indicates the port speed and duplex mode Link Status Indicates whether the link is up or down Link Trap Determines whether or not to send a trap when link status changes LACP Mode Displays whether LACP is enabled or disabled on this port Table 9 Quick Start up Physical Port Data Quick Start up User Account Management Command show users in Privileged EXEC Details Displays all of the users that are allowed to access the switch Access Mode Shows whether the user is able to change parameters on the switch Read Write or is only able to view them Read Only As a factory default the admin user has Read Write access and the user user has Read Only access There can only be one Read Writ
221. ied authentication login list to the specified user for 802 1X port security The lt user gt parameter must be a configured user and the lt list name gt parameter must be a configured authentication login list Format dotlx login lt user gt lt listname gt Mode Global Config CLI L2P Release 8 0 05 2013 517 CLI Commands Security 6 1 Security Commands 6 1 10 dot1x mac auth bypass This command enables the MAC authorized bypass on that interface Default disabled Format dotlx mac auth bypass Mode Interface Config no dot1x mac auth bypass This command disables the MAC authorized bypass on that interface Default disabled Format no dotlx mac auth bypass Mode Interface Config CLI L2P 518 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 11 dot1x max req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request Identity frame be fore timing out the supplicant The lt count gt value must be in the range 1 10 Default 2 Format dotlx max req lt count gt Mode Interface Config no dot1x max req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request Identity frame be fore timing out the supplicant Format no dotlx max req Mode Interface Config CLI L2P Release 8 0 05 2013 519 CLI Commands Security 6 1 Secur
222. ified community name The maximum length of name is 32 case sensitive alphanumeric characters Note IP addresses in the SNMP trap receiver table must be unique If you make multiple entries using the same IP address the first entry is retained and processed All duplicate entries are ignored Format snmptrap ipaddr lt name gt lt ipaddr gt lt ipaddrnew gt Mode Global Config ipaddr Enter the old IP Address ipaddrnew Enter the new IP Address CLI L2P Release 8 0 05 2013 159 CLI Commands Base 4 6 Management Commands 4 6 71 snmptrap mode This command activates or deactivates an SNMP trap Enabled trap receiv ers are active able to receive traps Disabled trap receivers are inactive not able to receive traps Format snmptrap mode lt name gt lt ipaddr gt Mode Global Config no snmptrap mode This command deactivates an SNMP trap Disabled trap receivers are inactive not able to receive traps Format no snmptrap mode lt name gt lt ipaddr gt Mode Global Config CLI L2P 160 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 72 snmptrap snmpversion This command configures SNMP trap version for a specified community Format snmptrap snmpversion lt name gt lt ipAddr gt snmpvl snmpv2 Mode Global Config name Enter the community name ipAaddr Enter the IP Address snmpvt1 Use SNMP v1 to send traps snmpv2 Use SNMP v2 to send traps CLI L2P Release 8 0 05 2013 161
223. ig nvram startup to save the configurations made to the switch config reboot or cold boot the switch Enter yes when the prompt pops up that asks if you want in Privileged EXEC Mode to reset the system This is the users choice either reset the switch or cold boot the switch both work effectively Table 13 Quick Start up Factory Defaults CLI L2P Release 8 0 05 2013 41 Quick Start up 42 2 2 System Info and System Setup CLI L2P Release 8 0 05 2013 Mode based CLI 3 Mode based CLI The CLI groups all the commands in appropriate modes according to the na ture of the command A sample of the CLI command modes are described below Each of the command modes support specific software commands User Exec Mode Privileged Exec Mode Global Config Mode Vlan Mode Interface Config Mode Line Config Mode The Command Mode table captures the command modes the prompts visi ble in that mode and the exit method from that mode Command Mode User Exec Mod Privileged Mode VLAN Mode Global Confi Mode Mode Interface Conf Exec ig Line Config Mode Access Method This is the first level of access Perform basic tasks and list system information From the User Exec Mode enter the enable command From the Privileged User Exec mode enter the vlan database command From the Privileged Exec mode enter the configure com mand From the Global Con figuration
224. imary radius server retransmit radius server timeout reboot reload reset system command ring coupling ring coupling config ring coupling net coupling ring coupling operation 378 379 385 385 379 380 380 381 386 387 389 387 383 388 386 388 382 382 387 383 383 388 384 384 389 389 390 390 391 391 392 394 392 393 395 393 394 395 531 531 533 533 534 535 536 320 322 320 322 474 475 476 476 CLI L2P Release 8 0 05 2013 Index ring coupling port ring coupling redundancy mode rmon alarm add rmon alarm delete rmon alarm disable rmon alarm enable rmon alarm modify falling event rmon alarm modify interval rmon alarm modify mib variable rmon alarm modify rising event rmon alarm modify sample type rmon alarm modify startup alarm rmon alarm modify thresholds Schulungsangebot script apply script delete script list script show script validate selftest ramtest selftest reboot on error selftest reboot on hdxerror serial timeout session limit sessions closing displaying session timeout set garp timer join set garp timer leave set garp timer leaveall set gmrp adminmode set gmrp forward all groups set gmrp forward unknown set gmrp interfacemode set igmp set igmp aging time unknown set igmp automatic mode set igmp forward all set igmp forward unknown set igmp groupmembershipinterval set igmp interfacemode set igmp lookup interval unknown set igmp lookup resp time unknown s
225. in this VLAN unless a join request is received on this interface This is equivalent to registration normal CLI L2P 274 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 113vlan port acceptframe all This command sets the frame acceptance mode for all interfaces For VLAN Only mode untagged frames or priority frames received on this interface are discarded For Admit All mode untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port With either option VLAN tagged frames are forwarded in ac cordance with the IEEE 802 1Q VLAN Specification Default Admit All Format vlan port acceptframe all lt vlanonly all gt Mode Global Config no vian port acceptframe all This command sets the frame acceptance mode for all interfaces to Admit A11 For Admit All mode untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port With either option VLAN tagged frames are forwarded in accordance with the IEEE 802 1Q VLAN Specification Format no vlan port acceptframe all Mode Global Config CLI L2P Release 8 0 05 2013 275 4 9 Device Configuration Commands 4 9 114vlian port ingressfilter all This command enables ingress filtering for all ports If ingress filtering is dis abled frames received with VLAN IDs that do not match the VLAN member ship of the receiving
226. ing Authenticated Aborting Held ForceAuthorized and ForceUnauthorized Backend Authentication State Current state of the backend authentication state machine Possible values are Request Response Success Fail Timeout Idle and Initialize Quiet Period The timer used by the authenticator state machine on this port to define periods of time in which it will not attempt to acquire a supplicant The value is expressed in seconds and will be in the range 0 and 65535 Transmit Period The timer used by the authenticator state machine on the specified port to determine when to send an EAPOL EAP Request Identity frame to the supplicant The value is expressed in seconds and will be in the range of 1 and 65535 Guest VLAN ID Display the Guest VLAN ID Default value 0 Guest VLAN Period secs Display the Guest VLAN Period Default value 90 seconds CLI L2P 542 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands Supplicant Timeout The timer used by the authenticator state machine on this port to timeout the supplicant The value is expressed in seconds and will be in the range of 1 and 65535 Server Timeout The timer used by the authenticator on this port to timeout the authentication server The value is expressed in seconds and will be in the range of 1 and 65535 Maximum Requests The maximum number of times the authenticator state machine on this port will retransmit an EAPOL EAP Request Identity befo
227. ing tree The instance lt mstid gt is a number that corresponds to the desired existing multiple spanning tree instance The lt vlanid gt corresponds to an existing VLAN ID This command accepts the value 0 for the mstid Format no spanning tree mst vlan lt mstid gt lt vlanid gt Mode Global Config CLI L2P Release 8 0 05 2013 447 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 27 spanning tree mst instance This command creates a MST instance Format spanning tree mst instance lt 1 4094 gt Mode Global Config lt 1 4094 gt Enter a multiple spanning tree instance identifier no spanning tree mst instance This command removes a MST instance Format no spanning tree mst instance lt 1 4094 gt Mode Global Config lt 1 4094 gt Enter a multiple spanning tree instance identifier CLI L2P 448 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 28 spanning tree port mode This command sets the Administrative Switch Port State for this port to enabled Default disabled Format Spanning tree port mode Mode Interface Config no spanning tree port mode This command sets the Administrative Switch Port State for this port to disabled Format no spanning tree port mode Mode Interface Config CLI L2P Release 8 0 05 2013 449 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 29 spanning tree port mode all This command sets the Administrative Switch Port State
228. ink aggregation linktrap link aggregation name rmon alarm add rmon alarm delete rmon alarm enable rmon alarm disable rmon alarm modify mib variable rmon alarm modify thresholds rmon alarm modify interval rmon alarm modify sample type rmon alarm modify startup alarm rmon alarm modify rising event rmon alarm modify falling event set garp timer join set garp timer leave set garp timer leaveall set gmrp adminmode set gmrp interfacemode set gmrp interfacemode set gmrp forward all groups set gmrp forward unknown set igmp set igmp set igmp aging time unknown set igmp automatic mode set igmp forward all set igmp forward unknown set igmp static query port set igmp groupmembershipinterval set igmp interfacemode set igmp lookup interval unknown set igmp lookup resp time unknown set igmp maxresponse set igmp querier max response time set igmp querier protocol version set igmp querier status 192 194 195 196 197 198 199 199 200 200 201 201 202 202 203 203 204 204 205 206 207 208 209 210 211 212 213 214 214 215 216 217 218 219 220 220 221 222 223 223 224 CLI L2P Release 8 0 05 2013 Content 4 9 58 4 9 59 4 9 60 4 9 61 4 9 62 4 9 63 4 9 64 4 9 65 4 9 66 4 9 67 4 9 68 4 9 69 4 9 70 4 9 71 4 9 72 4 9 73 4 9 74 4 9 75 4 9 76 4 9 77 4 9 78 4 9 79 4 9 80 4 9 81 4 9 82 4 9 83 4 9 84 4 9 85 4 9 86 4 9 87 4 9 88 4 9 89 4 9 90 4 9 91 4 9 92 4 9 93 4 9 94
229. invalid packets which were received from this server CLI L2P Release 8 0 05 2013 549 CLI Commands Security 6 1 Security Commands Access Rejects The number of RADIUS Access Reject packets including both valid and invalid packets which were received from this server Access Challenges The number of RADIUS Access Challenge packets including both valid and invalid packets which were received from this server Malformed Access Responses The number of malformed RADIUS Access Response packets received from this server Malformed packets include packets with an invalid length Bad authenticators or signature attributes or unknown types are not included as malformed access responses Bad Authenticators The number of RADIUS Access Response packets containing invalid authenticators or signature attributes received from this server Pending Requests The number of RADIUS Access Request packets destined for this server that have not yet timed out or received a response Timeouts The number of authentication timeouts to this server Unknown Types The number of RADIUS packets of unknown types which were received from this server on the authentication port Packets Dropped The number of RADIUS packets received from this server on the authentication port and dropped for some other reason CLI L2P 550 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 40 show users authentication This command disp
230. ion LAG and generates a logical slot port number for the Link Aggregation Display this number using the show link aggregation Note Before including a port in a Link Aggregation set the port physical mode See speed command Format link aggregation lt name gt Mode Global Config CLI L2P 196 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 21 link aggregation adminmode This command enables a Link Aggregation LAG The interface is a logical slot port for a configured Link Aggregation The option all sets every con figured Link Aggregation with the same administrative mode setting Format link aggregation adminmode all Mode Global Config no link aggregation adminmode This command disables a Link Aggregation LAG The interface is a log ical slot port for a configured Link Aggregation The option a11 sets every configured Link Aggregation with the same administrative mode setting Format no link aggregation adminmode all Mode Global Config CLI L2P Release 8 0 05 2013 197 4 9 Device Configuration Commands 4 9 22 link aggregation linktrap This command enables link trap notifications for the link aggregation LAG The interface is a logical slot port for a configured link aggregation The op tion all sets every configured link aggregation with the same administrative mode setting Default enabled Format link aggregation linktrap lt logical slot port gt all Mode Global Co
231. ion for devices on Project A B and C should be set to NOT tag traffic To take care of these untagged frames configure the following vlan pvid 2 in interface 0 1 vlan pvid 2 in interface 0 2 vlan pvid 3 in interface 0 3 vlan pvid 3 in interface 0 4 vlan pvid 4 in interface 0 5 vlan pvid 4 in interface 0 6 CLI L2P Release 8 0 05 2013 565 Appendix VLAN Example 7 2 SOLUTION 2 CLI L2P 566 Release 8 0 05 2013 Glossary 8 Glossary Numerics 802 1D The IEEE designator for Spanning Tree Protocol STP STP a link management protocol is part of the 802 1D standard for media access control bridges Using the spanning tree algorithm STP provides path redundancy while preventing endless loops in a network An endless loop is created by multiple active paths between stations where there are alternate routes between hosts To establish path redundancy STP creates a logical tree that spans all of the switches in an extended network forcing redundant paths into a standby or blocked state STP allows only one active path at a time between any two network devices this prevents the loops but establishes the redundant links as a backup if the initial link should fail If STP costs change or if one network segment in the STP becomes unreachable the spanning tree algorithm reconfigures the spanning tree topology and reestablishes the link by activating the standby path Without spanning tree in place it is po
232. ity Commands 6 1 12 dot1x max users Use this command to set the maximum number of clients supported on an interface when MAC based 802 1X authentication is enabled on the port The count value is in the range 1 16 and the default value is 16 Default 16 Format dotlx max users lt count gt Mode Interface Config no dot1x max users The no form of this command resets the maximum number of clients allowed to its default value of 16 Format no dotlx max users Mode Interface Config CLI L2P 520 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 13 dot1x port control This command sets the authentication mode to be used on the specified port The control mode may be one of the following force unauthorized The authenticator PAE unconditionally sets the controlled port to unauthorized Thus the port is always blocked force authorized The authenticator PAE unconditionally sets the controlled port to authorized Thus the port is always opened auto The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant au thenticator and the authentication server The port mode is controlled by the protocol mac based Enable MAC based 802 1X authentication on the port Default force authorized Format dotlx port control force unauthorized force authorized auto mac based Mode Interface Config no dot1x port c
233. k flaps in last interval Display the Link flaps in last interval Link flaps total Display the Link flaps total CLI L2P 406 Release 8 0 05 2013 4 17 Port monitor 4 17 6 port monitor Global Config Use this command to enable or disable the Port Monitor globally Note This command does not reset the port disable states Default Disable Format port monitor enable disable Mode Global Config 4 17 7 port monitor Interface Config Use this command to enable or disable the Port Monitor on the port Note This command does not reset the port disable states Default Disable Format port monitor enable disable Mode Interface Config CLI L2P Release 8 0 05 2013 407 4 17 Port monitor 4 17 8 port monitor action Use this command to configure the Port Monitor action disable a port or send a trap Note Disable the Port Monitor action will reset the port from port state Default Enable Format port monitor action port disable trap only Mode Interface Config port disable Disable the port when the configured Port Monitor condition triggers trap only Send a trap when the configured Port Monitor condition triggers CLI L2P 408 Release 8 0 05 2013 4 17 Port monitor 4 17 9 port monitor condition overload detection polling interval Global Config Note This command is available for the MACH104 and MACH1040 devices Use this command to configure the polling interval in seconds for over
234. kets Packets Transmitted Without Error The total number of packets transmitted out of the interface Transmit Packets Errors The number of outbound packets that could not be transmitted because of errors Collisions Frames The best estimate of the total number of collisions on this Ethernet segment Time Since Counters Last Cleared The elapsed time in days hours minutes and seconds since the sta tistics for this port were last cleared The display parameters when the argument is switchport is as follows CLI L2P 60 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics Packets Received Without Error The total number of packets including broadcast packets and multi cast packets received by the processor Broadcast Packets Received The total number of packets received that were directed to the broad cast address Note that this does not include multicast packets Packets Received With Error The number of inbound packets that contained errors preventing them from being deliverable to a higher layer protocol Packets Transmitted Without Error The total number of packets transmitted out of the interface Broadcast Packets Transmitted The total number of packets that higher level protocols requested to be transmitted to the Broadcast address including those that were discarded or not sent Transmit Packet Errors The number of outbound packets that could not be transmitted because of err
235. lap crc error Disable the port disabling on this device by CRC error overload detection Disable the port disabling on this device by overload detection CLI L2P Release 8 0 05 2013 179 4 9 Device Configuration Commands 4 9 4 auto disable timer This command defines the time after which a deactivated port is activated again Default 0 Format auto disable timer 0 30 2147483 Mode Interface Config 0 30 2147483 Timer value in seconds after a deactivated port is activated again Possible values 0 The value 0 disables the timer 30 2147483 CLI L2P 180 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 5 auto negotiate This command enables automatic negotiation on a port The default value is enable Format auto negotiate Mode Interface Config no auto negotiate This command disables automatic negotiation on a port Format no auto negotiate Mode Interface Config CLI L2P Release 8 0 05 2013 181 4 9 Device Configuration Commands 4 9 6 auto negotiate all This command enables automatic negotiation on all ports The default value is enable Format auto negotiate all Mode Global Config no auto negotiate all This command disables automatic negotiation on all ports Format no auto negotiate all Mode Global Config CLI L2P 182 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 7 cable crossing Note This function is available for the RS20 RS3
236. lays all user and all authentication login information It also displays the authentication login list assigned to the default user Format show users authentication Mode Privileged EXEC User This field lists every user that has an authentication login list assigned System Login This field displays the authentication login list assigned to the user for system login 802 1x Port Security This field displays the authentication login list assigned to the user for 802 1X port security CLI L2P Release 8 0 05 2013 551 CLI Commands Security 6 1 Security Commands 6 1 41 users login This command assigns the specified authentication login list to the specified user for system login The lt user gt must be a configured lt user gt and the lt listname gt must be a configured login list If the user is assigned a login list that requires remote authentication all ac cess to the interface from all CLI web and telnet sessions will be blocked until the authentication is complete Note Note that the login list associated with the admin user can not be changed to prevent accidental lockout from the switch Format users login lt user gt lt listname gt Mode Global Config user Enter user name listname Enter an alphanumeric string of not more than 15 characters Note When assigning a list to the admin account include an authentication method that allows administrative access even when remote authenticatio
237. le method values are local radius and reject The value of local indicates that the user s locally stored ID and password are used for authentication The value of radius indicates that the user s ID and password will be authenticated using the RADIUS server The value of reject indicates the user is never authenticated To authenticate a user the authentication methods in the user s login will be attempted in order until an authentication attempt succeeds or fails Note The default login list included with the default configuration can not be changed Note When assigning a list to the admin account include an authentication method that allows administrative access even when remote authentication is unavailable Format authentication login lt listname gt methodl method2 method3 Mode Global Config CLI L2P Release 8 0 05 2013 511 CLI Commands Security 6 1 Security Commands no authentication login This command deletes the specified authentication login list You will be unable to delete if any of the following conditions are true The login list name is invalid or does not match an existing authentication login list The specified authentication login list is assigned to any user or to the non configured user for any component The login list is the default login list included with the default configuration and was not created using authentication login The default login list cannot be deleted Forma
238. learned via IGMP Snooping on a selected interface Format no set igmp forward all Mode Interface Config CLI L2P 216 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 48 set igmp forward unknown Note This command is available for MS20 MS30 This command defines how to handle unknown multicast frames Format set igmp forward unknown discard flood query ports Mode Global Config discard Unknown multicast frames will be discarded flood Unknown multicast frames will be flooded query ports Unknown multicast frames will be forwarded only to query ports CLI L2P Release 8 0 05 2013 217 4 9 Device Configuration Commands 4 9 49 set igmp static query port This command activates the forwarding of GMP membership report frames to this interface even if the given interface has not received any queries The purpose is that a port may need to forward such frames even if no queries have been received on it e g if a router is connected to the interface that sends no queries Default disabled Format set igmp static query port Mode Interface Config no set igmp This command disables the unconditional forwarding of IGMP member ship report frames to this interface Format no set igmp static query port Mode Interface Config CLI L2P 218 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 50 set igmp groupmembershipinterval This command sets the IGMP Group Membership Interval time on
