Home

Intel Switch SBCEGBESW1 User's Manual

1. g uNpyTkDt3ZVU72pjz fa8TFOn3 END CERTIFICATE REQUEST CN router gm com 0 General Motors C US crypto certificate import The crypto certificate import Global Configuration mode command imports a certificate signed by the Certification Authority for HTTPS Syntax crypto certificate number import Parameters e number Specifies the certificate number Range 1 2 Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines Use this command to enter an external certificate signed by Certification Authority to the device To end the session enter an empty line 230 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example Web Server Commands The imported certificate must be based on a certificate request created by the crypto certificate request Privileged EXEC mode command If the public key found in the certificate does not match the device s SSL RSA key the command fails This command is not saved in the device configuration however the certificate imported by this command is saved in the private configuration which is never displayed to the user or backed up to another device The following example imports a certificate signed by Certification Authority for HTTPS Console config crypto certificate 1 import a BEGIN CERTIFICATE
2. Console config line console Console config line password secret enable password The enable password Global Configuration mode command sets a local password to control access to user and privilege levels To remove the password requirement use the no form of this command Syntax enable password level evel password encrypted no enable password level eve Parameters e password Password for this level Range 1 159 characters e level Level for which the password applies If not specified the level is 15 Range 1 15 encrypted Encrypted password entered copied from another device configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 17 AAA Commande Default Configuration No enable password is defined Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example sets a local level 15 password called secret to control access to user and privilege levels Console config enable password secret level 15 username The username Global Configuration mode command creates a user account in the local database To remove a user name use the no form of this command Syntax username name password password level level encrypted no username name Parameters e name The name of the user Range 1 20 characters e password The authentication password for
3. console config radius server source ip 10 1 1 1 radius server timeout The radius server timeout Global Configuration mode command sets the interval during which the device waits for a server host to reply To restore the default configuration use the no form of this command Syntax radius server timeout timeout no radius server timeout Parameters e timeout Specifies the timeout value in seconds Range 1 30 Default Configuration The timeout value is 3 seconds Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example configures the timeout interval on all RADIUS servers to 5 seconds Console config radius server timeout 5 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 219 RADIUS Commands radius server deadtime The radius server deadtime Global Configuration mode command improves RADIUS response time when servers are unavailable The command is used to cause the unavailable servers to be skipped To restore the default configuration use the no form of this command Syntax radius server deadtime deadtime no rhadius server deadtime Parameters e deadtime Length of time in minutes during which a RADIUS server is skipped over by transaction requests Range 0 2000 Default Configuration The deadtime setting is 0 Command Mode Global Configuration mode Use
4. A valid port channel number e detail Indicates detailed information e active Indicates active ports only e blockedports Indicates blocked ports only e mst configuration Indicates the MST configuration identifier e instance id Specifies ID of the spanning tree instance Default Configuration This command has no default configuration Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays spanning tree information Console show spanning tree Spanning tree enabled mode MSTP Default port cost method short CST Root ID Priority 32768 Address 00 01 42 97 e0 00 Path Cost 20000 Root Port OT This switch is the IST master Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 36864 Address 00 02 4b 29 7a 00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Max hops 20 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 281 Spanning Tree Commands Interfaces Name State Prio Nbr Cost Sts Role PortFast Type 1 Enabled 28 1 20000 FWD Root No P2p bound RSTP 2 Enabled 28 2 20000 FWD Desg No Shared STP 3 Disabled 28 3 20000 4 Enabled 28 4 20000 BLK ALTN No Shared STP 5 Enabled 28 5 20000 DIS Console show spanning tree Spanning tree enabled mode RSTP Default port cost method long Root ID Priority 36864 Address
5. dHmUgUm9vdCBDZXJ DaWZpZXIwxXDANBgkqhkiG9w0BAQEFAANLADBIAkKEAp4HS nnH xQSGA2ffkRBwU2XIxb7n8VPsTm1lxyJ1t11lalGaqchfMqqe0kmfhcoHSwr yf1FpDOMWOTgDAwIDAQABo4IBojCCAZ4wEwYJKwY BBAGCNxQCBAY eBABDAEEw CwRO0 PBAQDAgFGMA8GA1UdEWEB wQFMAMBA f 8wHQYDVROOBBYEFAf4MT9BRD47 ZVKBAELIYGgp 6MI IBNgYDVRO fBIIBLTCCASkwgdKggc ggcyGgclsZGFw0i8v LOVByb3 h5JdTIwvU2 9mdHdhcmU1Mj BSb2 9 0TTIw02VydGlmaWVyLENOPXN1cnZ1 END C ERTIFICATE Certificate imported successfully Issued to Issued by Valid from 8 9 2003 to 8 9 2004 Subject CN router gm com 0 General Motors C US router gm com www verisign com Finger print DC789788 DC88A988 127897BC BB789788 ip https certificate The ip https certificate Global Configuration mode command configures the active certificate for HTTPS To return to the default configuration use the no form of this command Syntax ip https certificate number no ip https certificate Parameters e number Specifies the certificate number Range 1 2 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 231 Web Server Commands Default Configuration Certificate number 1 Command Mode Global Configuration mode User Guidelines The crypto certificate generate command should be used to generate HTTPS certificates Example The following example configures the active certificate for HTTPS Console config ip htt
6. discard shutdown Discards packets with unlearned source addresses The port is also shut down e seconds Sends SNMP traps and defines the minimum amount of time in seconds between consecutive traps Range 1 1000000 Default Configuration This setting is disabled Command Mode Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example In this example port 1 forwards all packets without learning addresses of packets from unknown sources and sends traps every 100 seconds if a packet with an unknown source address is received Console config interface ethernet ext 1 Console config if port security forward trap 100 port security mode The port security mode Interface Configuration mode command configures the port security mode To restore the default configuration use the no form of this command Syntax port security mode lock mac addresses no port security mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 29 Address Table Commands Parameters e lock Saves the current dynamic MAC addresses associated with the port and disables learning relearning and aging e mac addresses Deletes the current dynamic MAC addresses associated with the port and learns up to the maximum number addresses allowed on the port Relearning and aging are enabled Default Configuration This setting is
7. 10 00M Copper Down 11 00M Copper SS Se Down Ss S 12 00M Copper SR Se SR Down show interfaces description The show interfaces description Privileged EXEC mode command displays the description for all configured interfaces Syntax show interfaces description ethernet interface port channel port channel number Parameters e interface Valid Ethernet port Full syntax unit port e port channel number A valid port channel number Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 93 Ethernet Configuration Commands Default Configuration This command has no default configuration Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays descriptions of configured interfaces Console show interfaces description Port Description 1 lab 2 3 4 5 6 ch1 ch2 show interfaces counters The show interfaces counters Privileged EXEC mode command displays traffic seen by the physical interface Syntax show interfaces counters ethernet interface port channel port channel number Parameters e interface A valid Ethernet port Full syntax unit port 94 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands e port channel number A valid port channel nu
8. Default Configuration No keys exist Command Mode SSH Public Key string Configuration mode User Guidelines Use the key string SSH Public Key string Configuration mode command to specify which SSH public key is to be interactively configured next To complete the command you must enter a row with no characters Use the key string row SSH Public Key string Configuration mode command to specify the SSH public key row by row Each row must begin with a key string row command This command is useful for configuration files Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 301 SSH Commands Example The following example enters public key strings for SSH public key client bob Console config crypto key pubkey chain ssh Console config pubkey chain user key bob rsa Console config pubkey key key string AAAAB3NzaC1yc2EAAAADAQABAAABAQOCvTnRwPW1 Al4kpqIw9GBRonZQZxjHKcqKL6rM10 ZNX ZSkvHG QusIZ 761LmFT34v7u7ChFAE Vu4GRfpSwoQUvV35LqJJk671I0U zfwOllg kTwm175QR9gHujS 6KwGN2QWXgh3ub8gDjTSq muSn Wd05iDX2TExQWu08licglk02LYciz Z4TrEU 9FJxwPiVQOjct KBXuR0juNg5onFYsY OZCkON W9a tnkmlshRE7Di71 w3fNi0A 6w9044t6t AINEICBCCA4YcF6zMzaTlwefWwxX6f Rmt 5nhhqdAtN 4oJfcel 66DqVX1gWmN zNR4DYDvSzg01DnwCAC8Qh Fingerprint a4 16 46 23 5a 8d 1d b5 37 59 eb 44 13 b9 33 e9 Console config crypto key pubkey chain ssh Console config pubkey chain user key bob rsa Console config pubkey key key s
9. This command has no default configuration Command Mode Global Configuration mode User Guidelines Use this command to configure a management access list The command enters the Access list Configuration mode where permit and deny access rules are defined using the permit Management and deny Management commands If no match criteria are defined the default is deny If you reenter an access list context the new rules are entered at the end of the access list Use the management access class command to select the active access list The active management list cannot be updated or removed Management ACL requires a valid management interface which is a port VLAN or port channnel with an IP address or console interface Management ACL only restricts access to the device for management configuration or viewing Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 145 Management ACL Commands Example The following example creates a management access list called mlist configures management Ethernet interfaces 1 and 9 and makes the new access list the active list Console config management access list mlist Console config macl permit ethernet ext 1 Console config macl permit ethernet ext 9 Console config macl exit Console config management access class mlist The following example creates a management access list called mlist configures all interfaces t
10. This command has no default configuration Command Mode Interface configuration Ethernet port channel User Guidelines MAC based VLAN rules can t contain overlapping ranges on the same interface The priority between VLAN classification rules is 1 MAC based VLAN Best match between the rules 2 Subnet based VLAN Best match between the rules 3 Protocol based VLAN 4 PVID Example The following example sets a mac based classification rule Console config if switchport general map macs group 1 vlan 8 376 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands map subnet subnets group Use the map subnet subnets group VLAN configuration command to map IP subnet to a group of IP subnets Use the no form of this command to delete the map Syntax map subnet ip address prefix mask subnets group group no map subnet ip address prefix mask Parameters e ip addressSpecify the IP address prefix of the subnet to be entered to the group e prefix maskMask bits The format is IP address format e group Group number Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example configures the device as a virtual terminal for remote console access Console config line telnet Console config line
11. User Guidelines Example The default and optional list names created with the aaa authentication enable command are used with the enable authentication command The additional methods of authentication are used only if the previous method returns an error not if it fails To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line All aaa authentication enable default requests sent by the device to a RADIUS or TACACS server include the username enabx where x is the requested privilege level The following example sets the enable password for authentication when accessing higher privilege levels Console config aaa authentication enable default enable login authentication The login authentication Line Configuration mode command specifies the login authentication method list for a remote telnet or console To restore the default configuration specified by the aaa authentication login command use the no form of this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 11 AAA Commande Syntax login authentication default ist name no login authentication Parameters e default Uses the default list created with the aaa authentication login command e list name Uses the indicated list created with the aaa authentication login command Default Configuration Uses the default set with the c
12. User Guidelines Use this command to export a certificate request to a Certification Authority The certificate request is generated in Base64 encoded X 509 format Before generating a certificate request you must first generate a self signed certificate using the crypto certificate generate Global Configuration mode command Be aware that you have to reenter the certificate fields After receiving the certificate from the Certification Authority use the crypto certificate import Global Configuration mode command to import the certificate into the device This certificate replaces the self signed certificate Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 229 Web Server Commands Example The following example generates and displays a certificate request for HTTPS Console crypto certificate 1 request SSS BEGIN CERTIFICATE REQUEST MIwTCCASoCAQAwY j ELMAkGA1UEBhMCUFAxC zAJBgNVBAgTAkKNDMQswCQYDVQQH EwRDEMMAOGA1UEChMDZGxkMQwwCgYDVQQLEWNkbGOxC zAJUBgNVBAMTAmxkMRAw DgKoZThvcNAQkKBFgFSMIG MANGCSgGS1b3 DOEBAQUAA4GNADCBiQKBgQC8ecwQ HAML0831i0fh FOMV Kib6Sz5p 3nUUenbfHp igVPmFM 1nbqTDekb2ymCu6K aKvEbVLF9F2LMM7VPj DBb9bb4 jnxkvwW wzDLvW2rsy5NPmMH1QV1 8Ubx3GyCm OW93BSOFwxwEsP58kf sPYPy 8wwmoNt DwI DAQABoB8wHQOYJU KoZThvcNAQkH MRDJ EyMwg I CCAgICAICAgIMA0GCSqGSIb3 DOEBBAUAA4GBAGb8Ug1x7rB05m 2 m5ZZPhIw1 8ARSPXwhVdJexF j bnmvcacqj PG8pliRV6LkxryGF2bVU3jKEipcZa
13. e port channel number Valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays LACP information about port channel 1 Console show lacp port channel 1 Port Channel 1 Port Type 1000 Ethernet Actor System Priority 1 MAC Address 00 02 85 0E 1C 00 Admin Key 29 Oper Key 29 Partner System Priority 0 MAC Address 00 00 00 00 00 00 Oper Key 14 140 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 12 Line Commands Line The Line Global Configuration mode command identiofies a specific line for configuration and begins the process Syntax Line telnet ssh Parameters e telnet Virtual terminal for remote console access e ssh Virtual terminal for secured remote console access Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines This command has no user guidelines Example Router config line telnet Router config line show line The show line command is used to display the parameters of a line Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 141 Line Commande Syntax show line telnet ssh Parameters e telnet Virtu
14. ip address ip address mask prefix length The ip address Interface Configuration Ethernet VLAN port channel mode command sets an IP address To remove an IP address use the no form of this command Syntax ip address ip address mask prefix length no ip address ip address Parameters e ip address Specifies the valid IP address e mask Specifies the valid network mask of the IP address e prefix length Specifies the number of bits that comprise the IP address prefix The prefix length must be preceded by a forward slash Range 8 30 Default Configuration No IP address is defined for interfaces Command Mode Interface Configuration Ethernet VLAN port channel mode User Guidelines An IP address cannot be configured for a range of interfaces range context This command is only functional if the device is in Switch mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 121 IP Address Commands Example The following example configures VLAN 1 with IP address 131 108 1 27 and subnet mask 255 255 255 0 Console config interface vlan 1 Console config if ip address 131 108 1 27 255 255 255 0 ip address dhcp The ip address dhep Interface Configuration Ethernet VLAN port channel mode command acquires an IP address for an Ethernet interface from the Dynamic Host Configuration Protocol DHCP server To deconfigure an acquired IP address use
15. switchport general map subnets group vian Use the switchport general map subnets group vlan interface configuration command to set a subnet based classification rule Use the no form of this command to delete a classification Syntax switchport general map subnets group group vlan vian id Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 377 VLAN Commands no switchport general map subnets group group Parameters e group Group number Range 1 2147483647 vian id Define the VLAN ID that is associated with the rule Default Configuration This command has no default configuration Command Mode Interface configuration Ethernet port channel User Guidelines The priority between VLAN classification rules is 1 MAC based VLAN Best match between the rules 2 Subnet based VLAN Best match between the rules 3 Protocol based VLAN 4 PVID Example The following example sets the subnets based classification rule Console config if switchport general map subnets group 1 vlan 8 show vlan protocols groups The show vlan protocols groups Privileged EXEC command displays protocols groups informa tion Syntax show vlan protocols groups Default Configuration This command has no default configuration 378 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Command Mode Privileged EXEC mode User Guidelines There are
16. 74 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Configuration and Image File Commands Example The following example displays the contents of the running configuration file Console show startup config hostname device interface ethernet ext 1 ip address 176 242 100 100 255 255 255 0 duplex full speed 1000 interface ethernet ext 2 ip address 176 243 100 100 255 255 255 0 duplex full speed 1000 show backup config The show backup config Privileged EXEC mode command displays the contents of the backup configuration file Syntax show backup config Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 75 Configuration and Image File Commands Example The following example displays the contents of the backup configuration file Console show backup config software version 1 1 hostname device interface ethernet ext 1 ip address 176 242 100 100 255 255 255 0 duplex full speed 1000 interface ethernet ext 2 ip address 176 243 100 100 255 255 255 0 duplex full speed 1000 show bootvar The show bootvar Privileged EXEC mode command displays the active system image file that is loaded by the device at startup Syntax show bootvar Def
17. Default Configuration This command has no default configuration Command Modes Privileged EXEC mode User Guidelines This command is relevant to Giga devices only Example The following example displays the configuration of jumbo frames on the device Console show port jumbo frame Jumbo frames are disabled Jumbo frames will be enabled after reset Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 97 Ethernet Configuration Commands port storm control include multicast GC The port storm control include multicast Interface Configuration mode command enables counting multicast packets in the port storm control broadcast rate command To disable counting multicast packets use the no form of this command Syntax port storm control include multicast no port storm control include multicast Default Configuration Multicast packets are not counted Command Modes Interface Configuration Ethernet mode User Guidelines To control multicasts storms use the port storm control broadcast enable and port storm control broadcast rate commands Example The following example enables counting multicast packets Console configure Console config if port storm control include multicast Console config if port storm control iinclude multicast unknown unicast port storm control include multicast IC The port storm control include multicast Interfa
18. Example The following example sets the authentication encryption key Console config tacacs server key enterprise tacacs server timeout The tacacs server timeout Global Configuration mode command sets the interval during which the device waits for a TACACS server to reply To return to the default configuration use the no form of this command Syntax tacacs server timeout timeout no tacacs server timeout Parameters e timeout Specifies the timeout value in seconds Range 1 30 Default Configuration 5 seconds Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example sets the timeout value to 30 Console config tacacs server timeout 30 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 341 TACACS Commands tacacs server source ip The tacacs server source ip Global Configuration mode command configures the source IP address to be used for communication with TACACS servers To return to the default configuration use the no form of this command Syntax tacacs server source ip source no tacacs server source ip source Parameters e source Specifies the source IP address Default Configuration The source IP address is the address of the outgoing IP interface Command Mode Global Configuration mode User Guidelines There are no user guidelin
19. Global Configuration mode User Guidelines If encryption keys are not generated the SSH server is in standby until the keys are generated To generate SSH server keys use the crypto key generate dsa and crypto key generate rsa Global Configuration mode commands Example The following example enables configuring the device from a SSH server Console config ip ssh server crypto key generate dsa The crypto key generate dsa Global Configuration mode command generates DSA key pairs Syntax crypto key generate dsa Default Configuration DSA key pairs do not exist Command Mode Global Configuration mode 296 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SSH Commands User Guidelines DSA keys are generated in pairs one public DSA key and one private DSA key If the device already has DSA keys a warning and prompt to replace the existing keys with new keys are displayed This command is not saved in the device configuration however the keys generated by this command are saved in the private configuration which is never displayed to the user or backed up on another device DSA keys are saved to the backup master This command may take a considerable period of time to execute Example The following example generates DSA key pairs Console config crypto key generate dsa crypto key generate rsa The crypto key generate rsa Global Configurati
20. Half duplex mode can be set only for ports operating at 10 Mbps or 100 Mbps Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 83 Ethernet Configuration Commands Example The following example configures the duplex operation of Ethernet port 1 to full duplex operation Console config interface ethernet ext 1 Console config if duplex full negotiation The negotiation Interface Configuration Ethernet port channel mode command enables auto negotiation operation for the speed and duplex parameters of a given interface To disable auto negotiation use the no form of this command Syntax negotiation capability1 capability2 capability5 no negotiation Parameters e capability Specifies the capabilities to advertise Possible values 10h 10f 100h 100f 1000f Default Configuration Auto negotiation is enabled If unspecified the default setting is to enable all capabilities of the port Command Mode Interface Configuration Ethernet port channel mode User Guidelines If capabilities were specified when auto negotiation was previously entered not specifying capabilities when currently entering auto negotiation overrides the previous configuration and enables all capabilities 84 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands Example The following example enables auto negotiation on Eth
21. Interface Configuration Ethernet port channel mode User Guidelines An internal usage VLAN is required when an IP interface is configured on an Ethernet port or port channel This command enables the user to configure the internal usage VLAN of a port If an internal usage VLAN is not configured and the user wants to configure an IP interface an unused VLAN is selected by the software If the software selected a VLAN for internal use and the user wants to use that VLAN as a static or dynamic VLAN the user should do one of the following e Remove the IP interface e Create the VLAN and recreate the IP interface e Use this command to explicitly configure a different VLAN as the internal usage VLAN Example The following example reserves an unused VLAN as the internal usage VLAN of ethernet port 1 Console config Console config interface ethernet ext 1 Console config if ip internal usage vlan show vlan The show vlan Privileged EXEC mode command displays VLAN information Syntax show vlan id v an id name vlan name Parameters e vlan id specifies a VLAN ID 368 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands e vlan name Specifies a VLAN name string Range 1 32 characters Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this c
22. Syntax clear host name Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 131 IP Address Commands Parameters e name Specifies the host entry to be removed Range 1 158 characters e __ Removes all entries Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example deletes all entries from the host name to address cache Console clear host clear host dhcp The clear host dhep Privileged EXEC mode command deletes entries from the host name to address mapping received from Dynamic Host Configuration Protocol DHCP Syntax clear host dhcp name Parameters e name Specifies the host entry to be removed Range 1 158 characters e __ Removes all entries Default Configuration This command has no default configuration 132 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IP Address Commands Command Mode Privileged EXEC mode User Guidelines This command is only operational in Switch mode This command deletes the host name to address mapping temporarily until the next renewal of the IP address Example The following example deletes all entries from the host name to address mappingg Console clear host dhcp show hosts The
23. The delete Privileged EXEC mode command deletes a file from a flash memory device delete url Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 71 Configuration and Image File Commands Parameters e url The location URL or reserved keyword of the file to be deleted Range 1 160 characters The following table displays keywords and URL prefixes Keyword Source or Destination flash Source or destination URL for flash memory It s the default in case a URL is specified without a prefix startup config Represents the startup configuration file Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines sys prv image 1 and image 2 files cannot be deleted Example The following example deletes the file called test from the flash memory Console delete flash test Delete flash test confirm boot system The boot system Privileged EXEC mode command specifies the system image that the device loads at startup Syntax boot system image 1 image 2 Parameters e image 1 Specifies image 1 as the system startup image e image 2 Specifies image 2 as the system startup image 72 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Configuration and Image File Commands Default Configuration If the unit number is unspecifi
24. The following table describes the significant fields shown in the display Field Description Octets The total number of octets of data including those in bad packets received on the network excluding framing bits but including FCS octets Packets The total number of packets including bad packets broadcast packets and multicast packets received Broadcast The total number of good packets received and directed to the broadcast address This does not include multicast packets Multicast The total number of good packets received and directed to a multicast address This number does not include packets directed to the broadcast address CRC Align Errors The total number of packets received with a length excluding framing bits but including FCS octets of between 64 and 1518 octets inclusive but with either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets Alignment Error Collisions The best estimate of the total number of collisions on this Ethernet segment Undersize Pkts The total number of packets received less than 64 octets long excluding framing bits but including FCS octets and otherwise well formed Oversize Pkts The total number of packets received longer than 1518 octets excluding framing bits but including FCS octets and otherwise well formed Fragments Jabbers The total number of p
25. This command has no default configuration Command Mode Privieged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays GVRP configuration information Console show gvrp configuration GVRP Feature is currently enabled on the device Timers milliseconds Port s Status Registration Dynamic VLAN Join Leave Leave All Creation 1 Enabled Normal Enabled 200 600 10000 4 Enabled Normal Enabled 200 600 10000 108 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide GVRP Commands show gvrp statistics The show gvrp statistics Privieged EXEC mode command displays GVRP statistics Syntax show gvrp Statistics ethernet interface port channel port channel number Parameters interface A valid Ethernet port Full syntax unit port e port channel number A valid port channel number Default Configuration This command has no default configuration Command Mode Privieged EXEC mode User Guidelines There are no user guidelines for this command Example The following example shows GVRP statistical information Console show gvrp statistics GVRP Statistics Legend rJE Join Empty Received rJIn Join In Received rEmp Empty Received Lin Leave In Received TIR Leave Empty Received rLA Leave All Received SJE Join Empty Sent sJIn Join In Sent sEmp Empty Sent sEm Leave In S
26. User Guidelines There are no user guidelines for this command Example The following example shows the status of the SNTP Console show sntp status Clock is synchronized stratum 4 reference is 176 1 1 8 unicast Reference time is AFE2525E 70597B34 00 10 22 438 PDT Jul 5 1993 Unicast servers Server Status Last response Offset mSec 176 1 1 8 Up 19 58 22 289 PDT Feb 19 2005 7 33 176 1 8 179 Unknown 12 17 17 987 PDT Feb 19 2005 8 98 Anycast server Server Interface Status Last response Offset mSec 176 1 11 8 VLAN 118 Up 9 53 21 789 PDT Feb 19 2005 7 19 Broadcast Interface IP Address Last response 13 0 0 0 0 00 00 00 0 Feb 19 2005 vlan 1 16 1 1 200 15 15 16 0 LLBG Feb 19 2006 68 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 6 Configuration and Image File Commands copy The copy Privileged EXEC mode command copies files from a source to a destination Syntax copy source url destination url Parameters e source url The source file location URL or reserved keyword of the source file to be copied Range 1 160 characters e destination url The destination file URL or reserved keyword of the destination Range 1 160 characters The following table displays keywords and URL prefixes Keyword Source or Destination flash Source or destination URL for flash memory It s the default in case a URL is specified without
27. default CoS value DSCP to DSCP mutation map attached to the port and policy map attached to the interface are displayed If no interface is specified QoS information about all interfaces is displayed The following example displays the buffer settings for queues on Ethernet port Console show qos interface ethernet 1 buffers qid 1 168 Ethernet 1 Notify Q depth Size 125 125 125 125 125 125 125 125 Threshold 100 100 100 100 N A N A Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands 7 N A 8 N A qid Min Max Prob Min Max Prob Min Max Prob Weight DPO DPO DPO DPI D I DP1 DP2 DP2 DP2 d N A N A N A N A N A N A N A N A N A N A 2 N A N A N A N A N A N A N A N A N A N A 3 N A N A N A N A N A N A N A N A N A N A 4 N A N A N A N A N A N A N A N A N A N A 5 50 60 13 65 80 6 85 95 4 2 6 50 60 13 65 80 6 85 95 4 2 7 50 60 13 65 80 6 85 95 4 2 8 50 60 13 65 80 6 85 95 4 2 show qos map The show qos map User EXEC mode command displays all QoS maps Syntax show qos map dscp queue Parameters e dscp queue Indicates the DSCP to queue map Default Configuration This command has no default configuration Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Gu
28. st state cu country duration days Parameters e number Specifies the certificate number Range 1 2 key generate Regenerate the SSL RSA key e length Specifies the SSL RSA key length Range 512 2048 common name Specifies the fully qualified URL or IP address of the device Range 1 64 organization Specifies the organization name Range 1 64 organization unit Specifies the organization unit or department name Range 1 64 location Specifies the location or city name Range 1 64 e state Specifies the state or province name Range 1 64 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 227 Web Server Commands e country Specifies the country name Range 2 2 e days Specifies number of days certification is valid Range 30 3650 Default Configuration The Certificate and SSL s RSA key pairs do not exist If no certificate number is specified the default certificate number is 1 If no RSA key length is specified the default length is 1024 Ifno URL or IP address is specified the default common name is the lowest IP address of the device at the time that the certificate is generated If the number of days is not specified the default period of time that the certification is valid is 365 days Command Mode Global Configuration mode User Guidelines Example The command is not saved in the device configuration how
29. switchport general allowed vlan add 2 5 6 tagged switchport general pvid The switchport general pvid Interface Configuration mode command configures the PVID when the interface is in general mode To return to the default configuration use the no form of this command Syntax switchport general pvid vian id no switchport general pvid Parameters e vlan id Specifies the PVID Port VLAN ID Default Configuration If the default VLAN is enabled PVID 1 Otherwise PVID 4095 Command Mode Interface Configuration Ethernet port channel mode 364 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands User Guidelines There are no user guidelines for this command Example The following example configures the PVID for Ethernet port 1 when the interface is in general mode Console config interface ethernet ext 1 Console config if switchport general pvid 234 switchport general ingress filtering disable The switchport general ingress filtering disable Interface Configuration mode command disables port ingress filtering To return to the default configuration use the no form of this command Syntax switchport general ingress filtering disable no switchport general ingress filtering disable Default Configuration Ingress filtering is enabled Command Mode Interface Configuration Ethernet port channel mode User Guidelines There a
30. 0 32 characters Default Configuration The default for all ACLs is deny all Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example shows how to create a MAC ACL Console config mac access list macl acll Console config mac al permit MAC The permit MAC Access List Configuration mode command defines permit conditions of an MAC ACL Syntax permit any host source source wildcard any destination destination wildcard vlan vlan id cos cos cos wildcard ethtype eth type Parameters e source Specifies the source MAC address of the packet e source wildcard Specifies wildcard bits to be applied to the source MAC address Use 1s in bit positions to be ignored Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 47 ACL Commands e destination Specifies the MAC address of the host to which the packet is being sent e destination wildcard Specifies wildcard bits to be applied to the destination MAC address Use 1s in bit positions to be ignored e vlan id Specifies the ID of the packet vlan Range 0 4095 e cos Specifies the Class of Service CoS for the packet Range 0 7 e cos wildcard Specifies wildcard bits to be applied to the CoS e eth type Specifies the Ethernet type of the packet Range 0 65535 Default Configuration No MAC A
31. 20 bytes should be entered Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 241 SNMP Commands if authentication and privacy are required 36 bytes should be entered Each byte in the hexadecimal character string is two hexadecimal digits Each byte can be separated by a period or colon 20 or 36 bytes Default Configuration No group entry exists Command Mode Global Configuration mode User Guidelines If auth md5 or auth sha is specified both authentication and privacy are enabled for the user When a show running config Privileged EXEC mode command is entered a line for this user will not be displayed To see if this user has been added to the configuration type the show snmp users Privileged EXEC mode command An SNMP EngineID has to be defined to add SNMP users to the device Changing or removing the SNMP EngineID value deletes SNMPv3 users from the device s database The remote engineid designates the remote management station and should be defined to enable the device to receive informs Example The following example configures an SNMPv3 user John in a group called user group Console config snmp server user John user group snmp server enginelD local The snmp server engineID local Global Configuration mode command specifies the Simple Network Management Protocol SNMP engineID on the local device To remove the configured engine ID use the no form of this co
32. 4095 discard vlan Ingress Filtering Enabled Acceptable Frame Type All Port 1 is member in Vlan Name Egress rule Type 91 IP Telephony tagged Static Static configuration PVID 8 Ingress Filtering Disabled Acceptable Frame Type All Port 1 is statically confgiured to Vian Name Egress rule 8 VLANO072 untagged 91 IP Telephony tagged 372 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands Forbidden VLANS VLAN Name 73 out Port 29 Static configuration PVID 2922 Ingress Filtering Enabled Acceptable Frame Type Untagged GVRP status Disabled map protocol protocols group The map protocol protocols group VLAN database command adds a special protocol to a named group of protocols which may be used for protocol based VLAN assignment To delete a protocol from a group use the no form of this command Syntax map protocol protocol encapsulation protocols group group no map protocol protocol encapsulation Parameters e protocol The protocol is a protocol number or one of the reserved names The format is Hex format e encapsulation One of the following values ethernet rfc1042 IlcOther If no option is indicated the default is ethernet e group Group number of group of protocols associated together Range 1 2147483647 Default Configuration This command has no default configuration Intel Blade Server Etherne