239. leged EXEC and User EXEC advanced mode Show the switch s advanced mode setting for the given MRP domain domain id Show the given MRP domain s ID info Show status information for the given MRP domain Note The information displayed depends on the switch s mode Cli ent or Manager because only a subset of them are useful for each mode manager priority Show the switch s manager priority for the given MRP domain mode Show the switch s mode for the given MRP domain name Show the given MRP domain s name recovery delay Show the given MRP domain s recovery delay operation Show the switch s administrative setting for the given MRP domain enabled or disabled CLI L2P 454 Release 8 0 05 2013 CLI Commands Switching 5 2 MRP port Show the ports for the given MRP domain port primary Show the primary port for the given MRP domain port secondary Show the secondary port for the given MRP domain summary Show a summary for the given MRP domain vlan Show the VLAN ID for the given MRP domain 5 2 3 mrp current domain Specify that you want to configure the current MRP domain s settings Default none Format mrp current domain advanced mode disable enable manager priority lt 0 65535 gt mode client manager name lt domain name gt recovery delay 500ms 200ms operation disable enable port primary secondary lt slot port gt vlan lt 0 4042 gt Mode Global Config advanced mode Ena
240. load detection condition Default 1 Format port monitor condition overload detection polling interval lt interval value gt Mode Global Config lt interval value gt Enter a polling interval value for overload detection Possible values 1 20 Default 1 4 17 10port monitor condition overload detection Interface Config Note This command is available for the MACH104 and MACH1040 devices Use this command to configure the Port Monitor overload detection settings Format port monitor condition overload detection traffic type be betme all threshold type pps kbps link capacity lower threshold lt threshold value gt CLI L2P Release 8 0 05 2013 409 4 17 Port monitor upper threshold lt threshold value gt enable disable Mode Interface Config traffic type bc Define traffic class for overload detection Broadcast traffic bc traffic type bc mc Define traffic class for overload detection Broadcast and multicast traffic oc mc traffic type all Define traffic class for overload detection All traffic types a11 threshold type pps Define threshold type for overload detection condition Packets per second pps threshold type kbps Define threshold type for overload detection condition Kilobits per second kbps threshold type link capacity Define threshold type for overload detection condition Link capacity percentage of the link capacity lower thresh
241. logged is 4 5 notice Minimum severity to be logged is 5 6 info Minimum severity to be logged is 6 7 debug Minimum severity to be logged is 7 This is the lowest level and will result in messages of all levels being logged Tab 15 Possible severity levels CLI L2P 168 Release 8 0 05 2013 CLI Commands Base 4 7 Syslog Commands 4 7 6 logging host reconfigure The Logging Host Index for which to change the IP Address Format logging host reconfigure lt hostindex gt lt hostaddress gt Mode Global Config 4 7 7 logging host remove The Logging Host Index to be removed Format logging host remove lt hostindex gt Mode Global Config 4 7 8 logging snmp requests get operation This command enables or disables the logging of SNMP GET requests Default Disabled Format logging snmp requests get operation enable disable Mode Global Config CLI L2P Release 8 0 05 2013 169 CLI Commands Base 4 7 Syslog Commands 4 7 9 logging snmp requests set operation This command enables or disables the logging of SNMP SET requests Default Disabled Format logging snmp requests set operation enable disable Mode Global Config 4 7 10 logging snmp requests get severity With this command you can define the severity level of logging SNMP GET requests Default Disabled Format logging snmp regquests get severity lt level 0 7 gt Mode Global Config level 0 7 Enter Logging Severity Level
242. long with the client IP address value to denote a range of IP addresses from which SNMP clients may use that community to access the device A value of 255 255 255 255 will allow access from only one station and will use that machine s IP address for the client IP Address A value of 0 0 0 0 will allow access from any IP address The name is the applicable community name Default 0 0 0 0 Format snmp server community ipmask lt ipmask gt lt name gt Mode Global Config no snmp server community ipmask This command sets a client IP mask for an SNMP community to 0 0 0 0 The name is the applicable community name The community name may be up to 32 alphanumeric characters Format no snmp server community ipmask lt name gt Mode Global Config CLI L2P 148 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 57 snmp server community mode This command activates an SNMP community If a community is enabled an SNMP manager associated with this community manages the switch accord ing to its access right If the community is disabled no SNMP requests using this community are accepted In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable Default The default private and public communities are enabled by default The four undefined communities are disabled by default Format snmp server community mode lt name gt Mode Global Config
243. lot port format Error reason Display the error reason for auto disable Possible values no error link flap crc error overload detection Component name Display the name of the component for auto disable Remaining time sec Display the remaining time in seconds for auto disable Possible values 0 30 2147483 Auto Disable time sec Display the time for auto disable in seconds Possible values 0 30 2147483 Auto Disable oper state Display the operational state of the auto disable function Possible values active inactive CLI L2P Release 8 0 05 2013 229 4 9 Device Configuration Commands 4 9 65 show auto disable reasons Use this command to display the reasons for port auto disable on this devcie Format show auto disable reasons Mode Global Config Error reason Display the error reasons of the port auto disable function link flap crc error overload detection State Display the state of the port auto disable function Possible values enabled disabled CLI L2P 230 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 66 show dip switch This command displays the DIP switch operation configuration Format show dip switch Mode Global Config DIP Switch operation This field displays the DIP Switch operation status Possible values Enabled Disabled DIP Switch conflict This field displays the DIP Switch conflict status Possible values True False DIP Switch Red Manager This fi
244. lt vlanid gt all Mode Privileged EXEC and User EXEC MAC Address Is the MAC Address of the static MAC filter entry VLAN ID Is the VLAN ID of the static MAC filter entry Source Port s Indicates the source port filter set s slot and port s Destination Port s Indicates the destination port filter set s slot and port s CLI L2P 238 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 74 show mac filter table staticfiltering This command displays the Static Filtering entries in the Multicast Forward ing Database MFDB table Format show mac filter table staticfiltering Mode Privileged EXEC and User EXEC Mac Address A unicast MAC address for which the switch has forwarding and or fil tering information The format is 6 or 8 two digit hexadecimal num bers that are separated by colons for example 01 23 45 67 89 AB Type This displays the type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as a result of a learning process or protocol Description The text description of this multicast table entry Interfaces The list of interfaces that are designated for forwarding Fwd and fil tering FIt CLI L2P Release 8 0 05 2013 239 4 9 Device Configuration Commands 4 9 75 show mac filter table stats This command displays the Multicast Forwarding Database MFDB statis tics Format show mac filter table stats Mode Privile
245. mand shows time and date Format show sntp time sntp system Mode Privileged EXEC and User EXEC sntp Show the current SNTP date and UTC time system Show the local system s current date and time 4 13 8 no sntp This command disables sntp Format no sntp Mode Global Config CLI L2P Release 8 0 05 2013 361 4 13 SNTP Simple Network Time Protocol 4 13 9 sntp anycast address Set the SNTP server s anycast destination IP Address default 0 0 0 0 none Format sntp anycast address lt IPAddress gt Mode Global Config no sntp anycast address Set the SNTP server s anycast destination IP Address to 0 0 0 0 Format no sntp anycast address Mode Global Config 4 13 10sntp anycast transmit interval The transmit interval in seconds default 120 Format sntp anycast transmit interval lt 1 3600 gt Mode Global Config CLI L2P 362 Release 8 0 05 2013 4 13 SNTP Simple Network Time Protocol 4 13 11sntp anycast vlan Set the SNTP server s Anycast VLAN ID used for sending Anycast messages default 1 Format sntp anycast vlan lt 1 4042 gt Mode Global Config 4 13 12sntp client accept broadcast Enable Disable that the SNTP Client accepts SNTP broadcasts Format sntp client accept broadcast lt on off gt Mode Global Config no sntp accept broadcast Disable the SNTP Client accepts SNTP broadcasts Format no sntp client accept broadcast Mode Global Config CLI L2P Release 8 0 0
246. mand to configure the port either as core port or access port Default Disabled Format mode dvlan tunnel access core Mode Interface Config access Configure this port as a customer port core Configure this port as a provider network port no mode dvian tunnel Use this command to configure the port as normal switch port and to disable the DVLAN tunneling Default Disabled Format no mode dvlan tunnel Mode Interface Config CLI L2P Release 8 0 05 2013 95 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 11 show dvlan tunnel Note This command is available for the RS20 RS30 RS40 RSB20 MS20 MS30 RSR20 RSR30 MACH100 MACH104 MACH1000 MACH1040 MACH4002 24G 48G XG OCTOPUS 0S20 0S30 devices Use this command to display the DVLAN Tunnel mode and used ether type for the specified interface s Format show dvlan tunnel interface slot port all Modes Privileged EXEC User EXEC lt slot port gt Enter an interface in slot port format all Enter all for all interfaces Interface Display the number of the interface slot port Possible values example 1 1 1 2 2 1 2 2 2 3 Mode Display the DVLAN Tunnel mode Possible values normal EtherType Display the used ether type Possible values 802 1Q vman custom CLI L2P 96 Release 8 0 05 2013 CLI Commands Base 4 5 Link Aggregation 802 3ad Commands 4 5 Link Aggregation 802 3ad Commands 4 5 1 link aggregation
247. mands 4 6 9 bridge aging time This command configures the forwarding database address aging timeout in seconds Default 30 Format bridge aging time lt 10 630 gt Mode Global Config Seconds The lt seconds gt parameter must be within the range of 10 to 630 sec onds no bridge aging time This command sets the forwarding database address aging timeout to 30 seconds Format no bridge aging time Mode Global Config CLI L2P Release 8 0 05 2013 105 CLI Commands Base 4 6 Management Commands 4 6 10 bridge fast link detection This command enables or disables the Bridge Fast Link Detection Default Enabled Format bridge fast link detection disable enable Mode Global Config 4 6 11 bridge duplex mismatch detect operation This command enables or disables Bridge Duplex Mismatch Detection Reasons for Duplex Mismatch can be A local port is configured to fix full duplex A port is configured to auto negotiation and has negotiated HalfDuplex Mode Duplex Mismatch can be excluded when the local port is configured to auto negotiation and duplex mode is negotiated to full duplex Note If counters and configuration settings indicate a Duplex Mismatch the reason can also be a bad cable and or EMI Default Enabled Format bridge duplex mismatch detect operation disable enable Mode Global Config CLI L2P 106 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 12 bridge vian l
248. me Disabled port Display the ports for the given Sub Ring ID summary Display a summary for the given Sub Ring ID ring name Display ring name for the given Sub Ring ID vlan Display the VLAN ID for the given Sub Ring ID mrp domainID Display the MRP domain ID for the given Sub Ring ID partner mac Display the partner MAC for the given Sub Ring ID CLI L2P 502 Release 8 0 05 2013 CLI Commands Switching 5 9 Sub Ring Commands 5 9 2 sub ring lt id gt mode Configure the switch s Sub Ring mode for the given ID manager or redundant manager Format Sub ring lt id gt mode manager redundant manager Single manager Mode Global Config lt id gt Specify the Sub Ring ID whose settings you want to configure manager Switch is manager for the given Sub Ring ID redundant manager Switch is redundant manager for the given Sub Ring ID single manager Switch is single manager for the given Sub Ring ID CLI L2P Release 8 0 05 2013 503 CLI Commands Switching 5 9 Sub Ring Commands 5 9 3 sub ring lt id gt operation Enable or disable the switch for the given Sub Ring ID Format Ssub ring lt id gt operation enable disable Mode Global Config lt id gt Specify the Sub Ring ID whose settings you want to configure enable Enable the switch for the given Sub Ring ID disable Disable the switch for the given Sub Ring ID 5 9 4 sub ring lt id gt protocol Set MRP or FHR as sub ring protocol for the given Sub
249. mit All Format vlan database Mode Privileged EXEC CLI L2P 270 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 109vlian ingressfilter This command enables ingress filtering If ingress filtering is disabled frames received with VLAN IDs that do not match the VLAN membership of the re ceiving interface are admitted and forwarded to ports that are members of that VLAN Default disabled Format vlan ingressfilter Mode Interface Config no vian ingressfilter This command disables ingress filtering If ingress filtering is disabled frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN Format no vlan ingressfilter Mode Interface Config CLI L2P Release 8 0 05 2013 271 4 9 Device Configuration Commands 4 9 110vian name This command changes the name of a VLAN The name is an alphanumeric string of up to 32 characters and the ID is a valid VLAN identification number ID range is 1 4042 Default The name for VLAN ID 1 is always Default The name for other VLANs is defaulted to a blank string Format vlan name lt 1 4042 gt lt newname gt Mode VLAN database no vian name This command sets the name of a VLAN to a blank string The VLAN ID is a valid VLAN identification number ID range is 1 4042 Format no vlan name lt 1 4042 gt Mode VLAN database CLI L2P 272 Release 8 0 05 2013
250. mit and receive function of LLDP Default Enabled Format lidp med Mode Interface Config no Iidp med Use this command to disable MED Format no lldp med Mode Interface Config CLI L2P Release 8 0 05 2013 343 4 12 LLDP Link Layer Discovery Protocol 4 12 31lldp med all Use this command to configure LLDP MED on all the ports Default Enabled Format lidp med all Mode Global Config 4 12 32iIldp med confignotification Use this command to configure all the ports to send the topology change no tification Default Disabled Format lldp med confignotification Mode Interface Config no Ildp med confignotification Use this command to disable notifications Format no lldp med confignotification Mode Interface Config CLI L2P 344 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 33lldp med confignotification all Use this command to configure all the ports to send the topology change notification Default Disabled Format lldp med confignotification all Mode Global Config CLI L2P Release 8 0 05 2013 345 4 12 LLDP Link Layer Discovery Protocol 4 12 34lldp med faststartrepeatcount Use this command to set the value of the fast start repeat count Default 3 Format lidp med faststartrepeatcount count Mode Global Config count The number of LLDP PDUs that will be transmitted when the product is enabled The range is 1 to 10 no Ildp med fasts
251. mmand enables logging to the console The lt severitylevel gt value is specified as either an integer from 0 to 7 or symbolically through one of the following keywords emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 informational 6 debug 7 Default disabled alert Format logging console severitylevel lt 0 7 gt Mode Global Config severitylevel 0 7 Enter Logging Severity Level emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 debug 7 Note Selecting a lower severity level larger number will include all messages from higher severity levels smaller numbers Possible severity levels see Table 15 no logging console This command disables logging to the console Format no logging console CLI L2P Release 8 0 05 2013 167 CLI Commands Base 4 7 Syslog Commands 4 7 5 logging host This command enables logging to a host where up to eight hosts can be configured Default Port 514 Level Critical Format logging host lt hostaddress gt lt port gt lt severitylevel gt Mode Global Config Severity number Severity name Meaning 0 emergency Minimum severity to be logged is 0 This is the highest level and will result in all other messages of lower levels not being logged 1 alert Minimum severity to be logged is 1 2 critical Minimum severity to be logged is 2 3 error Minimum severity to be logged is 3 4 warning Minimum severity to be
252. mode enter the interface lt slot port gt com mand From the Global Con figuration mode enter the lineconfig command Table 14 Command Mode CLI L2P Release 8 0 05 2013 Prompt Hirschmann Product gt Hirschmann Product Hirschmann Product Vlan Hirschmann Product Config Hirschmann Product Interface if num ber Hirschmann Product line Exit or Access Next Mode Enter Logout command To exit to the User Exec mode enter exit or press Ctrl Z To exit to the Privileged Exec mode enter the exit command or press Ctrl Z to switch to User Exec mode To exit to the Privileged Exec mode enter the exit command or press Ctrl Z to switch to user exec mode To exit to the Global Config mode enter exit To return to user EXEC mode enter ctrl Z To exit to the Global Config mode enter exit To return to User Exec mode enter ctrl Z 43 Mode based CLI 3 1 Mode based Topology 3 1 Mode based Topology The CLI tree is built on a mode concept where the commands are available according to the interface Some of the modes are depicted in the following figure The User Exec commands are also accessible in the Enable Fig 1 Mode based CLI CLI L2P 44 Release 8 0 05 2013 Mode based CLI 3 2 Mode based Command Hierarchy 3 2 Mode based Command Hierarchy The CLI i
253. munity based security from SNMPv1 SNMPyv2u experimental This version of the protocol uses the protocol operations and data types of SNMPv2c and security based on users SNMPyv2 experimental This version combined the best features CLI L2P Release 8 0 05 2013 Glossary of SNMPv2p and SNMPv2u It is also called SNMPv2star The documents defing this version were never published as RFCs SNMPyv3 proposed This version of the protocol is a combination of user based security and the protocol operations and data types from SNMPv2p and support for proxies The security is based on that found in SNMPv2u and SNMPv2 and updated after much review The documents defing this protocol will soon be published as RFCs SimpleX signaling SX is one of IEEE 802 3 s designations for media For example 1000SX indicates 1000 gigabit Ethernet over short haul or short wavelength optical fiber SMC1 A model of Serial Management Controller from Motorola SMII Serial Media Independent Interface SNMP See Simple Network Management Protocol on page 578 SODIMM Small Outline Dual Inline Memory Module SRAM Static Random Access Memory STP Spanning Tree Protocol See 802 1D on page 567 for more information CLI L2P Release 8 0 05 2013 T TBI Ten Bit Interface Telnet A character based UNIX application that enables users with a Telnet server account to log on to a UNIX computer and u
254. n alphanumeric value not exceeding 20 characters Format radius server key auth acct lt ipaddr gt Mode Global Config 6 1 27 radius server msgauth This command enables the message authenticator attribute for a specified server Default radius server msgauth lt ipaddr gt Mode Global Config CLI L2P Release 8 0 05 2013 533 CLI Commands Security 6 1 Security Commands 6 1 28 radius server primary This command is used to configure the primary RADIUS authentication server for this RADIUS client The primary server is the one that is used by default for handling RADIUS requests The remaining configured servers are only used if the primary server cannot be reached A maximum of three servers can be configured on each client Only one of these servers can be configured as the primary If a primary server is already configured prior to this command being executed the server specified by the IP address used in this command will become the new primary server The IP address must match that of a previously configured RADIUS authentication server Format radius server primary lt ipaddr gt Mode Global Config CLI L2P 534 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 29 radius server retransmit This command sets the maximum number of times a request packet is retransmitted when no response is received from the RADIUS server The retries value is an integer in the range of 1 to 15 Default
255. n is unavailable use authentication login lt listname gt method1 method2 method3 CLI L2P 552 Release 8 0 05 2013 CLI Commands Security 6 2 HTTP Commands 6 2 HTTP Commands 6 2 1 ip http secure port This command is used to set the sslt port where port can be 1 65535 and the default is port 443 Default 443 Format ip http secure port lt portid gt Mode Privileged EXEC no ip http secure port This command is used to reset the sslt port to the default value Format no ip http secure port Mode Privileged EXEC CLI L2P Release 8 0 05 2013 553 CLI Commands Security 6 2 HTTP Commands 6 2 2 ip http secure protocol This command is used to set protocol levels versions The protocol level can be set to TLS1 SSL3 or to both TLS1 and SSL3 Default SSL3 and TLS1 Format ip http secure protocol SSL3 TLS1 Mode Privileged EXEC CLI L2P 554 Release 8 0 05 2013 CLI Commands Security 6 2 HTTP Commands 6 2 3 ip http server This command enables access to the switch s graphical user interface web based interface via a web browser When access is enabled the user can login to the switch from the web based interface When access is disabled the user cannot login to the switch s web server Disabling the web based interface takes effect immediately All interfaces are effected Note First enable HTTP before enabling HTTPS First disable the HTTPS web server before disabling HTTP See
256. nal contact closed open Only takes immediate effect in manual mode Configures the sending of traps concerning the signal contact enable enables sending traps disable disables sending traps CLI L2P Release 8 0 05 2013 4 11 System Utilities 4 11 28temperature Note The command is available for RS20 RS30 RS40 MS20 MS30 RSR20 RSR30 MACH100 MACH1000 PowerMICE MACH4000 and OCTOPUS devices This command configures the lower and upper temperature limit for the device If these limits are exceeded a trap is sent The unit for the temperature limit is C Celsius the minimum value is 99 the maximum value is 99 The default for the lower limit is 0 for the upper limit it is 70 Note To give the temperature in Fahrenheit use the suffix f Format temperature lower limit upper limit lt temperature value gt clf Mode Global Config lower limit Configure the lower temperature limit upper limit Configure the upper temperature limit CLI L2P Release 8 0 05 2013 319 4 11 System Utilities 4 11 29reboot This command resets the switch cold start after a given time delay for warm start See reload on page 322 Reset means that all network connections are terminated and the boot code executes The switch uses the stored con figuration to initialize the switch You are prompted to confirm that the reset should proceed A successful reset is indicated by the LEDs on the switch Form
257. nce Interval in seconds 1 2 4 8 16 Format ptp v2bc announce interval 1 2 4 8 16 Mode Interface Config CLI L2P 386 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 25ptp v2bc announce timeout Configure the Announce Receipt Timeout 2 10 Format ptp v2bc announce timeout lt 2 10 gt Mode Interface Config 4 14 26ptp v2bc sync interval Configure the Sync Interval in seconds 0 5 1 2 Format ptp v2bc sync interval 0 25 0 5 1 2 Mode Interface Config 4 14 27ptp v2bc delay mechanism Configure the delay mechanism e2e p2p disabled of the transparent clock Format ptp v2bc delay mechanism e2e p2p disabled Mode Interface Config CLI L2P Release 8 0 05 2013 387 4 14 PTP Precision Time Protocol 4 14 28ptp v2bc pdelay interval Configure the Peer Delay Interval in seconds 1 2 4 8 16 32 This interval is used if delay mechanism is set to p2p Format ptp v2bc pdelay interval 1 2 4 8 16 32 Mode Interface Config 4 14 29ptp v2bc network protocol Configure the network protocol ieee802_ 3 udp_ipv4 of the transparent clock Format ptp v2bc network protocol ieee802 3 udp _ipv4 Mode Interface Config 4 14 30ptp v2bc v1 compatibility mode Set the PTPv1 Hardware compatibility mode auto on off Format ptp v2bc vl compatibility mode auto on off Mode Interface Config CLI L2P 388 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 31 ptp
258. nd ipaddr gt Add a pool with an IP range dynamic CLI L2P Release 8 0 05 2013 495 CLI Commands Switching 5 8 DHCP Server Commands 5 8 9 dhcp server pool modify lt id gt mode Add or delete one or more pool modes Format dhcp server pool modify lt id gt mode interface all lt slot port gt 1 Imac none lt macaddr gt 1 Iclientid none lt clientid gt 1 relay none lt ipaddr gt remoteid none lt remoteid gt 1 circuitid none lt circuitid gt 1 lvlan none lt vlan id gt Mode Global Config dhcp server pool modify lt id gt mode interface all 1 Set pool to all interfaces dhcp server pool modify lt id gt mode interface lt slot port gt 1 Set pool to a specific interface dhcp server pool modify lt id gt mode mac none 1 Use none to remove the mode dhcp server pool modify lt id gt mode mac lt macaddr gt Enter macaddr in XX XX XX XX XX XX format dhcp server pool modify lt id gt mode clientid none Use none to remove the mode dhcp server pool modify lt id gt mode clientid lt clientid gt 1 dhcp server pool modify lt id gt mode relay none Use none to remove the mode dhcp server pool modify lt id gt mode relay lt ipaddr gt Enter IP address of the relay CLI L2P 496 Release 8 0 05 2013 CLI Commands Switching 5 8 DHCP Server Commands dhcp server pool modify lt id gt mode remoteid none 1 Use none to remove the mode dhcp server po
259. nd lists all scripts present on the switch as well as the remaining available space Format script list aca Mode Privileged EXEC Configuration Script Name of the script Without the optional ACA parameter Listing of the scripts in the switch s flash memory With the optional ACA parameter Listing of the scripts on the external ACA 21 USB Size Size of the script CLI L2P 174 Release 8 0 05 2013 CLI Commands Base 4 8 Scripting Commands 4 8 4 script show This command displays the contents of a script file The parameter lt script name gt is the name of the script file Format script show lt scriptname gt Mode Privileged EXEC The format of display is Line lt no gt lt Line contents gt 4 8 5 script validate This command validates a script file by parsing each line in the script file where lt scriptname gt is the name of the script to validate The validate option is intended to be used as a tool for script development Validation identifies potential problems It may or may not identify all prob lems with a given script on any given device Format script validate lt scriptname gt Mode Privileged EXEC CLI L2P Release 8 0 05 2013 175 CLI Commands Base 4 8 Scripting Commands CLI L2P 176 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 Device Configuration Commands 4 9 1 addport This command adds one port to the Link Aggregation LAG The given inter face is a logical
260. nd or priority A primary benefit of using Voice VLAN is to ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high Default Disabled Format voice vlan Mode Global Config no voice vian This command disables the Voice VLAN feature Default Disabled Format no voice vlan Mode Global Config CLI L2P Release 8 0 05 2013 281 4 9 Device Configuration Commands 4 9 120voice vian lt id gt Use this command to configure VLAN tagging and 802 1p priority Format voice vlan lt id gt dotlp lt priority gt Mode Interface Config lt id gt Enter the Voice VLAN ID dotip Configure Voice VLAN 802 1p priority tagging for voice traffic lt priority gt The priority tag range is 0 7 no voice vian This command disables the Voice VLAN feature on the interface Default Disabled Format no voice vlan Mode Interface Config CLI L2P 282 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 121 voice vlan dot1p Use this command to configure Voice VLAN 802 1p priority tagging for voice traffic Format voice vlan dotlp lt priority gt Mode Interface Config lt priority gt Configure Voice VLAN 802 1p priority tagging for voice traffic The priority tag range is 0 7 4 9 122voice vian none Use this command to allow the IP phone to use its own configuration to send untagged voice traffic Format voice vlan none Mode Interface Con
261. nd to display the summary information about remote devices that transmit current LLDP MED data to the system You can show informa tion about LLDP MED remote data received on all valid LLDP interfaces or on a specific physical interface Format show lldp med remote device lt slot port gt all Mode Privileged EXEC lt slot port gt Indicates a specific physical interface all Indicates all valid LLDP interfaces Local Interface Displays the local interface RemotelD Displays the RemotelD Device Class Displays the Device Class CLI L2P Release 8 0 05 2013 333 4 12 LLDP Link Layer Discovery Protocol 4 12 16show lIldp med remote device detail Use this command to display detailed information about remote devices that transmit current LLDP MED data to an interface on the system Format show lldp med remote device detail lt slot port gt Mode Privileged EXEC Local Interface Displays the local interface 4 12 17show lIldp remote data This command shows all LLDP remote data settings and states concerning one or all ports Format show lldp remote data lt slot port all gt chassis id detailed ether port info inlinepower link aggregation info mgmt addr profinetio port info port desc port id summary sys desc sys name vlan info Mode Privileged EXEC and User EXEC chassis id Display the remote data s chassis ID only detailed Display remote data in detailed format i e all
262. nfig no link aggregation linktrap This command disables link trap notifications for the link aggregation LAG The interface is a logical unit slot and port slot and port for a con figured link aggregation The option a11 sets every configured link aggregation with the same administrative mode setting Format no link aggregation linktrap lt logical slot port gt all Mode GlobalConfig CLI L2P 198 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 23 link aggregation name This command defines a name for the link aggregation LAG The interface is a logical slot port for a configured link aggregation and name is an alpha numeric string up to 15 characters This command is used to modify the name that was associated with the link aggregation when it was created Format link aggregation name lt logical slot port gt all lt name gt Mode Global Config 4 9 24 rmon alarm add This command adds an RMON alarm Format rmon alarm add lt index gt lt mib variable gt lt rising threshold gt lt falling threshold gt Mode Global Config index Enter the index of the RMON alarm mib variable Enter the MIB variable rising threshold Enter the rising threshold for the RMON alarm falling threshold Enter the falling threshold for the RMON alarm CLI L2P Release 8 0 05 2013 199 4 9 Device Configuration Commands 4 9 25 rmon alarm delete This command deletes an RMON alarm Format rmon al
263. nfig 313 copy system bootcode 313 copy system image 313 copy system running config 313 copy nvram capture 308 copy nvram capture aca capture 308 copy nvram clibanner 308 copy nvram errorlog 309 copy nvram script 309 copy nvram traplog 310 copy system running config 310 D debug tcpdump filter delete 84 debug tcpdump filter list 83 debug tcpdump filter show 83 debug tcpdump help 81 debug tcpdump start cpu 81 debug tcpdump start cpu filter 82 debug tcpdump stop 82 deleteport 185 deleteport all 185 device configuration commands 201 device status connection error 314 device status monitor 315 DHCP server configuration example 490 dhcp relay 486 487 dhcp server addr probe 494 dhcp server operation 495 dhcp server pool add 495 dhcp server pool delete 500 dhcp server pool disable 500 dhcp server pool enable 500 dhcp server pool modify hirschmann device 499 dhcp server pool modify mode 496 dhcp server pool modify option 498 dhcp server pool modify leasetime 499 digital input 107 digital output 109 dip switch operation 186 disconnect 285 dot1x defaultlogin 514 dot1x dynamic vlan enable 515 dot1x guest vlan 516 dot1x initialize 517 dot1x login 517 dot1x mac auth bypass 518 dot1x max req 519 dot1x max users 520 584 dot1x port control 521 dot1x port control all 522 dot1x re authenticate 523 dot1x re authentication 523 dot1x safe vian 524 dot1x system auth control 525 dot1x timeout 525 dot1x user 529 duplex settings 260
264. nfig or Interface Config CLI L2P Release 8 0 05 2013 87 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 2 classofservice ip dscp mapping This command maps an IP DSCP value to an internal traffic class The lt ipdscp gt value is specified as either an integer from 0 to 63 or symbolically through one of the following keywords af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 be cs0 cs1 cs2 cs3 cs4 cs5 cs6 cs ef Format classofservice ip dscp mapping lt ipdscp gt lt trafficclass gt Mode Global Config ipdscp Enter the IP DSCP value in the range of 0 to 63 or an IP DSCP keyword af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 be csO cs1 cs2 cs3 cs4 cs5 cs6 cs 7 ef trafficclass Enter the traffic class to map the 802 1p priority 0 3 no classofservice ip dscp mapping This command restores the default mapping of the IP DSCP value to an internal traffic class Format no classofservice dotlp mapping Modes Global Config CLI L2P 88 Release 8 0 05 2013 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 3 classofservice trust This command sets the class of service trust mode of an interface The mode can be set to trust one of the Dot1p 802 1p or IP DSCP packet markings Note In trust ip dscp mode the switch modifies the vlan priority for out going frames according to the DSCP mapping and VLAN mapping table PowerMICE MACH
265. ng media or high bandwidth content can see minimal latency and packet loss When packets enter into a MPLS based network Label Edge Routers LERs give them a label identifier These labels not only contain information based on the routing table entry i e destination bandwidth delay and other metrics but also refer to the IP header field Source IP address Layer 4 socket number information and differentiated service Once this classification is complete and mapped different packets are assigned to corresponding Labeled Switch Paths LSPs where Label Switch Routers LSRs place outgoing labels on the packets With these LSPs network operators can divert and route traffic based on data stream type and Internet access customer MT RJ connector A type of fiber optic cable jack that is similar in shape and concept to a standard telephone jack enabling duplex 576 fiber optic cables to be plugged into compatible devices as easily as plugging in a telephone cable MUX See Multiplexing on page 575 N NM Network Module nm Nanometer 1 x 10e9 meters NP Network Processor O Open Systems Interconnection OSI is a seven 7 layer architecture model for communications systems developed by the ISO for the interconnection of data communications systems Each layer uses and builds on the services provided by those below it Operating System Application Programming Interface OSAPI is a mo
266. nning Software Build Date The operating system s software build date Stored Software Release The stored operating system s software version number Stored Software Build Date The stored operating system s software build date Backup Software Release The backup operating system s software version number Backup Software Build Date The backup operating system s software build date Backplane Hardware Revision The hardware s revision number Backplane Hardware Description The hardware s device description Serial Number Backplane The hardware s serial number Base MAC Address Backplane The hardware s base MAC address Number of MAC Addresses Backplane The number of hardware MAC addresses Configuration state The state of the actual configuration Configuration signature The signature watermark of the stored configuration The signature changes each time the configuration is saved Auto Config Adapter State The Auto Configuration Adapter s state Auto Config Adapter Serial Number The Auto Configuration Adapter s serial number if present and operative CLI L2P 78 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics Fan Status The status of the MACH4000 fan Power Supply Information The status of the power supplies Media Module Information The description of each media module Description media module type Serial Number of the media modul if available
267. no snmp server community mode This command deactivates an SNMP community If the community is disabled no SNMP requests using this community are accepted In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable Format no snmp server community mode lt name gt Mode Global Config CLI L2P Release 8 0 05 2013 149 CLI Commands Base 4 6 Management Commands 4 6 58 snmp server community ro This command restricts access to switch information The access mode is read only also called public Format snmp server community ro lt name gt Mode Global Config 4 6 59 snmp server community rw This command restricts access to switch information The access mode is read write also called private Format snmp server community rw lt name gt Mode Global Config 4 6 60 snmp server location This command configures the system location Format snmp server location lt system location gt Mode Global Config CLI L2P 150 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 61 snmp server sysname This command configures the system name Format snmp server sysname lt system name gt Mode Global Config 4 6 62 snmp server enable traps This command enables the Authentication Trap Flag Default enabled Format snmp server enable traps Mode Global Config no snmp server enable traps This command disables the Authenti
268. nputs Default disable The input state will be checked according to the interval set with IO lt refresh interval gt all Configure the l1O Module event logging for all digital inputs lt slot input gt Configure the O Module event logging for a single digital input disable Disable event logging for digital input status changes enable Enable event logging for digital input status changes snmp trap This command enables or disables the sending of SNMP traps in case of input status changes for one or all digital inputs Default disable The trap will be sent to all SNMP trap receivers configured with snmptrap The input state will be checked according to the interval set with IO lt refresh interval gt all Configure the 1O Module SNMP trap for all digital inputs lt slot input gt Configure the O Module SNMP trap for a single digital input disable Disable SNMP traps for digital input status changes enable Enable SNMP traps for digital input status changes CLI L2P 108 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 14 digital output This command configures the O Module digital outputs Format digital output admin state enable disable refresh interval lt refresh interval gt retry count lt refresh interval gt log event all lt slot output gt enable disable snmp trap all lt slot output gt enable disable mirror all lt slot gt lt output gt disable from lt IPaddress gt
269. nsibility for damages resulting from the use of the network components or the associated operating software In addition we refer to the conditions of use specified in the license contract Printed in Germany 4 26 13 Hirschmann Automation and Control GmbH Stuttgarter Str 45 51 72654 Neckartenzlingen Germany Tel 49 1805 141538 05 05 2013 Content Content About this Manual Maintenace 1 Command Structure 1 1 Format 1 1 1 Command 1 1 2 Parameters 1 1 3 Values 1 1 4 Conventions 1 1 5 Annotations 1 1 6 Special keys 1 1 7 Special characters in scripts 1 1 8 Secrets in scripts 2 Quick Start up 2 1 Quick Starting the Switch 2 2 System Info and System Setup 3 Mode based CLI 3 1 Mode based Topology 3 2 Mode based Command Hierarchy 3 3 Flow of Operation 3 4 No Form of a Command 3 4 1 Support for No Form 3 4 2 Behavior of Command Help CLI Commands Base 4 1 System Information and Statistics 4 1 1 show 4 1 2 show address conflict 4 1 3 show arp switch 4 1 4 show bridge address learning 4 1 5 show bridge address relearn detect CLI L2P Release 8 0 05 2013 35 36 37 43 44 45 47 49 49 49 51 52 52 52 53 53 54 Content 4 2 4 3 4 4 4 1 6 4 1 7 4 1 8 4 1 9 4 1 4 1 4 1 4 1 4 1 4 1 4 1 4 1 4 1 4 1 10 11 12 13 14 15 16 17 18 19 4 1 20 4 1 21 4 1 22 4 1 23 4 1 24 4 1 25 4 1 26 4 1 27 show bridge aging time show bridge duplex mismatch detec
270. nsion is cli that the file name does not exceed 16 characters does not start with a dot and does not contain a directory CLI L2P 76 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics 4 1 25 show sysinfo This command displays switch information Format show sysinfo Mode Privileged EXEC and User EXEC Alarm Displays the latest present Alarm for a signal contact System Description Text used to identify this switch System Name Name used to identify the switch System Location Text used to identify the location of the switch May be up to 31 alpha numeric characters The factory default is blank System Contact Text used to identify a contact person for this switch May be up to 31 alpha numeric characters The factory default is blank System UpTime The time in days hours and minutes since the last switch reboot System Date and Time The system clock s date and time in local time zone System IP Address The system s IP address Boot Software Release The boot code s version number Boot Software Build Date The boot code s build date Operating system Software Release The operating system s software version number Operating system Software Build Date The operating system s software build date CLI L2P Release 8 0 05 2013 TT CLI Commands Base 4 1 System Information and Statistics Running Software Release The operating system s software version number Ru
271. nsmitted The total number of packets that higher level protocols requested be transmitted to a subnetwork uni cast address including those that were discarded or not sent Multicast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to a Multicast address including those that were discarded or not sent Broadcast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to the Broadcast address including those that were discarded or not sent Transmit Packets Discarded The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher layer protocol A possible reason for discarding a packet could be to free up buffer space Most Address Entries Ever Used The highest number of Forward ing Database Address Table entries that have been learned by this switch since the most recent reboot CLI L2P Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics Address Entries in Use The number of Learned and static entries in the Forwarding Database Address Table for this switch Maximum VLAN Entries The maximum number of Virtual LANs VLANs allowed on this switch Most VLAN Entries Ever Used The largest number of VLANs that have been active on this switch since the last reboot Static VLAN Entries The number of presently active VLA
272. nter a new MRP domain id Format 16 bytes in decimal notation example 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 The MRP domain id 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 is invalid default domain Create a default MRP domain ID 255 255 255 255 255 255 255 255 255 255 255 255 255 255 255 255 CLI L2P Release 8 0 05 2013 457 CLI Commands Switching 5 2 MRP 5 2 6 arc Use this command to configure ARC Automatic Ring Configuration ARC supports MRP The ARC protocol is a simple protocol that checks a ring configuration and if suitable configures all clients of this ring automatically The check cycle includes an analysis of the ARC devices for an already active ring configuration and wrong ring configuration values The ARC devices can detect loop situations and other ARC Managers in the ring Errors are reported to the ARC Manager With this information the ARC Man ager can decide whether a configuration of the ring clients is possible or not Format arc manager enable disable client enable disable checkOnly check configure Mode Global Config client Configure the ARC client enable Enable the ARC client for configuring and checking disable Disable the ARC client for configuring and checking checkOnly The device can only be checked but not configured by ARC manager Configure the ARC manager enable Enable the ARC manager for configuring and checking disable Disable the ARC manager
273. nterface Crossover MIB See Management Information Base on page 574 MOSPF See Multicast OSPF on page 575 MPLS See Multi Protocol Label Switching on page 575 Multicast Backbone The MBONE is a virtual network It is layered on top of portions of the physical Internet to support routing of IP multicast packets since that function has not yet been integrated into many production routers The network is composed of islands that can directly support IP multicast such as multicast LANs like Ethernet linked by virtual point to point links called tunnels The tunnel endpoints are typically workstation class machines having operating system support for IP multicast and running the mrouted multicast routing daemon Multicasting To transmit a message to specific recipients across a network A simple example of multicasting is sending an e mail message to a mailing list Teleconferencing and videoconferencing also use multicasting but require more robust protocols and networks Standards are being developed to support multicasting over a TCP IP network such as the Internet These standards IP Multicast and Mbone CLI L2P Release 8 0 05 2013 will allow users to easily join multicast groups Note that multicasting refers to sending a message to a select group whereas broadcasting refers to sending a message to everyone connected to a network The terms multicast and narrowcast are often used inte
274. number Format show vlan lt vlanid gt Mode Privileged EXEC and User EXEC CLI L2P 248 Release 8 0 05 2013 4 9 Device Configuration Commands VLAN ID There is a VLAN Identifier VID associated with each VLAN The range of the VLAN ID is 1 to 4042 VLAN Name A string associated with this VLAN as a convenience It can be up to 32 alphanumeric characters long including blanks The default is blank VLAN ID 1 always has a name of Default This field is optional VLAN Type Type of VLAN which can be Default VLAN ID 1 a static one that is configured and permanently defined or Dynamic one that is cre ated by GVRP registration VLAN Creation Time Time since VLAN has been created d days hh mm ss System Uptime Interface Valid slot and port number separated by forward slashes It is possi ble to set the parameters for all ports by using the selectors on the top line Current Determines the degree of participation of this port in this VLAN The permissible values are Include This port is always a member of this VLAN This is equivalent to registration fixed in the IEEE 802 1Q standard Exclude This port is never a member of this VLAN This is equiv alent to registration forbidden in the IEEE 802 1Q standard Autodetect Specifies to allow the port to be dynamically regis tered in this VLAN via GVRP The port will not participate in this VLAN unless a join request is received on this port This is