33. 5 and 6 to DSCP mutation map value 63 Console config qos map dscp mutation 1 2 4 5 6 to 63 196 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 197 QoS Commands 198 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 18 RMON Commands show rmon statistics The show rmon statistics Privileged EXEC mode command displays RMON Ethernet statistics Syntax show rmon statistics ethernet interface number port channel port channel number Parameters e interface number Valid Ethernet port e port channel number Valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays RMON Ethernet statistics for Ethernet port 1 Console show rmon statistics ethernet ext 1 Port 1 Octets 878128 Packets 978 Broadcast 7 Multicast 1 CRC Align Errors 0 Collisions 0 Undersize Pkts 0 Oversize Pkts 0 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 199 RMON Commands Fragments 0 64 Octets 98 128 to 255 Octets 0 512 to 1023 Octets 491 Jabbers 0 65 to 127 Octets 0 256 to 511 Octets 0 1024 to 1518 Octets 389
34. Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 273 Spanning Tree Commands User Guidelines There are no user guidelines for this command Example The following example configures the MSTP instance 1 path cost for Ethernet port 9 to 4 Console config interface ethernet ext 9 Console config if spanning tree mst 1 cost 4 spanning tree mst configuration The spanning tree mst configuration Global Configuration mode command enables configuring an MST region by entering the Multiple Spanning Tree MST mode Syntax spanning tree mst configuration Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines All devices in an MST region must have the same VLAN mapping configuration revision number and name Example The following example configures an MST region Console config spanning tree mst configuration Console config mst 274 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands instance mst The instance MST Configuration mode command maps VLANS to an MST instance Syntax instance instance id add remove vlan vlan range Parameters e instance ID ID of the MST instance Range 1 15 e vlan range VLANS to be added to or removed from the specified MST instance To specify a range of VLANs use a hyphen
35. DOM se rity ne TE 29 port security routed eecure addrees eecccceeeeeeeenceeeeeeeeeeee cece eeeeneaaaeeeeeeeeeeeeeeeeaneeeeneeees 30 show bridge ee E 31 show bridge address table Static cccccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeseeeeeeeeeeeeseeeseneeeaeeeeeees 32 Show bridge address table count E 33 show bridge multicast EE 34 show bridge multicast filtering E 36 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide vii SEET Seege 37 show ports security addresses sciici lactis ttcicerqadnaneialecenderanesute ee E E 38 Chapter 4 ACL Commands E 41 WEE Ee 41 permit IP rriet ierti sirenak ERE EEEE AE EA REEERE EEE A EERE AER 42 deny IP iesin a Naa ar rE 44 mac ACCESS E 46 tin ag eerde a E Se re ame a E ere 47 deny e E 48 EENEG gesiess 50 STOW BOCS SSIS deer eegener 50 ll 51 Chapter 5 Clock CommandsS ezeeEegudeeegeresd gedeegeeggeE eege eghEEebCEEbEEEEESASSEN 53 let 53 6 6 6 SOUCO siamini a aa E ee aaa Pee ee nny ne aay ne rere Peer en ere eer ree ere 54 OC Fe TITUS ZN eene ee ee 54 clock SUIMMITISI nn 55 SNIP uthentication KEy E 57 E 58 SNiP trusted ee EES 59 Shit client DOM Umer since EE 59 GU ele EE 60 snip anycast client enable sutcsuctretaieneieriotnccniadieaamiesucesdnimnteiditetermectchatindbiideceaminanttedonendekcebs 61 sntp client enable Interface AAA 62 sntp unicastclient E E 63 Stp unicast elent NEE 63 SMP SEMEF giani rataa aaae saa Eege Ee ENEE EEEa 64 SNO
36. Optional for the first type Specifies wildcard bits by placing 1s in bit positions to be ignored e vlan id Specifies the ID of the packet vlan e cos Specifies the packets s Class of Service CoS e cos wildcard Specifies wildcard bits to be applied to the CoS e eth type Specifies the packet s Ethernet type Default Configuration This command has no default configuration Command Mode MAC Access List Configuration mode User Guidelines Example MAC BPDU packets cannot be denied This command defines an Access Control Element ACE An ACE can only be removed by deleting the ACL using the no mac access list Global Configuration mode command Alternatively the Web based interface can be used to delete ACEs from an ACL Before an Access Control Element ACE is added to an ACL all packets are permitted After an ACE is added an implied deny any any condition exists at the end of the list and those packets that do not match the conditions defined in the permit statement are denied If the VLAN ID is specified the policy map cannot be connected to the VLAN interface The following example shows how to create a MAC ACL with deny rules on a device Console config mac access list macll Console config mac acl deny 6 6 6 6 6 6 0 0 0 0 0 0 any Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 49 ACL Commands service acl The service acl Interface Config
37. Port 292 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Max hops 20 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 293 Spanning Tree Commands 294 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 23 SSH Commands ip ssh port The ip ssh port Global Configuration mode command specifies the port to be used by the SSH server To restore the default configuration use the no form of this command Syntax ip ssh port port number no ip ssh port Parameters e port number Port number for use by the SSH server Range 1 65535 Default Configuration The default port number is 22 Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example specifies the port to be used by the SSH server as 8080 Console config ip ssh port 8080 ip ssh server The ip ssh server Global Configuration mode command enables the device to be configured from a SSH server To disable this function use the no form of this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 295 SSH Commands Syntax ip ssh server no ip ssh server Default Configuration Device configuration from a SSH server is disabled Command Mode
38. The default number of bytes in a packet is 40 The default maximum TTL value is 30 The default number of probes to be sent at each TTL level is 3 The default timeout interval in seconds is 3 Command Mode User EXEC mode User Guidelines The traceroute command takesadvantage of the error messages generated by the devices when a datagram exceeds its time to live TTL value The traceroute command starts by sending probe datagrams with a TTL value of one This causes the first device to discard the probe datagram and send back an error message The traceroute command sends several probes at each TTL level and displays the round trip time for each Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 323 System Management Commands The traceroute command sends out one probe at a time Each outgoing packet may result in one or two error messages A time exceeded error message indicates that an intermediate device has seen and discarded the probe A destination unreachable error message indicates that the destination node has received the probe and discarded it because it could not deliver the packet If the timer goes off before a response comes in the traceroute command prints an asterisk The traceroute command terminates when the destination responds when the maximum TTL is exceeded or when the user interrupts the trace by pressing Esc Example The following example discovers the ro
39. Util The best estimate of the mean physical layer network utilization on this interface during this sampling interval in hundredths of a percent CRC Align The number of packets received during this sampling interval that had a length excluding framing bits but including FCS octets between 64 and 1518 octets inclusive but had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets Alignment Error Undersize The number of packets received during this sampling interval that were less than 64 octets long excluding framing bits but including FCS octets and were otherwise well formed Oversize The number of packets received during this sampling interval that were longer than 1518 octets excluding framing bits but including FCS octets but were otherwise well formed Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 205 RMON Commands Field Description Fragments The total number of packets received during this sampling interval that were less than 64 octets in length excluding framing bits but including FCS octets had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets AlignmentError It is normal for etherHistoryFragments to increment because it counts both runts which are normal occurrences due to
40. and policy map attached to the interface are displayed If no interface is specified QoS information about all interfaces is displayed Example The following example displays the buffer settings for queues on Ethernet port 1 Console show qos interface ethernet 1 buffers Ethernet 1 Notify Q depth qid Size 1 125 2 125 3 125 4 125 5 125 6 125 7 125 8 125 188 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide qid 1 2 3 4 5 6 7 8 qid Min DPO 1 N A 2 N A 3 N A 4 N A 5 50 6 50 7 50 8 50 QoS Commands Threshold 100 100 100 100 N A N A N A N A Max Prob Min Max Prob Min Max Prob Weight DPO DPO DP1 DP1 DP1 DP2 DP2 DP2 N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A 60 13 65 80 6 85 95 4 2 60 13 65 80 6 85 95 4 2 60 13 65 80 6 85 95 4 2 60 13 65 80 6 85 95 4 2 qos wrr queue threshold Syntax The wrr queue threshold Global Configuration mode command assigns queue thresholds globally To return to the default configuration use the no form of this command qos wrr queue threshold queue id threshold percentage0 threshold percentagel threshold percentage2 no qos wrr queue threshold queue id qos wrr queue threshold gigabitethernet gueue id threshold percentage0 threshold percenta
41. configured auto Boundary RSTP Designated bridge Priority 32768 Designated port id 128 25 Number of transitions to forwarding state 1 BPDU sent 2 received 120638 Port 2 enabled State Forwarding Port id 128 2 Type Shared configured auto Boundary STP Designated bridge Priority 32768 hold 1 topology change 35 notification 2 Root Port cost 20000 Port Fast No configured no Address Designated path cost 0 Role Designated Port cost 20000 Port Fast No configured no Address Spanning Tree Commands Forward Delay 15 sec Forward Delay 15 sec 00 01 42 97 e0 00 00 02 4b 29 7a 00 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 289 Spanning Tree Commands Designated port id 128 2 Designated path cost 20000 Number of transitions to forwarding state 1 BPDU sent 2 received 170638 Port 3 enabled State Forwarding Role Designated Port id 128 3 Port cost 20000 Type Shared configured auto Internal Port Fast No configured no Designated bridge Priority 32768 Address 00 02 4b 29 7a 00 Designated port id 128 3 Designated path cost 20000 Number of transitions to forwarding state 1 BPDU sent 2 received 170638 Port 4 enabled State Forwarding Role Designated Port id 128 4 Port cost 20000 Type Shared configured auto Internal Port Fast No configured no Designated bridge Priority 32768 Address 00 02 4b 29 7a 00 De
42. information on dynamically learned multicast device interfaces Syntax show ip igmp snooping mrouter interface v an id Parameters e vlan id Specifies the VLAN number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays multicast device interfaces in VLAN 1000 Console show ip igmp snooping mrouter interface 10000 VLAN Ports 1000 1 116 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IGMP Snooping Commands Detected multicast devices that are forbidden statically VLAN Ports 1000 19 show ip igmp snooping interface The show ip igmp snooping interface Privileged EXEC mode command displays IGMP snooping configuration Syntax show ip emp snooping interface v an id Parameters e vlan id Specifies the VLAN number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 117 IGMP Snooping Commands Example The following example displays IGMP snooping information on VLAN 1000 Console show ip igmp snooping interface 4 IGMP Snooping is globaly disabled IGMP Snooping is enabled on VLAN 4 I
43. interface ethernet ext 1 Console config if dotix guest vlan enable show dot1x advanced The show dot1x advanced Privileged EXEC mode command displays 802 1x advanced features for the device or specified interface Syntax show dot1x advanced ethernet interface Parameters e interface Valid Ethernet port Full syntax unit port Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays 802 1x advanced features for the device Console show dot1ix advanced Guest VLAN 2 Unauthenticated VLANs 91 92 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 403 802 1x Commands Interface Multiple Hosts Guest VLAN 1 Disabled Enabled 2 Enabled Disabled Console show dotix advanced ethernet ext 1 Interface Multiple Hosts Guest VLAN 1 Disabled Enabled Single host parameters Violation action Discard Trap Enabled Trap frequency 100 Status Single host locked Violations since last trap 9 404 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Appendix A Getting Help World Wide Web http support intel com support motherboards server blade htm Telephone All calls are billed US 25 00 per incident levied in local currency at the applicable
44. internal buffer Console show logging Logging is enabled Console logging level debugging Console Messages 0 Dropped severity Buffer logging level debugging Buffer Messages 11 Logged 200 Max File logging level notifications File Messages 0 Dropped severity Syslog server 192 180 2 27 logging errors Messages 6 Dropped severity Syslog server 192 180 2 28 logging errors Messages 6 Dropped severity 2 messages were not logged resources Application filtering control Application Event Status AAA Login Enabled File system Copy Enabled File system Delete Rename Enabled Management ACL Deny Enabled Buffer log ae Aug 2004 15 41 43 Aug 2004 15 41 43 Aug 2004 15 41 43 LINK 3 UPDOWN Interface FastEthernet ext 0 changed state to up LINK 3 UPDOWN Interface Ethernet ext 0 changed state to up LINK 3 UPDOWN Interface Ethernet ext 1 changed state to up ae oe d Aug 2004 15 41 43 LINK 3 UPDOWN Interface Ethernet ext 2 changed state to up Aug 2004 15 41 43 LINK 3 UPDOWN Interface Ethernet ext 3 changed state to up Aug 2004 15 41 43 SSYS 5 CONFIG I Configured from memory by console oe Aug 2004 15 41 39 SLINEPROTO 5 UPDOWN Line protocol on Interface FastEthernet ext 0 changed state to up Aug 2004 15 41 39 changed state to down oe LINEPROTO 5 UPDOWN Line protocol on Interface Ethernet ext 0 Aug 2004 15 41 39 SLINEPROTO 5 UPDOWN Line protocol on Interface
45. port Oper priority 1 port Admin timeout LONG port Oper timeout LONG LACP Activity ACTIVE Aggregation AGGREGATABLE synchronization FALSE collecting FALSE distributing FALSE expired FALSE Partner system priority 0 system mac addr 00 00 00 00 00 00 port Admin key 0 port Oper key port Oper number 0 port Admin priority 0 port Oper priority 0 138 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide port Oper timeout LACP Activity Aggregation synchronization collecting distributing expired Port 1 LACP Statistics LACP PDUs sent LACP PDUs received Port 1 LACP Protocol State LACP State Machines Receive FSM Mux FSM Periodic Tx FSM Control Variables BEGIN LACP_Enabled Ready_N Selected Port_moved NNT Port_enabled Timer counters periodic tx timer current while timer wait while timer LACP Commands LONG PASSIVE AGGREGATABLE FALSE FALSE FALSE FALSE Port Disabled State Detached State No Periodic State FALSE TRUE FALSE show lacp port channel The show lacp port channel Privileged EXEC mode command displays LACP information for a port channel Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 139 LACP Commands Syntax show lacp port channel port_channel_number Parameters
46. unspecified all objects except the community table and SNMPv3 user and access tables are available Write Name of the view that enables entering data and managing the contents of the agent Notify Name of the view that enables specifying an inform or a trap show snmp filters The show snmp filters Privileged EXEC mode command displays the configuration of filters Syntax show snmp filters fi tername Parameters e filtername Specifies the name of the filter Range 1 30 Default Configuration This command has no default configuration 256 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the configuration of filters Console show snmp filters Name OID Tree Type user filter es E ncluded user filter 136 EEN Excluded user filter Deis Or te 2 all sea A e ncluded show snmp users The show snmp users Privileged EXEC mode command displays the configuration of users Syntax show snmp users username Parameters username Specifies the name of the user Range 1 30 Default Configuration This command has no default configuration Command Mode Privileged EXEC mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 257 SNMP Commands User Guid
47. 00 02 4b 29 7a 00 This switch is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio Nbr Cost Sts Role PortFast Type 1 Enabled 28 1 20000 FWD Desg No Dip RSTP 2 Enabled 28 2 20000 FWD Desg No Shared STP 3 Disabled 28 3 20000 4 Enabled 28 4 20000 FWD Desg No Shared STP 5 Enabled 28 5 20000 DIS 282 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Console show spanning tree Spanning tree disabled BPDU filtering mode RSTP Default port cost method long Root ID Bridge ID Interfaces Name 1 Priority Address Path Cost Root Port Hello Time N A Priority Address Hello Time 2 sec State Prio Nbr Enabled 28 1 Enabled 28 2 Disabled 28 3 Enabled 28 4 Enabled 28 5 A N A A A ax Age N A 36864 00 02 4b 29 7a 00 Max Age 20 sec 20000 be 20000 20000 20000 20000 z Console show spanning tree active Spanning tree enabled mode RSTP Default port cost method long Root ID Bridge ID Priority Address Path Cost Root Port Hello Time 2 sec Priority 32768 00 01 42 97 e0 00 20000 1 1 1 Max Age 20 sec 36864 Spanning Tree Commands Forward Delay N A Forward Delay 15 sec Role PortFast Type Forward Delay 15 sec Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 283 Spanning Tree Commands Add
48. Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands Example The following example shows subnets groups information onsole gt show vlan subnets groups MAC Prefix Group 172 16 1 0 255 255 255 01 172 16 2 0 255 255 255 02 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 381 VLAN Commands 382 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands 29 802 1x Commands aaa authentication dot1x The aaa authentication dot1x Global Configuration mode command specifies one or more authentication authorization and accounting AAA methods for use on interfaces running IEEE 802 1x To return to the default configuration use the no form of this command Syntax aaa authentication dotlx default method1 method2 no aaa authentication dot1x default Parameters e method method2 At least one from the following table Keyword Description RADIUS Uses the list of all RADIUS servers for authentication None Uses no authentication Default Configuration No authentication method is defined Command Mode Global Configuration mode User Guidelines Additional methods of authentication are used only if the previous method returns an error and not if the request for authentication is denied To ensure that authentication succeeds even if all methods return an error spe
49. Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 235 Web Server Commands 236 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 21 SNMP Commands snmp server community The snmp server community Global Configuration mode command configures the community access string to permit access to the SNMP protocol To remove the specified community string use the no form of this command Syntax snmp server community community ro rw su ip address view view name snmp server community group community group name ip address type router oob no snmp server community community ip address Parameters e community Community string that acts like a password and permits access to the SNMP protocol Range 1 20 characters e ro Indicates read only access default e rw Indicates read write access e su Indicates SNMP administrator access e ip address Specifies the IP address of the management station e group name Specifies the name of a previously defined group A group defines the objects available to the community Range 1 30 characters e view name Specifies the name of a previously defined view The view defines the objects available to the community Range 1 30 characters Default Configuration No communities are defined Command Mode Global Configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SB
50. CLI Guide Safety Information Important Safety Instructions Read all caution and safety statements in this document before performing any of the instructions Wichtige Sicherheitshinweise Lesen Sie zun chst s mtliche Warnund Sicherheitshinweise in diesem Dokument bevor Sie eine der Anweisungen ausfiihren Consignes de s curit Lisez attention toutes les consignes de s curit et les mises en garde indiqu es dans ce document avant de suivre toute instruction Instrucciones de seguridad importantes Lea todas las declaraciones de seguridad y precauci n de este documento antes de realizar cualquiera de las instrucciones MTESZ H EAX PIRA H P K http support intel com support motherboards server sb CS 010770 htm 90 Intel Server Boards and Server Chassis Safety Information Intel NEF i E EMM REG o Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide iii Warnings Heed safety instructions Before working with your server product whether you are using this guide or any other resource as a reference pay close attention to the safety instructions You must adhere to the assembly instructions in this guide to ensure and maintain compliance with existing product certifications and approvals Use only the described regulated components specified in this guide Use of other products components will void the UL listing and other regulatory approvals of the product and will most likely
51. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enables IP Domain Naming System DNS based host name to address translation Console config ip domain lookup ip domain name The ip domain name Global Configuration mode command defines a default domain name used by the software to complete unqualified host names names without a dotted decimal domain name To remove the default domain name use the no form of this command Syntax ip domain name name no ip domain name Parameters e name Specifies the default domain name used to complete unqualified host names Do not include the initial period that separates an unqualified name from the domain name Range 1 158 characters Default Configuration A default domain name is not defined Command Mode Global Configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 129 IP Address Commands User Guidelines There are no user guidelines for this command Example The following example defines default domain name www intel com Console config ip domain name www intel com ip name server The ip name server Global Configuration mode command defines the available name servers To remove a name server use the no form of this command Syntax ip name server server address server address2 server addres
52. Commands Start First Sunday in April End Last Sunday in October Time 2 am local time EU rule for daylight savings time Start Last Sunday in March End Last Sunday in October Time 1 00 am 01 00 Example The following example sets summer time starting on the first Sunday in April at 2 am and finishing on the last Sunday in October at 2 am Console config clock summer time recurring first sun apr 2 00 last sun oct 2 00 sntp authentication key The sntp authentication key Global Configuration mode command defines an authentication key for Simple Network Time Protocol SNTP To remove the authentication key for SNTP use the no form of this command Syntax sntp authentication key number md5 value no sntp authentication key number Parameters e number Key number Range 1 4294967295 e value Key value Range 1 8 characters Default Configuration No authentication key is defined Command Mode Global Configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 57 Clock Commands User Guidelines Multiple keys can be generated Example The following example defines the authentication key for SNTP Console config sntp authentication key 8 md5 ClkKey sntp authenticate The sntp authenticate Global Configuration mode command grants authentication for received Simple Network Time Protocol SNTP traffic from servers To dis
53. Console config if port security routed secure address 66 66 66 66 66 66 show bridge address table The show bridge address table Privileged EXEC mode command displays all entries in the bridge forwarding database Syntax show bridge address table vlan vlan ethernet interface port channel port channel number address mac address Parameters e vlan Specifies a valid VLAN such as VLAN 1 e interface A valid Ethernet port e port channel number A valid port channel number e mac address A valid MAC address Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 31 Address Table Commands Command Mode Privileged EXEC mode User Guidelines Internal usage VLANs VLANs that are automatically allocated on ports with a defined Layer 3 interface are presented in the VLAN column by a port number and not by a VLAN ID Special MAC addresses that were not statically defined or dynamically learned are displayed in the MAC address table This includes for example MAC addresses defined in ACLS Example In this example all classes of entries in the bridge forwarding database are displayed Console show bridge address table Aging time is 300 sec interface mac address Port Type L 00 60 70 4C 73 FF 5 dynamic il 00 60 70 8C 73 FF 5 dynamic 200 00 10 0D 48 37 FF 5 static show bridge add
54. Default Configuration No TACACS host is specified If no port number is specified default port number 49 is used If no host specific timeout key string or source value is specified the global value is used Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 339 TACACS Commands If no TACACS server priority is specified default priority 0 is used Command Mode Global Configuration mode User Guidelines Multiple tacacs server host commands can be used to specify multiple hosts Example The following example specifies a TACACS host Console config tacacs server host 172 16 1 1 tacacs server key The tacacs server key Global Configuration mode command sets the authentication encryption key used for all TACACS communications between the device and the TACACS daemon To disable the key use the no form of this command Syntax tacacs server key key string no tacacs server key Parameters e key string Specifies the authentication and encryption key for all TACACS communications between the device and the TACACS server This key must match the encryption used on the TACACS daemon Range 0 128 characters Default Configuration Empty string Command Mode Global Configuration mode 340 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide TACACS Commands User Guidelines There are no user guidelines for this command
55. Disabled Auto 7 00M Copper Full 00 Enabled Off Up Disabled Auto 8 00M Copper Full 00 Enabled Off Up Disabled Auto 9 00M Copper Full 00 Enabled Off Up Disabled Auto 10 00M Copper Full 100 Enabled Off Up Disabled Auto 11 00M Copper Full 00 Enabled Off Up Disabled Auto show interfaces status The show interfaces status Privileged EXEC mode command displays the status of all configured interfaces Syntax show interfaces status ethernet interface port channel port channel number Parameters e interface A valid Ethernet port Full syntax unit port e port channel number A valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode 92 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands User Guidelines There are no user guidelines for this command Example The following example displays the status of all configured interfaces Console show interfaces status Port Type Duplex Speed Neg Flow Link Back Mdix Ctrl State Pressure Mode 1 00M Copper e SS SS Down 2 00M Copper s5 zi Down SE a 3 00M Copper s Down s 4 00M Copper e sa z e Down Ss 5 00M Copper Full 100 Enabled Off Up Disabled Auto 6 00M Copper z e a SS Down E SS 7 00M Copper Down 8 00M Copper se SS Down e sa 9 00M Copper s SS Ss Se Down
56. Example The following example configures the spanning tree cost on Ethernet port 15 to 35000 Console config interface ethernet ext 15 Console config if spanning tree cost 35000 spanning tree port priority The spanning tree port priority Interface Configuration mode command configures port priority To restore the default configuration use the no form of this command Syntax spanning tree port priority priority no spanning tree port priority Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 265 Spanning Tree Commands Parameters e priority The priority of the port Range 0 240 in multiples of 16 Default Configuration The default port priority for IEEE Spanning TreeProtocol STP is 128 Command Modes Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example The following example configures the spanning priority on Ethernet port 15 to 96 Console config interface ethernet ext 15 Console config if spanning tree port priority 96 spanning tree portfast The spanning tree portfast Interface Configuration mode command enables PortFast mode In PortFast mode the interface is immediately put into the forwarding state upon linkup without waiting for the standard forward time delay To disable PortFast mode use the no form of this command Syntax spanning tree portfast auto no s
57. Guide System Management Commands Bob Serial John SSH 172 16 0 1 Robert HTTP 172 16 0 8 Betty Telnet 172 16 147 show sessions The show sessions User EXEC mode command lists open Telnet sessions Syntax show sessions Default Configuration There is no default configuration for this command Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following example lists open Telnet sessions Console gt show sessions Connection Host Address Port Byte Ji Remote device 172 16 1 1 23 89 2 LIZ NR WE De 72216 224 2 23 8 The following table describes significant fields shown above Field Description Connection Connection number Host Remote host to which the device is connected through a Telnet session Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 331 System Management Commands Field Description Address IP address of the remote host Port Telnet TCP port number Byte Number of unread bytes for the user to see on the connection show system The show system User EXEC mode command displays system information Syntax show system Default Configuration This command has no default configuration Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the system informatio
58. Guidelines When the QoS service mode is enabled Access Control Lists ACLs are no longer available Instead the user is prompted to import pre defined ACLs as Flow Classification Lists FCLs Example The following example enables QoS on the device Console config qos Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 165 QoS Commands show qos The show qos User EXEC mode command displays the quality of service QoS mode for the device Syntax show qos Default Configuration This command has no default configuration Command Mode User EXEC mode User Guidelines Trust mode is displayed if QoS is enabled in basic mode Example The following example displays QoS attributes when QoS is enabled in basic mode on the device Console gt show qos Qos basic Basic tust dscp show qos aggregate policer The show qos aggregate policer Privileged EXEC mode command displays the aggregate policer parameter Syntax show qos aggregate policer aggregate policer name Parameters e aggregate policer name Specifies the name of the aggregate policer to be displayed 166 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines Example The following example
59. List of VLAN IDs to be removed Separate nonconsecutive VLAN IDs with a comma and no spaces A hyphen designates a range of IDs Default Configuration This command has no default configuration Command Mode Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example The following example adds VLANs 1 2 5 to 6 to the allowed list of te Ethernet port 1 Console config interface ethernet ext 1 console config if switchport trunk allowed vlan add 1 2 5 6 switchport trunk native vian The switchport trunk native vlan Interface Configuration mode command defines the native VLAN when the interface is in trunk mode To return to the default configuration use the no form of this command Syntax switchport trunk native vlan vian id no switchport trunk native vlan Parameters e vlan id Specifies the ID of the native VLAN 362 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands Default Configuration VID 1 Command Mode Interface Configuration Ethernet port channel mode User Guidelines The command adds the port as a member in the VLAN If the port is already a member in the VLAN not as a native it should be first removed from the VLAN Example The following example configures VLAN number 123 as the native VLAN when Ethernet port 1 is in trunk mode Console config interface
60. Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 309 Syslog Commands logging buffered size The logging buffered size Global Configuration mode command changes the number of syslog messages stored in the internal buffer To restore the default configuration use the no form of this command Syntax logging buffered size number no logging buffered size Parameters e number Specifies the maximum number of messages stored in the history table Range 20 400 Default Configuration The default number of messages is 200 Command Mode Global Configuration mode User Guidelines This command takes effect only after Reset Example The following example changes the number of syslog messages stored in the internal buffer to 300 Console config logging buffered size 300 clear logging The clear logging Privileged EXEC mode command clears messages from the internal logging buffer 310 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Syslog Commands Syntax clear logging Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example clears messages from the internal logging buffer Console clear logging Clear Logging File y n logging file The logging file Global Configuration mode command limits syslog messag
61. Range 0 65535 packets time_out Timeout in milliseconds to wait for each reply Range 50 65535 milliseconds Default Configuration Default packet size is 56 bytes Default number of packets to send is 4 Default timeout value is 2000 milliseconds Command Mode User EXEC mode User Guidelines Press Esc to stop pinging Following are examples of unsuccessful pinging Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 321 System Management Commands Destination does not respond If the host does not respond a no answer from host appears in ten seconds Destination unreachable The gateway for this destination indicates that the destination is unreachable Network or host unreachable The device found no corresponding entry in the route table Example The following example displays pinging results Console gt ping 10 1 1 1 Pinging 10 1 1 1 with 64 bytes of data 64 bytes from 10 64 bytes from 10 64 bytes from 10 64 bytes from 10 icmp_seq 0 time 11 ms icmp_seq 1 time 8 ms icmp_seq 2 time 8 ms PRR to PRR to PRR to icmp_seq 3 time 7 ms 10 1 1 1 PING Statistics 4 packets transmitted 4 packets received 0 packet loss round trip ms min avg max 7 8 11 Console gt ping yahoo com Pinging yahoo com 66 218 71 198 with 64 bytes of data 64 bytes from 10 64 bytes from 10 64 bytes from 10 64 bytes from 10 icmp_seq 0 time 11
62. SBCEGBESW1 and SBCEGBESW10 CLI Guide 303 SSH Commands Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the SSH public RSA keys on the device Console show crypto key mypubkey rsa RSA key data 005C300D 06092A86 4886F70D 01010105 00034B00 30480241 00C5E23B 55D6AB22 O4AEFIBA A54028A6 9ACCO1C5 129D99E4 64CAB820 847EDAD9 DFOB4E4C 73A05DD2 BD62A8A9 FA603DD2 E2A8A6F8 98F76E28 D58AD221 B583D7A4 71020301 87685768 Fingerprint Hex 77 C7 19 85 98 19 27 96 C9 CC 83 C5 78 89 F8 86 Fingerprint Bubble Babble yteriuwt jgkljhglk yewiury hdskjfryt gfhkjglk show crypto key pubkey chain ssh The show crypto key pubkey chain ssh Privileged EXEC mode command displays SSH public keys stored on the device Syntax show crypto key pubkey chain ssh username username fingerprint bubble babble hex Parameters e username Specifies the remote SSH client username e bubble babble Fingerprint in Bubble Babble format hex Fingerprint in Hex format Default Configuration This command has no default configuration 304 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SSH Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following exampl
63. Separate nonconsecutive Ethernet ports with a comma and no spaces a hyphen is used to designate a range of ports e port channel number list Separate nonconsecutive port channels with a comma and no spaces a hyphen is used to designate a range of ports Default Configuration No multicast addresses are defined Command Mode Interface Configuration VLAN mode User Guidelines If the command is executed without add or remove the command only registers the group in the bridge database Static multicast addresses can only be defined on static VLANs Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 23 Address Table Commands Example The following example registers the MAC address Console config interface vlan 8 Console config if bridge multicast address 01 00 5e 02 02 03 The following example registers the MAC address and adds ports statically Console config interface vlan 8 Console config if bridge multicast address 01 00 5e 02 02 03 add ethernet ext 1 ext 2 bridge multicast forbidden address The bridge multicast forbidden address Interface Configuration VLAN mode command forbids adding a specific multicast address to specific ports Use the no form of this command to restore the default configuration Syntax bridge multicast forbidden address mac multicast address ip multicast address add remove ethernet interface list port channel
64. The acronym of the time zone Range Up to 4 characters Default Configuration Clock set to UTC Command Mode Global Configuration mode User Guidelines The system internally keeps time in UTC so this command is used only for display purposes and when the time is manually set Example The following example sets the timezone to 6 hours difference from UTC Console config clock timezone 6 zone CST clock summer time The clock summer time Global Configuration mode command configures the system to automatically switch to summer time daylight saving time To configure the software not to automatically switch to summer time use the no form of this command Syntax clock summer time recurring usa eu week day month hh mm week day month hh mm offset offset zone acronym clock summer time date date month year hh mm date month year hh mm offset offset zone acronym clock summer time date month date year hh mm month date year hh mm offset offset zone acronym Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 55 Clock Commands no clock summer time recurring Parameters recurring Indicates that summer time should start and end on the corresponding specified days every year date Indicates that summer time should start on the first specific date listed in the command and end on the second specific date in the command usa The summer time rules are
65. The user key SSH Public Key string Configuration mode command specifies which SSH public key is manually configured To remove an SSH public key use the no form of this command Syntax user key username rsa dsa no user key username Parameters e username Specifies the username of the remote SSH client Range 1 48 characters e rsa Indicates the RSA key pair e dsa Indicates the DSA key pair Default Configuration No SSH public keys exist Command Mode SSH Public Key string Configuration mode User Guidelines Example 300 Follow this command with the key string SSH Public Key String Configuration mode command to specify the key The following example enables manually configuring an SSH public key for SSH public key chain bob Console config crypt o key pubkey chain ssh Console config pubkey chain user key bob rsa Console config pubkey key key string row AAAAB3NzaC1yc2EAAAADAQABAAABAQCvTnRwPW1 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SSH Commands key string The key string SSH Public Key string Configuration mode command manually specifies an SSH public key Syntax key string key string row key string Parameters e row Indicates the SSH public key row by row e key string Specifies the key in UU encoded DER format UU encoded DER format is the same format in the authorized _ keys file used by OpenSSH Range 0 160