275. oftware CLI L2P Release 8 0 05 2013 35 Quick Start up 2 1 Quick Starting the Switch 2 1 Quick Starting the Switch Read the device Installation Guide for the connectivity procedure In band connectivity allows access to the software locally or from a remote work station The device must be configured with IP information IP address subnet mask and default gateway Turn the Power on Allow the device to load the software until the login prompt appears The device s initial state is called the default mode When the prompt asks for operator login execute the following steps Type the word admin in the login area Since a number of the Quick Setup commands require administrator account rights we recom mend logging into an administrator account Press the enter key Enter the state on delivery password private Press the enter key The CLI User EXEC prompt will be displayed User EXEC prompt Hirschmann Product gt Use enable to switch to the Privileged EXEC mode from User EXEC Privileged EXEC prompt Hirschmann Product Use configure to switch to the Global Config mode from Privileged EXEC Global Config prompt Hirschmann Product Config Use exit to return to the previous mode CLI L2P 36 Release 8 0 05 2013 Quick Start up 2 2 System Info and System Setup 2 2 System Info and System Setup This chapter informs you about Quick Start up Software Version Information Qu
276. ol Data Units transmitted from the spanning tree layer 802 3x Pause Frames Received A count of MAC Control frames received on this interface with an opcode indicating the PAUSE oper ation This counter does not increment when the interface is operating in half duplex mode GVRP PDU s Received The count of GVRP PDU s received in the GARP layer GMRP PDU s received The count of GMRP PDU s received in the GARP layer GMRP PDU s Transmitted The count of GMRP PDU s transmitted from the GARP layer GMRP Failed Registrations The number of times attempted GMRP registrations could not be completed STP BPDUs Transmitted Spanning Tree Protocol Bridge Protocol Data Units sent STP BPDUs Received Spanning Tree Protocol Bridge Protocol Data Units received RST BPDUs Transmitted Rapid Spanning Tree Protocol Bridge Protocol Data Units sent RSTP BPDUs Received Rapid Spanning Tree Protocol Bridge Pro tocol Data Units received MSTP BPDUs Transmitted Multiple Spanning Tree Protocol Bridge Protocol Data Units sent MSTP BPDUs Received Multiple Spanning Tree Protocol Bridge Protocol Data Units received Dot1x Statistics EAPOL Frames Received The number of valid EAPOL frames of any type that have been received by this authenticator EAPOL Frames Transmitted The number of EAPOL frames of any type that have been transmitted by this authenticator Time Since Counters Last Cleared The elapsed time in days hours minutes and seconds since
277. ol is inactive but the LLDP MIBs can still be accessed Format show lldp config chassis admin state Mode Privileged EXEC and User EXEC 4 12 5 show Ildp config chassis notification interval Display the LLDP minimum notification trap interval unit seconds Format show lldp config chassis notification interval Mode Privileged EXEC and User EXEC CLI L2P Release 8 0 05 2013 325 4 12 LLDP Link Layer Discovery Protocol 4 12 6 show lidp config chassis re init delay Display the LLDP configuration s chassis re initialization delay unit seconds Format show lldp config chassis re init delay Mode Privileged EXEC and User EXEC 4 12 7 show lidp config chassis tx delay Display the LLDP transmit delay unit seconds It indicates the delay between successive LLDP frame transmissions Format show lldp config chassis tx delay Mode Privileged EXEC and User EXEC 4 12 8 show lidp config chassis tx hold mult Display the LLDP transmit hold multiplier a time to live value expressed as a multiple of the LLDP Message Tx Interval tx interval Format show Lidp config chassis tx hold mult Mode Privileged EXEC and User EXEC CLI L2P 326 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 9 show lldp config chassis tx interval Display the interval unit seconds at which LLDP frames are transmitted on behalf of this LLDP agent Format show lldp config chassis tx interval Mode Privileged EXE
278. ol modify lt id gt mode remoteid lt remoteid gt 1 dhcp server pool modify lt id gt mode circuitid none Use none to remove the mode dhcp server pool modify lt id gt mode circuitid lt circuitid gt 1 dhcp server pool modify lt id gt mode vlan lt vlan id gt 1 Enter valid VLAN ID 1 Available for pools with single IP address only CLI L2P Release 8 0 05 2013 497 CLI Commands Switching 5 8 DHCP Server Commands 5 8 10 dhcp server pool modify lt id gt option Modify pool options Format dhcp server pool modify lt id gt option configpath lt url gt gateway lt ipaddr gt netmask lt netmask gt wins lt ipaddr gt dns lt ipaddr gt hostname lt name gt vendor specific lt string gt Mode Global Config dhcp server pool modify lt id gt option configpath lt url gt Option configpath Enter the configpath URL in tftp lt servername or ip gt lt file gt format dhcp server pool modify lt id gt option gateway lt ipaddr gt Option default gateway Enter the gateway IP address dhcp server pool modify lt id gt option netmask lt netmask gt Option netmask Enter the netmask dhcp server pool modify lt id gt option wins lt ipaddr gt Option wins Enter WINS IP address dhcp server pool modify lt id gt option dns lt ipaddr gt Option DNS Enter the DNS IP address dhcp server pool modify lt id gt option hostname lt name gt Option hostname Enter the host name dhcp serv
279. old Define the lower threshold value for overload condition packets per second kbits or of the link capacity for different types of traffic lt threshold value gt Enter a lower threshold value Possible values 0 10000000 upper threshold Define the upper threshold value for overload condition packets per second kbits or of the link capacity for different types of traffic lt threshold value gt Enter a upper threshold value Possible values 0 10000000 enable Enable the overload detection disable Disable the overload detection CLI L2P 410 Release 8 0 05 2013 4 17 Port monitor 4 17 11show port monitor overload detection Note This command is available for the MACH104 and MACH1040 devices Use this command to display information about port monitor overload detec tion for a specific interface Default I Format show port monitor overload detection lt slot port gt Mode User EXEC and Privileged EXEC lt slot port gt Valid slot and port number separated by forward slashes Overload detection traffic type Display the traffic type for the port monitor overload detection Possible values bc broadcast traffic bc mc broadcast and multicast all all traffic types Overload detection threshold type Display the threshold type for the port monitor overload detection Possible values pps packets per second kbps kilobits per second link capacity of the link capacity Overload dete
280. ommand outputs Port VLAN ID Membership VLAN IDs and their respective names CLI L2P Release 8 0 05 2013 335 4 12 LLDP Link Layer Discovery Protocol 4 12 18lldp Enable disable the LLDP IEEE802 1AB functionality on this device If dis abled the LLDP protocol will become inactive but the LLDP MIBs can still be accessed This command is a shorthand notation for 1l1dp config chas sis admin state off on see Ildp config chassis admin state on page 337 The default setting is on Format lldp Mode Global Config no lidp Disable the LLDP IEEE802 1AB functionality on this device Format no lldp Mode Global Config CLI L2P 336 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 19lidp config chassis admin state Configure the LLDP IEEE802 1AB functionality on this device If disabled the LLDP protocol will become inactive but the LLDP MIBs can still be accessed off Disable the LLDP IEEE802 1AB functionality on Enable the LLDP IEEE802 1AB functionality The default setting is on Format lldp config chassis admin state off on Mode Global Config 4 12 20lidp config chassis notification interval Configure the LLDP minimum notification interval the minimum time after a notification trap has been sent until a new trap can be sent unit seconds min 5 sec max 3600 sec default 5 sec Format lldp config chassis notification interval lt notification interval gt
281. ommands Base 4 4 Class of Service CoS Commands 4 4 8 vlan priority This command configures the default 802 1p port priority assigned for un tagged packets for a specific interface The range for the priority is 0 7 Default 0 Format vlan priority lt priority gt Mode Interface Config CLI L2P Release 8 0 05 2013 93 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 9 dvlan tunnel ethertype Note This command is available for the RS20 RS30 RS40 RSB20 MS20 MS30 RSR20 RSR30 MACH100 MACH104 MACH1000 MACH1040 MACH4002 24G 48G XG OCTOPUS 0S20 0S30 devices This command configures the ethertype for all core ports The ethertype may have the values of 802 1q vMAN or custom The configured ethertype is used for VLAN classification on all ports which are configured as core ports Default 802 10 Format dvlan tunnel ethertype 802 10 vman custom lt 0 65535 gt Mode Global Config 802 1Q Configure the ether Type as 0x8100 custom Custom configure the etherType for the DVlan tunnel Range for the optional value of the custom ethertype O to 65535 vman Configure the etherType as 0x88A8 CLI L2P 94 Release 8 0 05 2013 CLI Commands Base 4 4 Class of Service CoS Commands 4 4 10 mode dvlan tunnel Note This command is available for the RS20 RS30 RS40 RSB20 MS20 MS30 RSR20 RSR30 MACH100 MACH104 MACH1000 MACH1040 MACH4002 24G 48G XG OCTOPUS OS20 0S30 devices Use this com
282. on all interfac es If an interface which has GARP enabled is enabled for routing or is enlist ed as a member of a link aggregation LAG GARP functionality will be disabled on that interface GARP functionality will subsequently be re en abled if routing is disabled and link aggregation LAG membership is re moved from an interface that has GARP enabled Default disabled Format set gmrp interfacemode Mode Global Config no set gmrp interfacemode This command disables GARP Multicast Registration Protocol on a selected interface Format no set gmrp interfacemode Mode Global Config CLI L2P 210 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 41 set gmrp forward all groups This command enables the GMRP Multicast Registration Protocol feature Forward All Groups for all ports Default disabled Format set gmrp forward all groups Mode Interface Config Global Config no set gmrp forward all groups This command disables the GMRP Multicast Registration Protocol fea ture Forward All Groups for all ports Format no set gmrp forward all groups Mode Interface Config Global Config CLI L2P Release 8 0 05 2013 211 4 9 Device Configuration Commands 4 9 42 set gmrp forward unknown Note This command is available for the devices of the MS20 MS30 RS20 RS30 RS40 MACH102 MACH104 MACH1000 MACH1040 OCTOPUS RSR20 RSR30 family Use this command to configure if the device should forward unknown
283. on this interface are discarded For Admit All mode untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port With either option VLAN tagged frames are forwarded in ac cordance with the IEEE 802 1Q VLAN Specification Default Admit All Format vlan acceptframe lt vlanonly all untaggedonly gt Mode Interface Config all Untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port vianonly Only frames received with a VLAN tag will be forwarded Other frames will be dropped untaggedonly Only frames received without a VLAN tag will be forwarded Other frames will be dropped Note This command is available for devices of the RS20 RS30 RS40 MS20 MS30 MACH102 RSR20 RSR30 MACH1020 MACH1030 and OCTOPUS family CLI L2P Release 8 0 05 2013 269 4 9 Device Configuration Commands no vlan acceptframe This command sets the frame acceptance mode per interface to Admit A11 For Admit All mode untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port With either option VLAN tagged frames are forwarded in accordance with the IEEE 802 1Q VLAN Specification Format no vlan acceptframe Mode Interface Config 4 9 108vlan database This command switches into the global VLAN mode Default Ad
284. ondary Set the SNTP Client s secondary server IP Address default 0 0 0 0 none Format sntp client server secondary lt IP Address gt Mode Global Config no sntp client server secondary Disable the secondary SNTP client server Format no sntp client server secondary Mode Global Config CLI L2P Release 8 0 05 2013 367 4 13 SNTP Simple Network Time Protocol 4 13 19sntp client threshold With this option you can reduce the frequency of time alterations Enter this threshold as a positive integer value in milliseconds The switch obtains the server timer as soon as the deviation to the server time is above this threshold Format sntp client threshold lt milliseconds gt Mode Global Config Milliseconds Enter the allowed deviation to the server time as a positive integer value in milliseconds no sntp client threshold Disable the sntp client threshold Format no sntp client threshold Mode Global Config CLI L2P 368 Release 8 0 05 2013 4 13 SNTP Simple Network Time Protocol 4 13 20sntp operation Enable Disable the SNTP function Format sntp operation lt on off gt client on off server on off Mode Global Config client Enable or disable SNTP Client server Enable or disable SNTP Server no sntp operation Disable the SNTP Client and Server Format no sntp operation Mode Global Config CLI L2P Release 8 0 05 2013 369 4 13 SNTP Simple Network Time Protocol 4 13
285. onfig 5 6 6 port sec allowed ip add Enter the allowed IP source address for this port format nnn nnn nnn nnn nnn decimal number 0 255 up to 50 Format port sec allowed ip add lt IP Address 1 gt lt IP Address 2 gt lt IP Address 50 gt Mode Interface Config CLI L2P Release 8 0 05 2013 481 CLI Commands Switching 5 6 Port Security 5 6 7 port sec allowed ip remove Enter the allowed IP source address for this port format nnn nnn nnn nnn nnn decimal number 0 255 up to 50 Format port sec allowed ip remove lt IP Address 1 gt lt IP Address 2 gt lt IP Address 50 gt Mode Interface Config 5 6 8 port sec allowed mac Enter the allowed MAC source address for this port format nn nn nn nn nn nn n hexadecimal digit or format nn nn nn nn nn nn m n hexadecimal digit m decimal digit 1 48 up to 10 Format port sec allowed mac lt MAC Address 1 gt lt MAC Address 2 gt lt MAC Address 10 gt Mode Interface Config CLI L2P 482 Release 8 0 05 2013 CLI Commands Switching 5 6 Port Security 5 6 9 port sec allowed mac add Enter the allowed MAC source address for this port format nn nn nn nn nn nn n hexadecimal digit or format nn nn nn nn nn nn m n hexadecimal digit m decimal digit 1 48 up to 50 Format port sec allowed mac add lt MAC Address 1 gt lt MAC Address 2 gt lt MAC Address 50 gt Mode Interface Config 5 6 10 port sec allowed mac remove
286. onfiguration Commands CLI L2P Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 91 snmp trap link status This command enables link status traps by interface Note This command is valid only when the Link Up Down Flag is enabled See snmp server enable traps linkmode command Format snmp trap link status Mode Interface Config no snmp trap link status This command disables link status traps by interface Note This command is valid only when the Link Up Down Flag is en abled See snmp server enable traps linkmode command Format no snmp trap link status Mode Interface Config CLI L2P Release 8 0 05 2013 257 4 9 Device Configuration Commands 4 9 92 snmp trap link status all This command enables link status traps for all interfaces Note This command is valid only when the Link Up Down Flag is enabled see snmp server enable traps linkmode Format snmp trap link status all Mode Global Config no snmp trap link status all This command disables link status traps for all interfaces Note This command is valid only when the Link Up Down Flag is enabled see snmp server enable traps linkmode Format no snmp trap link status all Mode Global Config CLI L2P 258 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 93 spanning tree bpdumigrationcheck This command enables BPDU migration check on a given interface This will force the specified port
287. onitor session source destination mrp current domain mrp delete domain mrp new domain N name network javascriptmode network mgmt_vlan network mgmt access add network mgmt access delete network mgmt access modify network mgmt access operation network mgmt access status network parms network priority network protocol no dhcp relay no Ildp no snip 353 354 354 354 355 164 165 166 167 168 169 169 170 170 171 171 172 316 316 190 191 187 188 189 184 184 192 194 195 455 457 457 355 123 124 124 125 126 126 127 128 127 486 336 361 585 Index no sntp anycast address 362 363 369 no sntp client server 365 no sntp client server primary 366 367 368 no storm control broadcast 261 P passwords changing user 292 resetting all 302 PDUs 199 200 201 202 203 204 205 207 ping 316 ping command 314 315 316 317 PoE Power over Ethernet 396 Port monitor 402 port monitor Global Config 407 port monitor Interface Config 407 port monitor action 408 port monitor condition crc fragment Global Config 413 port monitor condition crc fragment Interface Config 413 port monitor condition link flap Global Config 412 port monitor condition link flap Interface Con fig 412 port monitor overload detection Global Con fig 409 port monitor overload detection Interface Config 409 ports administrative mode 255 256 frame acceptance mode 269 270 275 information 24
288. ontrol This command sets the port control mode for the specified port to the default mode force authorized Format no dot1ix port control Mode Interface Config CLI L2P Release 8 0 05 2013 521 CLI Commands Security 6 1 Security Commands 6 1 14 dot1x port control all This command sets the authentication mode to be used on all ports The control mode may be one of the following force unauthorized The authenticator PAE unconditionally sets the controlled port to unauthorized Thus the ports are always blocked force authorized The authenticator PAE unconditionally sets the controlled port to authorized Thus the ports are always opend auto The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant authenticator and the authentication server The port mode is controled by the protocol mac based Enable the MAC based 802 1X authentication on the port Default force authorized Format dotlx port control all force unauthorized force authorized auto mac based Mode Global Config no dot1x port control all This command sets the port control mode for all the ports to the default mode force authorized Format no dotlx port control all Mode Global Config CLI L2P 522 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 15 dot1x re authenticate This command begins the re authentication sequence on the spe
289. or for the entire switch based upon the argument Format clear counters lt slot port gt all Mode Privileged EXEC CLI L2P 300 Release 8 0 05 2013 4 11 System Utilities 4 11 11clear hiper ring This command clears the HIPER Ring configuration deletes it Format clear hiper ring Mode Privileged EXEC 4 11 12clear igmpsnooping This command clears the tables managed by the IGMP Snooping function and will attempt to delete these entries from the Multicast Forwarding Data base Format clear igmpsnooping Mode Privileged EXEC CLI L2P Release 8 0 05 2013 301 4 11 System Utilities 4 11 13clear mac addr table This command clears the switch s MAC address table the forwarding data base that contains the learned MAC addresses Note this command does not affect the MAC filtering table Format clear mac addr table Mode Privileged EXEC 4 11 14clear pass This command resets all user passwords to the factory defaults without pow ering off the switch You are prompted to confirm that the password reset should proceed Format clear pass Mode Privileged EXEC CLI L2P 302 Release 8 0 05 2013 4 11 System Utilities 4 11 15clear link aggregation This command clears all link aggregations LAGs Format clear link aggregation Mode Privileged EXEC 4 11 16clear signal contact This command clears the signal contact output configuration Switches the signal contact 1 s mode to auto and i
290. ormat Spanning tree guard loop Mode Interface Config no spanning tree guard This command disables the guard for this port Format no spanning tree guard Mode Interface Config CLI L2P Release 8 0 05 2013 437 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 18 spanning tree guard none This command disables root guard and disables loop guard guard on an interface Default disabled Format spanning tree guard none Mode Interface Config no spanning tree guard This command disables the guard for this port Format no spanning tree guard Mode Interface Config CLI L2P 438 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 19 spanning tree guard root This command enables root guard and disables loop guard on an interface Default disabled Format Sspanning tree guard root Mode Interface Config no spanning tree guard This command disables the guard for this port Format no spanning tree guard Mode Interface Config CLI L2P Release 8 0 05 2013 439 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 20 spanning tree hello time This command sets the Hello Time parameter to a new value for the common and internal spanning tree The hellotime lt value gt is in whole seconds within a range of 1 to 2 with the value being less than or equal to Bridge Max Age 2 1 Default 2 Format spanning tree hello time lt 1 2 gt Mode Inter
291. ors Address Entries Currently In Use The total number of Forwarding Database Address Table entries now active on the switch including learned and static entries VLAN Entries Currently In Use The number of VLAN entries presently occupying the VLAN table Time Since Counters Last Cleared The elapsed time in days hours minutes and seconds since the sta tistics for this switch were last cleared CLI L2P Release 8 0 05 2013 61 CLI Commands Base 4 1 System Information and Statistics 4 1 17 show interface ethernet This command displays detailed statistics for a specific port or for all CPU traffic based upon the argument Format show interface ethernet lt slot port gt switchport Mode Privileged EXEC and User EXEC The display parameters when the argument is lt slot port gt are as follows Packets Received Octets Received The total number of octets of data including those in bad packets received on the network excluding framing bits but including Frame Check Sequence FCS octets This object can be used as a reasonable estimate of ethernet utilization If greater preci sion is desired the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval The result of this equation is the value Utilization which is the percent utili zation of the ethernet segment on a scale of 0 to 100 percent Packets Received lt 64 Octets The total number of packets includ in
292. ort Path Cost parameter CLI L2P 422 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands Designated Root The Identifier of the designated root for this port Designated Port Cost Path Cost offered to the LAN by the Designated Port Designated Bridge Bridge Identifier of the bridge with the Designated Port Designated Port Identifier Port on the Designated Bridge that offers the lowest cost to the LAN If O defined as the default CIST ID is passed as the lt mstid gt then this com mand displays the settings and parameters for a specific switch port within the common and internal spanning tree The lt slot port gt is the desired switch port In this case the following are displayed Port Identifier The port identifier for this port within the CST Port Priority The priority of the port within the CST Port Forwarding State The forwarding state of the port within the CST Port Role The role of the specified interface within the CST Port Path Cost The configured path cost for the specified interface Designated Root Identifier of the designated root for this port within the CST Designated Port Cost Path Cost offered to the LAN by the Designated Port Designated Bridge The bridge containing the designated port Designated Port Identifier Port on the Designated Bridge that offers the lowest cost to the LAN CLI L2P Release 8 0 05 2013 423 CLI Commands Switching 5 1 Spanning Tree Commands Topology