66. UDP port of the host to use If unspecified the default UDP port number is 162 Range 1 65535 filtername Specifies a string that defines the filter for this host If unspecified nothing is filtered Range 1 30 characters seconds Specifies the number of seconds to wait for an acknowledgment before resending informs If unspecified the default timeout period is 15 seconds Range 1 300 retries Specifies the maximum number of times to resend an inform request If unspecified the default maximum number of retries is 3 Range 0 255 Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines Example A user and notification view are not automatically created Use the snmp server user snmp server group and snmp server view Global Configuration mode commands to generate a user group and notify group respectively The following example configures an SNMPv3 host Console config snmp server v3 host 192 168 0 20 john noauth snmp server trap authentication Syntax 248 The snmp server trap authentication Global Configuration mode command enables the device to send SNMP traps when authentication fails To disable SNMP failed authentication traps use the no form of this command snmp server trap authentication Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands no snmp server
67. addresses that can be associated on this port in theStatic Learning mode or in the Dynamic Learning mode Trap Sends traps in case of a violation Frequency The minimum time interval between consecutive traps show ports security addresses The show ports security addresses Privileged EXEC mode command displays the current dynamic addresses in locked ports Syntax show ports security addresses ethernet interface port channel port channel number Parameters e interface A valid Ethernet port e port channel number A valid port channel number Default Configuration This command has no default configuration 38 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example Address Table Commands This example displays dynamic addresses in all currently locked ports Console show ports security addresses Port Status Learning 1 Disabled Lock 2 Disabled Lock 3 Enabled Max addresses 4 Port is a member in port channel chl 5 Disabled Lock 6 Enabled Max addresses ehl Enabled Max addresses ch2 Enabled Max addresses Current Maximum 50 28 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 39 Address Table Commands 40 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide d ACL Co
68. any destination port dscp number ip precedence number flags list of flags permit udp any source source wildcard any source port any destination destination wildcard any destination port dsep number ip precedence number Parameters source Specifies the source IP address of the packet Specify any to indicate IP address 0 0 0 0 and mask 255 255 255 255 source wildcard Specifies wildcard to be applied to the source IP address Use 1s in bit positions to be ignored Specify any to indicate IP address 0 0 0 0 and mask 255 255 255 255 destination Specifies the destination IP address of the packet Specify any to indicate IP address 0 0 0 0 and mask 255 255 255 255 e destination wildcard Specifies wildcard to be applied to the destination IP address Use Is in bit positions to be ignored Specify any to indicate IP address 0 0 0 0 and mask 255 255 255 255 protocol Specifies the abbreviated name or number of an IP protocol Range 0 255 The following table lists the protocols that can be specified IP Protocol Abbreviated Name Protocol Number Internet Control Message Protocol icmp Internet Group Management Protocol igmp IP in IP encapsulation Protocol ipinip Transmission Control Protocol tcp Exterior Gateway Protocol egp 42 oO Oil AJ Mm Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide ACL Comm
69. bridge multicast forward all add remove ethernet interface list port channel port channel number list no bridge multicast forward all Parameters e add Force forwarding all multicast packets remove Do not force forwarding all multicast packets interface list Separate nonconsecutive Ethernet ports with a comma and no spaces a hyphen is used to designate a range of ports e port channel number list Separates nonconsecutive port channels with a comma and no spaces a hyphen is used to designate a range of port channels Default Configuration This setting is disabled Command Mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 25 Address Table Commands Interface Configuration VLAN mode User Guidelines There are no user guidelines for this command Example In this example all multicast packets on port 1 are forwarded Console config interface vlan 2 Console config if bridge multicast forward all add ethernet ext 1 bridge multicast forbidden forward all The bridge multicast forbidden forward all Interface Configuration VLAN mode command forbids a port to be a forward all multicast port To restore the default configuration use the no form of this command Syntax bridge multicast forbidden forward all add remove ethernet interface list port channel port channel number list no bridge multicast forbidden forward all Paramete
70. by the no bridge address command e delete on reset The address is deleted after reset e delete on timeout The address is deleted after age out time has expired e secure The address is deleted after the port changes mode to unlock learning no port security command This parameter is only available when the port is in the learning locked mode Default Configuration No static addresses are defined The default mode for an added address is permanent Command Mode Interface Configuration VLAN mode User Guidelines Using the no form of the command without specifying a MAC address deletes all static MAC addresses belonging to this VLAN Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 21 Address Table Commands Example The following example adds a permanent static MAC layer station source address 3aa2 64b3 a245 on port 1 to the bridge table Console config interface vlan 2 Console config if bridge address 3aa2 64b3 a245 ethernet ext 1 permanent bridge multicast filtering The bridge multicast filtering Global Configuration mode command enables filtering multicast addresses To disable filtering multicast addresses use the no form of this command Syntax e bridge multicast filtering e no bridge multicast filtering Default Configuration Filtering multicast addresses is disabled All multicast addresses are flooded to all ports Command Mode
71. disabled Command Mode Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example In this example port security mode is set to dynamic for Ethernet interface 1 Console config interface ethernet ext 1 Console config if port security mode mac addresses port security routed secure address The port security routed secure address Interface Configuration Ethernet port channel mode command adds a MAC layer secure address to a routed port Use the no form of this command to delete a MAC address Syntax port security routed secure address mac address no port security routed secure address mac address Parameters mac address A valid MAC address 30 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Address Table Commands Default Configuration No addresses are defined Command Mode Interface Configuration Ethernet port channel mode Cannot be configured for a range of interfaces range context User Guidelines The command enables adding secure MAC addresses to a routed port in port security mode The command is available when the port is a routed port and in port security mode The address is deleted if the port exits the security mode or is not a routed port Example In this example the MAC layer address 66 66 66 66 66 66 is added to port 1 Console config interface ethernet ext 1
72. ethernet ext 1 Console config if switchport trunk native vlan 123 switchport general allowed vian The switchport general allowed vlan Interface Configuration mode command adds or removes VLANs from a general port Syntax switchport general allowed vlan add v an list tagged untagged switchport general allowed vlan remove vian list Parameters e add vlan list Specifies the list of VLAN IDs to be added Separate nonconsecutive VLAN IDs with a comma and no spaces A hyphen designates a range of IDs e remove vian list Specifies the list of VLAN IDs to be removed Separate nonconsecutive VLAN IDs with a comma and no spaces A hyphen designates a range of IDs e tagged Indicates that the port transmits tagged packets for the VLANs e untagged Indicates that the port transmits untagged packets for the VLANs Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 363 VLAN Commands Default Configuration If the port is added to a VLAN without specifying tagged or untagged the default setting is tagged Command Mode Interface Configuration Ethernet port channel mode User Guidelines This command enables changing the egress rule for example from tagged to untagged without first removing the VLAN from the list Example The following example adds VLANs 2 5 and 6 to the allowed list of Ethernet port 1 Console config interface ethernet ext 1 Console config if
73. event table Syntax show rmon events Default Configuration This command has no default configuration Command Mode Privileged EXEC mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 211 RMON Commands User Guidelines There are no user guidelines for this command Example The following example displays the RMON event table Console show rmon events Index Description Type Community Owner Last time sent 1 Errors Log CLI Jan 18 2006 23 58 17 2 High Broadcast Log Trap device Manager Jan 18 2006 23 59 48 The following table describes significant fields shown in the example Field Description Index An index that uniquely identifies the event Description A comment describing this event Type The type of notification that the device generates about this event Can have the following values none log trap log trap In the case of log an entry is made in the log table for each event In the case of trap an SNMP trap is sent to one or more management stations Community If an SNMP trap is to be sent it is sent to the SNMP community specified by this octet string Owner The entity that configured this event Last time sent The time this entry last generated an event If this entry has not generated any events this value is zero show rmon log The show rmon log Privileged EXEC mode command displays the RMON log table Synta
74. managed over a direct connection via a Telnet connection The device is managed by entering command keywords and parameters at the prompt Using the device command line interface CLI is very similar to entering commands on a UNIX system If access is via a Telnet connection ensure that the device has a defined IP address corresponding management access is granted and the workstation used to access the device is connected to the device prior to using CLI commands 1 Enter the following commands to begin the configuration procedure Console gt enable Console configure Console config 2 Configure the device and enter the necessary commands to complete the required tasks 3 When finished exit the session with the exit command When a different user is required to log onto the system use the login Privileged EXEC mode command This effectively logs off the current user and logs on the new user Editing Features Entering Commands A CLI command is a series of keywords and arguments Keywords identify a command and arguments specify configuration parameters For example in the command show interfaces status ethernet Ext 1 show interfaces and status are keywords ethernet is an argument that specifies the interface type and Ext 1 specifies the port To enter commands that require parameters enter the required parameters after the command keyword For example to set a password for the administrator enter Con
75. management access list Privileged EXEC mode command displays management access lists Syntax show management access list name Parameters e name Specifies the name of a management access list Range 1 32 characters Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the mlist management access list Console show management access list mlist mlist permit ethernet ext 1 permit ethernet ext 2 Note all other access implicitly denied 150 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Management ACL Commands show management access class The show management access class Privileged EXEC mode command displays the active management access list Syntax show management access class Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays information about the active management access list Console show management access class Management access class is enabled using access list mlist Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 151 Management ACL Commands 152 Intel Blade Server Ethernet Switc
76. name regionl revision mst The revision MST Configuration mode command defines the configuration revision number To restore the default configuration use the no form of this command Syntax revision value no revision 276 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands Parameters e value Configuration revision number Range 0 65535 Default Configuration The default configuration revision number is 0 Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command Example The following example sets the configuration revision to 1 Console config spanning tree mst configuration Console config mst revision 1 show mst The show MST Configuration mode command displays the current or pending MST region configuration Syntax show current pending Parameters e current Indicates the current region configuration e pending Indicates the pending region configuration Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 277 Spanning Tree Commands Command Mode MST Configuration mode User Guidelines The pending MST region configuration takes effect only after exiting the MST Configuration mode Example The following example displays a pending MST region conf
77. of conditions and the following disclaimer 2 Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution 3 All advertising materials mentioning features or use of this software must display the following acknowledgement This product includes software developed by the NetBSD Foundation Inc and its contributors 4 Neither the name of Marvell nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE ii Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10
78. of the list and those packets that do not match the conditions defined in the permit statement are denied Example The following example shows how to define a permit statement for an IP ACL Console config ip access list ip acll Console config ip al permit rsvp 192 1 1 1 0 0 0 0 any dscp 56 deny IP The deny IP Access List Configuration mode command denies traffic if the conditions defined in the deny statement match Syntax deny disable port any protocol any source source wildcard any destination destination wildcard dsep dscp number ip precedence ip precedence in port port num out port port num deny icmp deny igmp 44 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide ACL Commands deny tcp deny udp Parameters disable port Specifies that the port is disabled source Specifies the IP address or host name from which the packet was sent Specify any to indicate IP address 0 0 0 0 and mask 255 255 255 255 source wildcard Optional for the first type Specifies wildcard bits by placing 1s in bit positions to be ignored Specify any to indicate IP address 0 0 0 0 and mask SE destination Specifies the IP address or host name to which the packet is being sent Specify any to indicate IP address 0 0 0 0 and mask 255 255 255 255 destination wildcard Optional for the first type Specifies wildcard bits by placing 1s in bit
79. opened by the current telnet session to the local device It does not list telnet connections to remote hosts that were opened by other telnet sessions Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 327 System Management Commands Example The following example displays connecting to 176 213 10 50 via Telnet Console gt telnet 176 213 10 50 Esc U sends telnet EL resume The resume User EXEC mode command enables switching to another open Telnet session Syntax resume connection Parameters e connection The connection number Range 1 4 connections Default Configuration The default connection number is that of the most recent connection Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following command switches to open Telnet session number 1 Console gt resume 1 reload The reload Privileged EXEC mode command reloads the operating system 328 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide System Management Commands Syntax reload Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines Caution should be exercised when resetting the device to ensure that no other activity is being performed In particular the user should verify that no configuration files
80. port in a CLI command the following format is used For an Ethernet port on a standalone device Ethernet_type port_number For an Ethernet port on a stacked device unit number Ethernet_type port number The Ethernet type may be Gigabit Ethernet indicated by g For example g3 stands for Gigabit Ethernet port 3 on a stand alone device whereas 1 3 stands for Gigabit Ethernet port 3 on stacking unit The ports may be described on an individual basis or within a range Use format port number port number to specify a set of consecutive ports and port number port number to indicates a set of non consecutive ports For example g1 3 stands for Gigabit Ethernet ports 1 2 and 3 and g1 5 stands for Gigabit Ethernet ports and 5 Keyboard Shortcuts The CLI has a range of keyboard shortcuts to assist in editing the CLI commands The following table describes the CLI shortcuts Keyboard KeyDescription The following list provides a description of keyboard shortcuts Up arrow key Recalls commands from the history buffer beginning with the most recent command Repeat the key sequence to recall successively older commands Down arrow key Returns the most recent commands from the history buffer after recalling commands with the up arrow key Repeating the key sequence will recall successively more recent commands Ctrl A Moves the cursor to the beginning of the command line CFE Moves the cursor to the end of t
81. positions to be ignored Specify any to indicate IP address 0 0 0 0 and mask 255 255 255 255 protocol Specifies the abbreviated name or number of an IP protocol The following table lists protocols that can be specified IP Protocol Abbreviated Name Protocol Number Internet Control Message Protocol icmp 1 Internet Group Management Protocol igmp 2 IP in IP encapsulation Protocol ip 4 Transmission Control Protocol tcp 6 Exterior Gateway Protocol egp 8 Interior Gateway Protocol igp 9 User Datagram Protocol udp 17 Host Monitoring Protocol hmp 20 Reliable Data Protocol rdp 27 Inter Domain Policy Routing Protocol idpr 35 Ipv6 protocol ipv6 41 Routing Header for IPv6 ipv6 route 43 Fragment Header for IPv6 ipv6 frag 44 Inter Domain Routing Protocol idrp 45 Reservation Protocol rsvp 46 General Routing Encapsulation gre 47 Encapsulating Security Payload 50 esp 50 Authentication Header ah 51 ICMP for IPv6 ipv6 icmp 58 EIGRP routing protocol eigrp 88 Open Shortest Path Protocol ospf 89 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 45 ACL Commands IP Protocol Abbreviated Name Protocol Number IP within IP Encapsulation Protocol ipip 94 Protocol Independent Multicast pim 103 Layer Two Tunneling Protocol I2tp 115 ISIS over IPv4 isis 124 any IP protocol any 25504 e in port port num Opti
82. product includes crytographic software written by Eric Young eay cryptsoft com This product includes software written by Tim Hudson tjh cryptsoft com SECURE SOCKETS LAYER DELIVERABLE The Secure Sockets Layer shall constitute OpenSSL Deliverables hereunder The OpenSSL Deliverables are provided to Licensee under the terms of this Agreement and the OpenSSL License Agreement the OpenSSL License and any use of such OpenSSL Deliverables shall comply with the terms and conditions of the OpenSSL License and this Agreement A copy of the OpenSSL License is available in the license txt file accompanying the Deliverables and at http Awww openssl org source license html SSH PROTOCOL SUITE OF NETWORK CONNECTIVITY TOOLS DELIVERABLES The SSH protocol suite of network connectivity tools shall constitute Open SSH Deliverables hereunder The OpenSSH Deliverables are provided to Licensee under the terms of this Agreement and the BSD License the BSD License and any use of such OpenSSH Deliverables shall comply with the terms and conditions fo the BSD License and this Agreement A copy of the BSD License is set forth as below Copyright Marvell International Ltd and its affiliates All rights reserved Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met 1 Redistribution of source code must retain the above copyright notice this list
83. seconds Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 27 Address Table Commands Example In the following example the bridge aging time is set to 250 seconds Console config bridge aging time 250 clear bridge The clear bridge Privileged EXEC mode command removes any learned entries from the forwarding database Syntax clear bridge Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example In the following example the bridge tables are cleared Console clear bridge port security The port security Interface Configuration mode command locks the port to block unknown traffic and prevent the port from learning new addresses To restore the default configuration use the no form of this command Syntax port security forward discard discard shutdown trap seconds max 28 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Address Table Commands no port security Parameters e forward Forwards packets with unlearned source addresses but does not learn the address e discard Discards packets with unlearned source addresses This is the default if no option is indicated
84. the United States rules eu The summer time rules are the European Union rules week Week of the month Range 1 5 first last day Day of the week Range first three letters by name like sun date Date of the month Range 1 31 month Month Range first three letters by name like Jan year year no abbreviation Range 2000 2097 hh mm Time in military format in hours and minutes Range hh 0 23 mm 0 59 offset Number of minutes to add during summer time Range 1 1440 acronym The acronym of the time zone to be displayed when summer time is in effect Range Up to 4 characters Default Configuration Summer time is disabled offset Default is 60 minutes acronym If unspecified default to the timezone acronym If the timezone has not been defined the default is UTC Command Mode Global Configuration mode User Guidelines In both the date and recurring forms of the command the first part of the command specifies when summer time begins and the second part specifies when it ends All times are relative to the local time zone The start time is relative to standard time The end time is relative to summer time If the starting month is chronologically after the ending month the system assumes that you are in the southern hemisphere USA rule for daylight savings time 56 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Clock
85. the no form of this command Syntax ip address dhcp hostname host name no ip address dhcp Parameters e host name Specifies the name of the host to be placed in the DHCP option 12 field This name does not have to be the same as the host name specified in the hostname Global Configuration mode command Range 1 20 characters Default Configuration This command has no default configuration Command Mode Interface Configuration Ethernet VLAN port channel mode User Guidelines This command is only functional if the device is in Switch mode The ip address dhcp command allows any interface to dynamically learn its IP address by using the DHCP protocol Some DHCP servers require that the DHCPDISCOVER message have a specific host name The ip address dhcp hostname host name command is most typically used when the host name is provided by the system administrator 122 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IP Address Commands If the device is configured to obtain its IP address from a DHCP server it sends a DHCPDISCOVER message to provide information about itself to the DHCP server on the network If the ip address dhcp command is used with or without the optional keyword the DHCP option 12 field host name option is included in the DISCOVER message By default the specified DHCP host name is the globally configured host name of the device However the ip address dhcp h
86. the user Range 1 159 characters e level The user level Range 1 15 If a level is not specified the level is automaically set to 1 encrypted Encrypted password entered copied from another device configuration Default Configuration No user is defined 18 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide AAA Commande Command Mode Global Configuration mode User Guidelines User account can be created without a password Example The following example configures user called bob with password lee and user level 15 to the system Console config username bob password lee level 15 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 19 AAA Commande 20 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 3 Address Table Commands bridge address The bridge address Interface Configuration VLAN mode command adds a MAC layer station source address to the bridge table To delete the MAC address use the no form of this command Syntax bridge address mac address ethernet interface port channel port channel number permanent delete on reset delete on timeout secure no bridge address mac address Parameters e mac address A valid MAC address e interface A valid Ethernet port e port channel number A valid port channel number e permanent The address can only be deleted
87. to privileged EXEC mode use the end command The following example sets the dscp value in the packet to 56 for classes in in policy map called policy1 Console config policy map policyl Console config pmap set dscp 56 Console config if service policy input policyl police The police Policy map Class Configuration mode command defines the policer for classified traffic To remove a policer use the no form of this command Syntax police committed rate bps committed burst byte exceed action drop policed dscp transmit no police Parameters e committed rate bps Specifies the average traffic rate CIR in bits per second bps e committed burst byte Specifies normal burst size CBS in bytes e drop Indicates that when the rate is exceeded the packet is dropped e policed dscp transmit Indicates that when the rate is exceeded the DSCP of the packet is remarked according to the policed DSCP map as configured by the qos map policed dscp Global Configuration mode command Default Configuration 178 This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands Command Mode Policy map Class Configuration mode User Guidelines Policing uses a token bucket algorithm CIR represents the speed with which the token is removed from the bucket CBS represents the depth of the bucket Example The foll
88. type is excluded Default Configuration No filter entry exists Command Mode Global Configuration mode User Guidelines Example This command can be entered multiple times for the same filter record Later lines take precedence when an object identifier is included in two or more lines The following example creates a filter that includes all objects in the MIB II system group except for sysServices System 7 and all objects for interface 1 in the MIB II interfaces group Console config snmp server filter filter name system included Console config snmp server filter filter name system 7 excluded Console config snmp server filter filter name ifEntry 1 included Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 245 SNMP Commands snmp server host The snmp server host Global Configuration mode command specifies the recipient of Simple Network Management Protocol Version 1 or Version 2 notifications To remove the specified host use the no form of this command Syntax snmp server host ip address hostname community string traps informs 1 2 udp port port filter fi tername timeout seconds retries retries no snmp server host ip address hostname traps informs Parameters e ip address Specifies the IP address of the host targeted recipient e hostname Specifies the name of the host Range 1 158 characters e community string Speci
89. 30 seconds Command Mode Interface Configuration Ethernet mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 389 802 1x Commands User Guidelines The default value of this command should be changed only to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers Example The following command sets the number of seconds that the device waits for a response to an EAP request identity frame to 3600 seconds Console config interface ethernet ext 16 Console config if dotix timeout tx period 3600 dot1x max req The dot1x max req Interface Configuration mode command sets the maximum number of times that the device sends an Extensible Authentication Protocol EAP request identity frame assuming that no response is received to the client before restarting the authentication process To return to the default configuration use the no form of this command Syntax dot1x max req count no dot1x max req Parameters count Number of times that the device sends an EAP request identity frame before restarting the authentication process Range 1 10 Default Configuration The default number of times is 2 Command Mode Interface Configuration Ethernet mode 390 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands User Guidelines The d
90. 5 Port Channel Commands interface port channel The interface port channel Global Configuration mode command enters the interface configuration mode to configure a specific port channel Syntax interface port channel port channel number Parameters e port channel number A valid port channel number Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines Eight aggregated links can be defined with up to eight member ports per port channel The aggregated links valid IDs are 1 8 Example The following example enters the context of port channel number 1 Console config interface port channel 1 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 157 Port Channel Commands interface range port channel The interface range port channel Global Configuration mode command enters the interface configuration mode to configure multiple port channels Syntax interface range port channel port channel range all Parameters e port channel range List of valid port channels to add Separate nonconsecutive port channels with a comma and no spaces A hyphen designates a range of port channels e all All valid port channels Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines Commands under the interface range contex
91. 68 3289 7287 19 Jan 18 2005 21 57 30 287696304 275686 2789 5878 20 Console show rmon history 1 errors Sample Set 1 Owner Me Interface 1 Interval 1800 Requested samples 50 Granted samples 50 Maximum table size 500 800 after reset Time CRC Align Undersize Oversize Fragments Jabbers Jan 18 2005 21 57 00 1 1 0 49 0 Jan 18 2005 21 57 30 1 i 0 27 0 204 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide RMON Commands Console show rmon history 1 other Sample Set 1 Interface 1 Requested samples 50 Maximum table size 500 Jan 18 2005 21 57 00 Jan 18 2005 21 57 30 Owner Me Interval 1800 Granted samples 50 Dropped Collisions 3 0 3 0 The following table describes significant fields shown in the example Field Description Time Date and Time the entry is recorded Octets The total number of octets of data including those in bad packets received on the network excluding framing bits but including FCS octets Packets The number of packets including bad packets received during this sampling interval Broadcast The number of good packets received during this sampling interval that were directed to the broadcast address Multicast The number of good packets received during this sampling interval that were directed to a multicast address This number does not include packets addressed to the broadcast address
92. BESW10 CLI Guide 351 User Interface Commands Command Mode Example User EXEC mode The buffer includes executed and unexecuted commands Commands are listed from the first to the most recent command The buffer remains unchanged when entering into and returning from configuration modes The following example displays all the commands entered while in the current Privileged EXEC mode Console show version SW version 3 131 date 23 Jul 2005 time 17 34 19 HW version 1 0 0 Console show clock 15 29 03 Jun 17 2005 Console show history show version show clock show history 3 commands were logged buffer size is 10 show privilege Syntax The show privilege Privileged User EXEC mode command displays the current privilege level show privilege Default Configuration 352 This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide User Interface Commands Command Mode Privileged and User EXEC modes User Guidelines There are no user guidelines for this command Example The following example displays the current privilege level for the Privileged EXEC mode Console show privilege Current privilege level is 15 do The do command executes an EXEC level command from global configuration mode or any configuration submode Syntax do command Parameters command The command to be executed Default Co
93. CEGBESW10 CLI Guide 237 SNMP Commands User Guidelines Example The view name parameter cannot be specified for su which has access to the whole MIB The view name parameter can be used to restrict the access rights of a community string When it is specified An internal security name is generated The internal security name for SNMPv1 and SNMPv 2 security models is mapped to an internal group name The internal group name for SNMPv1 and SNMPv2 security models is mapped to a view name read view and notify view always and for rw for write view also The group name parameter can also be used to restrict the access rights of a community string When it is specified An internal security name is generated The internal security name for SNMPv1 and SNMPv2 security models is mapped to the group name The following example defines community access string public to permit administrative access to SNMP protocol at an administrative station with IP address 192 168 1 20 Console config snmp server community public su 192 168 1 20 snmp server view The snmp server view Global Configuration mode command creates or updates a Simple Network Management Protocol SNMP server view entry To remove a specified SNMP server view entry use the no form of this command Syntax snmp server view view name oid tree included excluded no snmp server view view name oid tree Parameters 238 e view name Specifies the
94. CL is defined Command Mode MAC Access List Configuration mode User Guidelines Before an Access Control Element ACE is added to an ACL all packets are permitted After an ACE is added an implied deny any any condition exists at the end of the list and those packets that do not match the conditions defined in the permit statement are denied If the VLAN ID is specified the policy map cannot be connected to the VLAN interface Example The following example shows how to create a MAC ACL with permit rules Console config mac access list macl acll Console config mac al permit 6 6 6 6 6 6 0 0 0 0 0 0 any vlan 6 deny MAC The deny MAC Access List Configuration mode command denies traffic if the conditions defined in the deny statement match Syntax deny disable port any source source wildcard any destination destination wildcard vlan vian id cos cos cos wildcard ethtype eth type 48 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide ACL Commands Parameters e disable port Indicates that the port is disabled if the statement is deny e source Specifies the MAC address of the host from which the packet was sent source wildcard Optional for the first type Specifies wildcard bits by placing 1s in bit positions to be ignored e destination Specifies the MAC address of the host to which the packet is being sent e destination wildcard
95. CLI Guide 113 IGMP Snooping Commands User Guidelines The timeout should be at least greater than 2 query_interval max_response_time of the IGMP router Example The following example configures the host timeout to 300 seconds Console config interface vlan 2 Console config if ip igmp snooping host time out 300 ip igmp snooping mrouter time out The ip igmp snooping mrouter time out Interface Configuration VLAN mode command configures the mrouter time out The ip igmp snooping mrouter time out Interface Configuration VLAN mode command is used for setting the aging out time after multicast device ports are automatically learned To restore the default configuration use the no form of this command Syntax ip igmp snooping mrouter time out time out no ip igmp snooping mrouter time out Parameters e time out Specifies the Multicast device timeout in seconds Range 1 2147483647 Default Configuration The default value is 300 seconds Command Mode Interface Configuration VLAN mode User Guidelines There are no user guidelines for this command 114 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IGMP Snooping Commands Example The following example configures the multicast device timeout to 200 seconds Console config interface vlan 2 Console config if ip igmp snooping mrouter time out 200 ip igmp snooping leave time out The ip igmp sn
96. CLI Guide 87 Ethernet Configuration Commands Default Configuration Jumbo frames are disabled on the device Command Mode Global Configuration User Guidelines This command is relevant to Giga devices only This command takes effect only after resetting the device Example In the following example jumbo frames are enabled on the device Console config port jumbo frame clear counters The clear counters Privileged EXEC mode command clears statistics on an interface Syntax clear counters ethernet interface port channel port channel number Parameters e interface Valid Ethernet port Full syntax unit port e port channel number Valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode 88 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands User Guidelines There are no user guidelines for this command Example In the following example the counters for interface are cleared Console clear counters ethernet ext 2 set interface active The set interface active Privileged EXEC mode command reactivates an interface that was shutdown Syntax set interface active ethernet interface port channel port channel number Parameters e interface Valid Ethernet port Full syntax unit port e port channel number
97. Console config ip ssh pubkey auth 298 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SSH Commands crypto key pubkey chain ssh The crypto key pubkey chain ssh Global Configuration mode command enters the SSH Public Key chain Configuration mode The mode is used to manually specify other device public keys such as SSH client public keys Syntax crypto key pubkey chain ssh Default Configuration No keys are specified Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enters the SSH Public Key chain Configuration mode and manually configures the RSA key pair for SSH public key chain bob Console config crypto key pubkey chain ssh Console config pubkey chain user key bob Console config pubkey key key string rsa AAAAB3NzaC1lyc2EAAAADAQABAAABAQOCvTnRwPW1 Al4kpqIw9GBRonZQZxjHKcqKL6rM10 ZNXf ZSkvHG Qus1Z 761LmFT34v7u7ChFAE Vu4GRfEpSwoQUvV35LqJJk6710U zfwOllg kTwm175QR9gHujS6KwGN2QWXgh3ub8gDjTSq muSn Wd05iDX2TExQWu08licglk02LYciz Z4TrEU 9FJxwPiVQOjc KBXuR0OjuNg5nFYsY OZCkON W9a tnkm1shRE7Di71 w3fNiOA 6w9044t6 AINEICBCCA4YcF6zMzaTlwefWwX6f Rmt5nhhqdAtN 4o0oJfce166DqVX1gWmN zNR4DYDvSzg01DnwCAC8Qh Fingerprint a4 16 46 23 5a 8d 1d b5 37 59 eb 44 13 b9 33 e9 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 299 SSH Commands user key
98. Ethernet ext 1 changed state to down Aug 2004 15 41 39 changed state to down Aug 2004 15 41 39 SLINEPROTO 5 UPDOWN Line protocol on Interface Ethernet ext 3 changed state to down oe LINEPROTO 5 UPDOWN Line protocol on Interface Ethernet ext 2 316 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Syslog Commands show logging file The show logging file Privileged EXEC mode command displays the state of logging and the syslog messages stored in the logging file Syntax show logging file Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the logging state and the syslog messages stored in the logging file Console show logging file Logging is enabled Console logging level debugging Console Messages 0 Dropped severity Buffer logging level debugging Buffer Messages 11 Logged 200 Max File logging level notifications File Messages 0 Dropped severity Syslog server 192 180 2 27 logging errors Messages 6 Dropped severity Syslog server 192 180 2 28 logging errors Messages 6 Dropped severity 2 messages were not logged resources Application filtering control Application Event Status AAA Login Enabled File system Copy Enabl
99. GBESW10 CLI Guide System Management Commands Example Flow control for internal cascade ports Enabled Flow control for Stack ports Enabled Flow control rx only Enabled show system mode The show system mode Priviledged EXEC mode command displays information on features control Syntax show system mode Default Configuration This command has no default configuration Command Mode Priviledged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays information on features control Console gt show system mode Mode Router QoS Inactive show version The show version User EXEC mode command displays system version information Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 335 System Management Commands Syntax show version Default Configuration This command has no default configuration Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays system version information only for demonstration purposes Console gt show version SW version 1 0 0 0 date 23 Jul 2004 time 17 34 19 Boot version 1 0 0 0 date 11 Jan 2004 time 11 48 21 HW version 1 0 0 Unit SW version Boot version HW version service cpu utilization The service cpu utilization Global Configuration mo
100. GMP host timeout is 260 sec IGMP Immediate leave is disabled IGMP leave timeout is 10 sec IGMP mrouter timeout is 300 sec Automatic learning of multicast router ports is enabled show ip igmp snooping groups The show ip igmp snooping groups Privileged EXEC mode command displays multicast groups learned by IGMP snooping Syntax show ip emp snooping groups vlan vian id address ip multicast address Parameters e vlan id Specifies the VLAN number e ip multicast address Specifies the IP multicast address Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines To see the full multicast address table including static addresses use the show bridge multicast address table Privileged EXEC command 118 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IGMP Snooping Commands Example The following example shows IGMP snooping information on multicast groups Console show ip igmp snooping groups Vian IP Address Querier Ports ii 224 239 130 2 2 3 Yes T 22 19 224 239 130 2 2 8 Yes 9 11 IGMP Reporters that are forbidden statically 1 224 239 130 2 2 3 19 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 119 IGMP Snooping Commands 120 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 10 IP Address Commands ip address
101. Global Configuration mode User Guidelines If multicast devices exist on the VLAN do not change the unregistered multicast addresses state to drop on the switch ports If multicast devices exist on the VLAN and IGMP snooping is not enabled the bridge multicast forward all command should be used to enable forwarding all multicast packets to the multicast switches Example In the folowing example bridge multicast filtering is enabled Console config bridge multicast filtering 22 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Address Table Commands bridge multicast address The bridge multicast address Interface Configuration VLAN mode command registers a MAC layer multicast address in the bridge table and statically adds ports to the group To unregister the MAC address use the no form of this command Syntax bridge multicast address mac multicast address ip multicast address bridge multicast address mac multicast address ip multicast address add remove ethernet interface list port channel port channel number list no bridge multicast address mac multicast address ip multicast address Parameters e add Adds ports to the group If no option is specified this is the default option e remove Removes ports from the group e mac multicast address A valid MAC multicast address e ip multicast address A valid IP multicast address e interface list
102. I Guide Contents Important Safety Instructions kk iii Wichtige SicherheitShinweise AEN iii Consignes de s curit aos csc cases ccectasisceceueata denased aendx ca san exeeeaceam ace acsevnenieenetamtanaucaceeveanseaiess iii Instrucciones de seguridad importantes cccccceecesseeeeeceeeeeeeeeeeeeeeeeeeeeeeesseeeeeeeeeeeeneeees iii bes lr eee ame eee ener ec eee eee re ee ee em er ee eee eee ee ere ae ee re iv About this Manual eegene ret egeg deeg Eegeregie Vv Man al Organi ZatiOM EE Vv Chapter 1 Using OLI sssseiscesssiissantnsincssacicesnnstevassessnuisinssansnadsaweueuidetanaiawanesescaraunrewasarase 1 OU eege 1 Chapter 2 AAA CommandS E 9 aaa authentication Ogin EE 9 GER e E 10 login AUTISTIC ATION EE 11 enable authentication E 12 ip htp authenticatiOm E 13 ip https authentication eier 14 show authentication methodS AAA 15 EE ee 16 enable password NEE 17 usermnaMe eeneg 18 Chapter 3 Address Table Commande ccsesceeeeeeeeeeeeeseeeennenennneeeeeeeeeeeeeeeeeeeeeess 21 bridge address ssesssseeeeessessrtritttttttktt ttt tr eer rer erry eine ee nnn on egy ares rere serene rere 21 bridge multicast tihtering EE 22 lieler Ee ee 23 bridge multicast forbidden address cceeeeeeeccceeeeeeeeeeeeeeeeeeeeneneeeeeeeeeeeeeeeseeeeeneneeeeseeees 24 bridge multicast TOMA EE 25 bridge multicast forbidden forward all AAA 26 bridge euer 27 clear ae carga are aetna ek cn ne cnet epee en eaeaee 28 port TEE 28
103. Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide A Guide for System Administrators of Intel Server Products Intel Order Number D67145 002 Disclaimer Information in this document is provided in connection with Intel products No license express or implied by estoppel or otherwise to any intellectual property rights is granted by this document Except as provided in Intel s Terms and Conditions of Sale for such products Intel assumes no liability whatsoever and Intel disclaims any express or implied warranty relating to sale and or use of Intel products including liability or warranties relating to fitness for a particular purpose merchantability or infringement of any patent copyright or other intellectual property right Intel products are not intended for use in medical life saving or life sustaining applications Intel may make changes to specifications and product descriptions at any time without notice Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries Other names and brands may be claimed as the property of others Copyright 2006 Intel Corporation All Rights Reserved This product includes software developed by the OpenSSL Project for use in the Open SSL Toolkit http wwww openssl org This product includes software developed by the NetBSD Foundation Inc and its contributors This
104. Invalid Combinations of Source and Destination Some invalid combinations of source and destination exist Specifically you cannot copy if one of the following conditions exist The source file and destination file are the same file xmodem is the destination file The source file can be copied to image boot and null only tftp is the source file and destination file on the same copy The following table describes copy characters Character Description For network transfers indicates that the copy process is taking place Each exclamation point indicates successful transfer of ten packets 512 bytes each For network transfers indicates that the copy process timed out Generally many periods in a row means that the copy process may fail 70 Copying an Image File from a Server to Flash Memory To copy an image file from a server to flash memory use the copy source url image command Copying a Boot File from a Server to Flash Memory To copy a boot file from a server to flash memory enter the copy source url boot command Copying a Configuration File from a Server to the Running Configuration File Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example Configuration and Image File Commands To load a configuration file from a network server to the running configuration file of the device enter the copy source url running config command The commands in t
105. LI Guide RMON Commands show rmon alarm The show rmon alarm Privileged EXEC mode command displays alarm configuration show rmon alarm number Parameters e number Specifies the alarm index Range 1 65535 Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command The following example displays RMON 1 alarms Console show rmon alarm 1 Alarm 1 OIDs Uesebsls Zak 2 215101 Last sample Value 878128 Interval 30 Sample Type delta Startup Alarm rising Rising Threshold 8700000 Falling Threshold 78 Rising Event 1 Falling Event 1 Owner CLI Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 209 RMON Commands The following table describes the significant fields shown in the display Field Description Alarm Alarm index OID Monitored variable OID Last Sample Value The statistic value during the last sampling period For example if the sample type is delta this value is the difference between the samples at the beginning and end of the period If the sample type is absolute this value is the sampled value at the end of the period Interval The interval in seconds over which the data is sampled and compared with the rising and falling thresholds Sample Type The method of sampling the variable and calcul
106. Mode User EXEC mode User Guidelines There are no user guidelines Example The following example displays the parameters of the aggregate policer called policer1 Console gt show qos aggregate policer policerl aggregate policer policerl 96000 4800 exceed action drop not used by any policy map police aggregate The police aggregate Policy map Class Configuration mode command applies an aggregate policer to multiple classes within the same policy map To remove an existing aggregate policer from a policy map use the no form of this command Syntax police aggregate aggregate policer name no police aggregate aggregate policer name Parameters e aggregate policer name Specifies the name of the aggregate policer Default Configuration This command has no default configuration Command Mode Policy map Class Configuration mode 182 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands User Guidelines An aggregate policer can be applied to multiple classes in the same policy map An aggregate policer cannot be applied across multiple policy maps or interfaces To return to the Policy map Configuration mode use the exit command To return to the Privileged EXEC mode use the end command Example The following example applies the aggregate policer called policer to a calass called class in policy map called policy Console config policy map pol
107. Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 287 Spanning Tree Commands Max hops 20 Interfaces Name State Prio Nbr Cost Sts Role PortFast Type 1 Enabled 28 1 20000 FWD Root o P2p Bound RSTP 2 Enabled 28 2 20000 FWD Desg o Shared Bound STP 3 Enabled 28 3 20000 FWD Desg o P2p 4 Enabled 28 4 20000 FWD Desg o P2p MST 1 Vlans Mapped 10 20 CST Root ID Priority 24576 Address 00 02 4b 29 89 76 Path 20000 Cost Root 4 1 4 Port Rem hops 19 Bridge ID Priority 32768 Address 00 02 4b 29 7a 00 Interfaces Name State Prio Nbr Cost Sts Role PortFast Type 1 Enabled 28 1 20000 FWD Boun o P2p Bound RSTP 2 Enabled 28 2 20000 FWD Boun o Shared Bound STP 3 Enabled 28 3 20000 BLK Altn o P2p 4 Enabled 28 4 20000 FWD Desg o P2p 288 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Console show spanning tree detail Spanning tree enabled mode MSTP Default port cost method long MST 0 Vlans Mapped 1 9 21 4094 CST Root ID Priority 32768 Address 00 01 42 97 e0 00 Path 20000 Cost Root 1 1 1 Port Hello Time 2 sec Max Age 20 sec IST Master ID Priority 32768 Address 00 02 4b 29 7a 00 This switch is the IST master Hello Time 2 sec Max Age 20 sec Max hops 20 Number of topology changes 2 last change occurred 2d18h ago Times hello 2 max age 20 forward delay 15 Port 1 1 1 enabled State Forwarding Role Port id 128 1 Type P2p
108. Philippines Domestic 0120 868686 Outside country 81 298 47 0800 Latin America 406 Argentina Contact AT amp T USA at 0 800 222 1288 Once connected dial 800 843 4481 Brazil 001 916 377 0180 Chile Easter Island Contact AT amp T USA at 800 800 311 Once connected dial 800 843 4481 Mainland and Juan Contact AT amp T USA at 800 225 288 Once connected dial 800 843 4481 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Colombia Contact AT amp T USA at 01 800 911 0010 Once connected dial 800 843 4481 Costa Rica Contact AT amp T USA at 0 800 0 114 114 Once connected dial 800 843 4481 Ecuador Andimate Contact AT amp T USA at 1 999 119 Once connected dial 800 843 4481 Pacifictel Contact AT amp T USA at 1 800 225 528 Once connected dial 800 843 4481 Guatemala Contact AT amp T USA at 99 99 190 Once connected dial 800 843 4481 Mexico Contact AT amp T USA at 001 800 462 628 4240 Once connected dial 800 843 4481 Mianii 1 800 621 8423 Panama Contact AT amp T USA at 00 800 001 0109 Once connected dial 800 843 4481 Paraguay 001 916 377 0114 Peru 001 916 377 0114 Uruguay 001 916 377 0114 Venezuela Contact AT amp T USA at 0 800 2255 288 Once connected dial 800 843 4481 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 407 408 Intel Blade Server Ethernet
109. Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 201 RMON Commands User Guidelines Cannot be configured for a range of interfaces Range context Example The following example enables a Remote Monitoring RMON MIB history statistics group on Ethernet port with index number and a polling interval period of 2400 seconds Console config interface ethernet ext 1 Console config if rmon collection history 1 interval 2400 show rmon collection history The show rmon collection history Privileged EXEC mode command displays the requested RMON history group statistics Syntax show rmon collection history ethernet interface port channel port channel number Parameters e interface Valid Ethernet port Full syntax unit port e port channel number Valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example 202 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide The following example displays all RMON history group statistics RMON Commands Console show rmon collection history Index Interface Interval Requested Granted Owner Samples Samples 1 1 30 50 50 CLI 2 d 1800 50 50 Manager The following table describes the significant fields shown in the display Field Descrip
110. Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide
111. To disable SNMP traps use the no form of the command Syntax snmp server enable traps no snmp server enable traps Default Configuration SNMP traps are enabled Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enables SNMP traps Console config snmp server enable traps 244 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands snmp server filter The snmp server filter Global Configuration mode command creates or updates a Simple Network Management Protocol SNMP server filter entry To remove the specified SNMP server filter entry use the no form of this command Syntax snmp server filter fi ter name oid tree included excluded no snmp server filter filter name oid tree Parameters e filter name Specifies the label for the filter record that is being updated or created The name is used to reference the record Range 1 30 characters e oid tree Specifies the object identifier of the ASN 1 subtree to be included or excluded from the view To identify the subtree specify a text string consisting of numbers such as 1 3 6 2 4 or a word such as system Replace a single subidentifier with the asterisk wildcard to specify a subtree family for example 1 3 4 e included Indicates that the filter type is included e excluded Indicates that the filter
112. To specify a series of VLANs use a comma Range 1 4094 Default Configuration VLANs are mapped to the common and internal spanning tree CIST instance instance 0 Command Modes MST Configuration mode User Guidelines All VLANs that are not explicitly mapped to an MST instance are mapped to the common and internal spanning tree CIST instance instance 0 and cannot be unmapped from the CIST For two or more devices to be in the same MST region they must have the same VLAN mapping the same configuration revision number and the same name Example The following example maps VLANs 10 20 to MST instance 1 Console config spanning tree mst configuration Console config mst instance 1 add vlan 10 20 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 275 Spanning Tree Commands name mst The name MST Configuration mode command defines the configuration name To restore the default setting use the no form of this command Syntax name string Parameters e string MST configuration name The name is case sensitive Range 1 32 characters Default Configuration The default name is a radlan_guest Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command Example The following example defines the configuration name as region Console config spanning tree mst_configuration Console config mst
113. US St egene 330 Ge TE 331 SiN eege 332 SHOW SYSTEMY EE 333 show system flowcontrol eege Eed 334 show system mode enden 335 SNOW US OM E 335 service cCpu utilization deeg gege 336 SHOW COU utilization seteteegegeeirte Ee Ea AAE dE EAE 337 Chapter 26 TACACS Commande 2u cs eeceeeceseeeeeeeeeeeeeseneeeeeeeeenseeeeeeeeeeeesenesnees 339 tacacs Server NOST ue 339 tacacs server key reegelen 340 tacacs server timeout eegen ee 341 tacacs server SOU Ce ected ees areca ccd Sed denen De stiectce tea se setetecrniena ne eens eeeaceeces 342 Show E 342 Chapter 27 User Interface COMMAMNGS cccsssseeeeeeeeeeeseeeeeeeeeeensseeeeeeeeeeneeeees 345 ll EE 345 al TEE 345 JOG IW BE 346 eelst 347 RE ele 2 11 6 EE 348 EE ss 348 xiv Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide BEER Ee Ee 350 terminal datadump ee 350 SHOW NISTONY E 351 SNOW ENEE EEN 352 el E 353 Chapter 28 VLAN CommandsS sivcscssiscstacetsntncncssaancsansstuanentsedincatanedeacwuusassaanaduainsnin 355 vlan database deeg 355 VaN E 355 intertace vlan ee 356 interface range vlan tes ce cs ten tries cotecns dest tm ceesiey ade cdc oe trint unaa cnciehaeadaddbdeaurecnerendenacdaeaentase 357 WE ul 358 SWitehport lee ee eee eer eee aren eee eee eres ee ee ee 359 SUC PONTO te aac cece sects dae a aaia Ee EE ert cements dee ET AEAEE 360 SWICMPOM acess VA aoc tege e a ra ae re iaa A G 360 switchport trunk allowed vlan EE 361 switch
114. Valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines This command is used to activate interfaces that were configured to be active but were shutdown by the system for some reason e g port security Example The following example reactivates interface 1 Console set interface active ethernet ext 1 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 89 Ethernet Configuration Commands show interfaces advertise The show interfaces advertise Privileged EXEC mode command displays auto negotiation data Syntax show interfaces advertise ethernet interface port channel port channel number Parameters e interface Valid Ethernet port Full syntax unit port e port channel number Valid port channel number Default Configuration This command has no default configuration Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays auto negotiation information Console show interfaces advertise Port Type eg Operational Link Advertisement 1 00M Copper Enabled 33 2 00M Copper Enabled 3 00M Copper Enabled 4 00M Copper Enabled 5 00M Copper Enabled 100 100h 10f 10h 6 00M Copper Enabled 7 00M Copper Enabled 90 Intel Blade Se
115. W CIO K ee 65 show sntp configuration eegene 66 Show SMUD ET 67 Chapter 6 Configuration and Image File COMMAMNAS cccsssseeeeeteeeeeeeeereees 69 COPY aeran E E a 69 GE 71 BEE ee ee 72 show running config ME 73 SNOW Starnt p COnNtg WEE 74 SEENEN 75 SHOW DOGIVEI E 76 Chapter 7 Ethernet Configuration Commande sccsseeeceeeeeseeeeeeeeeeeeeeeeeeeees 79 intertace ethernet eene 79 interface range ethernet E 79 viii Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide NI ele d EE 80 PAS ST IDUNOMM Zeene ee 81 EE ee 82 QUP EX E 83 negotlatiom sor ee eee err ae mre ee eee are Ree ee en ee err ee eee ee ee ee 84 HWOWCONT N ass estate sirasini aa EE EE ceeds see esc oe ener EbEgeeeEgeb 85 We EE 86 REENEN 87 DOM UMD OFAC EN 87 clear counters eege 88 set interface Eege eer gEENEEA 89 show interfaces advertise eege 90 show interfaces configuration sveSSNNSEERERESEKNESEEEEEEEENEEREEREEEENESNEEREERSSEEEENEEEKEEEREEEEEEEEESEE ES 91 Show interfaces Status dcceucadier icnarecesenndsacmcsareeeaiacesendes ASENET IEEE wmtaqneucbneecsaannaeeedcncrteeaawerecs 92 show interfaces description E 93 SHOW interfaces COUNTES cals ccalecctccteeantasease cre hecrmanecccecone seika s i ESS eaaa N KKN ANEKA ENEEK OESE 94 show ports jumbo frame eet 97 port storm control include multicast GC EE 98 port storm control include multicast IC cec cece eeeeeee scence eeeeeeeeeeeeeeeeeeeesaaeeeeeetaeeeee
116. W1 and SBCEGBESW10 CLI Guide 325 System Management Commands Special Telnet Sequences Telnet Sequence Purpose Ctrl shift 6 b Break Ctrl shift 6 c Interrupt Process IP Ctrl shift 6 h Erase Character EC Ctrl shift 6 o0 Abort Output AO Ctrl shift 6 t Are You There AYT Ctrl shift 6 u Erase Line EL At any time during an active Telnet session Telnet commands can be listed by pressing the Ctrl shift 6 keys at the system prompt A sample of this list follows Note that the Ctrl shift 6 sequence appears as on the screen AA B gt gt wo f a gt gt G Console gt Ctrl shift 6 sends sends sends sends sends Special telnet escape help telnet BREAK telnet IP telnet EC telnet AO telnet AYT telnet EL sends Ctrl shift 6 x suspends the session return to system command prompt Several concurrent Telnet sessions can be opened and switched To open a subsequent session the current connection has to be suspended by pressing the escape sequence keys Ctrl shift 6 and x to return to the system command prompt Then open a new connection with the telnet User EXEC mode command Keywords Table Options Description lecho Enables local echo quiet Prevents onscreen display of all messages from the software source interface Specifies the source interface stream Turns on stream processing which enables a raw TCP strea
117. a prefix running config Represents the current running configuration file startup config Represents the startup configuration file image If the source file represents the active image file If the destination file represents the non active image file boot Boot file tftp Source or destination URL for a TFTP network server The syntax for this alias is tftp host directory filename The host can be represented by its IP address or hostname xmodem Source for the file from a serial connection that uses the Xmodem protocol unit member image Image file on one of the units To copy from the master to all units specify in the member field unit member boot Boot file on one of the units To copy from the master to all units specify in the member field null Null destination for copies or files A remote file can be copied to null to determine its size Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 69 Configuration and Image File Commands Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines The location of a file system dictates the format of the source or destination URL The entire copying process may take several minutes and differs from protocol to protocol and from network to network prv and sys files cannot be copied Understanding
118. able the feature use the no form of this command Syntax sntp authenticate no sntp authenticate Default Configuration No authentication Command Mode Global Configuration mode User Guidelines The command is relevant for both unicast and broadcast Example The following example defines the authentication key for SNTP and grants authentication Console config sntp authentication key 8 md5 ClkKey Console config sntp trusted key 8 58 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Clock Commands sntp trusted key The sntp trusted key Global Configuration mode command authenticates the identity of a system to which Simple Network Time Protocol SNTP will synchronize To disable authentication of the identity of the system use the no form of this command Syntax sntp trusted key key number no sntp trusted key key number Parameters e key number Key number of authentication key to be trusted Range 1 4294967295 Default Configuration No keys are trusted Command Mode Global Configuration mode User Guidelines The command is relevant for both received unicast and broadcast If there is at least 1 trusted key then unauthenticated messages will be ignored Example The following example authenticates key 8 Console config sntp authentication key 8 md5 ClkKey Console config sntp trusted key 8 sntp client poll timer The s
119. aces access lists Privileged EXEC mode command displays access lists applied on interfaces Syntax show interfaces access lists ethernet interface port channel port channel number Parameters e interface Valid Ethernet port Full syntax unit port e port channel number Valid port channel number Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 51 ACL Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays ACLs applied to the interfaces of a device Console show interfaces access lists Interface Input ACL 1 ACL1 1 ACL3 52 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 5 Clock Commands clock set The clock set Privileged EXEC mode command manually sets the system clock Syntax clock set hh mm ss day month year or clock set hh mm ss month day year Parameters e hh mm ss Current time in hours military format minutes and seconds hh 0 23 mm 0 59 ss 0 59 e day Current day by date in the month Range 1 31 e month Current month using the first three letters by name Range Jan Dec e year Current year Range 2000 2097 Default Configuration This command has no default configuration Command Mode Privileged EXEC mod
120. ackets received less than 64 octets in length excluding framing bits but including FCS octets and either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets Alignment Error The total number of packets received longer than 1518 octets excluding framing bits but including FCS octets and either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets Alignment Error 64 Octets The total number of packets including bad packets received that are 64 octets in length excluding framing bits but including FCS octets 65 to 127 Octets The total number of packets including bad packets received that are between 65 and 127 octets in length inclusive excluding framing bits but including FCS octets 128 to 255 Octets The total number of packets including bad packets received that are between 128 and 255 octets in length inclusive excluding framing bits but including FCS octets 256 to 511 Octets The total number of packets including bad packets received that are between 256 and 511 octets in length inclusive excluding framing bits but including FCS octets 200 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide RMON Commands Field Description 512 to 1023 Octets The total number of packets including
121. al Configuration mode commands However if the logging on command is disabled no messages are sent to these destinations Only the console receives messages The following example enables logging error messages Console config logging on Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 307 Syslog Commands logging The logging Global Configuration mode command logs messages to a syslog server To delete the syslog server with the specified address from the list of syslogs use the no form of this command Syntax logging ip address hostname port port severity level facility facility description text no logging ip address hostname Parameters ip address IP address of the host to be used as a syslog server hostname Specifies the host name of the syslog server Range 1 158 characters port Specifies the port number for syslog messages Range 1 65535 level Specifies the severity level of logged messages sent to the syslog servers Possible values emergencies alerts critical errors warnings notifications informational and debugging facility Specifies the facility that is indicated in the message Possible values local0 locall local2 local3 local4 local5 local 6 local7 text Syslog server description Range 1 64 characters Default Configuration The default port number is 514 The default logging message level is infor
122. al terminal for remote console access e ssh Virtual terminal for secured remote console access Default Configuration This command has no default configuration Command Mode Exec mode User Guidelines This command has no user guidelines Example The following example configures communication to a device with the IP address 192 168 1 4 in the WLAN domain as a passive Router gt show line Console configuration Interactive timeout Disabled History 10 Baudrate 9600 Databits 8 Parity none Stopbits 1 Telnet configuration Interactive timeout 10 minutes 10 seconds History 10 SSH configuration Interactive timeout 10 minutes 10 seconds History 10 142 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Line Commands Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 143 Line Commande 144 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 13 Management ACL Commands Management ACL Commands management access list The management access list Global Configuration mode command configures a management access list and enters the Management Access list Configuration command mode To delete an access list use the no form of this command Syntax management access list name no management access list name Parameters e name Access list name Range 1 32 characters Default Configuration
123. alid port channel number Default Configuration This command has no default configuration Command Modes Privileged EXEC mode User Guidelines This feature should be used only when working in RSTP or MSTP mode Example The following example restarts the protocol migration process on Ethernet port 11 Console clear spanning tree detected protocols ethernet ext 11 spanning tree mst priority The spanning tree mst priority Global Configuration mode command configures the device priority for the specified spanning tree instance To restore the default configuration use the no form of this command Syntax spanning tree mst instance id priority priority 270 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands no spanning tree mst instance id priority Parameters e instance id ID of the spanning tree instance Range 1 15 e priority Device priority for the specified spanning tree instance Range 0 61440 in multiples of 4096 Default Configuration The default bridge priority for IEEE Spanning Tree Protocol STP is 32768 Command Mode Global Configuration mode User Guidelines The device with the lowest priority is selected as the root of the spanning tree Example The following example configures the spanning tree priority of instance 1 to 4096 Console config spanning tree mst 1 priority 4096 spanning tree
124. an EAP request frame to the client to 3600 seconds Console config if dotix timeout supp timeout 3600 dot1x timeout server timeout The dot1x timeout server timeout Interface Configuration mode command sets the time that the device waits for a response from the authentication server To return to the default configuration use the no form of this command Syntax dot1x timeout server timeout seconds no dotix timeout server timeout Parameters e seconds Time in seconds that the device waits for a response from the authentication server Range 1 65535 seconds Default Configuration The timeout period is 30 seconds Command Mode Interface configuration Ethernet mode User Guidelines The actual timeout can be determined by comparing the dot1x timeout server timeout value and the result of multiplying the radius server retransmit value with the radius server timeout value and selecting the lower of the two values Example The following example sets the time for the retransmission of packets to the authentication server to 3600 seconds Console config if dotix timeout server timeout 3600 392 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands show dot1x The show dot1x Privileged EXEC mode command displays the 802 1x status of the device or specified interface Syntax show dot1x ethernet interface Parameters e interface Valid Ether
125. and displays the HTTP server configuration Syntax show ip http Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 233 Web Server Commands Example The following example displays the HTTP server configuration Console show ip http HTTP server enabled Port 80 show ip https The show ip https Privileged EXEC mode command displays the HTTPS server configuration Syntax show ip https Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the HTTP server configuration Console show ip https HTTPS server enabled Port 443 Certificate 1 is active Issued by www verisign com Valid from 8 9 2004 to 8 9 2005 Subject CN router gm com 0 General Motors C US Finger print DC789788 DC88A988 127897BC BB789788 234 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Web Server Commands Certificate 2 is inactive Issued by self signed Valid from 8 9 2004 to 8 9 2005 Subject CN router gm com 0 General Motors C US Finger print 1873B936 88DC3411 BC8932EF 782134BA Intel
126. and in the Global Configuration mode Privileged EXEC Mode Privileged access is password protected to prevent unauthorized use because many of the Privileged commands set operating system parameters The password is not displayed on the screen and is case sensitive Privileged users enter directly into the Privileged EXEC mode To enter the Privileged EXEC mode from the User EXEC mode perform the following steps At the prompt enter the enable command and press lt Enter gt A password prompt is displayed Enter the password and press lt Enter gt The password is displayed as The Privileged EXEC mode prompt is displayed The Privileged EXEC mode prompt consists of the device host name followed by Console To return from the Privileged EXEC mode to the User EXEC mode use the disable command The following example illustrates how to access the Privileged EXEC mode and return to the User EXEC mode Console gt enable Enter Password Console Console disable Console gt The exit command is used to return from any mode to the previous mode except when returning to the User EXEC mode from the Privileged EXEC mode For example the exit command is used to return from the Interface Configuration mode to the Global Configuration mode Global Configuration Mode Global Configuration mode commands apply to features that affect the system as a whole rather than just a specific interface The configure Privi
127. ands IP Protocol Abbreviated Name Protocol Number Interior Gateway Protocol igp 9 User Datagram Protocol udp 17 Host Monitoring Protocol hmp 20 Reliable Data Protocol rdp 27 Inter Domain Policy Routing Protocol idpr 35 Ipv6 protocol ipv6 41 Routing Header for IPv6 ipv6 route 43 Fragment Header for IPv6 ipv6 frag 44 Inter Domain Routing Protocol idrp 45 Reservation Protocol rsvp 46 General Routing Encapsulation gre 47 Encapsulating Security Payload 50 esp 50 Authentication Header ah 51 ICMP for IPv6 ipv6 icmp 58 EIGRP routing protocol eigrp 88 Open Shortest Path Protocol ospf 89 Protocol Independent Multicast pim 103 Layer Two Tunneling Protocol l2tp 115 ISIS over IPv4 isis 124 any IP protocol any 25504 dscp Indicates matching the dscp number with the packet dscp value ip precedence Indicates matching ip precedence with the packet ip precedence value icmp type Specifies an ICMP message type for filtering ICMP packets Enter a value or one of the following values echo reply destination unreachable source quench redirect alternate host address echo request router advertisement router solicitation time exceeded parameter problem timestamp timestamp reply information request information reply address mask request address mask reply traceroute datagram conversion error mobile host redirect ipv6 where are you ipv6 i am here mobile
128. ands tacacs server host The tacacs server host Global Configuration mode command specifies a TACACS host To delete the specified name or address use the no form of this command Syntax tacacs server host ip address hostname single connection port port number timeout timeout key key string source source priority priority no tacacs server host ip address hostname Parameters ip address IP address of the TACACS server hostname Host name of the TACACS server Range 1 158 characters single connection Indicates a single connection Rather than have the device open and close a TCP connection to the daemon each time it must communicate the single connection option maintains a single open connection between the device and the daemon port number Specifies a server port number Range 0 65535 timeout Specifies the timeout value in seconds Range 1 30 key string Specifies the authentication and encryption key for all TACACS communications between the device and the TACACS server This key must match the encryption used on the TACACS daemon To specify an empty string enter Range 0 128 characters source Specifies the source IP address to use for the communication 0 0 0 0 indicates a request to use the IP address of the outgoing IP interface priority Determines the order in which the TACACS servers are used where 0 is the highest priority Range 0 65535
129. arameters e history entries Maximum number of history table entries Range 20 32767 e log entries Maximum number of log table entries Range 20 32767 Default Configuration History table size is 270 Log table size is 200 Command Mode Global Configuration mode User Guidelines The configured table size taskes effect after the device is rebooted Example The following example configures the maximum RMON history table sizes to 100 entries Console config rmon table size history 100 214 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 19 RADIUS Commands radius server host The radius server host Global Configuration mode command specifies a RADIUS server host To delete the specified RADIUS host use the no form of this command Syntax radius server host ip address hostname auth port auth port number timeout timeout retransmit retries deadtime deadtime key key string source source priority priority usage type no radius server host ip address hostname Parameters ip address IP address of the RADIUS server host hostname Hostname of the RADIUS server host Range 1 158 characters auth port number Port number for authentication requests The host is not used for authentication if the port number is set to 0 Range 0 65535 timeout Specifies the timeout value in seconds Range 1 30 retries Specifies
130. arameters e minutes Specifies the number of minutes to wait e seconds Specifies the number of seconds to wait 224 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Web Server Commands Default Configuration The default timout is 10 minutes Command Mode Global Configuration mode User Guidelines This command also configures the exec timeout for HTTPS in case the the HTTPS timeout was not set To specify no timeout enter the ip https exec timeout 0 0 command ip https server The ip https server Global Configuration mode command enables configuring the device from a secured browser To return to the default configuration use the no form of this command Syntax ip https server no ip https server Default Configuration Disabled Command Mode Global Configuration mode User Guidelines Use the crypto certificate generate Global Configuration mode command to generate an HTTPS certificate Example The following example enables configuring the device from a secured browser Console config ip https server Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 225 Web Server Commands ip https port The ip https port Global Configuration mode command specifies the TCP port used by the server to configure the device through the Web browser To return to the default configuration use the no form of this command Syntax ip https port