293. ou need to select a suitable redundancy procedure and configure that proce dure The Industry Protocols user manual describes how the device is connected by means of a communication protocol commonly used in the industry such as EtherNet IP or PROFINET IO The HiVision Network Management Software provides you with additional options for smooth configuration and monitoring Simultaneous configuration of multiple devices Graphic interface with network layout Auto topology recognition Event log Event handling Client server structure Browser interface ActiveX control for SCADA integration SNMP OPC gateway CLI L2P Release 8 0 05 2013 21 About this Manual Maintenace Hirschmann are continually working on improving and developing their soft ware You should regularly check whether there is a new version of the soft ware that provides you with additional benefits You will find software information and downloads on the product pages of the Hirschmann website CLI L2P 22 Release 8 0 05 2013 Command Structure 1 Command Structure The Command Line Interface CLI syntax conventions and terminology are described in this section Each CLI command is illustrated using the structure outlined below CLI L2P Release 8 0 05 2013 23 Command Structure 1 1 Format 1 1 Format Commands are followed by values parameters or both Example 1 network parms lt ipaddr gt lt netmask gt gateway network parms is the command n
294. ously configured accounting server If a port is already configured for the accounting server then the new port will replace the previously configured value The port must be a value in the range 1 65535 with 1813 being the default value Format radius server host auth acct lt ipaddr gt lt port gt Mode Global Config no radius server host This command is used to remove the configured RADIUS authentication server or the RADIUS accounting server If the auth token is used the previously configured RADIUS authentication server is removed from the configuration Similarly if the acct token is used the previously configured RADIUS accounting server is removed from the configuration The lt ipaddr gt parameter must match the IP address of the previously configured RADIUS authentication accounting server Format no radius server host auth acct lt ipaddress gt Mode Global Config CLI L2P 532 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 26 radius server key This command is used to configure the shared secret between the RADIUS client and the RADIUS accounting authentication server Depending on whether the auth or acct token is used the shared secret will be configured for the RADIUS authentication or RADIUS accounting server The IP address provided must match a previously configured server When this command is executed the secret will be prompted The secret must be a
295. pecified authentication login list If the login is assigned to non configured users the user default will appear in the user column Format show authentication users lt listname gt Mode Privileged EXEC and User EXEC User This field displays the user assigned to the specified authentication login list Component This field displays the component User or 802 1X for which the authentication login list is assigned 6 1 34 show dot1x This command is used to show a summary of the global dot1x configuration summary information of the dot1x configuration for a specified port or all ports the detailed dot1x configuration for a specified port and the dot1x statistics for a specified port depending on the tokens used Format show dotlx summary lt slot port gt all detail lt slot port gt statistics lt slot port gt Mode Privileged EXEC and User EXEC If none of the optional parameters are used the global dot1x configuration summary is displayed CLI L2P 540 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands Administrative mode Indicates whether authentication control on the switch is enabled or disabled VLAN Assignment Mode Indicates whether the VLAN Assignment Mode is enabled or disabled Dynamic VLAN Creation Mode Indicates whether the Dynamic VLAN Creation Mode is enabled or disabled Safe VLAN Mode Indicates whether the Safe VLAN Mode is enabled or disabled I
296. per Bound Show the upper bound for the PTP clock synchronization status unit nanoseconds Possible values 31 1000000000 nsec PTP Global Sync Lower Bound Show the lower bound for the PTP clock synchronization status unit nanoseconds Possible values 0 999999999 nsec PTP Preferred Master Show if the local switch shall be regarded as a preferred master clock or not Possible values False True PTP Subdomain Name Show the PTP subdomain name Possible values Up to 16 characters from ASCII hex value 0x21 up to and including hex value 0x7e PTP Sync Interval Show the configured Precision Time Protocol sync interval The sync interval is the interval in seconds between successive sync messages issued by a master clock Possible values sec 1 sec 2 sec 8 sec 16 sec 64 PTP Status Is Synchronized Show if the device is synchronized true or false Possible values False True PTP Status Offset From Master Show the device s offset from the master unit nanoseconds i e the deviation of the local clock from the reference clock PTP Status Max Offset Absolute Show the device s maximum offset absolute unit nanoseconds PTP Status Delay To Master Show the device s delay to the master unit nanoseconds i e the single signal runtime between the local device and reference clock CLI L2P 372 Release 8 0 05 2013 4 14 PTP Precision Time Protocol PTP Status Grandmaster UUID Show gr
297. port 5 6 3 port sec mode 5 6 4 port sec action 5 6 5 port sec allowed ip 5 6 6 port sec allowed ip add 5 6 7 port sec allowed ip remove 5 6 8 port sec allowed mac 5 6 9 port sec allowed mac add 5 6 10 port sec allowed mac remove 5 6 11 clear port sec DHCP Relay Commands 5 7 1 dhcp relay 5 7 2 dhcp relay 5 7 3 show dhcp relay DHCP Server Commands 5 8 1 DHCP server configuration example 5 8 2 show dhcp server 5 8 3 show dhcp server operation 5 8 4 show dhcp server port 5 8 5 show dhcp server pool 5 8 6 dhcp server addr probe 5 8 7 dhcp server operation 5 8 8 dhcp server pool add lt id gt 5 8 9 dhcp server pool modify lt id gt mode 5 8 10 dhcp server pool modify lt id gt option 5 8 11 dhcp server pool modify leasetime 5 8 12 dhcp server pool modify lt id gt hirschmann device 5 8 13 dhcp server pool enable 0 05 2013 469 471 472 474 475 476 476 477 477 478 478 478 479 480 481 481 482 482 483 483 484 485 486 487 488 490 490 492 493 493 494 494 495 495 496 498 499 499 500 17 Content 5 9 18 5 8 14 dhcp server pool disable 5 8 15 dhcp server pool delete Sub Ring Commands 5 9 1 show sub ring 5 9 2 sub ring lt id gt mode 5 9 3 sub ring lt id gt operation 5 9 4 sub ring lt id gt protocol 5 9 5 sub ring lt id gt port 5 9 6 sub ring lt id gt ring name 5 9 7 sub ring lt id gt vlan 5 9 8 sub ring lt id gt mrp domainID 5 9 9 sub
298. port it will send its own DHCP multicast requests to be relayed by the DHCP relay this will reduce the load in your network 5 7 3 show dhcp relay Display the settings of the BOOTP DHCP relay Format show dhcp relay opt82 port lt slot port gt all server address Mode Privileged EXEC and User EXEC opt82 Show the DHCP Relay s Option 82 settings exclusively port Display the DHCP Relay s port related settings for the specified port exclusively lt slot port gt Show the DHCP Relay s port related settings for the specified port exclusively all Show the DHCP Relay s port related settings for all ports server address Display the DHCP Relay s server address settings exclusively Port Display the port number in lt slot port gt notation CLI L2P 488 Release 8 0 05 2013 CLI Commands Switching 5 7 DHCP Relay Commands Admin State Display the DHCP Relay s admin state settings Possible values Disabled Enabled Active Protocol Display the DHCP Relay s active protocol settings Possible values Relay Disabled Server Inaccessible Option 82 Display the DHCP Relay s option 82 settings Possible values Disabled Enabled Hirschmann Device Display the DHCP Relay s Hirschmann device settings Possible values Disabled Enabled CLI L2P Release 8 0 05 2013 489 CLI Commands Switching 5 8 DHCP Server Commands 5 8 DHCP Server Commands These commands configure the DHCP server parameters The commands
299. power supply 4 1 power supply 4 2 ring coupling temperature error ignore device status trap disable enable Mode Global Config monitor Determines the monitoring of the selected event or all events error If the given event signals an error the device state will also signal error ignore Ignore the given event even if it signals an error the device state will not signal error because of that trap Configure if a trap is sent when the device status changes its state enable enables sending traps disable disables sending traps CLI L2P Release 8 0 05 2013 315 4 11 System Utilities 4 11 24logout This command closes the current telnet connection or resets the current se rial connection Note Save configuration changes before logging out Format logout Mode Privileged EXEC 4 11 25ping This command checks if another computer is on the network and listens for connections To use this command configure the switch for network in band connection The source and target devices must have the ping utility enabled and running on top of TCP IP The switch can be pinged from any IP workstation with which the switch is connected through the default VLAN VLAN 1 as long as there is a physical path between the switch and the workstation The terminal interface sends three pings to the target station Format ping lt ipaddr gt Mode Privileged EXEC and User EXEC CLI L2P 316 Rele
300. r all ports The lt user gt parameter must be a configured user Format dotlx user lt user gt lt slot port gt all Mode Global Config no dot1x user This command removes the user from the list of users with access to the specified port or all ports Format no dotlx user lt user gt lt slot port gt all Mode Global Config CLI L2P Release 8 0 05 2013 529 CLI Commands Security 6 1 Security Commands 6 1 23 ip ssh protocol Use this command to configure the IP secure shell SSH parameters the first and the optional second SSH protocol level Possible settings v1 v2 orv1 amp v2 Format ip ssh protocol lt protocollevell gt lt protocollevel2 gt Default 2 1 Mode Privileged Exec lt protocollevel1 gt Enter the first SSH Protocol Level Version Possible values 1 2 lt protocollevel2 gt Optionally enter the second SSH Protocol Level Version Possible values 1 2 no ip ssh This command sets IP secure shell SSH parameters to default value Format no ip ssh Mode Privileged Exec CLI L2P 530 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 24 radius accounting mode This command is used to enable the RADIUS accounting function Default disabled Format radius accounting mode Mode Global Config no radius accounting mode This command is used to set the RADIUS accounting function to the default value i e the RADIUS accoun
301. r the slot ID Format show slot slot Mode Privileged EXEC Global Config Slot Display the number of the media module slot Status Full The media module slot is equipped with a module Empty The media module slot is not equipped Admin State Note This feature is available for MS20 MS30 PowerMICE MACH102 and MACH4000 devices Enable The media module slot is logically enabled Disable The media module slot is logically disabled Configured Card Model ID Display the type of the media module Card Description Display the type of the media module Product Code Display the type of the media module Pluggable Yes The module is pluggable No The module is not pluggable CLI L2P Release 8 0 05 2013 75 CLI Commands Base 4 1 System Information and Statistics 4 1 24 show running config This command is used to display the current setting of different protocol packages supported on the switch This command displays only those parameters the values of which differ from default value The output is displayed in the script format which can be used to configure another switch with the same configuration Format show running config all lt scriptname gt Mode Privileged EXEC all Show all the running configuration on the switch All configuration parameters will be output even if their value is the default value lt scriptname gt Script file name for writing active configuration Note Make sure that the file exte
302. rchangeably although narrowcast usually refers to the business model whereas multicast refers to the actual technology used to transmit the data Multicast OSPF With a MOSPF specification an IP Multicast packet is routed based both on the packet s source and its multicast destination commonly referred to as source destination routing As it is routed the multicast packet follows a shortest path to each multicast destination During packet forwarding any commonality of paths is exploited when multiple hosts belong to a single multicast group a multicast packet will be replicated only when the paths to the separate hosts diverge See P on page 577 for more information Multiplexing A function within a layer that interleaves the information from multiple connections into one connection Multi Protocol Label Switching An initiative that integrates Layer 2 information about network links bandwidth latency utilization into Layer 3 IP within a particular 575 Glossary autonomous system or ISP in order to simplify and improve IP packet exchange MPLS gives network operators a great deal of flexibility to divert and route traffic around link failures congestion and bottlenecks From a QoS standpoint ISPs will better be able to manage different kinds of data streams based on priority and service plan For instance those who subscribe to a premium service plan or those who receive a lot of streami
303. re timing out the supplicant The value will be in the range of 1 and 10 VLAN Id Display the VLAN Id VLAN Assigned Reason Display the state of the VLAN Assigned Reason parameter Possible values RADIUS Not Assigned Reauthentication Period The timer used by the authenticator state machine on this port to determine when reauthentication of the supplicant takes place The value is expressed in seconds and will be in the range of 1 and 65535 Reauthentication Enabled Indicates if reauthentication is enabled on this port Possible values are True or False Key Transmission Enabled Indicates if the key is transmitted to the supplicant for the specified port Possible values are True or False Control Direction Indicates the control direction for the specified port or ports Possible values are both or in Maximum Users Display the value of Maximum Users CLI L2P Release 8 0 05 2013 543 CLI Commands Security 6 1 Security Commands Unauthenticated VLAN ID Display the value of Unauthenticated VLAN ID Session Timeout Display the value of Session Timeout Session Termination Action Display the value of Session Termination Action MAC Authorized Bypass Display the value of MAC Authorized Bypass If the optional parameter statistics lt slot port gt is used the dot1x statistics for the specified port are displayed Port The interface whose statistics are displayed EAPOL Frames Received The number o
304. ree guard loop 437 5 1 18 spanning tree guard none 438 5 1 19 spanning tree guard root 439 5 1 20 spanning tree hello time 440 5 1 21 spanning tree hold count 441 5 1 22 spanning tree max age 442 5 1 23 spanning tree max hops 443 5 1 24 spanning tree mst 444 5 1 25 spanning tree mst priority 446 5 1 26 spanning tree mst vlan 447 5 1 27 spanning tree mst instance 448 5 1 28 spanning tree port mode 449 5 1 29 spanning tree port mode all 450 5 1 30 spanning tree stp mrp mode 451 5 1 31 spanning tree tcnguard 452 MRP 453 5 2 1 show mrp 453 5 2 2 show mrp current domain 454 5 2 3 mrp current domain 455 5 2 4 mrp delete domain 457 5 2 5 mrp new domain 457 5 2 6 arc 458 5 2 7 show arc 459 HIPER Ring 461 5 3 1 show hiper ring 462 5 3 2 hiper ring 463 5 3 3 hiper ring mode 463 5 3 4 hiper ring port primary 464 5 3 5 hiper ring port secondary 464 5 3 6 hiper ring recovery delay 465 Fast HIPER Ring 466 5 4 1 show fast hiper ring MACH1000 RSR20 RSR30 467 5 4 2 show fast hiper ring current id MACH1000 RSR20 RSR30 468 CLI L2P Release 8 0 05 2013 Content 5 5 5 6 5 7 5 8 CLI L2P Release 8 5 4 3 fast hiper ring Redundant Coupling 5 5 1 show ring coupling 5 5 2 ring coupling 5 5 3 ring coupling config 5 5 4 ring coupling net coupling 5 5 5 ring coupling operation 5 5 6 ring coupling port 5 5 7 ring coupling redundancy mode Port Security 5 6 1 show port sec mode 5 6 2 show port sec
305. rief summary Format show port monitor brief Mode Global Config Intf Display the number of the interface slot port Admin Mode Display if Port Monitor is enabled or disabled Link Flap Display if Link Flap is enabled or disabled Crc Fragment Display if CRC Fragment is enabled or disabled Overload detection Note This command is available for the MACH1040 and MACH104 devices Display the condition of the overload detection state Possible values Enabled Disabled Active Condition Display the active condition for the port Possible values Link Flap None Action Display the action disable port or send trap to be triggered on the port Possible values Disable Port Trap Only Port Oper State Display the link state of the port Possible values Up Down CLI L2P Release 8 0 05 2013 405 4 17 Port monitor 4 17 4 show port monitor crc fragment Use this command to display the CRC fragment counter Format show port monitor crc fragment lt slot port gt Mode Global Config lt slot port gt Display the Port Monitor interface details Crc_fragments in last interval Display the CRC fragments in last interval Crc_fragments total Display the CRC fragments total 4 17 5 show port monitor link flap Use this command to display the Link Flap counter for the port Format show port monitor link flap lt slot port gt Mode Global Config lt slot port gt Display the Port Monitor interface details Lin
306. rs snmpv3 encryption This command specifies the encryption protocol to be used for the specified login user The valid encryption protocols are des or none If des is specified the required key may be specified on the command line The key may be up to 16 characters long If the des protocol is specified but a key is not provided the user will be prompted for the key When using the des protocol the user login password is also used as the snmpv3 encryption password and therefore must be at least eight characters in length If none is specified a key must not be provided The lt username gt is the login user name associated with the specified encryption Default no encryption Format users snmpv3 encryption lt username gt lt none des key gt Mode Global Config no users snmpv3 encryption This command sets the encryption protocol to none The lt username gt is the login user name for which the specified encryption protocol will be used Format no users snmpv3 encryption lt username gt Mode Global Config CLI L2P Release 8 0 05 2013 295 4 11 System Utilities 4 11 System Utilities This section describes system utilities 4 11 1 address conflict This command configures the setting for detection possible address conflicts of the agent s IP address with other devices IP addresses in the network Format address conflict detection mode active only disable enable passive only ongoing detection
307. s Switching 5 5 Redundant Coupling 5 5 2 ring coupling Configure the redundant coupling of HIPER Rings network segments This command if called without arguments lists the available subcommands their recommended order and tips how to set up a new configuration Format ring coupling Mode Global Config no ring coupling Clear the ring coupling configuration delete it Format no ring coupling Mode Global Config CLI L2P 474 Release 8 0 05 2013 CLI Commands Switching 5 5 Redundant Coupling 5 5 3 ring coupling config This command sets the Ring Coupling configuration Possible values are single Configure the Ring Coupling s basic setting to single both cou pling ports are local to the switch switch performs master and slave func tions dual master inband Configure the Ring Coupling s basic setting to dual master inband 2nd coupling port is on a remote switch local switch is master communication over network dual master outband Configure the Ring Coupling s basic setting to dual master outband 2nd coupling port is on a remote switch local switch is master communication over dedicated control port dual slave inband Configure the Ring Coupling s basic setting to dual slave inband 2nd coupling port is on a remote switch local switch is slave communication over network dual slave outband Configure the Ring Coupling s basic setting to dual slave outband 2nd coupling port is on a remote switch local s
308. s interfacing for simpler lower performance memory resources and memory mapped devices The GPCM does not support bursting and is used primarily for boot loading Generic Attribute Registration Protocol GARP provides a generic attribute dissemination capability that is used by participants in GARP Applications called GARP Participants to register and de register attribute values with other GARP Participants within a Bridged LAN The definition of the attribute types the values that they can carry and the semantics that are associated with those values when registered are specific to the CLI L2P Release 8 0 05 2013 operation of the GARP Application concerned Gigabit Ethernet A high speed Ethernet connection GIP See GARP Information Propagation on page 570 GMRP See GARP Multicast Registration Protocol on page 570 GPCM See General Purpose Chip select Machine on page 571 GVD GARP VLAN Database GVRP See GARP VLAN Registration Protocol on page 571 H h file Header file in C code Contains function and coding definitions HAPI See Hardware Abstraction Programming Interface on page 571 Hardware Abstraction Programming Interface HAPI is the module that contains the NP specific software that interacts with the hardware hop count The number of routers that a data packet passes through on its way to its destination ICMP See Internet Control Mess
309. s Retry count Value range 1 10 CLI L2P Release 8 0 05 2013 117 CLI Commands Base 4 6 Management Commands 4 6 21 show digital output all This command shows the O Module value or configuration for all outputs Format show digital output all fall config value Mode Global Config all Show the lO Module configuration and value for all outputs config Show the lO Module configuration for all outputs value Show the O Module value for all outputs Digital output Information output Show numbers of the O Module digital output Possible values example 1 1 1 2 1 3 1 4 3 1 3 2 3 3 3 4 Value Show the value of the 1O Module digital outputs Possible values Not available High Low Log Event Show if Event logging is enabled or disabled for the O Module digital outputs Possible values Disabled Enabled SNMP trap Show if SNMP traps are enabled or disabled for the O Module digital outputs Possible values Disabled Enabled Mirror from IP Show the IP address used for reading the input value Possible values None a b c d valid IP address Input Show the input number of the device used for reading the input value Possible values example 1 1 1 2 1 3 1 4 3 1 3 2 3 3 3 4 CLI L2P 118 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 22 show digital output lt slot output gt This command shows the O Module value or configuration for a single out put Format
310. s divided into various modes The Commands in one mode are not available until the operator switches to that particular mode with the excep tion of the User Exec mode commands The User Exec mode commands may also be executed in the Privileged Exec mode The commands available to the operator at any point in time depend upon the mode Entering a question mark at the CLI prompt displays a list of the available commands and descriptions of the commands The CLI provides the following modes User Exec Mode When the operator logs into the CLI the User Exec mode is the initial mode The User Exec mode contains a limited set of commands The command prompt shown at this level is Command Prompt Hirschmann Product gt Privileged Exec Mode To have access to the full suite of commands the operator must enter the Privileged Exec mode Privileged users authenticated by login are able to enter the Privileged EXEC mode From Privileged Exec mode the operator can issue any Exec command enter the VLAN mode or enter the Global Configuration mode The command prompt shown at this level is Command Prompt Hirschmann Product VLAN Mode This mode groups all the commands pertaining to VLANs The com mand prompt shown at this level is Command Prompt Hirschmann Product VLAN Global Config Mode This mode permits the operator to make modifications to the running configuration General setup commands are grouped in this mode