131. ard on all spanning tree instances on the interface Root guard prevents the interface from becoming the root port of the device To disable root guard on the interface use the no form of this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 279 Spanning Tree Commands Syntax spanning tree guard root no spanning tree guard root Default Configuration Root guard is disabled Command Mode Interface Configuration Ethernet port channel mode User Guidelines Example Root guard can be enabled when the device operates in STP RSTP and MSTP When root guard is enabled the port changes to the alternate state if spanning tree calculations selects the port as the root port The following example prevents Ethernet port from being the root port of the device Console config interface ethernet ext 1 Console config mst spanning tree guard root show spanning tree The show spanning tree Privileged EXEC mode command displays spanning tree configuration Syntax show spanning tree ethernet interface number port channel port channel number instance instance id show spanning tree detail active blockedports instance instance id show spanning tree mst configuration Parameters e interface number A valid Ethernet port 280 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands e port channel number
132. are being downloaded at the time of reset Example The following example reloads the operating system Console reload This command will reset the whole system and disconnect your current session Do you want to continue y n n hostname The hostname Global Configuration mode command specifies or modifies the device host name To remove the existing host name use the no form of the command Syntax hostname name no hostname Parameters e name The host name of the device Range 1 158 characters Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 329 System Management Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example specifies the device host name Console config hostname enterprise enterprise config show users The show users User EXEC mode command displays information about the active users Syntax show users Default Configuration This command has no default configuration Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays information about the active users Console show users Username Protocol Location 330 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI
133. ating the value compared against the thresholds If the value is absolute the value of the variable is compared directly with the thresholds at the end of the sampling interval If the value is delta the value of the variable at the last sample is subtracted from the current value and the difference compared with the thresholds Startup Alarm The alarm that may be sent when this entry is first set If the first sample is greater than or equal to the rising threshold and startup alarm is equal to rising or rising and falling then a single rising alarm is generated If the first sample is less than or equal to the falling threshold and startup alarm is equal falling or rising and falling then a single falling alarm is generated Rising Threshold A sampled statistic threshold When the current sampled value is greater than or equal to this threshold and the value at the last sampling interval is less than this threshold a single event is generated Falling Threshold A sampled statistic threshold When the current sampled value is less than or equal to this threshold and the value at the last sampling interval is greater than this threshold a single event is generated Rising Event The event index used when a rising threshold is crossed Falling Event The event index used when a falling threshold is crossed Owner The entity that configured this entry rmon event The rmon event Global Configuration mod
134. ation HTTP server is enabled Command Mode Global Configuration mode User Guidelines Only a user with access level 15 can use the Web server Example The following example enables configuring the device from a browser Console config ip http server ip http port The ip http port Global Configuration mode command specifies the TCP port to be used by the Web browser interface To return to the default configuration use the no form of this command Syntax ip http port port number Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 223 Web Server Commands no ip http port Parameters e port number Port number for use by the HTTP server Range 0 65535 Default Configuration The default port number is 80 Command Mode Global Configuration mode User Guidelines Use the crypto certificate generate Global Configuration mode command to generate an HTTPS certificate Specifying 0 as the port number effectively disables HTTP access to the device Example The following example configures the http port number to 100 Console config ip http port 100 ip http exec timeout The ip http exec timeout command allows users to define the interval that the system waits for user input in http sessions before automatic logoff To return to default use the no form of this command Syntax ip http exec timout minutes seconds no ip http exec timout P
135. ation use the no form of this command Syntax garp timer join leave leaveall timer_value no garp timer Parameters e join leave leaveall Indicates the type of timer 104 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide GVRP Commands e timer_value Timer values in milliseconds in multiples of 10 Range 10 2147483640 Default Configuration Following are the default timer values e Join timer 200 milliseconds e Leave timer 600 milliseconds e Leavall timer 10000 milliseconds Command Mode Interface Configuration Ethernet port channel mode User Guidelines Example The following relationship must be maintained between the timers Leave time must be greater than or equal to three times the join time Leave all time must be greater than the leave time Set the same GARP timer values on all Layer 2 connected devices If the GARP timers are set differently on Layer 2 connected devices the GARP application will not operate successfully The following example sets the leave timer for Ethernet port 6 to 900 milliseconds Console config interface ethernet ext 6 Console config if garp timer leave 900 gvrp vian creation forbid Syntax The gvrp vlan creation forbid Interface Configuration Ethernet port channel mode command disables dynamic VLAN creation or modification To enable dynamic VLAN creation or modification use the no for
136. ault Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command 76 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Configuration and Image File Commands Example The following example displays the active system image file that is loaded by the device at startup Console show bootvar Unit Active Image Selected for next boot Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 77 Configuration and Image File Commands 78 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide D Ethernet Configuration Commands interface ethernet The interface ethernet Global Configuration mode command enters the interface configuration mode to configure an Ethernet type interface Syntax interface ethernet interface Parameters e interface Valid Ethernet port Full syntax unit port Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enables configuring Ethernet port 8 Console config interface ethernet ext 8 interface range ethernet The interface range ethernet Global Configuration mode command configures multiple Ethernet type interfaces at the
137. bad packets received that are between 512 and 1023 octets in length inclusive excluding framing bits but including FCS octets 1024 to 1518 Octets The total number of packets including bad packets received that are between 1024 and 1518 octets in length inclusive excluding framing bits but including FCS octets rmon collection history The rmon collection history Interface Configuration Ethernet port channel mode command enables a Remote Monitoring RMON MIB history statistics group on an interface To remove a specified RMON history statistics group use the no form of this command Syntax rmon collection history index owner ownername buckets bucket number interval seconds no rmon collection history index Parameters e index Specifies the statistics group index Range 1 65535 ownername Specifies the RMON statistics group owner name Range 0 160 characters e bucket number Number of buckets specified for the RMON collection history group of statistics If unspecified defaults to 50 Range 1 65535 e seconds Number of seconds in each polling cycle Range 1 3600 Default Configuration RMON statistics group owner name is an empty string Number of buckets specified for the RMON collection history statistics group is 50 Number of seconds in each polling cycle is 1800 Command Mode Interface Configuration Ethernet port channel mode Intel Blade
138. causes the port to transition to the authorized or unauthorized state based on the 802 1x authentication exchange between the port and the client force authorized Disables 802 1x authentication on the interface and causes the port to transition to the authorized state without any authentication exchange required The port resends and receives normal traffic without 802 1x based authentication of the client e force unauthorized Denies all access through this interface by forcing the port to transition to the unauthorized state and ignoring all attempts by the client to authenticate The device cannot provide authentication services to the client through the interface Default Configuration Port is in the force authorized state Command Mode Interface Configuration Ethernet User Guidelines It is recommended to disable spanning tree or to enable spanning tree PortFast mode on 802 1x edge ports ports in auto state that are connected to end stations in order to get immediately to the forwarding state after successful authentication Example The following example enables 802 1x authentication on Ethernet port 16 Console config interface ethernet ext 16 Console config if dot1ix port control auto Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 385 802 1x Commands dot1x re authentication The dot1x re authentication Interface Configuration mode command enables perio
139. ccess tables are available e writeview Specifies a string that is the name of the view that enables entering data and configuring the contents of the agent If unspecified nothing is defined for the write view e notifvview Specifies a string that is the name of the view that enables specifying an inform or a trap If unspecified nothing is defined for the notify view Applicable only to the SNMP Version 3 security model Default Configuration No group entry exists Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command 240 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands Example The following example attaches a group called user group to SNMPv3 and assigns to the group the privacy security level and read access rights to a view called user view Console config snmp server group user group v3 priv read user view snmp server user The snmp server user Global Configuration mode command configures a new SNMP Version 3 user To remove a user use the no form of this command Syntax snmp server user username groupname remote engineid string auth md5 password auth sha password auth md5 key md5 des keys auth sha key sha des keys no snmp server user username remote engineid string Parameters e username Specifies the name of the user on the host that connects to the agent Range 1 30
140. ce Configuration Ethernet mode command counts multicast packets in broadcast storm control To disable counting multicast packets use the no form of this command Syntax port storm control include multicast unknown unicast no port storm control include multicast 98 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands Parameters e unknown unicast Specifies also counting unknown unicast packets Default Configuration Multicast packets are not counted Command Modes Interface Configuration Ethernet mode User Guidelines There are no user guidelines for this command Example The following example enables counting broadcast and multicast packets on Ethernet port 2 Console config interface ethernet ext 2 Console config if port storm control include multicast unknown unicast port storm control broadcast enable The port storm control broadcast enable Interface Configuration Ethernet mode command enables broadcast storm control To disable broadcast storm control use the no form of this command Syntax port storm control broadcast enable no port storm control broadcast enable Default Configuration Broadcast storm control is disabled Command Modes Interface Configuration Ethernet mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 99 Ethernet Configuration Commands User G
141. ceived broadcast packets OutOctets Counted transmitted octets OutUcastPkts Counted transmitted unicast packets OutMcastPkts Counted transmitted multicast packets OutBcastPkts Counted transmitted broadcast packets FCS Errors Counted received frames that are an integral number of octets in length but do not pass the FCS check Single Collision Frames Counted frames that are involved in a single collision and are subsequently transmitted successfully Late Collisions Number of times that a collision is detected later than one slotTime into the transmission of a packet Excessive Collisions Number of excessive collisions received on the selected interface Oversize Packets Counted frames received that exceed the maximum permitted frame size 96 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands Field Description Internal MAC Rx Errors Counted frames for which reception fails due to an internal MAC sublayer received error Received Pause Frames Counted MAC Control frames received with an opcode indicating the PAUSE operation Transmitted Pause Frames Counted MAC Control frames transmitted on this interface with an opcode indicating the PAUSE operation show ports jumbo frame The show ports jumbo frame Privileged EXEC mode command displays the configuration of jumbo frames Syntax show ports jumbo frame
142. characters e groupname Specifies the name of the group to which the user belongs Range 1 30 characters e engineid string Specifies the engine ID of the remote SNMP entity to which the user belongs The engine ID is a concatenated hexadecimal string Each byte in the hexadecimal character string is two hexadecimal digits Each byte can be separated by a period or colon Range 5 32 characters e auth md5 password Indicates the HMAC MD5 96 authentication level The user should enter a password for authentication and generation of a DES key for privacy Range 1 32 characters e auth sha password lIndicates the HMAC SHA 96 authentication level The user should enter a password for authentication and generation of a DES key for privacy Range 1 32 characters e auth md5 key md5 des keys Indicates the HMAC MD5 96 authentication level The user should enter a concatenated hexadecimal string of the MD5 key MSB and the privacy key LSB If authentication is only required 16 bytes should be entered if authentication and privacy are required 32 bytes should be entered Each byte in the hexadecimal character string is two hexadecimal digits Each byte can be separated by a period or colon 16 or 32 bytes e auth sha key sha des keys Indicates the HMAC SHA 96 authentication level The user should enter a concatenated hexadecimal string of the SHA key MSB and the privacy key LSB If authentication is only required
143. cify none as the final method in the command line The RADIUS server must support MD 5 challenge and EAP type frames Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 383 802 1x Commands Example The following example uses the aaa authentication dot1x default command with no authentication Console configure Console config aaa authentication dotix default none dot1x system auth control The dot1x system auth control Global Configuration mode command enables 802 1x globally To return to the default configuration use the no form of this command Syntax dot1x system auth control no dot1x system auth control Default Configuration 802 1x is disabled globally Command Modes Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enables 802 1x globally Console config dot1lx system auth control dot1x port control The dot1x port control Interface Configuration mode command enables manually controlling the authorization state of the port To return to the default configuration use the no form of this command 384 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands Syntax dot1x port control auto force authorized force unauthorized no dotlx port control Parameters e auto Enables 802 1x authentication on the interface and
144. collisions and noise hits Jabbers The number of packets received during this sampling interval that were longer than 1518 octets excluding framing bits but including FCS octets and had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets Alignment Error Dropped The total number of events in which packets were dropped by the probe due to lack of resources during this sampling interval This number is not necessarily the number of packets dropped it is just the number of times this condition has been detected Collisions The best estimate of the total number of collisions on this Ethernet segment during this sampling interval rmon alarm The rmon alarm Global Configuration mode command configures alarm conditions To remove an alarm use the no form of this command Syntax rmon alarm index variable interval rthreshold fthreshold revent fevent type type startup direction owner name no rmon alarm index Parameters e index Specifies the alarm index Range 1 65535 e variable Specifies the object identifier of the variable to be sampled e interval Specifies the interval in seconds during which the data is sampled and compared with rising and falling thresholds Range 0 2147483647 e rthreshold Specifies the rising threshold Range 0 2147483647 e fthreshold Specifies the falling threshold Rang
145. command Syntax ip igmp snooping mrouter learn pim dvmrp no ip igmp snooping mrouter learn pim dvmrp Default Configuration Automatic learning of multicast device ports is enabled 112 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IGMP Snooping Commands Command Mode Interface Configuration VLAN mode User Guidelines Multicast device ports can be configured statically using the bridge multicast forward all Interface Configuration VLAN mode command Example The following example enables automatic learning of multicast device ports on VLAN 2 Console config interface vlan 2 Console config if ip igmp snooping mrouter learn pim dvmrp ip igmp snooping host time out The ip igmp snooping host time out Interface Configuration VLAN mode command configures the host time out If an IGMP report for a multicast group was not received for a host time out period from a specific port this port is deleted from the member list of that multicast group To restore the default configuration use the no form of this command Syntax ip igmp snooping host time out time out no ip igmp snooping host time out Parameters e time out Specifies the host timeout in seconds Range 1 2147483647 Default Configuration The default host time out is 260 seconds Command Mode Interface Configuration VLAN mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10
146. credit card exchange rate plus applicable taxes Intel reserves the right to change the pricing for telephone support at any time without notice Before calling fill out an Intel Server Issue Report Form available from http support intel com support For the fastest service please submit your form via the Internet For an updated support contact list see http www intel com support 9089 htm U S and Canada 1 800 404 2284 Europe Belgium 02 714 3182 Denmark 38 487077 Finland 9 693 79297 France 01 41 918529 Germany 069 9509 6099 Holland 020 487 4562 Italy 02 696 33276 Norway 23 1620 50 Spain 91 377 8166 Sweden 08 445 1251 UK 870 6072439 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 405 In Asia Pacific Region Japan Australia 1800 649931 Cambodia 63 2 636 9797 via Philippines China 800 820 1100 toll free RETE 8 621 33104691 not toll free Hong Kong 852 2 844 4456 India 0006517 2 68303634 manual toll free You need an IDD equipped telephone Indonesia 803 65 7249 Korea 822 767 2595 Malaysia 1 800 80 1390 Myanmar 63 2 636 9796 via Philippines New Zealand 0800 444 365 Pakistan 632 63684 15 IDD via Philippines Philippines 1 800 1 651 0117 Singapore 65 6213 1311 Taiwan 2 2545 1640 Thailand 1 800 631 0003 Vietnam 632 6368416 IDD via
147. de command enables measuring CPU utilization To return to the default configuration use the no form of this command Syntax service cpu utilization no service cpu utilization 336 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide System Management Commands Default Configuration Disabled Command Mode Global Configuration mode User Guidelines Use the show cpu utilization Privileged EXEC command to view information on CPU utilization Example This example enables measuring CPU utilization Console config service cpu utilization show cpu utilization The show cpu utilization Privileged EXEC mode command displays information about CPU utilization Syntax show cpu utilization Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines Use the service cpu utilization Global Configuration mode command to enable measuring CPU utilization Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 337 System Management Commands Example The following example configures the CPU utilization information display Console show cpu utilization CPU utilization service is on CPU utilization five seconds 5 one minute 3 five minutes 3 338 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide TACACS Commands 26 TACACS Comm
148. de command enables simultaneously configuring multiple VLANs Syntax interface range vlan vlan range all Parameters e vlan range Specifies a list of VLAN IDs to be added Separate nonconsecutive VLAN IDs with a comma and no spaces a hyphen designates a range of IDs e all All existing static VLANs Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each interface in the range If the command returns an error on one of the interfaces an error message is displayed and execution of the command continues on the other interfaces Configuring all ports may consume an excessive amount of time Define only the required ports to save time Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 357 VLAN Commands Example The following example groups VLANs 221 228 and 889 to receive the same command Console config interface range vlan 221 228 889 Console config if name The name Interface Configuration mode command adds a name to a VLAN To remove the VLAN name use the no form of this command Syntax name string no name Parameters e string Unique name to be associated with this VLAN Range 1 32 characters Default Configuration No name is defined Command Mode Interface Configuration VLAN mode Cann
149. dic re authentication of the client To return to the default configuration use the no form of this command Syntax dot1x re authentication no dot1x re authentication Default Configuration Periodic re authentication is disabled Command Mode Interface Configuration Ethernet User Guidelines There are no user guidelines for this command Example The following example enables periodic re authentication of the client Console config interface ethernet ext 16 Console config if dotix re authentication dot1x timeout re authperiod The dot1x timeout re authperiod Interface Configuration mode command sets the number of seconds between re authentication attempts To return to the default configuration use the no form of this command Syntax dot1x timeout re authperiod seconds no dot1x timeout re authperiod 386 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands Parameters e seconds Number of seconds between re authentication attempts Range 300 4294967295 Default Configuration Re authentication period is 3600 seconds Command Mode Interface Configuration Ethernet mode User Guidelines There are no user guidelines for this command Example The following example sets the number of seconds between re authentication attempts to 300 Console config interface ethernet ext 16 Console config if dot1ix timeout re aut
150. displays the parameters of the aggregate policer called policer1 Console show qos aggregate policer policerl aggregate policer policerl 96000 4800 exceed action drop not used by any policy map show qos interface The show qos interface Privileged EXEC mode command displays Quality of Service QoS information on the interface Syntax show qos interface ethernet interface number port channel number port channel number buffers queueing policers shapers Parameters interface number Valid Ethernet port number e number Valid port channel number e buffers Displays the buffer setting for the interface s queues Displays the queue depth for each queue and the thresholds for the WRED e queuing Displays the queue strategy WRR or EF the weight for WRR queues the CoS to queue map and the EF priority policers Displays the shaper of the specified interface and the shaper for the queue on the specified interface e shapers Displays all the policers configured for this interface their setting and the number of policers currently unused Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 167 QoS Commands Default Configuration There is no default configuration for this command Command Mode Privileged EXEC mode User Guidelines Example If no keyword is specified port QoS mode for example DSCP trusted CoS trusted untrusted
151. dot1x multiple hosts no dot1x multiple hosts Default Configuration Multiple hosts are disabled Command Mode Interface Configuration Ethernet mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 399 802 1x Commands User Guidelines Example This command enables the attachment of multiple clients to a single 802 1x enabled port In this mode only one of the attached hosts must be successfully authorized for all hosts to be granted network access If the port becomes unauthorized all attached clients are denied access to the network For unauthenticated VLANs multiple hosts are always enabled Multiple hosts must be enabled to enable port security on the port The following command enables multiple hosts clients on an 802 1x authorized port Console config if dot1x multiple hosts dot1x single host violation The dot1x single host violation Interface Configuration mode command configures the action to be taken when a station whose MAC address is not the supplicant MAC address attempts to access the interface Use the no form of this command to return to default Syntax dot1x single host violation forward discard discard shutdown trap seconds no port dot1x single host violation Parameters e forward Forwards frames with source addresses that are not the supplicant address but does not learn the source addresses e discard Discards frames with so
152. dress can be displayed in IP format only if it is in the range of 0100 5e00 0000 0100 5e7f ffff Example In this example multicast MAC address and IP address table information is displayed Console show bridge multicast address table Vian MAC Address Type Ports 1 01 00 5e 02 02 03 static La S 19 01 00 5e 02 02 08 static 1 8 19 00 00 5e 02 02 08 dynamic 9 11 Forbidden ports for multicast addresses Vlan MAC Address Ports 1 01 00 5e 02 02 03 8 19 01 00 5e 02 02 08 8 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 35 Address Table Commands Console show bridge multicast address table format ip Vlan IP MAC Address Type Ports 1 224 239 130 2 2 3 static 1 2 19 224 239 130 2 2 8 static 1 8 19 224 239 130 2 2 8 dynamic 9 11 Forbidden ports for multicast addresses Vian IP MAC Address Ports 1 224 239 130 2 2 3 8 19 224 239 130 2 2 8 8 A multicast MAC address maps to multiple IP addresses as shown above show bridge multicast filtering The show bridge multicast filtering Privileged EXEC mode command displays the multicast filtering configuration Syntax show bridge multicast filtering vlan id Parameters e vlan id Indicates the VLAN ID This has to be a valid VLAN ID value Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command 36 Int
153. ds can be copied and pasted into the device It is the user s responsibility to ensure that the text copied into the device consists of legal commands only This feature is dependent on the baud rate of the device When copying and pasting commands from a configuration file make sure that the following conditions exist A device Configuration mode has been accessed The commands contain no encrypted data like encrypted passwords or keys Encrypted data cannot be copied and pasted into the device Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 7 Using CLI 8 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 2 AAA Commands aaa authentication login The aaa authentication login Global Configuration mode command defines login authentication To restore defaults use the no form of this command Syntax aaa authentication login default ist name method method2 no aaa authentication login default ist name Parameters e default Uses the listed authentication methods that follow this argument as the default list of methods when a user logs in e list name Character string used to name the list of authentication methods activated when a user logs in Range 1 12 characters e method method2 Specify at least one method from the following list Keyword Description enable Uses the enable password for authenticat
154. ds to define management access lists The management access list Global Configuration mode command is used to enter the Management Access List Configuration mode Ethernet Contains commands to manage port configuration The interface ethernet Global Configuration mode command is used to enter the Interface Configuration mode to configure an Ethernet type interface Port Channel Contains commands to configure port channels for example assigning ports to a port channel Most of these commands are the same as the commands in the Ethernet interface mode and are used to manage the member ports as a single entity The interface port channel Global Configuration mode command is used to enter the Port Channel Interface Configuration mode SSH Public Key chain Contains commands to manually specify other device SSH public keys The crypto key pubkey chain ssh Global Configuration mode command is used to enter the SSH Public Key chain Configuration mode QoS Contains commands related to service definitions The qos Global Configuration mode command is used to enter the QoS services configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 3 Using CLI e MAC Access List Configures conditions required to allow traffic based on MAC addresses The mac access list Global Configuration mode command is used to enter the MAC access list configuration mode Starting the CLI The device can be
155. e User Guidelines There are no user guidelines for this command Example The following example sets the system time to 13 32 00 on March 7th 2005 Console clock set 13 32 00 7 Mar 2005 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 53 Clock Commands clock source The clock source Global Configuration mode command configures an external time source for the system clock Use no form of this command to disable external time source Syntax clock source sntp no clock source Parameters e sntp SNTP servers Default Configuration No external clock source Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example configures an external time source for the system clock Console config clock source sntp clock timezone The clock timezone Global Configuration mode command sets the time zone for display purposes To set the time to the Coordinated Universal Time UTC use the no form of this command Syntax clock timezone hours offset minutes minutes offset zone acronym 54 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Clock Commands no clock timezone Parameters e hours offset Hours difference from UTC Range 12 hours to 13 hours e minutes offset Minutes difference from UTC Range 0 59 e acronym
156. e A Administratively unreachable Usually this output indicates that an access list is blocking traffic F Fragmentation is required and DF is set 324 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide System Management Commands Host unreachable Network unreachable Protocol unreachable Source quench Fragment reassembly time exceeded Source route failed CoO DV O Vi 2 4 Port unreachable telnet The telnet User EXEC mode command enables logging on to a host that supports Telnet Syntax telnet ip address hostname port keyword1 Parameters ip address IP address of the destination host e hostname Host name of the destination host Range 1 158 characters e port A decimal TCP port number or one of the keywords listed in the Ports table in the User Guidelines e keyword One or more keywords listed in the Keywords table in the User Guidelines Default Configuration The default port is the Telnet port decimal23 on the host Command Mode User EXEC mode User Guidelines Telnet software supports special Telnet commands in the form of Telnet sequences that map generic terminal control functions to operating system specific functions To enter a Telnet sequence press the escape sequence keys Ctrl shift 6 followed by a Telnet command character Intel Blade Server Ethernet Switch Modules SBCEGBES
157. e 0 2147483647 e revent Specifies the event index used when a rising threshold is crossed Range 1 65535 e fevent Specifies the event index used when a falling threshold is crossed Range 1 65535 206 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide RMON Commands type Specifies the method used for sampling the selected variable and calculating the value to be compared against the thresholds Possible values are absolute and delta If the method is absolute the value of the selected variable is compared directly with the thresholds at the end of the sampling interval If the method is delta the selected variable value of the last sample is subtracted from the current value and the difference is compared with the thresholds direction Specifies the alarm that may be sent when this entry is first set to valid Possible values are rising rising falling and falling If the first sample after this entry becomes valid is greater than or equal to rthreshold and direction is equal to rising or rising falling a single rising alarm is generated If the first sample after this entry becomes valid is less than or equal to fthreshold and direction is equal to falling or rising falling a single falling alarm is generated name Specifies the name of the person who configured this alarm If unspecified the name is an empty string Default Configuration The type is absolute T
158. e The configure Privileged EXEC mode command enters the Global Configuration mode Syntax configure Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example enters Global Configuration mode Console configure Console config Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 347 User Interface Commands exit Configuration The exit command exits any configuration mode to the next highest mode in the CLI mode hierarchy Syntax exit Default Configuration This command has no default configuration Command Mode All configuration modes User Guidelines There are no user guidelines for this command Example The following example changes the configuration mode from Interface Configuration mode to Privileged EXEC mode Console config if exit Console config exit Console exit The exit Privileged User EXEC mode command closes an active terminal session by logging off the device Syntax exit Default Configuration This command has no default configuration 348 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide User Interface Commands Command Mode Privileged and User EXEC modes User Guidelines There are no user guidelines for this command Example The f
159. e command configures an event To remove an event use the no form of this command Syntax rmon event index type community text description text owner name no rmon event index Parameters e index Specifies the event index Range 1 65535 e type Specifies the type of notification generated by the device about this event Possible values none log trap log trap 210 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide RMON Commands e community text If the specified notification type is trap an SNMP trap is sent to the SNMP community specified by this octet string Range 0 127 characters e description text Specifies a comment describing this event Range 0 127 characters e name Specifies the name of the person who configured this event If unspecified the name is an empty string Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines If log is specified as the notification type an entry is made in the log table for each event If trap is specified an SNMP trap is sent to one or more management stations Example The following example configures an event identified as index 10 and for which the device generates a notification in the log table Console config rmon event 10 log show rmon events The show rmon events Privileged EXEC mode command displays the RMON
160. e command modifies the policed DSCP map for remarking purposes To return to the default map use the no form of this command 190 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands Syntax qos map policed dsep dscp list to dscp mark down no qos map policed dscp Parameters e dscp list Specifies up to 8 DSCP values separated by a space Range 0 63 e dscp mark down Specifies the DSCP value to mark down Range 0 63 Default Configuration The default map is the Null map which means that each incoming DSCP value is mapped to the same DSCP value Command Mode Global Configuration mode User Guidelines DSCP values 3 11 19 cannot be remapped to other values Example The following example marks down incoming DSCP value 3 as DSCP value 43 on the policed DSCP map Console config qos map policed dscp 3 to 43 Reserved DSCP DSCP 3 was not configured qos map dscp queue The qos map dscp queue Global Configuration mode command modifies the DSCP to CoS map To return to the default map use the no form of this command Syntax qos map dscp queue dscp list to queue id no qos map dscp queue Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 191 QoS Commands Parameters e dscp list Specifies up to 8 DSCP values separated by a space Range 0 63 e queue id Specifies the queue number to which the DSCP valu
161. e displays SSH public keys stored on the device Console show crypto key pubkey chain ssh Username Fingerprint bob 9A CC701 C5278 39327586 79 CC 232C5 98259 F 15 86 john 98 F7 6E 28 F2 79 87 C8 18 F8 88 CC F8 89 87 C8 Console show crypto key pubkey chain ssh username bob Username bob Key 005C300D 06092A86 4886F70D 01010105 00034B00 30480241 00C5E23B 55D6AB22 04AEF1BA A54028A6 9ACC01C5 129D99E4 Fingerprint 9A CC 01 C5 78 39 27 86 79 CC 23 C5 98 59 F1 86 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 305 SSH Commands 306 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 24 Syslog Commands logging on Syntax The logging on Global Configuration mode command controls error message logging This command sends debug or error messages to a logging process which logs messages to designated locations asynchronously to the process that generated the messages To disable the logging process use the no form of this command logging on no logging on Default Configuration Logging is enabled Command Mode Global Configuration mode User Guidelines Example The logging process controls the distribution of logging messages at various destinations such as the logging buffer logging file or syslog server Logging on and off at these destinations can be individually configured using the logging buffered logging file and logging Glob