311. s the telnet session timeout value The timeout value unit of time is minutes Default 5 Format session timeout lt 1 160 gt Mode Line Config no session timeout This command sets the telnet session timeout value to the default The timeout value unit of time is minutes Format no session timeout Mode Line Config 4 6 6 bridge address learning To enable you to observe the data at all the ports the Switch allows you to disable the learning of addresses When the learning of addresses is dis abled the Switch transfers all the data from all ports to all ports The default value is enable Format bridge address learning disable enable Mode Global Config CLI L2P Release 8 0 05 2013 103 CLI Commands Base 4 6 Management Commands 4 6 7 bridge address relearn detect operation This command enables or disables Bridge Address Relearn Detection The default value is disable Default Disabled Format bridge address relearn detect operation disable enable Mode Global Config 4 6 8 bridge address relearn detect threshold This command defines the value of relearned addresses to signal address relearn threshold exceeded The default relearn threshold is 1 Possible values to configure threshold count are 1 to 1024 Default 1 Format bridge address relearn detect threshold lt value gt Mode Global Config value 1 to 1024 CLI L2P 104 Release 8 0 05 2013 CLI Commands Base 4 6 Management Com
312. sabled for the O Module digital inputs Possible values Disabled Enabled CLI L2P 114 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 18 show digital input lt slot input gt This command shows the O Module value or configuration for a single input Format show digital input lt slot input gt all config value Mode Global Config all Show the 1O Module configuration and value for one input config Show the lO Module configuration for one input value Show the lO Module value for one input Digital Input lt slot input gt Value Show the value of the O Module digital input Possible values Not available High Low Digital Input lt slot input gt Log Event Show if Event logging is enabled or disabled for the O Module digital input Possible values Disabled Enabled Digital Input lt slot input gt SNMP trap Show if SNMP traps are enabled or disabled for the O Module digital input Possible values Disabled Enabled CLI L2P Release 8 0 05 2013 115 CLI Commands Base 4 6 Management Commands 4 6 19 show digital output This command shows the output value or configuration from all available digital outputs of the MICE I O Module Format show digital output Mode Global Config Digital output System Information Admin State Show the lO Module digital outputs Admin State Possible values Disabled Enabled Refresh Interval s Show the lO Module digital outputs Refres
313. scribed in IEEE1588 2008 Format ptp v2bc priorityl lt 0 255 gt Mode Global Config 4 14 15ptp v2bc priority2 Configure the PTPv2 Boundary Clock IEEE1588 2008 specific settings Configure the priority2 value 0 255 for the BMC as described in IEEE1588 2008 Format ptp v2bc priority2 lt 0 255 gt Mode Global Config CLI L2P 382 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 16ptp v2bc domain Configure the PTPv2 Boundary Clock IEEE1588 2008 specific settings Configure the domain number 0 255 as described in IEEE1588 2008 Format ptp v2bc domain lt 0 255 gt Mode Global Config 4 14 17ptp v2bc utc offset Configure the PTPv2 Boundary Clock IEEE1588 2008 specific settings Configure the current UTC offset in seconds Format ptp v2bc utc offset lt seconds gt Mode Global Config 4 14 18ptp v2bc utc offset valid Configure the PTPv2 Boundary Clock IEEE1588 2008 specific settings Configure the UTC offset valid flag Format ptp v2bc utc offset valid true false Mode Global Config CLI L2P Release 8 0 05 2013 383 4 14 PTP Precision Time Protocol 4 14 19ptp v2bc vian Configure the PTPv2 Boundary Clock IEEE1588 2008 specific settings Use this command to configure the VLAN in which PTP packets are send With a value of none all packets are send untagged Format ptp v2bc vlan none lt 0 4042 gt Mode Interface Config 4 14 20ptp v2bc vian priority Config
314. se 8 0 05 2013 39 Quick Start up 2 2 System Info and System Setup Quick Start up IP Address To view the network parametes the operator can access the device by the following three methods Simple Network Management Protocol SNMP Telnet Web Browser Note After configuring the network parameters it is advisable to execute the command copy system running config nvram startup config to ensure that the configurations are not lost Command Details show network Displays the Network Configurations in User EXEC IP Address IP Address of the switch Default IP is 0 0 0 0 Subnet Mask IP Subnet Mask for the switch Default is 0 0 0 0 Default Gateway The default Gateway for this switch Default value is 0 0 0 0 Burned in MAC Address The Burned in MAC Address used for in band connectivity Network Configurations Protocol BOOTP DHCP Indicates which network protocol is being used Default is DHCP Network Configurations Protocol HiDiscovery Indicates the status of the HiDiscovery protocol Default is read write Management VLAN Id Specifies VLAN id Web Mode Indicates whether HTTP Web is enabled JavaScript Mode Indicates whether java mode is enabled When the user accesses the switch s graphical user interface web interface and JavaScript Mode is enabled the switch s web server will deliver a HTML page that contains JavaScript Some browsers do not support JavaScript In this case a HTML page without JavaScript
315. se this command to remove a TLV Format no lldp med transmit tlv all capabilities network policy Mode Global Config CLI L2P 348 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 37ildp notification Configure the port s LLDP notification setting on or off default off Format lldp notification lt off on gt Mode Interface Config 4 12 38lldp tiv link aggregation Configure the port s LLDP TLV inclusion of Link Aggregation on or off default on Format lldp tlv link aggregation lt off on gt Mode Interface Config 4 12 39lldp tly mac phy config state Configure the port s LLDP TLV inclusion of MAC Phy Cfg State on or off default on Format lldp tlv mac phy config state lt off on gt Mode Interface Config CLI L2P Release 8 0 05 2013 349 4 12 LLDP Link Layer Discovery Protocol 4 12 40lldp tly max frame size Configure the port s LLDP TLV inclusion of Max Frame Size on or off default on Format lldp tlv max frame size lt off on gt Mode Interface Config 4 12 41lldp tly mgmt addr Configure the port s LLDP TLV inclusion of Management Address on or off default on Format lldp tlv mgmt addr lt off on gt Mode Interface Config 4 12 42lildp tiv pnio Configure the port s LLDP TLV inclusion of PROFINET IO Status on or off default on Format lldp tlv pnio lt off on gt Mode Interface Config CLI L2P 350 Release 8 0 05 2
316. signal contact 73 show Ildp config 324 show slot 75 show Ildp config chassis 325 show snmp access 135 show Ildp config chassis admin state 325 show snmpcommunity 136 show Ildp config chassis notification interval show snmptrap 137 325 show sntp 356 show Ildp config chassis re init delay 326 show sntp anycast 358 show Ildp config chassis tx delay 326 show snip client 358 show Ildp config chassis tx hold mult 326 show sntp operation 359 show Ildp config port 328 show snip server 360 show Ildp config port tlv 329 show snip status 360 show Ildp med 330 show snip time 361 show Ildp med interface 331 show spanning tree 417 show Ildp med local device detail 332 show spanning tree brief 419 show Ildp med remote device 333 show spanning tree interface 420 show Ildp med remote device detail 334 show spanning tree mst detailed 421 show Ildp remote data 334 show spanning tree mst port detailed 422 show logging 71 show spanning tree mst port summary 425 show loginsession 286 293 show spanning tree mst summary 426 show mac notification 240 show spanning tree summary 427 show mac addr table 72 show spanning tree vlan 428 show mac filter table gmrp 235 show storm control 247 show mac filter table igmpsnooping 236 show storm control limiters port 248 show mac filter table multicast 237 show sub ring 501 show mac filter table static 238 show switchconfig 105 show mac filter table staticfiltering 239 show sysinfo 17 92 93 show mac filter table stats 240 show telnet
317. sions are established Format no transport input telnet Mode Line Config CLI L2P 100 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 3 transport output telnet This command regulates new outbound telnet connections If enabled new outbound telnet sessions can be established until it reaches the maximum number of simultaneous outbound telnet sessions allowed If disabled no new outbound telnet session can be established An established session remains active until the session is ended or an abnormal network error ends it Default enabled Format transport output telnet Mode Line Config no transport output telnet This command disables new outbound telnet connections If disabled no new outbound telnet connection can be established Format no transport output telnet Mode Line Config CLI L2P Release 8 0 05 2013 101 CLI Commands Base 4 6 Management Commands 4 6 4 session limit This command specifies the maximum number of simultaneous outbound telnet sessions A value of 0 indicates that no outbound telnet session can be established Default 4 Format session limit lt 0 5 gt Mode Line Config no session limit This command sets the maximum number of simultaneous outbound tel net sessions to the default value Format no session limit Mode Line Config CLI L2P 102 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 5 session timeout This command set
318. sions because the server can broadcast a message to many recipients simultaneously Unlike traditional Internet traffic that requires separate connections for each source destination pair IP Multicasting allows many recipients to share the same source This means that just one set of packets is transmitted for all the destinations Internet Protocol The method or protocol by which data is sent from one computer to another on the Internet Each computer known as a host on the Internet has at least one IP address that uniquely identifies it among all other computers on the Internet When you send or receive data for example an e mail note or a Web page the message gets divided into little chunks called packets Each of these packets contains both the sender s Internet address and the receiver s address Any packet is sent first to a gateway computer that understands a small part of the Internet The gateway computer reads the destination address and forwards the packet to an adjacent gateway that in turn reads the destination address and so forth across the Internet until one CLI L2P Release 8 0 05 2013 Glossary gateway recognizes the packet as belonging to a computer within its immediate neighborhood or domain That gateway then forwards the packet directly to the computer whose address is specified Because a message is divided into a number of packets each packet can if necessary be sent by a different route a
319. sntp client 4 13 4 show sntp operation 4 13 5 show sntp server 4 13 6 show sntp status 4 13 7 show sntp time 4 13 8 nosntp 4 13 9 sntp anycast address 4 13 10 sntp anycast transmit interval 4 13 11 sntp anycast vlan 4 13 12 sntp client accept broadcast 4 13 13 sntp client disable after sync 4 13 14 sntp client offset 4 13 15 sntp client request interval 4 13 16 no sntp client server 4 13 17 sntp client server primary 4 13 18 sntp client server secondary 4 13 19 sntp client threshold 4 13 20 sntp operation 4 13 21 sntp server disable if local 4 13 22 sntp time system PTP Precision Time Protocol 4 14 1 show ptp 4 14 2 show ptp configuration 4 14 3 show ptp operation 4 14 4 show ptp port 4 14 5 show ptp status 4 14 6 ptp clock mode 4 14 7 ptp operation 4 14 8 ptp sync lower bound 4 14 9 ptp sync upper bound CLI L2P Release 8 0 05 2013 353 353 354 354 354 355 355 356 356 358 358 359 360 360 361 361 362 362 363 363 364 364 365 365 366 367 368 369 370 370 371 371 374 374 375 376 377 378 378 379 13 Content 4 15 14 4 14 10 ptp v1 preferred master 4 14 11 ptp v1 re initialize 4 14 12 ptp v1 subdomain name 4 14 13 ptp v1 sync interval 4 14 14 ptp v2bc priority1 4 14 15 ptp v2bc priority2 4 14 16 ptp v2bc domain 4 14 17 ptp v2bc utc offset 4 14 18 ptp v2bc utc offset valid 4 14 19 ptp v2bc vian 4 14 20 ptp v2bc vian priority 4 14 21 ptp v1 burst 4 14 22 ptp
320. specified as a 6 byte hexadecimal number in the for mat of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN 1 4042 Format no macfilter adddest lt macaddr gt lt vlanid gt Mode Interface Config CLI L2P 188 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 14 macfilter adddest all This command adds all interfaces to the destination filter set for the MAC filter with the given lt macaddr gt and VLAN of lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN 1 to 4042 Format macfilter adddest all lt macaddr gt lt vlanid gt Mode Global Config no macfilter adddest all This command removes all ports from the destination filter set for the MAC filter with the given lt macaddr gt and VLAN of lt vianid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal num ber in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN 1 to 4042 Format no macfilter adddest all lt macaddr gt lt vlanid gt Mode Global Config CLI L2P Release 8 0 05 2013 189 4 9 Device Configuration Commands 4 9 15 mac notification Global Config Use this command to change the settings for MAC address change notifica tion globally on the device This command enables the sending of MAC noti fication
321. ssible that both connections may be simultaneously live which could result in an endless loop of traffic on the LAN CLI L2P Release 8 0 05 2013 802 1P The IEEE protocol designator for Local Area Network LAN This Layer 2 network standard improves support of time critical traffic and limits the extent of high bandwidth multicast traffic within a bridged LAN To do this 802 1P defines a methodology for introducing traffic class priorities The 802 1P standard allows priority to be defined in all 802 MAC protocols Ethernet Token Bus Token Ring as well as in FDDI For protocols such as Ethernet that do not contain a priority field 802 1P specifies a method for indicating frame priority based on the new fields defined in the 802 1Q VLAN standard 802 1Q VLAN The IEEE protocol designator for Virtual Local Area Network VLAN This standard provides VLAN identification and quality of service QoS levels Four bytes are added to an Ethernet frame to allow eight priority levels QoS and to identify up to 4096 VLANs See VLAN on page 580 for more information A Address Resolution Protocol An Internet Protocol that dynamically maps Internet addresses to physical hardware addresses on a LAN Advanced Network Device Layer Software Hirschmann term for the Device Driver level 567 Glossary Aging When an entry for a node is added to the lookup table of a switch it is given a timestamp Each tim
322. st frames unit seconds min 2 max 3 599 default 125 Format set igmp lookup interval unknown lt 2 3599 gt Mode Global Config lt 2 3599 gt Enter the IGMP Snooping lookup response time for unknown multi cast frames unit seconds min 2 max 3 599 default 125 CLI L2P 220 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 53 set igmp lookup resp time unknown This command configures the IGMP Snooping lookup interval for unknown multicast frames unit seconds min 1 max 3 598 default 10 Format set igmp lookup resp time unknown lt 1 3598 gt Mode Global Config lt 2 3598 gt Enter the IGMP Snooping lookup interval for unknown multicast frames unit seconds min 1 max 3 598 default 10 CLI L2P Release 8 0 05 2013 221 4 9 Device Configuration Commands 4 9 54 set igmp maxresponse This command sets the IGMP Maximum Response time on the system The Maximum Response time is the amount of time in seconds that a switch will wait after sending a query in response to a received leave message before deleting the multicast group received in the leave message If the switch re ceives a report in response to the query within the maxresponse time then the multicast group is not deleted This value must be less than the IGMP Query Interval time value The range is 1 to 3 598 seconds Default 10 Format set igmp maxresponse lt 1 3598 gt Mode Global Config Note the IGMP Queri
323. staticcapability This command enables the support of link aggregations static LAGs on the device By default the static capability for all link aggregations is disabled Default disabled Format link aggregation staticcapability Mode Global Config no link aggregation staticcapability This command disables the support of static link aggregations LAGs on the device Default disabled Format no link aggregation staticcapability Mode Global Config CLI L2P Release 8 0 05 2013 97 CLI Commands Base 4 5 Link Aggregation 802 3ad Commands 4 5 2 show link aggregation brief This command displays the static capability of all link aggregations LAGs on the device as well as a summary of individual link aggregations Format show link aggregation brief Mode Privileged EXEC and User EXEC Static Capability This field displays whether or not the device has static capability enabled For each link aggregation the following information is displayed Name This field displays the name of the link aggregation Link State This field indicates whether the link is up or down Mbr Ports This field lists the ports that are members of this link aggregation in lt slot port gt notation Max num of LAGs Displays the maximum number of concurrently configured link aggre gations on this device Slot no for LAGs Displays the slot number for all configured link aggregations on this device CLI L2P 98 Release 8 0 05 2013
324. stricted MAC Addresses are 00 00 00 00 00 00 01 80 C2 00 00 00 to 01 80 C2 00 00 0F 01 80 C2 00 00 20 to 01 80 C2 00 00 21 and FF FF FF FF FF FF The lt vlanid gt parameter must identify a valid VLAN 1 to 4042 Up to 100 static MAC filters may be created Format macfilter lt macaddr gt lt vlanid gt Mode Global Config no macfilter This command removes all filtering restrictions and the static MAC filter entry for the MAC address lt macaddr gt on the VLAN lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal num ber in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN 1 to 4042 Format no macfilter lt macaddr gt lt vlanid gt Mode Global Config CLI L2P Release 8 0 05 2013 187 4 9 Device Configuration Commands 4 9 13 macfilter adddest This command adds the interface to the destination filter set for the MAC filter with the given lt macaddr gt and VLAN of lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN 1 4042 Format macfilter adddest lt macaddr gt lt vlanid gt Mode Interface Config no macfilter adddest This command removes a port from the destination filter set for the MAC filter with the given lt macaddr gt and VLAN of lt vianid gt The lt macaddr gt parameter must be
325. swer y yes or n no The CLI displays the end of this operation Format clear eventlog Mode Privileged EXEC CLI L2P 298 Release 8 0 05 2013 4 11 System Utilities 4 11 6 traceroute This command is used to discover the routes that packets actually take when traveling to their destination through the network on a hop by hop basis lt ipaddr gt should be a valid IP address The optional port parameter is the UDP port used as the destination of pack ets sent as part of the traceroute This port should be an unused port on the destination system port should be a valid decimal integer in the range of 0 zero to 65 535 The default value is 33 434 Format traceroute lt ipaddr gt port Mode Privileged EXEC 4 11 7 clear arp table switch This command clears the agent s ARP table cache Format clear arp table switch Mode Privileged EXEC CLI L2P Release 8 0 05 2013 299 4 11 System Utilities 4 11 8 clear config This command resets the configuration in RAM to the factory defaults without powering off the switch Format clear config Mode Privileged EXEC 4 11 9 clear config factory This command resets the whole configuration to the factory defaults Confi guration data and scripts stored in nonvolatile memory will also be deleted Format clear config factory Mode Privileged EXEC 4 11 10clear counters This command clears the stats for a specified lt slot port gt or for all the ports
326. t The number of seconds after which the switch will reload Value range 0 2 147 483 sec clear reload This command cancels a scheduled reload CLI L2P 322 Release 8 0 05 2013 4 11 System Utilities 4 11 32show reload This command displays if a reload is sceduled for the device If sceduled the command displays the number of seconds after which the switch will reload Format show reload Modes Privileged EXEC User Exec lt seconds gt The number of seconds after which the switch will reload Possible values None no reload sceduled 0 2 147 483 sec CLI L2P Release 8 0 05 2013 323 4 12 LLDP Link Layer Discovery Protocol 4 12 LLDP Link Layer Discovery Protocol These commands show and configure the LLDP parameters in compliance with IEEE 802 1 AB 4 12 1 show lIldp This command shows all LLDP settings Format show lldp Mode Privileged EXEC and User EXEC 4 12 2 show lidp config This command shows all LLDP configuration settings Format show lldp config Mode Privileged EXEC and User EXEC CLI L2P 324 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 3 show Ildp config chassis This command shows all LLDP configuration settings concerning the entire device Format show lldp config chassis Mode Privileged EXEC and User EXEC 4 12 4 show Ildp config chassis admin state Display the LLDP IEEE802 1AB functionality on this device If disabled the LLDP protoc
327. t no authentication login lt listname gt Mode Global Config CLI L2P 512 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1 2 authorization network radius Use this command to enable the switch to accept VLAN assignment by the RADIUS server Format authorization network radius Mode Privileged EXEC no authorization network radius Use this command to disable the switch to accept VLAN assignment by the RADIUS server Format no authorization network radius Mode Global Config 6 1 3 clear dot1x statistics This command resets the 802 1X statistics for the specified port or for all ports Format clear dorix statistics lt slot port gt all Mode Privileged EXEC CLI L2P Release 8 0 05 2013 513 CLI Commands Security 6 1 Security Commands 6 1 4 clear radius statistics This command is used to clear all RADIUS statistics Format clear radius statistics Mode Privileged EXEC 6 1 5 dot1x defaultlogin This command assigns the authentication login list to use for non configured users for 802 1X port security This setting is over ridden by the authentication login list as signed to a specific user if the user is configured locally If this value is not configured users will be authenticated using local authentication only Format dotlix defaultlogin lt listname gt Mode Global Config CLI L2P 514 Release 8 0 05 2013 CLI Commands Security 6 1 Security Commands 6 1
328. t interface 0 4 vian participation include 3 exit vlan database vian 4 exit config interface 0 5 vian participation include 4 exit interface 0 6 vlan participation include 4 exit vlan database vlan 9 exit config interface 0 1 vlan participation include 9 exit interface 0 2 vian participation include 9 exit interface 0 3 vlan participation include 9 exit interface 0 4 vian participation include 9 exit interface 0 5 vian participation include 9 exit interface 0 6 vlan participation include 9 exit interface 0 7 vian participation include 9 exit Table 16 Creating VLANs 562 CLI L2P Release 8 0 05 2013 Appendix VLAN Example 7 1 SOLUTION 1 7 1 SOLUTION 1 All traffic entering the ports is tagged traffic Since the traffic is tagged the PVID configuration for each port is not a concern The network card configuration for devices on Project A must be set to tag all traffic with VLAN 2 The network card configuration for devices on Project B must be set to tag all traffic with VLAN 3 The network card configuration for devices on Project C must be set to tag all traffic with VLAN 4 The network card configuration for devices on Project P must be set to tag all traffic with VLAN 9 CLI L2P Release 8 0 05 2013 563 Appendix VLAN Example 7 1 SOLUTION 1 CLI L2P 564 Release 8 0 05 2013 Appendix VLAN Example 7 2 SOLUTION 2 7 2 SOLUTION 2 The network card configurat