162. e following example configures the number of expedite queues as 0 Console config priority queue out num of queues 0 traffic shape The traffic shape Interface Configuration Ethernet port channel mode command configures the shaper of the egress port queue To disable the shaper use the no form of this command Syntax traffic shape committed rate committed burst traffic shape queue id no traffic shape queue id Parameters e committed rate Specifies the average traffic rate CIR in bits per second bps Range 6510 64 10000000 186 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands e excess burst Specifies the excess burst size CBS in bytes Range 4096 16769020 e queue id Specifies the queue number to which the shaper is assigned Range 0 8 Default Configuration No shape is defined Command Mode Interface Configuration Ethernet port channel mode User Guidelines This command activates the shaper on a specified egress port or egress queue To activate the shaper on an egress port enter the Interface Configuration mode and specify the port number Then run this command without the queue id parameter The CIR and the CBS will be applied to the specified port To activate the shaper for specific queue run this command with the queue id parameter Example The following example sets a shaper on Ethernet port 5 when the average t
163. e no form of this command Syntax radius server retransmit retries no radius server retransmit Parameters e retries Specifies the retransmit value Range 1 10 Default Configuration The software searches the list of RADIUS server hosts 3 times Command Mode Global Configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 217 RADIUS Commands User Guidelines There are no user guidelines for this command Example The following example configures the number of times the software searches all RADIUS server hosts to 5 times console config radius server retransmit 5 radius server source ip The radius server source ip Global Configuration mode command specifies the source IP address used for communication with RADIUS servers To restore the default configuration use the no form of this command Syntax radius server source ip source no radius source ip source Parameters e source Specifies a valid source IP address Default Configuration The source IP address is the IP address of the outgoing IP interface Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command 218 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide RADIUS Commands Example The following example configures the source IP address used for communication with all RADIUS servers to 10 1 1 1
164. e of an existing class map If the class map does not exist a new class map will be created under the specified name e acl name Specifies the name of an IP or MAC ACL Default Configuration 174 No policy map is defined Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands Command Mode Policy map Configuration mode User Guidelines Before modifying a policy for an existing class or creating a policy for a new class use the policy map Global Configuration mode command to specify the name of the policy map to which the policy belongs and to enter the Policy map Configuration mode Use the service policy Ethernet Port channel Interface Configuration mode command to attach a policy map to an interface Use an existing class map to attach classification criteria to the specified policy map and use the access group parameter to modify the classification criteria of the class map If this command is used to create a new class map the name of an IP or MAC ACL must also be specified Example The following example defines a traffic classification called class with an access group called enterprise The class is in a policy map called policy Console config policy map policyl Console config pmap class classl access group enterprise show policy map The show policy map User EXEC command displays the policy maps Syntax show policy map policy map name clas
165. e same device This example configures ethernet port 8 as a protected port so that all traffic is sent to its uplink ethernet port 1 Console config interface ethernet ext 1 Console config if switchport forbidden vlan add 234 256 Console config if exit Console config interface ethernet ext 1 Console config if switchport protected ethernet ext 1 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 359 VLAN Commands switchport mode The switchport mode Interface Configuration mode command configures the VLAN membership mode of a port To return to the default configuration use the no form of this command Syntax switchport mode access trunk general no switchport mode Parameters e access Indicates an untagged layer 2 VLAN port e trunk Indicates a trunking layer 2 VLAN port e general Indicates a full 802 1q supported VLAN port Default Configuration All ports are in access mode and belong to the default VLAN whose VID 1 Command Mode Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines Example The following example configures Ethernet port as an untagged layer 2 VLAN port Console config interface ethernet ext 1 Console config if switchport mode access switchport access vlan The switchport access vlan Interface Configuration mode command configures the VLAN ID when the i
166. e vlan id Specifies the valid VLAN number e port channel number Specifies the valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command 124 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IP Address Commands Example The following example the displays the configured IP interfaces and their types Console show ip interface Proxy ARP is disabled IP address I F Type 10 7 1 192 24 1 Static 10 7 2 192 24 2 Static Direct Broadca St disable disable arp The arp Global Configuration mode command adds a permanent entry in the Address Resolution Protocol ARP cache To remove an entry from the ARP cache use the no form of this command Syntax arp ip_addr hw_addr ethernet interface number vlan vlan id port channel port channel number no arp ip_addr ethernet interface number vlan vlan id port channel port channel number Parameters ip_addr Valid IP address or IP alias to map to the specified MAC address e hw_addr Valid MAC address to map to the specified IP address or IP alias e interface number Valid Ethernet port e vlan id Valid VLAN number e port channel number Valid port channel number Default Configuration This command has no default configuration Intel Blade Serv
167. ear arp cache Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example deletes all dynamic entries from the ARP cache Console clear arp cache show arp The show arp Privileged EXEC mode command displays entries in the ARP table Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 127 IP Address Commands Syntax show arp Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays entries in the ARP table Console show arp ARP timeout 80000 Seconds Interface IP address HW address Status 1 10 57 1102 00 10 B5 04 DB 4B Dynamic 2 10 7 1 135 00 50 22 00 2A A4 Static ip domain lookup The ip domain lookup Global Configuration mode command enables the IP Domain Naming System DNS based host name to address translation To disable DNS based host name to address translation use the no form of this command Syntax ip domain lookup no ip domain lookup 128 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IP Address Commands Default Configuration IP Domain Naming System DNS based host name to address translation is enabled
168. ed File system Delete Rename Enabled Management ACL Deny Enabled Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 317 Syslog Commands Buffer log Aug 2004 15 41 43 Aug 2004 15 41 43 Aug 2004 15 41 43 oe LINK 3 UPDOWN Interface FastEthernet ext 0 changed state to up LINK 3 UPDOWN Interface Ethernet ext 0 changed state to up LINK 3 UPDOWN Interface Ethernet ext 1 changed state to up ole d Aug 2004 15 41 43 Aug 2004 15 41 43 Aug 2004 15 41 43 d i LINK 3 UPDOWN Interface Ethernet ext 2 changed state to up LINK 3 UPDOWN Interface Ethernet ext 3 changed state to up S 5 CONFIG I Configured from memory by console oe de n K Aug 2004 15 41 39 SL changed state to up GI PROTO 5 UPDOWN Line protocol on Interface FastEthernet ext 0 Aug 2004 15 41 39 SL changed state to down ea ae ROTO 5 UPDOWN Line protocol on Interface Ethernet ext 0 Aug 2004 15 41 39 SLI changed state to down Aug 2004 15 41 39 changed state to down Aug 2004 15 41 39 changed state to down ea ae ROTO 5 UPDOWN Line protocol on Interface Ethernet ext 1 d i ea ae ROTO 5 UPDOWN Line protocol on Interface Ethernet ext 2 d i E ea as ROTO 5 UPDOWN Line protocol on Interface Ethernet ext 3 show syslog servers The show syslog servers Privileged EXEC mode command displays the set
169. ed the default setting is the master unit number Command Mode Privileged EXEC mode User Guidelines Use the show bootvar command to find out which image is the active image Example The following example loads the system image 1 at device startup Console boot system image 1 show running config The show running config Privileged EXEC mode command displays the contents of the currently running configuration file Syntax show running config Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 73 Configuration and Image File Commands Example The following example displays the contents of the running configuration file Console show running config hostname device interface ethernet ext 1 ip address 176 242 100 100 255 255 255 0 duplex full speed 1000 interface ethernet ext 2 ip address 176 243 100 100 255 255 255 0 duplex full speed 1000 show startup config The show startup config Privileged EXEC mode command displays the contents of the startup configuration file Syntax show startup config Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command
170. eeeeeeeeeeeeeeeeeees 157 SEENEN 157 intertace DEED sciccrsscacnscedcecrennauenctiaorsaraddennanenmscesadiandeanaananvandnepteerdadavaamnentcelainiare 157 Te E TEE 158 EE EE 158 show interfaces port channel eege 159 Chapter 16 Port Monitor Commande cccseeeeseeeeeeeeeeeeseeeeeeeeeeeseeeeeeeeeeeeeeeeees 161 port monitor vlan tagging EE 162 x Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide e el e e E 163 Chapter 17 e e TO ET TEE 165 LEE 165 SNOW QOS ee 166 show e Ee e Te EE e TEE 166 show qos interface eege Eege 167 SHOW QOS nn EE 169 Glass MAD EE 170 Show CLASSE EE 171 MAGN tege EATE RREA EEAS ET TEENETE ARRAES 172 eltern E 173 WAS edel 174 ShOW OIC ETNA ee ee a i 175 ONE 176 E tege gege EE geed Eech EBEN 177 le 178 SCIVIGC DONOY EE 179 qos et e 180 show qos aggregate policer EE 181 ie eege 182 Wir qUe COS MAP TEE 183 tee ET Oe E 184 priority queue out NUM Of QUEUES ENEE 185 UE Le 186 show GOS internato EE 187 qos wrr queue threshold E 189 GS HAP policed ASP E 190 qOS MAp dSCp QUEUE eegene 191 GOS tr st Global EE 192 qos trust IMGACS cto sccrseasnoencesdatetansecrensnmnegistudueeequtante runtaticadretancatdetecnaceeaebivetestenncndsnseds 193 OS COS eebe eegene E dese 194 qos ope in 0 1d 0 9 RE 195 qos map e en e ME 196 Chapter 18 RMON Command cccccccecceeeeeeeenseeeeeneeneeneeeeeeeeeeeeeeeeeeeeeeeeeeeess 199 SHOW MON EE EE 199 rmon collection h
171. efault value of this command should be changed only to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers Example The following example sets the number of times that the device sends an EAP request identity frame to 6 Console config interface ethernet ext 16 Console config if dotlx max req 6 dot1x timeout supp timeout The dot1x timeout supp timeout Interface Configuration mode command sets the time for the retransmission of an Extensible Authentication Protocol EAP request frame to the client To return to the default configuration use the no form of this command Syntax dot1x timeout supp timeout seconds no dot1x timeout supp timeout Parameters e seconds Time in seconds that the device waits for a response to an EAP request frame from the client before resending the request Range 1 65535 seconds Default Configuration Default timeout period is 30 seconds Command Mode Interface configuration Ethernet mode User Guidelines The default value of this command should be changed only to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 391 802 1x Commands Example The following example sets the timeout period before retransmitting
172. el Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Address Table Commands Example In this example the multicast configuration for VLAN is displayed Console show bridge multicast filtering 1 Filtering Enabled VLAN 1 Port Static Status 1 Filter 2 Filter 3 Filter show ports security The show ports security Privileged EXEC mode command displays the port lock status Syntax show ports security ethernet interface port channel port channel number Parameters e interface A valid Ethernet port e port channel number A valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 37 Address Table Commands Example In this example all classes of entries in the port lock status are displayed Console show ports security Port Status Learning Action Maximum Trap Frequency 1 Locked Dynamic Discard 3 Enable 100 2 Unlocked Dynamic 28 3 Locked Disabled Discard 8 Disable Shutdown The following table describes the fields shown above Field Description Port The port number Status The values are Locked Unlocked Learning The learning mode Action Action on violation Maximum The maximum number of
173. elines Example 62 Use the sntp broadcast client enable Global Configuration mode command to enable broadcast clients globally Use the sntp anycast client enable Global Configuration mode command to enable anycast clients globally The following example enables the SNTP client on Ethernet port 3 Console config interface ethernet ext 3 Console config if sntp client enable Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Clock Commands sntp unicast client enable The sntp unicast client enable Global Configuration mode command enables the device to use the Simple Network Time Protocol SNTP to request and accept SNTP traffic from servers To disable requesting and accepting SNTP traffic from servers use the no form of this command Syntax sntp unicast client enable no sntp unicast client enable Default Configuration The SNTP unicast client is disabled Command Mode Global Configuration mode User Guidelines Use the sntp server Global Configuration mode command to define SNTP servers Example The following example enables the device to use the Simple Network Time Protocol SNTP to request and accept SNTP traffic from servers Console config sntp unicast client enable sntp unicast client poll The sntp unicast client poll Global Configuration mode command enables polling for the Simple Network Time Protocol SNTP predefined unicast servers To d
174. elines There are no user guidelines for this command Example The following example displays the configuration of users Console show snmp users Name Group name Auth Method Remote John user group md5 John user group md5 08009009020C0B099C075879 258 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 22 Spanning Tree Commands spanning tree The spanning tree Global Configuration mode command enables spanning tree functionality To disable the spanning tree functionality use the no form of this command Syntax spanning tree no spanning tree Default Configuration Spanning tree is enabled Command Modes Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enables spanning tree functionality Console config spanning tree spanning tree mode The spanning tree mode Global Configuration mode command configures the spanning tree protocol To restore the default configuration use the no form of this command Syntax spanning tree mode stp rstp mstp Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 259 Spanning Tree Commands no spanning tree mode Parameters e stp Indicates that the Spanning Tree Protocol STP is enabled e rstp Indicates that the Rapid Spanning Tree Protocol RSTP is enabled e mstp Indicates that the Multiple Spann
175. em priority is 1 Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example configures the system priority to 120 Console config lacp system priority 120 lacp port priority The lacp port priority Interface Configuration Ethernet mode command configures physical port priority To return to the default configuration use the no form of this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 135 LACP Commands Syntax lacp port priority value no lacp port priority Parameters e value Specifies port priority Range 1 65535 Default Configuration The default port priority is 1 Command Mode Interface Configuration Ethernet mode User Guidelines There are no user guidelines for this command Example The following example defines the priority of Ethernet port 6 as 247 Console config interface ethernet ext 6 Console config if lacp port priority 247 lacp timeout The lacp timeout Interface Configuration Ethernet mode command assigns an administrative LACP timeout To return to the default configuration use the no form of this command Syntax lacp timeout long short no lacp timeout Parameters e long Specifies the long timeout value 136 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide LACP Commands e s
176. ennedstnadsadutenatecsakecseiedanettieneenctonhnteees 259 Spanning tree forward time cccccccceeeseeccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeseeeeeeeeeeeeeseeeseeeenseeeees 260 spanning tree Max age E 262 spanning tree DEER saisine sce ace ena aiaa Een 263 Rate e TE E 264 GE Une E EE 264 spanning tree port priority ccesicescrrsccerenvwenduate denciwncmersscentdnuendsadanlesieits cendenenlnceriaenimerestsendiinens 265 spanning tree POMIASE E 266 spanning tree link type arose acd sas ean Sai ces ea emcee ees 267 spanning tree pathcost Method cceeeeeccceeeeeeeeeneeeeeeeeeeeesseeeeeeeeeeeeeseeeeeneneeeseessneneeseeeess 268 SPAMMING NEE 269 clear spanning tree detected protocols 0 cece reer eee eteeeeeeeeeeeeeeeeteaaaeeeeeeeeeeeaaa 270 spanning tree MIST priority accscceicsnederetenieunars cre tecumatentaacenenosaiedetaaanewnedcammetaatecereacnmieadsececdGunnie 270 Spanning tree mst MAX NOPS eee ceeeeeeee eee ee eee eeeeeeeeeeeee rene saaeeeeeeeeeesegaaaaeseeeeeeeneseeneeeeees 271 spanning tree mst port priority ssecccccecdradesesnacaneciavearatientecaians doventee ee ceceectereind enieiads 272 spanning tree MSt E 273 spanning tree mst configuration essen cesiavas ines cetmetalsanvscuaslaacaasdesands stantinewedaddacdsuastxscaaieemuactenneens 274 instanc ITISL serros EE EEEE KAER REEERE EEEE EREE OIEK 275 PRTG CLAIS ceo ascncvies detec oreneact aadete nee geereousssonentney car wecenstonsaranncoaysnanscrmdnatnanerediust
177. ent SLE Leave Empty Sent sLA Leave All Sent Port rJE rJIn rkEmp rLIn rLE rLA sJE sJIn sbmp sin SLE sLA Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 109 GVRP Commands show gvrp error statistics The show gvrp error statistics Privieged EXEC mode command displays GVRP error statistics Syntax show gvrp error statistics ethernet interface port channel port channel number Parameters e interface A valid Ethernet port Full syntax unit port e port channel number A valid port channel number Default Configuration This command has no default configuration Command Mode Privieged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays GVRP statistical information Console show gvrp error statistics GVRP Error Statistics Legend INVPROT Invalid Protocol Id INVALEN Invalid Attribute Length INVATYP Invalid Attribute Type INVEVENT Invalid Event INVAVAL Invalid Attribute Value Port INVPROT INVATYP INVAVAL INVALEN INVEVENT 110 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 9 IGMP Snooping Commands ip igmp snooping Global The ip igmp snooping Global Configuration mode command enables Internet Group Management Protocol IGMP snooping To disable IGMP snooping use the no form of this command Syntax ip igmp snooping no
178. er Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 125 IP Address Commands Command Mode Global Configuration mode User Guidelines The software uses ARP cache entries to translate 32 bit IP addresses into 48 bit hardware addresses Because most hosts support dynamic resolution static ARP cache entries do not generally have to be specified Example The following example adds IP address 198 133 219 232 and MAC address 00 00 0c 40 0f bc to the ARP table Console config arp 198 133 219 232 00 00 0c 40 0f bc ethernet ext 6 arp timeout The arp timeout Global Configuration mode command configures how long an entry remains in the ARP cache To restore the default configuration use the no form of this command Syntax arp timeout seconds no arp timeout Parameters e seconds Time in seconds that an entry remains in the ARP cache Range 1 40000000 Default Configuration The default timeout is 60000 seconds Command Mode Global Configuration mode 126 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IP Address Commands User Guidelines It is recommended not to set the timeout value to less than 3600 Example The following example configures the ARP timeout to 12000 seconds Console config arp timeout 12000 clear arp cache The clear arp cache Privileged EXEC mode command deletes all dynamic entries from the ARP cache Syntax cl
179. er is not preserved across device resets By default the history buffer system is enabled but it can be disabled at any time For information about the command syntax to enable or disable the history buffer see show history There is a standard default number of commands that are stored in the buffer The standard number of 10 commands can be increased to 216 By configuring 0 the effect is the same as disabling the history buffer system For information about the command syntax for configuring the command history buffer see history size To display the history buffer see show history Negating the Effect of Commands For many configuration commands the prefix keyword no can be entered to cancel the effect of a command or reset the configuration to the default value This guide describes the negation effect for all applicable commands Command Completion If the command entered is incomplete invalid or has missing or invalid parameters then the appropriate error message is displayed This assists in entering the correct command By pressing the lt Tab gt button an incomplete command is entered If the characters already entered are not enough for the system to identify a single matching command press to display the available commands matching the characters already entered Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 5 Using CLI Nomenclature When referring to an Ethernet
180. erface to access the guest VLAN Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 401 802 1x Commands If the guest VLAN is defined and enabled the port automatically joins the guest VLAN when the port is unauthorized and leaves it when the port becomes authorized To be able to join or leave the guest VLAN the port should not be a static member of the guest VLAN Example The following example defines VLAN 2 as a guest VLAN Console Console configure Console config vlan database Console config vlan vlan 2 Console config vlan exit Console config interface vlan 2 Console config if dotix guest vlan dot1x guest vlan enable The dot1x vlans guest vlan enable Interface Configuration mode command enables unauthorized users on the interface access to the Guest VLAN To disable access use the no form of this command Syntax dot1x guest vlan enable no dot1x guest vlan enable Default Configuration Disabled Command Mode Interface Configuration Ethernet mode User Guidelines A device can have only one global guest VLAN The guest VLAN is defined using the dot1x guest vlan Interface Configuration mode command 402 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands Example The following example enables unauthorized users on Ethernet port to access the guest VLAN Console configure Console config
181. ernet port 1 Console config interface ethernet ext 1 Console config if negotiation flowcontrol The flowcontrol Interface Configuration Ethernet port channel mode command configures flow control on a given interface To disable flow control use the no form of this command Syntax flowcontrol auto on off no flowcontrol Parameters e auto Indicates auto negotiation e on Enables flow control e off Disables flow control Default Configuration Flow control is off Command Mode Interface Configuration Ethernet port channel mode User Guidelines Negotiation should be enabled for flow control auto Example In the following example flow control is enabled on port 1 Console config interface ethernet ext 1 Console config if flowcontrol on Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 85 Ethernet Configuration Commands mdix The mdix Interface Configuration Ethernet mode command enables cable crossover on a given interface To disable cable crossover use the no form of this command Syntax mdix on auto no mdix Parameters e on Manual mdix is enabled e auto Automatic mdi mdix is enabled Default Configuration The default setting is on Command Mode Interface Configuration Ethernet mode User Guidelines Auto All possibilities to connect a PC with cross or normal cables are suppo
182. erver Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands Parameters e add vlan list Specifies the list of VLAN IDs to be added Separate nonconsecutive VLAN IDs with a comma and no spaces A hyphen designates a range of IDs e remove vian list Specifies the list of VLAN IDs to be removed Separate nonconsecutive VLAN IDs with a comma and no spaces A hyphen designates a range of IDs Default Configuration All VLANs are allowed Command Mode Interface Configuration Ethernet port channel mode User Guidelines This command can be used to prevent GVRP from automatically making the specified VLANs active on the selected ports Example The following example forbids adding VLAN IDs 234 to 256 to Ethernet port 1 Console config interface ethernet ext 1 Console config if switchport forbidden vlan add 234 256 ip internal usage vlian The ip internal usage vlan Interface Configuration mode command reserves a VLAN as the internal usage VLAN of an interface To return to the default configuration use the no form of this command Syntax ip internal usage vlan vlan id no ip internal usage vlan Parameters e vlan id Specifies the ID of the internal usage VLAN Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 367 VLAN Commands Default Configuration The software reserves a VLAN as the internal usage VLAN of an interface Command Mode
183. erver Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Role N A Port cost 20000 Port Fast N A configured no Address N A Designated path cost N A N A Role Alternate Port cost 20000 Port Fast No configured no Address 00 30 94 41 62 c8 Designated path cost 20000 Role N A Port cost 20000 Port Fast N A configured no Address N A Designated path cost N A N A Spanning Tree Commands Console show spanning tree ethernet ext 1 Port 1 1 1 enabled State Forwarding Role Root Port id 128 1 Port cost 20000 Type P2p configured auto RSTP Port Fast No configured no Designated bridge Priority 32768 Address 00 01 42 97 e0 00 Designated port id 128 25 Designated path cost 0 Number of transitions to forwarding state 1 BPDU sent 2 received 120638 Console show spanning tree mst configuration Name Regionl Revision 1 Instance Vlans mapped State 0 1 9 21 4094 Enabled 1 10 20 Enabled Console show spanning tree Spanning tree enabled mode MSTP Default port cost method long MST 0 Vlans Mapped 1 9 21 4094 CST Root ID Priority 32768 Address 00 01 42 97 e0 00 Path 20000 Cost Root 1 1 1 Port Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec IST Master ID Priority 32768 Address 00 02 4b 29 7a 00 This switch is the IST master Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Intel Blade Server Ethernet Switch
184. erver set command is used This command is case sensitive Example The following example configures the scalar MIB sysName with the value Intel Console config snmp server set sysName sysname Intel Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 251 SNMP Commands show snmp The show snmp Privileged EXEC mode command displays the SNMP status Syntax show snmp Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the SNMP communications status Console show snmp Community Community View name IP String Access address public read only user view All private read write Default 172 1651 1 private su DefaultSuper LK Community string Group name IP address Type public user group all Traps are enabled Authentication trap is enabled 252 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands Version 1 2 notifications Target Address Type Community Version UDP Filter TO Retries Port Name Sec 192 122 173 42 Trap public 2 162 15 3 192 122 173 42 Inform public 2 162 15 3 Version 3 notifications Target Address Type Username Security UDP Filter TO Retries Level Port Name Sec 192 122 173 42 Inform Bob Priv 162 15 3 System Contact Robert System Locatio
185. es are mapped Default Configuration The following table describes the default map DSCP value 0 7 8 15 16 23 24 31 32 39 40 47 48 56 57 63 Queue ID 1 2 3 4 5 6 7 8 Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example maps DSCP values 33 40 and 41 to queue 1 Console config qos map dscp queue 33 40 41 to 1 qos trust Global The qos trust Global Configuration mode command configures the system to the basic mode and trust state To return to the untrusted state use the no form of this command Syntax qos trust cos dscp no qos trust Parameters e cos Indicates that ingress packets are classified with packet CoS values Untagged packets are classified with the default port CoS value e dscp Indicates that ingress packets are classified with packet DSCP values 192 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands Default Configuration CoS is the default trust mode Command Mode Global Configuration mode User Guidelines Example Packets entering a quality of service QoS domain are classified at the edge of the QoS domain When packets are classified at the edge the switch port within the QoS domain can be configured to one of the trusted states because there is no need to classify the packets at every device i
186. es for this command Example The following example specifies the source IP address Console config tacacs server source ip 172 16 8 1 show tacacs The show tacacs Privileged EXEC mode command displays configuration and statistical information about a TACACS server Syntax show tacacs ip address 342 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Parameters TACACS Commands ip address Name or IP address of the TACACS server Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays configuration and statistical information about a TACACS 4 server Console show tacacs Device Configuration IP address Status Port 172 16 1 1 Connected 49 Global values TimeOut 3 Device Configuration Source IP 172 16 8 1 Single TimeOut Connection No Global Source IP Priority Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 343 TACACS Commands 344 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide User Interface Commands 2 User Interface Commands enable The enable User EXEC mode command enters the Privileged EXEC mode Syntax enable privilege level Parameters e privilege level Privilege leve
187. es sent to the logging file based on severity To cancel using the buffer use the no form of this command Syntax logging file evel no logging file Parameters e level Specifies the severity level of syslog messages sent to the logging file Possible values are emergencies alerts critical errors warnings notifications informational and debugging Default Configuration The default severity level is errors Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 311 Syslog Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example limits syslog messages sent to the logging file based on severity level alerts Console config logging file alerts clear logging file The clear logging file Privileged EXEC mode command clears messages from the logging file Syntax clear logging file Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example clears messages from the logging file Console clear logging file Clear Logging File y n 312 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Syslog Commands aaa logging The aaa logging Global Configuration mode command enables logging AAA log
188. ever the certificate and keys generated by this command are saved in the private configuration which is never displayed to the user or backed up to another device Use this command to generate a self signed certificate for the device If the RSA keys do not exist parameter key generate must be used The following example regenerates an HTTPS certificate Console config crypto certificate 1 generate key generate crypto certificate request Syntax 228 The crypto certificate request Privileged EXEC mode command generates and displays certificate requests for HTTPS crypto certificate number request cn common name ou organization unit or organization loc location st state cu country Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Web Server Commands Parameters e number Specifies the certificate number Range 1 2 e common name Specifies the fully qualified URL or IP address of the device Range 1 64 organization unit Specifies the organization unit or department name Range 1 64 organization Specifies the organization name Range 1 64 location Specifies the location or city name Range 1 64 e state Specifies the state or province name Range 1 64 e country Specifies the country name Range 1 2 Default Configuration There is no default configuration for this command Command Mode Privileged EXEC mode
189. fies a password like community string sent with the notification operation Range 1 20 e traps Indicates that SNMP traps are sent to this host If unspecified SNMPv2 traps are sent to the host e informs Indicates that SNMP informs are sent to this host Not applicable to SNMPvl e 1 Indicates that SNMPvI traps will be used e 2 Indicates that SNMPv2 traps will be used If e port Specifies the UDP port of the host to use If unspecified the default UDP port number is 162 Range 1 65535 e filtername Specifies a string that defines the filter for this host If unspecified nothing is filtered Range 1 30 characters e seconds Specifies the number of seconds to wait for an acknowledgment before resending informs If unspecified the default timeout period is 15 seconds Range 1 300 e retries Specifies the maximum number of times to resend an inform request If unspecified the default maximum number of retries is 3 Range 0 255 Default Configuration This command has no default configuration 246 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands Command Mode Global Configuration mode User Guidelines Example When configuring an SNMPv1 or SNMPv2 notification recipient a notification view for that recipient is automatically generated for all the MIB When configuring an SNMPv1 notification recipient the Inform option cannot be
190. gel threshold percentage2 no qos wrr queue threshold gigabitethernet qgueue id Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 189 QoS Commands qos wrr queue threshold tengigabitethernet queue id threshold percentage0 threshold percentagel threshold percentage2 no qos wrr queue threshold tengigabitethernet queue id Parameters e gigabitethernet Indicates that the thresholds are to be applied to Gigabit Ethernet ports e tengigabitethernet Indicates that the thresholds are to be applied to 10 Gigabit Ethernet ports e queue id Specifies the queue number to which the threshold is assigned e threshold percentage0 1 2 Specifies the queue threshold percentage value Each value is separated by a space Range 0 100 Default Configuration 80 percent for all thresholds Command Mode Global Configuration mode User Guidelines The packet refers to a certain threshold by the conformance level If threshold 0 is exceeded packets with the corresponding DP are dropped until the threshold is no longer exceeded However packets assigned to threshold 1 or 2 continue to be queued and sent as long as the second or third threshold is not exceeded Example The following example assigns a threshold of 80 percent to WRR queue 1 Console config qos wrr queue threshold gigabitethernet 1 80 qos map policed dscp The qos map policed dsecp Global Configuration mod
191. h Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide PHY Diagnostics Commands 14 PHY Diagnostics Commands test copper port tdr The test copper port tdr Privileged EXEC mode command uses Time Domain Reflectometry TDR technology to diagnose the quality and characteristics of a copper cable attached to a port Syntax test copper port tdr interface Parameters e interface A valid Ethernet port Full syntax unit port Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines The port to be tested should be shut down during the test unless it is a combination port with fiber port active The maximum length of the cable for the TDR test is 120 meter Example The following example results in a report on the cable attached to port 3 Console test copper port tdr ext 3 Cable is open at 64 meters Console test copper port tdr ext 3 Can t perform this test on fiber ports Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 153 PHY Diagnostics Commands show copper ports tdr The show copper ports tdr User EXEC mode command displays information on the last Time Domain Reflectometry TDR test performed on copper ports Syntax show copper ports tdr interface Parameters e interface A valid Ethernet port Full syntax unit port Default Configuration This command has no default configuration Comma
192. h case no bandwidth is allocated to the queue and the shared bandwidth is divided among the remaining queues All eight queues participate in the WRR excluding the queues that are assigned as expedite queues The weights of the expedite queues are ignored in the ratio calculation An expedite queue is a priority queue and it is serviced before the other queues are serviced Use the priority queue out Interface Configuration Ethernet port channel mode command to enable expedite queues The following example assigns a weight of 6 to each of the 8 WRR queues Console config if wrr queue bandwidth 6 6 6 6 6 6 6 6 priority queue out num of queues Syntax The priority queue out num of queues Global Configuration mode command configures the number of expedite queues To return to the default configuration use the no form of this command priority queue out num of queues number of queues Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 185 QoS Commands no priority queue out num of queues Parameters e number of queues Specifies the number of expedite queues Expedite queues have higher indexes Range 0 8 Default Configuration All queues are expedite queues Command Mode Global Configuration mode User Guidelines Configuring the number of expedite queues affects the Weighted Round Robin WRR weight ratio because fewer queues participate in the WRR Example Th
193. he authentication server before resending the request Session Time The amount of time the user is logged in MAC address The supplicant MAC address Authentication Method The authentication method used to establish the session Termination Cause The reason for the session termination State The current value of the Authenticator PAE state machine and of the Backend state machine Authentication success The number of times the state machine received a Success message from the Authentication Server Authentication fails The number of times the state machine received a Failure message from the Authentication Server show dot1x users The show dot1x users Privileged EXEC mode command displays active 802 1x authenticated users for the device Syntax show dot1x users username username Parameters e username Supplicant username Range 1 160 characters Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays 802 1x users Console show dot1ix users Port Username Session Time Auth Method MAC Address T Bob 1d 03 08 58 Remote 0008 3b79 8787 2 John 08 19 17 None 0008 3b89 3127 Console show dotix users
194. he command line Ctrl Z End Returns back to the Privileged EXEC mode from any configuration mode Backspace key Deletes one character left to the cursor position Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Using CLI CLI Command Conventions When entering commands there are certain command entry standards that apply to all commands The following table describes the command conventions ConventionDescription Un a command line square brackets indicates an optional entry In a command line curly brackets indicate a selection of compulsory parameters separated by the character One option must be selected For example flowcontrol auto on off means that for the flowcontrol command either auto on or off must be selected Italic fontIndicates a parameter lt Enter gt Indicates an individual key on the keyboard For example lt Enter gt indicates the Enter key Ctrl F4Any combination keys pressed simultaneously on the keyboard all When a parameter is required to define a range of ports or parameters and all is an option the default for the command is all when no parameters are defined For example the command interface range port channel has the option of either entering a range of channels or selecting all When the command is entered without a parameter it automatically defaults to all Copying and Pasting Text Up to 1000 lines of text or comman
195. he loaded configuration file are added to those in the running configuration file as if the commands were typed in the command line interface CLI Thus the resulting configuration file is a combination of the previous running configuration and the loaded configuration files with the loaded configuration file taking precedence Copying a Configuration File from a Server to the Startup Configuration To copy a configuration file from a network server to the startup configuration file of the device enter copy source url startup config The startup configuration file is replaced by the copied configuration file Storing the Running or Startup Configuration on a Server Use the copy running config destination url command to copy the current configuration file to a network server using TFTP Use the copy startup config destination url command to copy the startup configuration file to a network server Saving the Running Configuration to the Startup Configuration To copy the running configuration to the startup configuration file enter the copy running config startup config command The following example copies system image filel from the TFTP server 172 16 101 101 to a non active image file Console copy tftp 172 16 101 101 filel image Accessing file filel on 172 16 101 101 Loading filel from 172 16 101 101 PEPEPEEE PULP Pree ee eee ee eee eee eee eee eee eee eee eerie Copy took 0 01 11 hh mm ss delete Syntax
196. he map mac macs group VLAN configuration command to map a MAC address or range of MAC addresses to a group of MAC addresses Use the no form of this command to delete the map Syntax map mac mac address prefix mask host macs group group no map mac mac address prefix mask host Parameters e mac address Specify MAC address to be entered to the group e prefix mask Mask bits The format is mm where n is an integer number that specifies the number of 1 s in the mask e host All 1 s mask e group Group number Default Configuration This command has no default configuration Command Mode VLAN Configuration mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 375 VLAN Commands Example The following example maps the MAC address 00 13 20 95 21 AA to macs group 4 Console config vlan map mac 00 13 20 95 21 AA host macs group 4 switchport general map macs group vlan Use the switchport general map macs group vlan interface configuration command to set a mac based classification rule Use the no form of this command to delete a classification Syntax switchport general map macs group group vlan vian id no switchport general map macs group group Parameters e group Group numbe Range 1 2147483647 vlan id Define the VLAN ID that is associated with the rule Default Configuration
197. he startup direction is rising falling Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example configures the following alarm conditions Alarm index 1000 Variable identifier Intel Sample interval 360000 seconds Rising threshold 1000000 Falling threshold 1000000 Rising threshold event index 10 Falling threshold event index 20 Console config rmon alarm 1000 Intel 360000 1000000 1000000 10 20 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 207 RMON Commands show rmon alarm table The show rmon alarm table Privileged EXEC mode command displays the alarms table Syntax show rmon alarm table Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the alarms table Console show rmon alarm table Index OID Owner d E EN EE VE CLI 2 E 2 Ae 2s 1 Oe Manager 3 1 Swe deel 22 109 CLI The following table describes significant fields shown in the example Field Description Index An index that uniquely identifies the entry OID Monitored variable OID Owner The entity that configured this entry 208 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 C
198. hen configuring the maximum age the following relationships should be kept 262 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands 2 Forward Time 1 gt Max Age Max Age gt 2 Hello Time 1 Example The following example configures the spanning tree bridge maximum age to 10 seconds Console config spanning tree max age 10 spanning tree priority The spanning tree priority Global Configuration mode command configures the spanning tree priority of the device The priority value is used to determine which bridge is elected as the root bridge To restore the default configuration use the no form of this command Syntax spanning tree priority priority no spanning tree priority Parameters e priority Priority of the bridge Range 0 61440 in steps of 4096 Default Configuration The default bridge priority for IEEE Spanning Tree Protocol STP is 32768 Command Modes Global Configuration mode User Guidelines The bridge with the lowest priority is elected as the root bridge Example The following example configures spanning tree priority to 12288 Console config spanning tree priority 12288 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 263 Spanning Tree Commands spanning tree disable The spanning tree disable Interface Configuration mode command disables spanning tree on a specific por
199. hort Specifies the short timeout value Default Configuration The default port timeout value is long Command Mode Interface Configuration Ethernet mode User Guidelines There are no user guidelines for this command Example The following example assigns a long administrative LACP timeout to Ethernet port 6 Console config interface ethernet ext 6 Console config if lacp timeout long show lacp ethernet The show lacp ethernet Privileged EXEC mode command displays LACP information for Ethernet ports Syntax show lacp ethernet interface parameters statistics protocol state Parameters e interface Valid Ethernet port Full syntax unit port e parameters Link aggregation parameter information e statistics Link aggregation statistics information protocol state Link aggregation protocol state information Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 137 LACP Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example display LACP information for Ethernet port 1 Console show lacp ethernet ext 1 Port 1 LACP parameters Actor system priority 1 system mac addr 00 00 12 34 56 78 port Admin key 30 port Oper key 30 port Oper number 21 port Admin priority al
200. hperiod 300 dot1x re authenticate The dot1x re authenticate Privileged EXEC mode command manually initiates a re authentication of all 802 1x enabled ports or the specified 802 1x enabled port Syntax dot1x re authenticate ethernet interface Parameters e interface Valid Ethernet port Full syntax unit port Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 387 802 1x Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following command manually initiates a re authentication of 802 1x enabled Ethernet port 16 Console dotix re authenticate ethernet ext 16 dot1x timeout quiet period The dot1x timeout quiet period Interface Configuration mode command sets the number of seconds that the device remains in the quiet state following a failed authentication exchange for example the client provided an invalid password To return to the default configuration use the no form of this command Syntax dot1x timeout quiet period seconds no dot1x timeout quiet period Parameters e seconds Specifies the time in seconds that the device remains in the quiet state following a failed authentication exchange with the client Range 0 65535 seconds Default Configuration Quiet period is 60 seconds Command Mode Interface Configu
201. ication marking and aggregate policing as part of a globally named service policy applied on a per interface basis The Class Map Configuration mode enables entering up to two match Class map Configuration mode commands to configure the classification criteria for the specified class If two match Class map Configuration mode commands are entered each should point to a different type of ACL e g one to an IP ACL and one to a MAC ACL Since packet classification is based on the order of the classification criteria the order in which the match Class Map Configuration mode commands are entered is important If there is more than one match statement in a match all class map and the same classification field appears in the participating ACLs an error message is generated A class map in match all mode cannot be configured if it contains both an IP ACL and a MAC ACL with an ether type that is not 0x0800 The following example creates a class map called class and configures it to check that packets match all classification criteria in the class map match statement Console config class map class1 match all Console config cmap show class map Syntax The show class map User EXEC mode command displays all class maps show class map c ass map name Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 171 QoS Commands Parameters e class map name Specifies the name of the class map
202. icyl Console config pmap class class1 Console config pmap c police aggregate policerl wrr queue Cos map The wrr queue cos map Global Configuration mode command maps Class of Service CoS values to a specific egress queue To return to the default configuration use the no form of this command Syntax wrr queue cos map queue id cos1 cos8 no wrr queue cos map queue id Parameters e queue id Specifies the queue number to which the CoS values are mapped e cosl cos8 Specifies CoS values to be mapped to a specific queue Range 0 7 Default Configuration CoS values are mapped to 8 queues as follows Cos0 is mapped to queue 3 Cos1 is mapped to queue 1 Cos2 is mapped to queue 2 Cos3 is mapped to queue 4 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 183 QoS Commands Cos4 is mapped to queue 5 Cos5 is mapped to queue 6 Cos6 is mapped to queue 7 Cos7 is mapped to queue 8 Command Mode Global Configuration mode User Guidelines Example This command can be used to distribute traffic into different queues where each queue is configured with different Weighted Round Robin WRR and Weighted Random Early Detection WRED parameters It is recommended to specifically map a single VPT to a queue rather than mapping multiple VPTs to a single queue Use the priority queue out Interface Configuration Ethernet Port channel mode command to enable expedite
203. ide 169 QoS Commands Example The following example displays the DSCP port queue map Console gt show qos map Dscp queue map d1 d2 0 1 2 3 4 5 6 7 8 9 0 01 01 01 01 01 01 01 01 01 01 1 01 01 01 01 01 01 02 02 02 02 2 02 02 02 02 02 02 02 02 02 02 3 02 02 03 03 03 03 03 03 03 03 4 03 03 03 03 03 03 03 03 04 04 5 04 04 04 04 04 04 04 04 04 04 6 04 04 04 04 The following table describes the significant fields shown above Column Description d1 Decimal Bit 1 of DSCP d2 Decimal Bit 2 of DSCP 01 04 Queue numbers The create map Global Configuration mode command creates or modifies a class map and enters the Class map Configuration mode To delete a class map use the no form of this command Syntax class map class map name match all match any no class map class map name Parameters e class map name Specifies the name of the class map e match all Checks that the packet matches all classification criteria in the class map match statement 170 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands e match any Checks that the packet matches one or more classification criteria in the class map match statement Default Configuration By default the match all parameter is selected Command Mode Global Configuration mode User Guidelines Note Example The class map Global Configuration mode command is used to define packet classif
204. ide 33 Address Table Commands e interface A valid Ethernet port e port channel number A valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example In this example the number of addresses present in all VLANs are displayed Console show bridge address table count Capacity 8192 Free 8083 Used 109 Secure addresses 2 Static addresses 1 Dynamic addresses 97 Internal addresses 9 show bridge multicast address table The show bridge multicast address table Privileged EXEC mode command displays multicast MAC address or IP address table information Syntax show bridge multicast address table vlan vlan id address mac multicast address ip multicast address format ip format mac 34 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Address Table Commands Parameters e vlan id Indicates the VLAN ID This has to be a valid VLAN ID value e mac multicast address A valid MAC multicast address e ip multicast address A valid IP multicast address e format ip mac Multicast address format Can be ip or mac If the format is unspecified the default is mac Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines A MAC ad
205. iguration Console config mst show pending Pending MST configuration Name Regionl Revision 1 Instance Vlans Mapped State 0 1 9 21 4094 Enabled 1 10 20 Enabled exit mst The exit MST Configuration mode command exits the MST Configuration mode and applies all configuration changes Syntax exit Default Configuration This command has no default configuration Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command 278 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands Example The following example exits the MST Configuration mode and saves changes Console config spanning tree mst configuration Console config mst exit Console config abort mst The abort MST Configuration mode command exits the MST Configuration mode without applying the configuration changes Syntax abort Default Configuration This command has no default configuration Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command Example The following example exits the MST Configuration mode without saving changes Console config spanning tree mst configuration Console config mst abort spanning tree guard root The spanning tree guard root Interface Configuration Ethernet port channel mode command enables root gu
206. igured as destination ports The port cannot be already configured as a source port The port cannot be a member in a port channel An IP interface is not configured on the port GVRP is not enabled on the port The port is not a member of a VLAN except for the default VLAN will automatically be removed from the default VLAN Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 161 Port Monitor Commands The following restrictions apply to ports configured to be source ports The port cannot be already configured as a destination port Example The following example copies traffic on port 8 source port to port 1 destination port Console config interface ethernet ext 11 Console config if port monitor ext 8 port monitor vian tagging The port monitor Interface Configuration Ethernet mode command transmits tagged ingress mirrored packets To transmit untagged ingress mirrored packets use the no form of this command Syntax port monitor vlan tagging no port monitor vlan tagging Default Configuration Ingress mirrored packets are transmitted untagged Command Mode Interface Configuration Ethernet mode User Guidelines There are no user guidelines for this command Example The following example configures all ingress mirrored packets from port 9 to be transmitted as tagged packets Console config interface ethernet ext 9 Console config if por
207. in events To disable logging AAA login events use the no form of this command Syntax aaa logging login no aaa logging login Parameters e login Indicates logging messages related to successful login events unsuccessful login events and other login related events Default Configuration Logging AAA login events is enabled Command Mode Global Configuration mode User Guidelines Other types of AAA events are not subject to this command Example The following example enables logging messages related to AAA login events Console config aaa logging login file system logging The file system logging Global Configuration mode command enables logging file system events To disable logging file system events use the no form of this command Syntax file system logging copy Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 313 Syslog Commands no file system logging copy file system logging delete rename no file system logging delete rename Parameters e copy Indicates logging messages related to file copy operations e delete rename Indicates logging messages related to file deletion and renaming operations Default Configuration Logging file system events is enabled Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enables logging messages related t
208. ing Tree Protocol RSTP is enabled Default Configuration STP is enabled Command Modes Global Configuration mode User Guidelines In RSTP mode the device uses STP when the neighbor device uses STP In MSTP mode the device uses RSTP when the neighbor device uses RSTP and uses STP when the neighbor device uses STP Example The following example configures the spanning tree protocol to RSTP console config spanning tree mode rstp spanning tree forward time The spanning tree forward time Global Configuration mode command configures the spanning tree bridge forward time which is the amount of time a port remains in the listening and learning states before entering the forwarding state To restore the default configuration use the no form of this command Syntax spanning tree forward time seconds no spanning tree forward time 260 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands Parameters seconds Time in seconds Range 4 30 Default Configuration The default forwarding time for the IEEE Spanning Tree Protocol STP is 15 seconds Command Modes Global Configuration mode User Guidelines When configuring the forwarding time the following relationship should be kept 2 Forward Time 1 gt Max Age Example The following example configures the spanning tree bridge forwarding time to 25 seconds Console config spanning tree for
209. ing example enables the SNTP broadcast clients Console config sntp broadcast client enable sntp anycast client enable The sntp anycast client enable Global Configuration mode command enables SNTP anycast client To disable the SNTP anycast client use the no form of this command Syntax sntp anycast client enable no sntp anycast client enable Default Configuration The SNTP anycast client is disabled Command Mode Global Configuration mode User Guidelines Polling time is determined by the sntp client poll timer Global Configuration mode command Use the sntp client enable Interface Interface Configuration mode command to enable the SNTP client on a specific interface Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 61 Clock Commands Example The following example enables SNTP anycast clients console config sntp anycast client enable sntp client enable Interface Syntax The sntp client enable Interface Configuration Ethernet port channel VLAN mode command enables the Simple Network Time Protocol SNTP client on an interface This applies to both receive broadcast and anycast updates To disable the SNTP client use the no form of this command sntp client enable no sntp client enable Default Configuration The SNTP client is disabled on an interface Command Mode Interface Configuration Ethernet port channel VLAN mode User Guid
210. ion line Uses the line password for authentication local Uses the local username database for authentication none Uses no authentication radius Uses the list of all RADIUS servers for authentication tacacs Uses the list of all TACACS servers for authentication Default Configuration The local user database is checked This has the same effect as the command aaa authentication login list name local Command Mode Global Configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 9 AAA Commande User Guidelines Example The default and optional list names created with the aaa authentication login command are used with the login authentication command Create a list by entering the aaa authentication login list name method command for a particular protocol where list name is any character string used to name this list The method argument identifies the list of methods that the authentication algorithm tries in the given sequence The additional methods of authentication are used only if the previous method returns an error not if it fails To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line The following example configures the authentication login Console config aaa authentication login default radius tacacs enable line local none aaa authentication enable The aaa authenticatio
211. ion mark at the system prompt console prompt displays a list of commands available for that particular command mode From each command mode a specific command is used to navigate from one command mode to another The order for mode access is as follows User EXEC mode Privileged EXEC mode Global Configuration mode and Interface Configuration mode When starting a session the initial mode is the User EXEC mode Only a limited subset of commands are available in User EXEC mode This task level does not change the configuration To enter the next level the Privileged EXEC mode a password is required The Privileged EXEC mode gives access to commands that displays device configuration and provides access to the device Configuration mode The Global Configuration mode manages the device configuration on a global level The Interface Configuration mode configures specific interfaces in the device User EXEC Mode After logging into the device the user is automatically in User EXEC command mode unless the user is defined as a privileged user In general the User EXEC commands allow the user to perform basic tests and list system information The user level prompt consists of the device host name followed by the angle bracket gt Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 1 Using CLI The default host name is Console unless it has been changed using the hostname Console gt comm
212. ip igmp snooping Default Configuration IGMP snooping is disabled Command Mode Global Configuration mode User Guidelines IGMP snooping can only be enabled on static VLANs It must not be enabled on Private VLANs or their community VLANs Example The following example enables IGMP snooping Console config ip igmp snooping ip igmp snooping Interface The ip igmp snooping Interface Configuration VLAN mode command enables Internet Group Management Protocol IGMP snooping on a specific VLAN To disable IGMP snooping on a VLAN interface use the no form of this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 111 IGMP Snooping Commands Syntax ip igmp snooping no ip igmp snooping Default Configuration IGMP snooping is disabled Command Mode Interface Configuration VLAN mode User Guidelines IGMP snooping can only be enabled on static VLANs It must not be enabled on Private VLANs or their community VLANs Example The following example enables IGMP snooping on VLAN 2 Console config interface vlan 2 Console config if ip igmp snooping ip igmp snooping mrouter learn pim dvmrp The ip igmp snooping mrouter learn pim dvmrp Interface Configuration VLAN mode command enables automatic learning of multicast device ports in the context of a specific VLAN To remove automatic learning of multicast device ports use the no form of this
213. isable the polling for SNTP client use the no form of this command Syntax sntp unicast client poll no sntp unicast client poll Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 63 Clock Commands Default Configuration Polling is disabled Command Mode Global Configuration mode User Guidelines Polling time is determined by the sntp client poll timer Global Configuration mode command Example The following example enables polling for SNTP predefined unicast clients Console config sntp unicast client poll snip server The sntp server Global Configuration mode command configures the device to use the Simple Network Time Protocol SNTP to request and accept SNTP traffic from a specified server To remove a server from the list of SNTP servers use the no form of this command Syntax sntp server ip address hostname poll key keyid no sntp server host Parameters ip address IP address of the server e hostname Hostname of the server Range 1 158 characters e poll Enable polling e keyid Authentication key to use when sending packets to this peer Range 1 4294967295 Default Configuration No servers are defined 64 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Clock Commands Command Mode Global Configuration mode User Guidelines Up to 8 SNTP servers can be defined Use the sntp u
214. istory eeng r eebe dee 201 SHOW rmon collection NIStOry EE 202 SNOW ECO 203 EE 206 show rmon EE nn EE 208 show rmon alarm E 209 MON OVEN carona e E O EEEE 210 ShOW rMON Events eege ee 211 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide xi e 1001S 1102 RE 212 Mon E 214 Chapter 19 RADIUS Commas eegener dees 215 radius server hoSt tee EE Ee 215 FACIUS SEIVEN KOY chi ccnscuairdstuadotantainalaareicentioct ee DOENE TEER EECH 216 radius server retransmit atone cnericecencaiemnedecveneounasetenisetansaledecebenietsesssuansomdeiorsniowecraitamantels 217 radius server SOU OG E 218 radi s sServer HEES eege eege dee 219 radius server deadtime EE 220 AONA EEE E 220 Chapter 20 Web Server CommandsS cccccceeeeeeeeeeeseeeeeeeeeeeneeeeeeeeeeeeeeeeeeeeeeeees 223 eer EE 223 IP DP DOM EE 223 P NID RSC IMI EE 224 eler 225 eal dhs e PON EE 226 ip https exec timeout EE 226 crypto certificate Generate s sies enen aSa EEEE EANTA E Eain 227 crypto certificate request x cscawsdeseridedetcansat Sensrbdewctds evi salend cuduedadetdarevadnuws Giesrnoenndeneteddnerinates 228 crypto certificate import ege eegbe Eege ege geg ees 230 IP DIPS Certihicate irisi naa ibe ae aces es es ee Stee 231 show crypto certificate mycertificate 2 0 ce eceeceeece ee eeeeeeeeeeeee ener eneaeeeeeeeaeeseesseeeeenaeenes 232 SHOW An ur E 233 show ip e rt 234 Chapter 21 SNMP Command eeceeeeeceeeeeeeeeeeeseeeeses
215. ith IP address 192 168 10 1 authentication request port number 20 and a 20 second timeout period Console config radius server host 192 168 10 1 auth port 20 timeout 20 radius server key Syntax The radius server key Global Configuration mode command sets the authentication and encryption key for all RADIUS communications between the device and the RADIUS daemon To restore the default configuration use the no form of this command radius server key key string no radius server key Parameters 216 e key string Specifies the authentication and encryption key for all RADIUS communications between the device and the RADIUS server This key must match the encryption used on the RADIUS daemon Range 0 128 characters Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide RADIUS Commands Default Configuration The key string is an empty string Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example defines the authentication and encryption key for all RADIUS communications between the device and the RADIUS daemon Console config radius server key enterprise server radius server retransmit The radius server retransmit Global Configuration mode command specifies the number of times the software searches the list of RADIUS server hosts To reset the default configuration use th
216. l Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 15 AAA Commande Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the authentication configuration Console show authentication methods login Authentication Method Lists Default Local Enable Authentication Method Lists Default Radius Enable Console_Enable Enable None Line Login Method List Enable Method List Console Default Default Telnet Default Default SSH DefaultDefault http Local https Local dotix password The password Line Configuration mode command specifies a password on a line To remove the password use the no form of this command Syntax password password encrypted no password 16 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide AAA Commande Parameters e password Password for this level Range 1 159 characters e encrypted Encrypted password to be entered copied from another device configuration Default Configuration No password is defined Command Mode Line Configuration mode User Guidelines If a password is defined as encrypted the required password length is 32 characters Example The following example specifies the password called secret on a Telnet
217. l number A valid port channel number Default Configuration This command has no default configuration 370 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Command Mode Privileged EXEC mode User Guidelines Example Console show interface switchport ethernet ext 1 Port 1 There are no user guidelines for this command VLAN Commands The following example displays the switchport configuration for Ethernet port 1 map VLAN Membership mode General Operating parameters PVID 1 default Ingress Filtering Enabled Acceptable Frame Type All GVRP status Enabled Protected Enabled Uplink is 1 Port 1 is member in vlan 1 8 11 19 72 Name Egress rule default untagged VLANO08 tagged VLANO11 tagged IPv VLAN untagged VLANO0072 untagged Static configuration PVID 1 default Ingress Filtering Enabled Acceptable Frame Type All Port 1 is statically configured to Vian Name Egress rule Sys cem Dynamic Sta Sta Sta tic tic tic Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 371 VLAN Commands 1 default untagged 11 VLANO11 tagged 19 IPv6 VLAN untagged 72 VLANO072 untagged Forbidden VLANS VLAN Name 73 out Console show interface switchport ethernet ext 1 Port 1 VLAN Membership mode General Operating parameters PVID
218. l to enter the system Range 1 15 Default Configuration The default privilege level is 15 Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following example enters Privileged EXEC mode Console gt enable enter password Console disable The disable Privileged EXEC mode command returns to the User EXEC mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 345 User Interface Commands Syntax disable privilege level Parameters e privilege level Privilege level to enter the system Range 1 15 Default Configuration The default privilege level is 1 Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example return to Users EXEC mode Console disable Console gt login The login User EXEC mode command changes a login username Syntax login Default Configuration This command has no default configuration Command Mode User EXEC mode 346 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide User Interface Commands User Guidelines There are no user guidelines for this command Example The following example enters Privileged EXEC mode and logs in with username admin Console gt login User Name admin Password Console configur
219. label for the view record that is being created or updated The name is used to reference the record Range 1 30 characters Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands e oid tree Specifies the object identifier of the ASN 1 subtree to be included or excluded from the view To identify the subtree specify a text string consisting of numbers such as 1 3 6 2 4 or a word such as system Replace a single subidentifier with the asterisk wildcard to specify a subtree family for example 1 3 4 e included Indicates that the view type is included e excluded Indicates that the view type is excluded Default Configuration No view entry exists Command Mode Global Configuration mode User Guidelines Example This command can be entered multiple times for the same view record The number of views is limited to 64 No check is made to determine that a MIB node corresponds to the starting portion of the OID until the first wildcard The following example creates a view that includes all objects in the MIB II system group except for sysServices System 7 and all objects for interface 1 in the MIB II interface group Console config snmp server view user view system included Console config snmp server view user view system 7 excluded Console config snmp server view user view ifEntry 1 included snmp server group Syntax The snmp
220. le GVRP on the device use the no form of this command Syntax gvrp enable no gvrp enable Default Configuration GVRP is globally disabled Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enables GVRP globally on the device Console config gvrp enable gvrp enable Interface The gvrp enable Interface Configuration Ethernet port channel mode command enables GVRP on an interface To disable GVRP on an interface use the no form of this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 103 GVRP Commands Syntax gvrp enable no gvrp enable Default Configuration GVRP is disabled on all interfaces Command Mode Interface Configuration Ethernet port channel mode User Guidelines An access port does not dynamically join a VLAN because it is always a member in only one VLAN Membership in an untagged VLAN is propagated in the same way as in a tagged VLAN That is the PVID is manually defined as the untagged VLAN VID Example The following example enables GVRP on Ethernet port 6 Console config interface ethernet ext 6 Console config if gvrp enable garp timer The garp timer Interface Configuration Ethernet Port channel mode command adjusts the values of the join leave and leaveall timers of GARP applications To restore the default configur
221. le config line enable authentication default ip http authentication The ip http authentication Global Configuration mode command specifies authentication methods for HTTP server users To restore the default configuration use the no form of this command Syntax ip http authentication method method2 no ip http authentication Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 13 AAA Commande Parameters e method method2 Specify at least one method from the following list Keyword Description local Uses the local username database for authentication none Uses no authentication radius Uses the list of all RADIUS servers for authentication tacacs Uses the list of all TACACS servers for authentication Default Configuration The local user database is checked This has the same effect as the command ip http authentication Jocal Command Mode Global Configuration mode User Guidelines The additional methods of authentication are used only if the previous method returns an error not if it fails To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line Example The following example configures the HTTP authentication Console config ip http authentication radius tacacs local none ip https authentication The ip https authentication Global C
222. leged EXEC mode command is used to enter the Global Configuration mode To enter the Global Configuration mode perform the following steps 1 At the Privileged EXEC mode prompt enter the configure command and press lt Enter gt The Global Configuration mode prompt is displayed The Global 2 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Using CLI Configuration mode prompt consists of the device host name followed by config and To return from the Global Configuration mode to the Privileged EXEC mode the user can use one of the following commands exit end Ctrl Z The following example illustrates how to access the Global Configuration mode and return to the Privileged EXEC mode Console Console configure Console config exit Console Interface Configuration and Specific Configuration Modes Interface Configuration mode commands modify specific interface operations The following are the Interface Configuration modes Line Interface Contains commands to configure the management connections These include commands such as line timeout settings etc The line Global Configuration mode command is used to enter the Line Configuration command mode VLAN Database Contains commands to create a VLAN as a whole The vlan database Global Configuration mode command is used to enter the VLAN Database Interface Configuration mode Management Access List Contains comman
223. m of this command gvrp vlan creation forbid no gvrp vian creation forbid Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 105 GVRP Commands Default Configuration Dynamic VLAN creation or modification is enabled Command Mode Interface Configuration Ethernet port channel mode User Guidelines This command forbids dynamic VLAN creation from the interface The creation or modification of dynamic VLAN registration entries as a result of the GVRP exchanges on an interface are restricted only to those VLANs for which static VLAN registration exists Example The following example disables dynamic VLAN creation on Ethernet port 1 Console config interface ethernet ext 1 Console config if gvrp vlan creation forbid gvrp registration forbid The gvrp registration forbid Interface Configuration Ethernet port channel mode command deregisters all dynamic VLANs on a port and prevents VLAN creation or registration on the port To allow dynamic registration of VLANs on a port use the no form of this command Syntax gvrp registration forbid no gvrp registration forbid Default Configuration Dynamic registration of VLANs on the port is allowed Command Mode Interface Configuration Ethernet port channel mode 106 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide GVRP Commands User Guidelines There are no user guidelines for thi
224. m with no Telnet control sequences A stream connection does not process Telnet options and can be appropriate for connections to ports running UNIX to UNIX Copy Program UUCP and other non Telnet protocols Ctrl shift 6 x Return to System Command Prompt 326 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ports Table System Management Commands Keyword Description Port Number BGP Border Gateway Protocol 179 chargen Character generator 19 cmd Remote commands 514 daytime Daytime 13 discard Discard 9 domain Domain Name Service 53 echo Echo 7 exec Exec 512 finger Finger 79 ftp File Transfer Protocol 21 ftp data FTP data connections 20 gopher Gopher 70 hostname NIC hostname server 101 ident Ident Protocol 113 irc Internet Relay Chat 194 klogin Kerberos login 543 kshell Kerberos shell 544 login Login 513 Ipd Printer service 515 nntp Network News Transport Protocol 119 pim auto rp PIM Auto RP 496 pop2 Post Office Protocol v2 109 pop3 Post Office Protocol v3 110 smtp Simple Mail Transport Protocol 25 sunrpc Sun Remote Procedure Call 111 syslog Syslog 514 tacacs TAC Access Control System 49 talk Talk 517 telnet Telnet 23 time Time 37 uucp Unix to Unix Copy Program 540 whois Nickname 43 www World Wide Web 80 This command lists concurrent telnet connections to remote hosts that were
225. mational The default facility is local7 Command Mode Global Configuration mode User Guidelines Up to 8 syslog servers can be used If no specific severity level is specified the global values apply to each server 308 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Syslog Commands Example The following example limits logged messages sent to the syslog server with IP address 10 1 1 1 to severity level critical Console config logging 10 1 1 1 severity critical logging buffered The logging buffered Global Configuration mode command limits syslog messages displayed from an internal buffer based on severity To cancel using the buffer use the no form of this command Syntax logging buffered eve no logging buffered Parameters e level Specifies the severity level of messages logged in the buffer The possible values are emergencies alerts critical errors warnings notifications informational debugging Default Configuration The default severity level is informational Command Mode Global Configuration mode User Guidelines All the syslog messages are logged to the internal buffer This command limits the messages displayed to the user Example The following example limits syslog messages displayed from an internal buffer based on severity level debugging Console config logging buffered debugging Intel Blade Server Ethernet Switch