329. t lt 1 4042 gt Mode Privileged EXEC and User EXEC Mac Address A multicast MAC address for which the switch has forwarding and or filtering information The format is two digit hexadecimal numbers that are separated by colons for example 01 23 45 67 89 AB Type This displays the type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as a result of a learning process or protocol Component The component that is responsible for this entry in the Multicast For warding Database Possible values are IGMP Snooping GMRP and Static Filtering Description The text description of this multicast table entry Interfaces The list of interfaces that are designated for forwarding Fwd and fil tering FIt Forwarding Interfaces The resultant forwarding list is derived from combining all the compo nent s forwarding interfaces and removing the interfaces that are listed as the static filtering interfaces CLI L2P Release 8 0 05 2013 237 4 9 Device Configuration Commands 4 9 73 show mac filter table static This command displays the Static MAC Filtering information for all Static MAC Filters If a11 is selected all the Static MAC Filters in the system are displayed If a macaddr is entered a vlan must also be entered and the Static MAC Filter information will be displayed only for that MAC address and VLAN Format show mac filter table static lt macaddr gt
330. t connects to the network In some systems the device s IP address can even change while it is still connected DHCP also supports a mix of static and dynamic IP addresses Dynamic addressing simplifies network administration because the software tracks IP 569 Glossary addresses rather than requiring an administrator to manage the task A new computer can be added to a network without the hassle of manually assigning it a unique IP address E EEPROM See Electronically Erasable Programmable Read Only Memory on page 570 Electronically Erasable Programmable Read Only Memory EEPROM is also known as Flash memory This is re programmable memory F Fast STP A high performance Spanning Tree Protocol See STP on page 579 for more information FIFO First In First Out Flash Memory See EEPROM on page 570 Flow Control The process of adjusting the flow of data from one network device to another to ensure that the receiving device can handle all of the incoming data This is particularly important where the sending device is capable of sending data much faster than the receiving device can receive it There are many flow control mechanisms One of the most common flow control protocols for 570 asynchronous communication is called xon xoff In this case the receiving device sends a an xoff message to the sending device when its buffer is full The sending device then stops sending
331. t show bridge fast link detection show bridge framesize show bridge vlan learning bridge framesize show config watchdog show device status show authentication show eventlog show interface show interface ethernet show interface switchport show interface utilization show logging show mac addr table show signal contact show slot show running config show sysinfo show temperature utilization alarm threshold Debug Commands 4 2 1 4 2 2 4 2 3 4 2 4 4 2 5 4 2 6 4 2 7 debug tcpdump help debug tcpdump start cpu debug tcpdump start cpu filter debug tcpdump stop debug tcpdump filter show debug tcpdump filter list debug tcpdump filter delete Management VLAN Commands 4 3 1 network mgmt_vlan Class of Service CoS Commands 4 4 1 classofservice dot1p mapping 4 4 2 classofservice ip dscp mapping 4 4 3 classofservice trust 4 4 4 show classofservice dot1p mapping 4 4 5 show classofservice ip dscp mapping 4 4 6 show classofservice trust CLI L2P Release 8 0 05 2013 Content 4 4 7 4 4 8 4 4 9 4 4 10 4 4 11 vlan port priority all vlan priority dvlan tunnel ethertype mode dvlan tunnel show dvlan tunnel 4 5 Link Aggregation 802 3ad Commands 4 5 1 4 5 2 link aggregation staticcapability show link aggregation brief 4 6 Management Commands 4 6 1 4 6 2 4 6 3 4 6 4 4 6 5 4 6 6 4 6 7 4 6 8 4 6 9 4 6 10 4 6 11 4 6 12 4 6 13 4 6 14 4 6 15 4 6 16 4 6 17 4 6 18 4 6 19 4 6 20 4 6 2
332. t are members of this link aggregation LAG in slot port notation There can be a maximum of eight ports assigned to a given link aggregation LAG Port Speed Speed of the link aggregation port Type This field displays the status designating whether a particular link aggregation LAG is statically or dynamically maintained The possi ble values of this field are Static indicating that the link aggregation is statically maintained and Dynamic indicating that the link aggrega tion is dynamically maintained Active Ports This field lists the ports that are actively participating in the link aggre gation LAG 4 9 80 show rmon alarm This command displays switch configuration information Format show rmon alarm Mode Privileged EXEC and User EXEC CLI L2P Release 8 0 05 2013 245 4 9 Device Configuration Commands 4 9 81 show selftest This command displays switch configuration information Format show selftest Mode Privileged EXEC and User EXEC Ramtest state May be enabled or disabled The factory default is enabled Reboot on error May be enabled disabled or seriousOnly The factory default is enabled CLI L2P 246 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 82 show storm control This command displays switch configuration information Format show storm control Mode Privileged EXEC and User EXEC Ingress Limiting May be enabled or disabled The factory default is disabled Ingress
333. t image main bin will exchange the file name after reboot the both OS and configuration files will be swapped CLI L2P Release 8 0 05 2013 307 4 11 System Utilities copy lt tftp ip filepath fileName gt nvram sfp white list Use this command to load the SFP white list file from a TFTP server Note In order to delete the SFP white list file from the flash memory use the command clear sfp white list The clear config factory command deletes the SFP white list too copy tftp lt server_ip gt lt path_to_pem gt nvram httpscert Use this command for uploading a PEM certificate for HTTPS over TFTP Note Reboot the device or re enable the HTTPS server after uploading a PEM certificate copy nvram clibanner lt url gt Downloads the CLI banner file via TFTP using lt tftp ip filepath fileName gt copy nvram capture aca capture Save the internal packet capture file to the Auto Configuration Adapter ACA21 file name capture cap copy nvram capture lt url gt Save the internal packet capture file to a tftp URL using lt tftp ip filepath fileName gt CLI L2P 308 Release 8 0 05 2013 4 11 System Utilities copy nvram capturefilter lt sourcefilename gt aca capturefilter lt targetfilename gt Save a capture filter file from the flash memory to the Auto Configura tion Adapter sourcefilename Filename of source capture filter expressions file targetfilename Filename of target capture filter
334. t tftp ip filepath fileName gt copy system running config nvram startup config Copies system config file Save the running configuration to NVRAM copy system running config lt url gt Copies system config file Uploads system running config via tftp using lt tftp ip filepath fileName gt CLI L2P 310 Release 8 0 05 2013 4 11 System Utilities copy lt url gt nvram clibanner This feature provides a privileged user the capability to change the CLI default banner Copyright c 2004 2010 lt Company Name gt All rights reserved lt Product Name gt Release L3P 06 0 00 Build date 2010 05 01 00 30 System Name lt Product Name gt 518280 Mgmt IP a b c d 1 Router IP 0 0 0 0 Base MAC aas sbb cc dd ee ff System Time 2010 01 02 05 51 11 The command uploads the CLI Banner file by tftp using lt tftp ip filepath fileName gt After the upload you logout from CLI and the new CLI banner file will be displayed at the next login url Upload CLI banner file using lt tftp ip filepath fileName gt If no cli banner file is defined the default cli banner is displayed see above Note See that the the CLI banner file you created has the following properties Use ASCII format character codes 0x20 Ox7F n and t as C like sequences Do not use regular expressions Do not exeed the limit of 2048 byte Do not exceed the limit of 20 lines Do not exceed the limit of 80 characters per line A d
335. t within a multiple spanning tree instance or the common and internal spanning tree instance depending on the lt mstid gt parameter to the default value i e a pathcost value based on the Link Speed If the port priority token is specified this command sets the priority for this port within a specific multiple spanning tree instance or the common and internal spanning tree instance depending on the lt mstid gt parame ter to the default value i e 128 Format no spanning tree mst lt mstid gt lt cost port priority gt Mode Interface Config CLI L2P Release 8 0 05 2013 445 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 25 spanning tree mst priority This command sets the bridge priority for a specific multiple spanning tree in stance The instance lt mstid gt is a number that corresponds to the desired ex isting multiple spanning tree instance The priority value is a number within a range of 0 to 61440 in increments of 4096 This command accepts the value 0 for the mstid If O defined as the default CIST ID is passed as the lt mstid gt then this command sets the Bridge Priority parameter to a new value for the common and internal spanning tree The bridge priority value again is a number within a range of 0 to 61440 The twelve least significant bits will be masked according to the 802 1s specification This will cause the priority to be rounded down to the next lower valid priority Default 32
336. ta might get precedence over other kinds of traffic Differentiated Services is the most advanced method for managing traffic in terms of what is called Class of Service CoS Unlike the earlier mechanisms of 802 1P tagging and Type of Service ToS Differentiated Services avoids simple priority tagging and depends on more complex policy or rule CLI L2P Release 8 0 05 2013 statements to determine how to forward a given network packet An analogy is made to travel services in which a person can choose among different modes of travel train bus airplane degree of comfort the number of stops on the route standby status the time of day or period of year for the trip and so forth For a given set of packet travel rules a packet is given one of 64 possible forwarding behaviors known as per hop behaviors PHBs A six bit field known as the Differentiated Services Code Point DSCP in the Internet Protocol Internet Protocol header specifies the per hop behavior for a given flow of packets Differentiated Services and the Class of Service approach provide a way to control traffic that is both more flexible and more scalability than the Quality of Service approach Diffserv See Differentiated Services on page 569 Dynamic Host Configuration Protocol DHCP is a protocol for assigning dynamic IP addresses to devices on a network With dynamic addressing a device can have a different IP address every time i
337. tartrepeatcount Use this command to return to the factory default value Format no lldp med faststartrepeatcount Mode Global Config CLI L2P 346 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 35lldp med transmit tlv Use this command to specify which optional Type Length Values TLVs in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units _LDPDUs Default By default the capabilities and network policy TLVs are included Format lldp med transmit tlv capabilities network policy Mode Interface Config capabilities Include Exclude LLDP capabilities TLV network policy Include Exclude LLDP network policy TLV no Iidp med transmit tliv Use this command to remove a TLV Format no lldp med transmit tlv capabilities network policy Mode Interface Config CLI L2P Release 8 0 05 2013 347 4 12 LLDP Link Layer Discovery Protocol 4 12 36lldp med transmit tlv all Use this command to specify which optional Type Length Values TLVs in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units _LDPDUs Default By default the capabilities and network policy TLVs are included Format lldp med transmit tlv all capabilities network policy Mode Global Config capabilities Include Exclude LLDP capabilities TLV network policy Include Exclude LLDP network policy TLV no Iidp med med transmit tlv all U
338. terfaces The list of interfaces that are designated for forwarding Fwd and filtering FIt CLI L2P Release 8 0 05 2013 235 4 9 Device Configuration Commands 4 9 71 show mac filter table igmpsnooping This command displays the IGMP Snooping entries in the Multicast Forward ing Database MFDB table Format show mac filter table igmpsnooping Mode Privileged EXEC and User EXEC Mac Address A multicast MAC address for which the switch has forwarding and or filtering information The format is two digit hexadecimal numbers that are separated by colons for example 01 23 45 67 89 AB Type This displays the type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as a result of a learning process or protocol Description The text description of this multicast table entry Interfaces The list of interfaces that are designated for forwarding Fwd and fil tering Flt CLI L2P 236 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 72 show mac filter table multicast This command displays the Multicast Forwarding Database MFDB informa tion If the command is entered with no parameter the entire table is dis played This is the same as entering the optional al 1 parameter The user can display the table entry for one MAC Address by specifying the MAC ad dress as an optional parameter Format show mac filter table multicast lt macaddr g
339. tes whether the Link is up or down CLI L2P Release 8 0 05 2013 243 4 9 Device Configuration Commands Link Trap This object determines whether or not to send a trap when link status changes The factory default is enabled Flow Indicates if enable flow control is enabled on this port Device Status Indicates whether or not the given port s link status is monitored by the device status VLAN Prio This object displays the port VLAN priority 4 9 79 show link aggregation This command displays an overview of all link aggregations LAGs on the switch Format show link aggregation lt logical slot port gt all Mode Privileged EXEC and User EXEC Logical slot port Valid slot and port number separated by forward slashes Name The name of this link aggregation LAG You may enter any string of up to 15 alphanumeric characters Link State Indicates whether the Link is up or down Admin Mode May be enabled or disabled The factory default is enabled CLI L2P 244 Release 8 0 05 2013 4 9 Device Configuration Commands Link Trap Mode This object determines whether or not to send a trap when link status changes The factory default is enabled STP Mode The Spanning Tree Protocol Administrative Mode associated with the port or link aggregation LAG The possible values are Disable Spanning tree is disabled for this port Enable Spanning tree is enabled for this port Mbr Ports A listing of the ports tha
340. the SNMPv3 user will be able to set and retrieve parame ters on the system If the value is set to ReadOnly the SNMPv3 user will only be able to retrieve parameter information The SNMPv3 access mode may be different than the CLI and Web access mode SNMPv3 Authentication This field displays the authentication protocol to be used for the spec ified login user SNMPv3 Encryption This field displays the encryption protocol to be used for the specified login user CLI L2P Release 8 0 05 2013 287 4 10 User Account Management Commands 4 10 4 users defaultlogin This command assigns the authentication login list to use for non configured users when attempting to log in to the system This setting is overridden by the authentication login list assigned to a specific user if the user is config ured locally If this value is not configured users will be authenticated using local authentication only Format users defaultlogin lt listname gt Mode Global Config listname Enter an alphanumeric string of not more than 15 characters CLI L2P 288 Release 8 0 05 2013 4 10 User Account Management Commands 4 10 5 users login lt user gt Enter user name Format users login lt user gt lt listname gt Mode Global Config Note When assigning a list to the admin account include an authentica tion method that allows administrative access even when remote authentication is unavailable use authentication login lt listname
341. the main line has become inoperative or returned May be enabled or disabled Default enabled Link Up Down Flag May be enabled or disabled The factory default is enabled Indicates whether link status traps will be sent Multiple Users Flag May be enabled or disabled The factory default is enabled Indicates whether a trap will be sent when the same user ID is logged into the switch more than once at the same time either via telnet or serial port CLI L2P 140 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands Port Security MAC IP and 802 1X Enable disable sending port security event traps for MAC IP port security as well as for 802 1X Spanning Tree Flag May be enabled or disabled The factory default is enabled Indicates whether spanning tree traps will be sent 4 6 49 snmp access global This command configures the global SNMP access setting for all SNMP versions Format snmp access global disable enable read only Mode Global Config disable Disable SNMP access to this switch regardless of the SNMP version used enable Enable SNMP read and write access to this switch regardless of the SNMP version used read only Enable SNMP read only access to this switch disable write access regardless of the SNMP version used CLI L2P Release 8 0 05 2013 141 CLI Commands Base 4 6 Management Commands 4 6 50 snmp access version This command configures the SNMP version specific access
342. the sta tistics for this port were last cleared CLI L2P Release 8 0 05 2013 67 CLI Commands Base 4 1 System Information and Statistics The display parameters when the argument is switchport are as follows 68 Octets Received The total number of octets of data received by the processor excluding framing bits but including FCS octets Total Packets Received Without Error The total number of packets including broadcast packets and multicast packets received by the processor Unicast Packets Received The number of subnetwork unicast packets delivered to a higher layer protocol Multicast Packets Received The total number of packets received that were directed to a multicast address Note that this number does not include packets directed to the broadcast address Broadcast Packets Received The total number of packets received that were directed to the broadcast address Note that this does not include multicast packets Receive Packets Discarded The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher layer protocol A possible reason for discarding a packet could be to free up buffer space Octets Transmitted The total number of octets transmitted out of the interface including framing characters Packets Transmitted without Errors The total number of packets transmitted out of the interface Unicast Packets Tra
343. tilize its resources TFTP See Trivial File Transfer Protocol on page 579 Trivial File Transfer Protocol TFTP is a simple form of the File Transfer Protocol FTP TFTP uses the User Datagram Protocol UDP a direct protocol used to communicate datagrams over a network with little error recovery and provides no security features It is often used by servers to boot diskless workstations X terminals and routers Trunking The process of combing a set of trunks that are traffic engineered as a unit for the establishment of connections between switching systems in which all of the communications paths are interchangeable U UPM User Programmable Machine UPMA The first of two UPMS in Motorola s MPC855T processor 579 Glossary UPMB The second of two UPMs in Motorola s MPC855T processor USP An abbreviation that represents Unit Slot Port V Virtual Local Area Network Operating at the Data Link Layer Layer 2 of the OSI model the VLAN is a means of parsing a single network into logical user groups or organizations as if they physically resided on a dedicated LAN segment of their own In reality this virtually defined community may have individual members peppered across a large extended LAN The VLAN identifier is part of the 802 1Q tag which is added to an Ethernet frame by an 802 1Q compliant switch or router Devices recognizing 802 1Q tagged frames maintain appropriate tables
344. timer on a per Port per GARP participant basis Permissible values are 10 to 100 centiseconds 0 1 to 1 0 seconds The factory default is 20 centiseconds 0 2 seconds The finest granularity of specification is 1 centisecond 0 01 seconds CLI L2P 232 Release 8 0 05 2013 4 9 Device Configuration Commands Leave Timer Specifies the period of time to wait after receiving an unregister request for an attribute before deleting the attribute Current attributes are a VLAN or multicast group This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service There is an instance of this timer on a per Port per GARP participant basis Permissible values are 20 to 600 centiseconds 0 2 to 6 0 seconds The factory default is 60 centi seconds 0 6 seconds The finest granularity of specification is 1 cen tisecond 0 01 seconds LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are gen erated A LeaveAll PDU indicates that all registrations will shortly be deregistered Participants will need to rejoin in order to maintain reg istration There is an instance of this timer on a per Port per GARP participant basis The Leave All Period Timer is set to a random value in the range of LeaveAllTime to 1 5 LeaveAllTime Permissible values are 200 to 6000 centiseconds 2 to 60 seconds The factory default is 1000 centiseconds 10 seconds The fin
345. ting function is disabled Format no radius accounting mode Mode Global Config 6 1 25 radius server host This command is used to configure the RADIUS authentication and accounting server If the auth token is used the command configures the IP address to use to connect to a RADIUS authentication server Up to 3 servers can be configured per RADIUS client If the maximum number of configured servers is reached the command will fail until one of the servers is removed by executing the no form of the command If the optional lt port gt parameter is CLI L2P Release 8 0 05 2013 531 CLI Commands Security 6 1 Security Commands used the command will configure the UDP port number to use to connect to the configured RADIUS server In order to configure the UDP port number the IP address must match that of a previously configured RADIUS authentication server The port number must lie between 1 65535 with 1812 being the default value If the acct token is used the command configures the IP address to use for the RADIUS accounting server Only a single accounting server can be configured If an accounting server is currently configured it must be removed from the configuration using the no form of the command before this command succeeds If the optional lt port gt parameter is used the command will configure the UDP port to use to connect to the RADIUS accounting server The IP address specified must match that of a previ
346. tion command there is a show command that displays the configuration setting Copy commands transfer or save configuration and informational files to and from the switch Clear commands clear some e g the clear arp table switch command which clears the agent s ARP table or all e g the clear config command which resets the whole configuration to the factory defaults This chapter includes the following configuration types System information and statistics commands Management commands Device configuration commands User account management commands Security commands System utilities Link Layer Discovery Protocol Commands Simple Network Time Protocol Commands Precision Time Protocol Commands Power over Ethernet Commands CLI L2P Release 8 0 05 2013 51 CLI Commands Base 4 1 System Information and Statistics 4 1 System Information and Statistics 4 1 1 show This command displays the interface s configuration Format show all Mode Interface Config all Show all the running configuration parameters on this interface The configuration parameters will be displayed even if their value is the default value 4 1 2 show address conflict This command displays address conflict settings Format show address conflict Mode Privileged EXEC and User EXEC CLI L2P 52 Release 8 0 05 2013 CLI Commands Base 4 1 System Information and Statistics 4 1 3 show arp switch This command displays the Ad
347. tion on this device CLI L2P Release 8 0 05 2013 129 CLI Commands Base 4 6 Management Commands 4 6 36 serial timeout This command specifies the maximum connect time in minutes without console activity A value of 0 indicates that a console can be connected in definitely The time range is O to 160 Default 5 Format serial timeout lt 0 160 gt Mode Line Config no serial timeout This command sets the maximum connect time without console activity in minutes back to the default value Format no serial timeout Mode Line Config 4 6 37 set prompt This command changes the name of the prompt The length of name may be up to 64 alphanumeric characters Format set prompt lt prompt string gt Mode Privileged EXEC CLI L2P 130 Release 8 0 05 2013 CLI Commands Base 4 6 Management Commands 4 6 38 show ethernet ip This command displays the admin state of the EtherNet IP function Format show ethernet ip Mode Privileged EXEC and User EXEC 4 6 39 show network This command displays configuration settings associated with the switch s network interface The network interface is the logical interface used for in band connectivity with the switch via any of the switch s front panel ports The configuration parameters associated with the switch s network interface do not affect the configuration of the front panel ports through which traffic is switched or routed Format show network Mode Privile
348. tistics show users authentication users login HTTP Commands 6 2 1 6 2 2 6 2 3 6 2 4 6 2 5 6 2 6 6 2 7 6 2 8 ip http secure port ip http secure protocol ip http server show ip http ip https server ip https port ip https certgen show ip https Appendix VLAN Example SOLUTION 1 SOLUTION 2 Glossary Index Further support CLI L2P Release 8 0 05 2013 531 533 533 534 535 536 536 539 540 540 545 546 547 548 549 551 552 553 553 554 555 556 557 558 558 559 561 563 565 567 583 591 19 Content CLI L2P 20 Release 8 0 05 2013 About this Manual About this Manual The GUI reference manual contains detailed information on using the graphical user interface web based interface to operate the individual func tions of the device The Command Line Interface reference manual contains detailed informa tion on using the Command Line Interface to operate the individual functions of the device The Installation user manual contains a device description safety instruc tions a description of the display and the other information that you need to install the device The Basic Configuration user manual contains the information you need to start operating the device It takes you step by step from the first startup op eration through to the basic settings for operation in your environment The Redundancy Configuration user manual contains the information y
349. tory Access Protocol A set of protocols for accessing information directories LDAP is based on the standards contained within the X 500 standard but is significantly simpler Unlike X 500 LDAP supports TCP IP which is necessary for any type of Internet access Although not yet widely implemented LDAP should eventually make it possible for almost any application running on virtually any computer platform to obtain directory information such as e mail addresses and public keys Because LDAP is an open protocol applications need not worry about the type of server hosting the directory 573 Glossary Learning The bridge examines the Layer 2 source addresses of every frame on the attached networks called listening and then maintains a table or cache of which MAC addresses are attached to each of its ports Link State In routing protocols the declared information about the available interfaces and available neighbors of a router or network The protocol s topological database is formed from the collected link state declarations LLDP The IEEE 802 1AB standard for link layer discovery in Ethernet networks provides a method for switches routers and access points to advertise their identification configuration and capabilities to neighboring devices that store the data in a MIB management information base Link layer discovery allows a network management system to model the topology of the network by interrog
350. trative setting enable or disable default enable trap Configure the Inline Power notification trap setting enable or dis able default disable threshold Configure the Inline Power notification trap threshold unit percent of maximum rated power valid range 1 99 default 90 fast startup Configure the Inline Power to be enabled at the beginning of the start phase enable or disable default disable CLI L2P Release 8 0 05 2013 397 4 15 PoE Power over Ethernet 4 15 4 inlinepower Interface Config Configure the portrelated Inline Power parameters Note The interface name you enter in the name command Format inlinepower admin mode disable enable priority fers tical Aigh low Mode Interface Config admin mode Configure the port related Inline Power administrative setting enable or disable default enable priority Configure the Inline Power priority for this port In case of power scar city inline power on ports configured with the lowest priority is dropped first Possible values are critical high or low default low The highest priority is critical Note This parameter is available for MACH1000 MACH4000 and devices which support Power over Ethernet Plus MACH104 16T X PoEP devices and MACH102 devices with media module M1 8TP RJ45 PoE 4 15 5 clear inlinepower Reset the Inline Power parameters to default settings Format clear inlinepower Mode Privileged EXEC CLI L
351. tree instance Topology Change in Progress Value of the Topology Change parameter for the multiple spanning tree instance Designated Root Identifier of the Regional Root for this multiple spanning tree instance Root Path Cost Path Cost to the Designated Root for this multiple spanning tree instance Root Port Identifier Port to access the Designated Root for this multiple spanning tree instance CLI L2P Release 8 0 05 2013 421 CLI Commands Switching 5 1 Spanning Tree Commands Associated FIDs List of forwarding database identifiers associated with this instance Associated VLANs List of VLAN IDs associated with this instance 5 1 4 show spanning tree mst port detailed This command displays the detailed settings and parameters for a specific switch port within a particular multiple spanning tree instance The instance lt mstid gt is a number that corresponds to the desired existing multiple span ning tree instance The lt slot port gt is the desired switch port Format show spanning tree mst port detailed lt mstid gt lt slot port gt Mode Privileged EXEC and User EXEC MST Instance ID Valid value 0 Port Identifier Port priority as a two digit hex number followed by the port number as a two digit hex number Port Priority Decimal number Port Forwarding State Current spanning tree state of this port Port Role The port s current RSTP port role Port Path Cost Configured value of the Internal P
352. ts manual setting to open Switches the signal contact 2 s mode to manual and its manual setting to closed Enables the monitoring of the power supplies for signal contact 1 only Disables the sending of signal contact traps Format clear signal contact Mode Privileged EXEC CLI L2P Release 8 0 05 2013 303 4 11 System Utilities 4 11 17clear traplog This command clears the trap log Format clear traplog Mode Privileged EXEC 4 11 18clear ring coupling This command clears the ring coupling configuration Format clear ring coupling Mode Privileged EXEC 4 11 19clear vian This command resets VLAN configuration parameters to the factory defaults Format clear vlan Mode Privileged EXEC CLI L2P 304 Release 8 0 05 2013 4 11 System Utilities 4 11 20config watchdog If the function is enabled and the connection to the switch is interrupted for longer than the time specified in timeout s the switch then loads the last configuration saved Format config watchdog admin state disable enable timeout lt 10 600 gt Mode Global Config admin state Enable or disable the Auto Configuration Undo feature default disabled timeout Configure the Auto Configuration Undo timeout unit seconds 4 11 21copy This command uploads and downloads to from the switch Remote URLs can be specified using tftp copy without parameters displays a brief explanation of the most important copy
353. ue Configuration Format Selector Configured value MST Instances List of all multiple spanning tree instances configured on the switch CLI L2P Release 8 0 05 2013 427 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 8 show spanning tree vlan This command displays the association between a VLAN and a multiple spanning tree instance The lt vlanid gt corresponds to an existing VLAN ID 1 4042 Format show spanning tree vlan lt vlanid gt Mode Privileged EXEC and User EXEC vianid Enter a VLAN identifier 1 4042 VLAN Identifier The VLANs associated with the selected MST instance Associated Instance Identifier for the associated multiple spanning tree instance or CST if associated with the common and internal spanning tree CLI L2P 428 Release 8 0 05 2013 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 9 spanning tree This command sets the spanning tree operational mode to enabled Default disabled Format spanning tree Mode Global Config no spanning tree This command sets the spanning tree operational mode to disabled While disabled the spanning tree configuration is retained and can be changed but is not activated Format no spanning tree Mode Global Config CLI L2P Release 8 0 05 2013 429 CLI Commands Switching 5 1 Spanning Tree Commands 5 1 10 spanning tree auto edgeport This command specifies that this port is an Edge Port within the common and internal spanning tree
354. ultiplier gt Mode Global Config Tx hold mult Configure the LLDP transmit hold multiplier a time to live value expressed as a multiple of the LLDP Message Tx Interval tx interval min 2 max 10 default 4 4 12 24lldp chassis tx interval Configure the interval at which LLDP frames are transmitted on behalf of this LLDP agent unit seconds min 5 sec max 32768 sec default 30 sec Format lldp chassis tx interval lt tx interval gt Mode Global Config Tx interval Configure the interval at which LLDP frames are transmitted on behalf of this LLDP agent unit seconds min 5 sec max 32768 sec default 30 sec CLI L2P Release 8 0 05 2013 339 4 12 LLDP Link Layer Discovery Protocol 4 12 25clear lidp config all Clear the LLDP configuration i e set all configurable parameters to default values all chassis as well as port specific parameters at once Note LLDP Remote data remains unaffected Format clear lldp config all Mode Privileged EXEC 4 12 26lldp admin state Configure the port s LLDP admin state if LLDP IEEE802 1AB frames will be transmitted to and or received from the standard IEEE multicast address 01 80 c2 00 00 0e The default setting is tx and rx Format lldp admin state lt tx only rx only tx and rx off gt Mode Interface Config CLI L2P 340 Release 8 0 05 2013 4 12 LLDP Link Layer Discovery Protocol 4 12 27lildp fdb mode Configure the port s LLDP
355. ure the PTPv2 Boundary Clock IEEE1588 2008 specific settings Use this command to configure the VLAN priority Format ptp v2bc vlan priority lt 0 7 gt Mode Interface Config CLI L2P 384 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 21ptp v1 burst Enable or disable the burst feature for synchronization runs during a synchronization interval Default is disable Format ptp vl burst enable disable Mode Interface Config enable During a synchronization interval there are 2 to 8 synchronization runs This permits faster synchronization when the network load is high disable During a synchronization interval there is only one synchronization run 4 14 22ptp v1 operation Enable or disable the sending and receiving processing of PTP synchronization messages Default is enable Format ptp vl operation enable disable Mode Interface Config enable Port sends and receives processes PTP synchronization messages disable Port blocks PTP synchronization messages CLI L2P Release 8 0 05 2013 385 4 14 PTP Precision Time Protocol 4 14 23ptp v2bc operation Enable or disable the sending and receiving processing of PTP synchroni zation messages Format ptp v2bc operation disable enable Mode Interface Config enable Port sends and receives processes PTP synchronization messages disable Port blocks PTP synchronization messages 4 14 24ptp v2bc announce interval Configure the Annou
356. ures and options of the device For every configuration command there is a show command that displays the configuration setting 4 7 1 logging buffered This command enables logging to an in memory log where up to 128 logs are kept Default enabled Format logging buffered Mode Global Config no logging buffered This command disables logging to in memory log Format no logging buffered CLI L2P 164 Release 8 0 05 2013 CLI Commands Base 4 7 Syslog Commands 4 7 2 logging buffered wrap This command enables wrapping of in memory logging when full capacity reached Otherwise when full capacity is reached logging stops Default wrap Format logging buffered wrap Mode Privileged EXEC no logging buffered wrap This command disables wrapping of in memory logging and configures logging to stop when capacity is full Format no logging buffered wrap CLI L2P Release 8 0 05 2013 165 CLI Commands Base 4 7 Syslog Commands 4 7 3 logging cli command This command enables the CLI command Logging feature The Command Logging component enables the switch software to log all Command Line Interface CLI commands issued on the system Default disabled Format logging cli command Mode Global Config no logging cli command This command disables the CLI command Logging feature Format no logging cli command CLI L2P 166 Release 8 0 05 2013 CLI Commands Base 4 7 Syslog Commands 4 7 4 logging console This co
357. vice CLI L2P 184 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 9 deleteport This command deletes the port from the link aggregation LAG The inter face is a logical slot and port number of a configured link aggregation Note This command has to be issued in the member port s interface config mode Format deleteport lt logical slot port gt Mode Interface Config 4 9 10 deleteport all This command deletes all configured ports from the link aggregation LAG The interface is a logical slot and port number of a configured link aggregation Format deleteport lt logical slot port gt all Mode Global Config CLI L2P Release 8 0 05 2013 185 4 9 Device Configuration Commands 4 9 11 dip switch operation Note This command is available for the MICE PowerMICE and RS20 RS30 RS40 devices Use this command to enable disable the DIP switch configuration Default disabled Format dip switch operation enable disable Mode Global Config enable Enable the DIP switch configuration disable Disable the DIP switch configuration The device ignores DIP switch settings CLI L2P 186 Release 8 0 05 2013 4 9 Device Configuration Commands 4 9 12 macfilter This command adds a static MAC filter entry for the MAC address lt macad dr gt on the VLAN lt vianid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The re
358. vice status trap setting Format show device status monitor state trap Mode Privileged EXEC and User EXEC Device status monitor Displays the possible monitored events and which of them are monitored the detected failure of at least one of the supply voltages the removal of the ACA CLI L2P Release 8 0 05 2013 57 CLI Commands Base 4 1 System Information and Statistics the removal of a media module the temperature limits the defective link status of at least one port With the switch the indication of link status can be masked by the management for each port Link status is not monitored in the delivery condition the loss of Redundancy guarantee Ring network coupling The following conditions are reported in Stand by mode interrupted control line partner device running in Stand by mode HIPER Ring The following condition is reported in RM mode additionally Ring redundancy guaranteed Ring redundancy is not monitored in the delivery condition Device status state Error The current device status is error No Error The current device status Is no error Device status trap enabled A trap is sent if the device status changes disabled No trap is sent if the device status changes 4 1 14 show authentication This command displays users assigned to authentication login lists Format show authentication users lt listname gt Mode Privileged EXEC and User EXEC
359. ways has a name of Default This field is optional VLAN Type Type of VLAN which can be Default VLAN ID 1 a static one that is configured and permanently defined or a Dynamic one that is created by GVRP registration VLAN Creation Time Displays the time as the system time up time when the VLAN was created 4 9 86 show vlan port This command displays VLAN port information Format show vlan port lt slot port gt all Mode Privileged EXEC and User EXEC CLI L2P Release 8 0 05 2013 251 4 9 Device Configuration Commands Slot Port Valid slot and port number separated by forward slashes It is possi ble to set the parameters for all ports by using the selectors on the top line Port VLAN ID The VLAN ID that this port will assign to untagged frames or priority tagged frames received on this port The value must be for an existing VLAN The factory default is 1 Acceptable Frame Types Specifies the types of frames that may be received on this port The options are VLAN only and Admit All When set to VLAN only untagged frames or priority tagged frames received on this port are discarded When set to Admit All untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this port With either option VLAN tagged frames are forwarded in accordance to the 802 1Q VLAN specifica tion Ingress Filtering May be enabled or disabled
360. wed The factory default is 2 4 for version L2P Allow New Telnet Sessions Indicates that new telnet sessions will not be allowed when set to no The factory default value is yes CLI L2P Release 8 0 05 2013 139 CLI Commands Base 4 6 Management Commands 4 6 48 show trapflags This command displays trap conditions Configure which traps the switch should generate by enabling or disabling the trap condition If a trap condition is enabled and the condition is detected the switch s SNMP agent sends the trap to all enabled trap receivers The switch does not have to be reset to im plement the changes Cold and warm start traps are always generated and cannot be disabled Format show trapflags Mode Privileged EXEC and User EXEC Authentication Flag May be enabled or disabled The factory default is enabled Indicates whether authentication failure traps will be sent Chassis Indicates whether traps that are related to the chassis functionality of the switch will be sent These functions include the signal contacts the ACA temperature limits exceeded changes in the module map addition or removal of SFP modules status of power supply has changed and the LLDP and SNTP features May be enabled or dis abled Default enabled Layer 2 Redundancy Indicates whether traps that are related to the layer 2 redundancy features of the switch will be sent The HiPER Ring and the Redundant Coupling will tell you with these traps when
361. witch is slave communication over dedicated control port dmi Abbreviation for dual master inband dmo Abbreviation for dual master outband dsi Abbreviation for dual slave inband dso Abbreviation for dual slave outband Default none Format ring coupling config lt single dual master inband dual master outband dual slave inband dual slave outband dmi dmo dsi dso gt Mode Global Config CLI L2P Release 8 0 05 2013 475 CLI Commands Switching 5 5 Redundant Coupling 5 5 4 ring coupling net coupling Coupling mode refers to the type of coupled network Possible values are network if you wish to couple a line type configuration ring only if you wish to couple a HIPER Ring Default none Format ring coupling net coupling lt network ring only gt Mode Global Config 5 5 5 ring coupling operation Configure the Ring Coupling s operation setting Possible values are on Enable the current Ring Coupling configuration off Disable the current Ring Coupling configuration Default off Format ring coupling operation lt off on gt Mode Global Config CLI L2P 476 Release 8 0 05 2013 CLI Commands Switching 5 5 Redundant Coupling 5 5 6 ring coupling port Configure the Ring Coupling s ports Possible values are control Enter the Ring Coupling s control coupling port in outband configurations local Enter the Ring Coupling s local coupling port partner Enter the Ring
362. witch by entering a name in a blank entry The user name may be up to 8 characters and is not case sen sitive Two users are included as the factory default admin and user Connection From IP address of the telnet client machine or EIA 232 for the serial port connection Idle Time Time this session has been idle Session Time Total time this session has been connected CLI L2P 286 Release 8 0 05 2013 4 10 User Account Management Commands 4 10 3 show users This command displays the configured user names and their settings This command is only available for users with readwrite privileges The SNMPv3 fields will only be displayed if SNMP is available on the system Format show users Mode Privileged EXEC User Name The name the user will use to login using the serial port Telnet or Web A new user may be added to the switch by entering a name in a blank entry The user name may be up to eight characters and is not case sensitive Two users are included as the factory default admin and user Access Mode Shows whether the operator is able to change parameters on the switch Read Write or is only able to view them Read Only As a factory default the admin user has Read Write access and the user has Read Only access There can only be one Read Write user and up to five Read Only users SNMPv3 AccessMode This field displays the SNMPv3 Access Mode If the value is set to ReadWrite
363. x Offset Absolute Show the device s maximum offset absolute unit nanoseconds PTP Status Delay To Master Show the device s delay to the master unit nanoseconds PTP Status Grandmaster UUID Show grandmaster Universally Unique Dentifier 32 hexadecimal numbers PTP Status Parent UUID Show parent Universally Unique Dentifier 32 hexadecimal numbers PTP Status Clock Stratum Show the device s clock stratum PTP Status Clock Identifier Show the device s clock identifier CLI L2P 376 Release 8 0 05 2013 4 14 PTP Precision Time Protocol 4 14 6 ptp clock mode Configure the Precision Time Protocol PTP IEEE 1588 clock mode If the clock mode is changed PTP will be initialized The default is disable Format ptp clock mode vl simple mode v2 simple mode vl boundary clock v2 boundary clock onestep v2 boundary clock twostep v2 transparent clock Mode Global Config v1 simple mode Set the clock mode to v1 Simple Mode This is a client only mode without hardware support The device only accepts PTPv1 sync mes sages and sets the time directly No BMC algorithm will run v2 simple mode Set the clock mode to v2 Simple Mode This is a client only mode without hardware support The device only accepts PTPv2 sync or follow_up messages and sets the time directly No BMC algorithm will run v1 boundary clock Set the clock mode to v1 Boundary Clock This specifies the mode as described
364. y the DCHP server pool information for all IDs show dhcp server pool lt id gt Display the DCHP server pool information for the specified ID only 5 8 6 dhcp server addr probe Use this command tio enable or disable the probing of allocated addresses with an ICMP Echo request Format dhcp server addr probe disable enable Mode Global Config dhcp server addr probe enable Enable the DHCP server address probe This is the default The DHCP server will send ICMP echo request before offering an IP dhcp server addr probe disable Disable the DHCP server address probe The DHCP server will offer an IP without checking if already in use CLI L2P 494 Release 8 0 05 2013 CLI Commands Switching 5 8 DHCP Server Commands 5 8 7 dhcp server operation Enable or disable the DHCP server globally Default disable Format dhcp server operation disable enable Mode Interface Config dhcp server operation disable Disable the DHCP server This is the default dhcp server operation enable Enable the DHCP server 5 8 8 dhcp server pool add lt id gt Add a pool with a single IP address static or with an IP range dynamic Format dhcp server pool add lt id gt static lt ipaddr gt dynamic lt start ipaddr gt lt end ipaddr gt Mode Global Config dhcp server pool add lt id gt static lt ipaddr gt Add a pool with a single IP address static dhcp server pool add lt id gt dynamic lt start ipaddr gt lt e

Mode

Contents

Download Pdf Manuals

Related Search

Related Contents