226. mber Default Configuration This command has no default configuration Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays traffic seen by the physical interface Console show interfaces counters Port nOctets InUcastPkts InMcastPkts InBcastPkts d 83892 0 0 0 I 0 0 0 0 1 23899 0 0 0 Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts 1 9188 0 0 0 1 0 0 0 0 1 8789 0 0 0 Ch InOctets InUcastPkts InMcastPkts InBcastPkts 1 27889 0 0 0 Ch OutOctets OutUcastPkts OutMcastPkts OutBcastPkts 1 23739 0 0 0 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 95 Ethernet Configuration Commands The following example displays counters for Ethernet port 1 Console show interfaces counters ethernet ext 1 Port InOctets InUcastPkts InMcastPkts InBcastPkts wep D Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts os FCS Errors 0 Single Collision Frames 0 Late Collisions 0 Excessive Collisions 0 Oversize Packets 0 Internal MAC Rx Errors 0 Received Pause Frames 0 Transmitted Pause Frames 0 The following table describes the fields shown in the display Field Description InOctets Counted received octets InUcastPkts Counted received unicast packets InMcastPkts Counted received multicast packets InBcastPkts Counted re
227. mmand Syntax snmp server engineID local engineid string default no snmp server engineID local 242 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands Parameters e engineid string Specifies a character string that identifies the engine ID Range 5 32 characters e default The engine ID is created automatically based on the device MAC address Default Configuration The engine ID is not configured If SNMPv3 is enabled using this command and the default is specified the default engine ID is defined per standard as First 4 octets first bit 1 the rest is IANA Enterprise number 674 Fifth octet set to 3 to indicate the MAC address that follows Last 6 octets MAC address of the device Command Mode Global Configuration mode User Guidelines To use SNMPv3 you have to specify an engine ID for the device You can specify your own ID or use a default string that is generated using the MAC address of the device If the SNMPv3 engine ID is deleted or the configuration file is erased SNMPv3 cannot be used By default SNMPv1 v2 are enabled on the device SNMPv3 is enabled only by defining the Local Engine ID If you want to specify your own ID you do not have to specify the entire 32 character engine ID if it contains trailing zeros Specify only the portion of the engine ID up to the point where just zeros remain in the value For example to config
228. mmande ip access list The ip access list Global Configuration mode command enables the IP Access Configuration mode and creates Layer 3 ACLs To delete an ACL use the no form of this command Syntax ip access list name no ip access list name Parameters e name Specifies the name of the ACL Range 0 32 characters Default Configuration The default for all ACLs is deny all Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example shows how to create an IP ACL Console config ip access list ip acll Console config ip al Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 41 ACL Commands permit ip Syntax The permit IP Access List Configuration mode command permits traffic if the conditions defined in the permit statement match permit any protocol any source source wildcard any destination destination wildcard dsep dscp number ip precedence ip precedence permit icmp any source source wildcard any destination destination wildcard any icmp type any icmp code dsep number ip precedence number permit igmp any source source wildcard any destination destination wildcard any igmp type dscp number ip precedence number permit tep any source source wildcard any source port any destination destination wildcard
229. ms icmp_seq 1 time 8 ms icmp_seq 2 time 8 ms Lo too to o oa to o too to icmp_seq 3 time 7 ms 10 1 1 1 PING Statistics 4 packets transmitted 4 packets received 0 packet loss round trip ms min avg max 7 8 11 traceroute The traceroute User EXEC mode command discovers routes that packets actually take when traveling to their destination 322 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Syntax System Management Commands traceroute ip address hostname size packet_size ttl max ttl count packet_count timeout time_out source ip address tos tos Parameters ip address IP address of the destination host hostname Host name of the destination host Range 1 158 characters packet_size Number of bytes in a packet Range 40 1500 max ttl The largest TTL value that can be used The traceroute command terminates when the destination is reached or when this value is reached Range 1 255 packet_count The number of probes to be sent at each TTL level Range 1 10 time_out The number of seconds to wait for a response to a probe packet Range 1 60 ip address One of the device s interface addresses to use as a source address for the probes The device normally selects what it feels is the best source address to use tos The Type Of Service byte in the IP Header of the packet Range 0 255 Default Configuration
230. mst max hops The spanning tree mst priority Global Configuration mode command configures the number of hops in an MST region before the BDPU is discarded and the port information is aged out To restore the default configuration use the no form of this command Syntax spanning tree mst max hops hop count no spanning tree mst max hops Parameters e hop count Number of hops in an MST region before the BDPU is discarded Range 1 40 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 271 Spanning Tree Commands Default Configuration The default number of hops is 20 Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example configures the maximum number of hops that a packet travels in an MST region before it is discarded to 10 Console config spanning tree mst max hops 10 spanning tree mst port priority The spanning tree mst port priority Interface Configuration mode command configures port priority for the specified MST instance To restore the default configuration use the no form of this command Syntax spanning tree mst instance id port priority priority no spanning tree mst instance id port priority Parameters e instance ID ID of the spanning tree instance Range 1 15 e priority The port priority Range 0 240 in multiples of 16 Default Configuration The default port pri
231. n Console show system Unit Type WW Geet Unit Main Power Supply Redundant Power Supply SZ re or 7 Unit Fanl Fan2 Fan3 Fan4 Fan5 332 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide System Management Commands show system id The show system id Privilaged EXEC mode command displays the system identity information Syntax show system id unit unit Parameters e unit unit Unit number Default Configuration This command has no default configuration Command Modes Privilaged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 333 System Management Commands Example Console gt show system id Service Tag 89788978 Serial number 8936589782 Asset tag 7843678957 The following is relevant for stackable systems only Unit Service tag Serial number 1 89788978 8936589782 2 34254675 3216523877 show system flowcontrol Asset tag 7843678957 5621987728 The show system flowcontrol Interface Configuration mode command displays the flow control state on cascade ports Syntax show system flowcontrol Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command 334 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCE
232. n Marketing The following table describes the significant fields shown in the display Field Description Community string Community access string to permit access to the SNMP protocol Community access Type of access read only read write super access IP Address Management station IP Address Trap Rec Address Targeted Recipient Trap Rec Community Statistics sent with the notification operation Version SNMP version for the sent trap 1 or 2 show snmp engineid The show snmp enginel D Privileged EXEC mode command displays the ID of the local Simple Network Management Protocol SNMP engine Syntax show snmp engineID Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 253 SNMP Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the SNMP engine ID Console show snmp engineID Local SNMP engineID 08009009020C0B099C075878 show snmp views The show snmp views Privileged EXEC mode command displays the configuration of views Syntax show snmp views viewname Parameters e viewname Specifies the name of the view Range 1 30 Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for
233. n enable Global Configuration mode command defines authentication method lists for accessing higher privilege levels To restore defaults use the no form of this command Syntax aaa authentication enable default ist name method methoa2 no aaa authentication enable default ist name Parameters e default Uses the listed authentication methods that follow this argument as the default list of methods when using higher privilege levels e list name Character string used to name the list of authentication methods activated when using access higher privilege levels Range 1 12 characters e method method2 Specify at least one method from the following list Keyword Description enable Uses the enable password for authentication Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide AAA Commande Keyword Description line Uses the line password for authentication none Uses no authentication radius Uses the list of all RADIUS servers for authentication Uses username enabx where x is the privilege level tacacs Uses the list of all TACACS servers for authentication Uses username enabx where x is the privilege level Default Configuration If the default list is not set only the enable password is checked This has the same effect as the command aaa authentication enable default enable Command Mode Global Configuration mode
234. n the domain A switch port on an inter QoS domain boundary can be configured to the DSCP trust state and if the DSCP values are different between the QoS domains the DSCP to DSCP mutation map can be applied Use this command to specify whether the port is trusted and which fields of the packet to use to classify traffic When the system is configured as trust DSCP traffic is mapped to a queue according to the DSCP queue map The following example configures the system to the DSCP trust state Console config qos trust dscp qos trust Interface Syntax The qos trust Interface Configuration Ethernet port channel mode command enables each port trust state while the system is in the basic QoS mode To disable the trust state on each port use the no form of this command qos trust no qos trust Default Configuration qos trust is enabled on each port when the system is in basic mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 193 QoS Commands Command Mode Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example The following example configures Ethernet port 15 to the default trust state Console config interface ethernet Ext 15 Console config if qos trust qos cos The qos cos Interface Configuration Ethernet port channel mode command defines the default CoS value of a p
235. nagement Access list Configuration mode User Guidelines Rules with Ethernet VLAN and port channel parameters are valid only if an IP address is defined on the appropriate interface The system supports up to 128 management access rules Example The following example permits all ports in the mlist access list Console config management access list mlist Console config macl permit Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 147 Management ACL Commands deny Management The deny Management Access List Configuration mode command defines a deny rule Syntax deny ethernet interface number vlan vian id port channel port channel number service service deny ip source ip address mask mask prefix length ethernet interface number vlan vlan id port channel port channel number service service Parameters e interface number A valid Ethernet port number e vian id A valid VLAN number e port channel number A valid port channel number e address A valid source IP address e mask A valid network mask of the source IP address e mask prefix length Specifies the number of bits that comprise the source IP address prefix The prefix length must be preceded by a forward slash Range 0 32 e service Service type Possible values telnet ssh http https and snmp Default Configuration This command has no default c
236. nd Mode User EXEC mode User Guidelines The maximum length of the cable for the TDR test is 120 meters Example The following example displays information on the last TDR test performed on all copper ports Console gt show copper ports tdr Port Result Length meters Date 1 OK 2 Short 50 13 32 00 23 July 2005 3 Test has not been performed 4 Open 64 13 32 00 23 July 2005 5 Fiber 8 154 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide PHY Diagnostics Commands show copper ports cable length The show copper ports cable length User EXEC mode command displays the estimated copper cable length attached to a port Syntax show copper ports cable length interface Parameters interface A valid Ethernet port Full syntax unit port Default Configuration This command has no default configuration Command Mode User EXEC mode User Guidelines The port must be active and working in 100M or 1000M mode Example The following example displays the estimated copper cable length attached to all ports Console gt show copper ports cable length Port Length meters 1 lt 50 2 Copper not active 3 110 140 Fiber Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 155 PHY Diagnostics Commands 156 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Port Channel Commands 1
237. neeeees 98 port storm control broadcast enable ccccceceeeeeecceeeeeeeeeeeeneeeeeeeeeeeeeeeeeeeeeeeseesseeneneneeeeeees 99 port storm control broadcast rate cc naisaidecaste tenants udenencensatsedaniaiicetecnatdeaasuaces meeiaqeiundcendenteas 100 show ports storm control E 101 Chapter 8 GVRP CommandsS ssssssssssnnnunnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn nnmnnn nnmnnn 103 gvrp enable Global EE 103 gvrp enable EE 103 GaP IMET ce Sd ca nce ccc aa encase eebe 104 EEN 105 gvrp registration forbid ege eege ege ee dee 106 clear OVID BEL 107 show gvrp configuration E 108 Show ET 109 show gvrp Ee 110 Chapter 9 IGMP Snooping Commande cccccceeeeeeeeeeeeeseeneeeeeeeeeeeeeeeeeeeeeeeeeeeees 111 ip igmp snooping Global eee eee eect eee eee e eee ee ee ea eee eeeaae deena ee eeecneeeeeetaaeeeeeegaeeeeneneees 111 IP IGMP snooping HE TE 111 ip igmp snooping mrouter learn PIM AVIMIP eee eee eeeeeeeeee terre eeeeeeeeeeeeeeeeeeaaaeeeeeeeneee 112 ip igmp snooping e E a E 113 ip igmp snooping Mrouter tiME OUt cess eeeeee eee eee ee teen cece eee eee eeeeeeeneeeeeeeseeneeseeeeeeees 114 ip igmp snooping leAVE tIME OUT EEN ennen 115 show ip igmp snooping Mrouter ees eeben 116 show ip igmp snooping interface eccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeseeeseeeeneeeeess 117 show ip igmp snooping fe te EE 118 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide i
238. neneeneeeeeeeeeeeeeeeeeeeeeeeess 237 snmp serv r COMMUNMY cccecudic cnaderemocnevaadecuoreenadetaaictunencenmdebunalacmercsquetanteoebenenrmmmeccanemmanate 237 SNMP SErVer V EW jceetcttc reas cae canceiiaearedac nice EAEE ASSANE om Soapeaceadtesnetnaccsscadetdepenraped manent dandiancars 238 SNMP SEMVEPr QrOUP TTT 239 SNMP SCIVEF USEM sviceieccvctersieerd E EEEENE NENNEN aE aT aS iaa 241 snmp server enginelD Jee cates tacevesiaehsneedaransdaneldesntdnessds laabscaaevacamideddedessndatasaicecuianndeds 242 snmp server enable traps inisini iaiki iak si Ree 244 snmp server filter eege 245 SMIMP SOMVEN MOST eegener Eeer 246 EE WEE Sage as Rice cain eege 247 snmp server trap authentication ccc ee eeeeeeeeeceee ee eeeeeeeeeeeeeeeeeenaaaaeeeneneeeeseseneneanenenee 248 SNMP SEFVEr CONACT 2 eteueEeerEESeENEEeSEEdER RRE ENEE NEEN NRSNEEENNEEN ENEE AER ENAEEEE ee 249 snmp server location geeiert eet 250 le 251 SROW SNMP EE 252 Sh w SNMP IN CNN EE 253 SEENEN 254 Show SINT fe Tt UE 255 xii Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNOW SNMP ES sparite atann a aaa EAA Ea EE aie aR aaa Ta A EAEE Hean 256 Show SNMP USES niniin oeae A oA ERE EA OLEE TE ER ER e 257 Chapter 22 Spanning Tree Commandes cccccceeeeeeeeeeeeeeeeeeneneneeeeeeeeeeeeeeeeeeeeeeees 259 GE ne pirin tee ene nee ae en Re Sey eee eee eee eee er eee re eee 259 spanning tree MOJE sa sieececceia iets iececicetinseescetentenuiansiaad
239. net port Full syntax unit port Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the status of 802 1x enabled Ethernet ports Console show dot1x 802 1x is enabled Port Admin Mode Oper Mode Reauth Reauth Username Control Period 1 Auto Authorized Ena 3600 Bob 2 Auto Authorized Ena 3600 John 3 Auto Unauthorized Ena 3600 Clark 4 Force auth Authorized Dis 3600 n a 5 Force auth Unauthorized Dis 3600 n a Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 393 802 1x Commands Port is down or not present Console show dotix ethernet ext 3 802 1x is enabled Port Admin Mode Oper Mode Reauth Reauth Username Control Period 3 Auto Unauthorized Ena 3600 Clark Quiet period 60 Seconds Tx period 30 Seconds Max req 2 Supplicant timeout 30 Seconds Server timeout 30 Seconds Session Time HH MM SS 08 19 17 MAC Address 00 08 78 32 98 78 Authentication Method Remote Termination Cause Supplicant logoff Authenticator State Machine State HELD Backend State Machine State IDLE Authentication success 9 Authentication fails 1 The following table describes significant fields shown above Field Description Port The port number Admin mode The port admin m
240. nfiguration This command has no default configuration Command Mode All configuration modes User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 353 User Interface Commands Example The following example displays the current privilege level for the Privileged EXEC mode Console Config do show vlan VLAN Name Ports Type Authorization 1 default 1 1 2 Other Required 2 1 4 10 VLAN0010 1 3 4 dynamic Required 11 VLANOO11 1 1 2 static Required 20 VLAN0020 1 3 4 static Required 21 VLAN0021 static Required 30 VLANO030 static Required 31 VLAN0031 static Required 91 VLANO0011 1 1 2 static Not Required 3978 Guest VLAN 1 17 static Guest 354 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands 28 VLAN Commands vlan database The vlan database Global Configuration mode command enters the VLAN Configuration mode Syntax vlan database Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enters the VLAN database mode Console config vlan database Console config vlan vian Use the vlan VLAN Configuration mode command to create a VLAN To delete a VLAN u
241. nicast client enable Global Configuration mode command to enable predefined unicast clients globally To enable polling you should also use the sntp unicast client poll Global Configuration mode command for global enabling Polling time is determined by the sntp client poll timer Global Configuration mode command Example The following example configures the device to accept SNTP traffic from the server on 192 1 1 1 Console config sntp server 192 1 1 1 show clock The show clock Privileged EXEC mode command displays the time and date from the system clock Syntax show clock detail Parameters e detail Shows timezone and summertime configuration Default Configuration This command has no default configuration Command Mode Privileged EXEC mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 65 Clock Commands User Guidelines The symbol that precedes the show clock display indicates the following Symbol Description Time is not authoritative blank Time is authoritative Time is authoritative but SNTP is not synchronized Example The following example displays the time and date from the system clock Console show clock 5 29 03 PDT UTC 7 Jun 17 2005 Time source is SNTP Console show clock detail 5 29 03 PDT UTC 7 Jun 17 2005 Time source is SNTP Time zone Acronym is PST Offset is UTC 8 Summe
242. no user guidelines for this command Example The following example displays protocols groups information VLAN Commands Console show vlan protocols groups Encapsulation Protocol ethernet 08 00 ethernet 08 06 ethernet 81 37 ethernet 81 38 rfcl042 08 00 rfcl042 08 06 show vlan macs groups Use the show vlan protocols groups EXEC command to show protocols groups information Syntax show vlan protocols groups Default Configuration This command has no default configuration Command Mode EXEC User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 379 VLAN Commands Example The following example displays protocols groups information Console gt show vlan protocols groups Protocol EncapsulationGroup 0x800 IP Ethernet I 0x806 ARP Ethernet 1 Ox86dd IPv6 Ethernet 2 0x8898 Ethernet 3 show vlan subnets groups Use the show vlan subnets groups EXEC command to show subnets groups information Syntax show vlan subnets groups Parameters e console Console terminal line e telnet Virtual terminal for remote console access Telnet e ssh Virtual terminal for secured remote console access SSH Default Configuration This command has no default configuration Command Mode EXEC User Guidelines There are no user guidelines for this command 380 Intel
243. nterface is in access mode To return to the default configuration use the no form of this command 360 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands Syntax switchport access vlan v an id dynamic no switchport access vlan Parameters e vlan id Specifies the ID of the VLAN to which the port is configured e dynamic Indicates that the port is assigned to a VLAN based on the source MAC address of the host connected to the port Default Configuration All ports belong to VLAN 1 Command Mode Interface configuration Ethernet port channel mode User Guidelines The command automatically removes the port from the previous VLAN and adds it to the new VLAN Example The following example configures a VLAN ID of 23 to the untagged layer 2 VLAN Ethernet port 1 Console config interface ethernet ext 1 Console config if switchport access vlan 23 switchport trunk allowed vian The switchport trunk allowed vlan Interface Configuration mode command adds or removes VLANs to or from a trunk port Syntax switchport trunk allowed vlan add v an list remove vian list Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 361 VLAN Commands Parameters e add vlan list List of VLAN IDs to be added Separate nonconsecutive VLAN IDs with a comma and no spaces A hyphen designates a range of IDs e remove vlan list
244. ntp client poll timer Global Configuration mode command sets the polling time for the Simple Network Time Protocol SNTP client To restoreTo restoreTo restore default configuration use the no form of this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 59 Clock Commands Syntax sntp client poll timer seconds no sntp client poll timer Paramethers e seconds Polling interval in seconds Range 60 86400 Default Configuration Polling interval is 1024 seconds Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example sets the polling time for the SNTP client to 120 seconds Console config sntp client poll timer 120 sntp broadcast client enable The sntp broadcast client enable Global Configuration mode command enables Simple Network Time Protocol SNTP broadcast clients To disable SNTP broadcast clients use the no form of this command Syntax sntp broadcast client enable no sntp broadcast client enable Default Configuration The SNTP broadcast client is disabled 60 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Clock Commands Command Mode Global Configuration mode User Guidelines Use the sntp client enable Interface Interface Configuration mode command to enable the SNTP client on a specific interface Example The follow
245. o be management interfaces except Ethernet interfaces 1 and 9 and makes the new access list the active list Console config management access list mlist Console config macl deny ethernet ext 1 Console config macl deny ethernet ext 9 Console config macl permit Console config macl exit Console config management access class mlist 146 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Management ACL Commands permit Management The permit Management Access List Configuration mode command defines a permit rule Syntax permit ethernet interface number vlan vlan id port channel port channel number service service permit ip source ip address mask mask prefix length ethernet interface number vlan vlan id port channel port channel number service service Parameters e interface number A valid Ethernet port number e vian id A valid VLAN number e port channel number A valid port channel index e jp address A valid source IP address e mask A valid network mask of the source IP address e prefix length Number of bits that comprise the source IP address prefix The prefix length must be preceded by a forward slash Range 0 32 e service Service type Possible values telnet ssh http https and snmp Default Configuration If no permit rule is defined the default is set to deny Command Mode Ma
246. o file copy operations Console config file system logging copy management logging The management logging Global Configuration command enables logging management access list ACL events To disable logging management access list events use the no form of this command Syntax management logging deny no management logging deny 314 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Syslog Commands Parameters e deny Indicates logging messages related to deny actions of management ACLs Default Configuration Logging management ACL events is enabled Command Mode Global Configuration mode User Guidelines Other types of management ACL events are not subject to this command Example The following example enables logging messages related to deny actions of management ACLs Console config management logging deny show logging The show logging Privileged EXEC mode command displays the state of logging and the syslog messages stored in the internal buffer Syntax show logging Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 315 Syslog Commands Example The following example displays the state of logging and the syslog messages stored in the
247. o long Console config spanning tree pathcost method long spanning tree bpdu The spanning tree bpdu Global Configuration mode command defines BPDU handling when the spanning tree is disabled globally or on a single interface To restore the default configuration use the no form of this command Syntax spanning tree bpdu filtering flooding no spanning tree bpdu Parameters e filtering Filter BPDU packets when the spanning tree is disabled on an interface e flooding Flood BPDU packets when the spanning tree is disabled on an interface Default Configuration The default setting is flooding Command Modes Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example defines BPDU packet flooding when the spanning tree is disabled on an interface Console config spanning tree bpdu flooding Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 269 Spanning Tree Commands clear spanning tree detected protocols The clear spanning tree detected protocols Privileged EXEC mode command restarts the protocol migration process forces renegotiation with neighboring devices on all interfaces or on a specified interface Syntax clear spanning tree detected protocols ethernet interface port channel port channel number Parameters e interface A valid Ethernet port e port channel number A v
248. ode Possible values Force auth Force unauth Auto Oper mode The port oper mode Possible values Authorized Unauthorized or Down Reauth Control Reauthentication control Reauth Period Reauthentication period 394 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands Field Description Username The username representing the identity of the Supplicant This field shows the username in case the port control is auto If the port is Authorized it shows the username of the current user If the port is unauthorized it shows the last user that was authenticated successfully Quiet period The number of seconds that the device remains in the quiet state following a failed authentication exchange for example the client provided an invalid password Tx period The number of seconds that the device waits for a response to an Extensible Authentication Protocol EAP request identity frame from the client before resending the request Max req Supplicant timeout The maximum number of times that the device sends an Extensible Authentication Protocol EAP request frame assuming that no response is received to the client before restarting the authentication process Time in seconds the switch waits for a response to an EAP request frame from the client before resending the request Server timeout Time in seconds the switch waits for a response from t
249. ollowing example closes an active terminal session Console gt exit end The end command ends the current configuration session and returns to the Privileged EXEC mode Syntax end Default Configuration This command has no default configuration Command Mode All configuration modes User Guidelines There are no user guidelines for this command Example The following example changes from Global Configuration mode to Privileged EXEC mode Console config end Console Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 349 User Interface Commands help The help command displays a brief description of the help system Syntax help Default Configuration This command has no default configuration Command Mode All command modes User Guidelines There are no user guidelines for this command Example The following example describes the help system Console help Help may be requested at any point in a command by entering a question mark i If nothing matches the currently entered incomplete command the help list is empty This indicates that for a query at this point there is no command matching the current input If the request is within a command enter backspace and erase the entered characters to a point where the request results in a display Help is provided when 1 There is a valid command and a help request is made for ente
250. ommand Example The following example displays all VLAN information Console show vlan VLAN Name Ports Type T default RS other 10 VLANO0010 dl dynamic 11 VLANO011 1 static 20 VLANO020 1 static 2 VLANO0021 static 30 VLANO0030 static 31 VLAN0031 static 91 VLAN0011 1 static 3978 Guest VLAN 1 guest Authorization Required Required Required Required Required Required Required Not Required show vlan internal usage The show vlan internal usage Privileged EXEC mode command displays a list of VLANSs used internally by the device Syntax show vlan internal usage Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 369 VLAN Commands Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays VLANs used internally by the device Console show vlan internal usage VLAN Usage IP address Reserved 1007 Eth 1 Active No 1008 Eth 1 Inactive Yes 1009 Eth 1 Active Yes show interfaces switchport The show interfaces switchport Privileged EXEC mode command displays the switchport configuration Syntax show interfaces switchport ethernet interface port channel port channel number Parameters e interface A valid Ethernet port number e port channe
251. ommand aaa authentication login Command Mode Line Configuration mode User Guidelines To change or rename an authentication method use the negate command and create a new rule with the new method name Example The following example specifies the default authentication method for a console Console config line console Console config line login authentication default enable authentication The enable authentication Line Configuration mode command specifies the authentication method list when accessing a higher privilege level from a remote Telnet or console To restore the default configuration specified by the aaa authentication enable command use the no form of this command Syntax enable authentication default ist name no enable authentication 12 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide AAA Commande Parameters e default Uses the default list created with the aaa authentication enable command e list name Uses the indicated list created with the aaa authentication enable command Default Configuration Uses the default set with the aaa authentication enable command Command Mode Line Configuration mode User Guidelines There are no user guidelines for this command Example The following example specifies the default authentication method when accessing a higher privilege level from a Telnet Console config line console Conso
252. on mode command generates RSA key pairs Syntax crypto key generate rsa Default Configuration RSA key pairs do not exist Command Mode Global Configuration mode User Guidelines RSA keys are generated in pairs one public RSA key and one private RSA key If the device already has RSA keys a warning and prompt to replace the existing keys with new keys are displayed This command is not saved in the device configuration however the keys generated by this command are saved in the private configuration which is never displayed to the user or backed up on another device Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 297 SSH Commands RSA keys are saved to the backup master This command may take a considerable period of time to execute Example The following example generates RSA key pairs Console config crypto key generate rsa ip ssh pubkey auth The ip ssh pubkey auth Global Configuration mode command enables public key authentication for incoming SSH sessions To disable this function use the no form of this command Syntax ip ssh pubkey auth no ip ssh pubkey auth Default Configuration Public Key authentication fo incoming SSH sessions is disabled Command Mode Global Configuration mode User Guidelines AAA authentication is independent Example The following example enables public key authentication for incoming SSH sessions
253. onal Specifies the input port of the devise In case of egress classification this port will be devise input port e out port port num Optional Specifies the output port of the devise e dscp Indicates matching the dscp number with the packet dscp value e ip precedence Indicates matching ip precedence with the packet ip precedence value Default Configuration This command has no default configuration Command Mode IP Access List Configuration mode User Guidelines Use the ip access list Global Configuration mode command to enable the IP Access List Configuration mode Before an Access Control Element ACE is added to an ACL all packets are permitted After an ACE is added an implied deny any any condition exists at the end of the list and those packets that do not match the defined conditions are denied Example The following example shows how to define a permit statement for an IP ACL Console config ip access list ip acll Console config ip al deny rsvp 192 1 1 1 0 0 0 255 any mac access list The mac access list Global Configuration mode command enables the MAC Access List Configuration mode and creates Layer 2 ACLs To delete an ACL use the no form of this command 46 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide ACL Commands Syntax mac access list name no mac access list name Parameters e name Specifies the name of the ACL Range
254. onfiguration Command Mode Management Access list Configuration mode User Guidelines Rules with Ethernet VLAN and port channel parameters are valid only if an IP address is defined on the appropriate interface The system supports up to 128 management access rules Example The following example denies all ports in the access list called mlist Console config management access list mlist Console config macl deny 148 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Management ACL Commands management access class The management access class Global Configuration mode command restricts management connections by defining the active management access list To disable this restriction use the no form of this command Syntax management access class name no management access class Parameters e name Specifies the name of the access list to be used Range 1 32 characters Default Configuration If no access list is specified an empty access list is used Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example configures an access list called mlist as the management access list Console config management access class mlist Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 149 Management ACL Commands show management access list The show
255. onfiguration mode command specifies authentication methods for HTTPS server users To restore the default configuration use the no form of this command Syntax ip https authentication method method2 no ip https authentication 14 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide AAA Commande Parameters e method method2 Specify at least one method from the following list Keyword Description local Uses the local username database for authentication none Uses no authentication radius Uses the list of all RADIUS servers for authentication tacacs Uses the list of all TACACS servers for authentication Default Configuration The local user database is checked This has the same effect as the command ip https authentication ocal Command Mode Global Configuration mode User Guidelines The additional methods of authentication are used only if the previous method returns an error not if it fails To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line Example The following example configures HTTPS authentication Console config ip https authentication radius tacacs local none show authentication methods The show authentication methods Privileged EXEC mode command displays information about the authentication methods Syntax show authentication methods Inte
256. ooping leave time out Interface Configuration VLAN mode command configures the leave time out If an IGMP report for a multicast group was not received for a leave time out period after an IGMP Leave was received from a specific port this port is deleted from the member list of that multicast group To restore the default configuration use the no form of this command Syntax ip igmp snooping leave time out time out immediate leave no ip igmp snooping leave time out Parameters e time out Specifies the leave timeout in seconds for IGMP queries Range 0 2147483647 e immediate leave Indicates that the port should be immediately removed from the members list after receiving IGMP Leave Default Configuration The default leave time out configuration is 10 seconds Command Mode Interface Configuration VLAN mode User Guidelines The leave timeout should be set greater than the maximum time that a host is allowed to respond to an IGMP query Use immediate leave only where there is just one host connected to a port Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 115 IGMP Snooping Commands Example The following example configures the host leave timeout to 60 seconds Console config interface vlan 2 Console config if ip igmp snooping leave time out 60 show ip igmp snooping mrouter The show ip igmp snooping mrouter Privileged EXEC mode command displays
257. or in which the Packet Body Length field is invalid LastEapolFrameVersion LastEapolFrameSource The protocol version number carried in the most recently received EAPOL frame The source MAC address carried in the most recently received EAPOL frame ADVANCED FEATURES dot1x auth not req The dot1x auth not req Interface Configuration mode command enables unauthorized devices access to the VLAN To disable access to the VLAN use the no form of this command Syntax dot1x auth not req no dot1x auth not req 398 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands Default Configuration Access is enabled Command Mode Interface Configuration VLAN mode User Guidelines An access port cannot be a member in an unauthenticated VLAN The native VLAN of a trunk port cannot be an unauthenticated VLAN For a general port the PVID can be an unauthenticated VLAN although only tagged packets would be accepted in the unauthorized state Example The following example enables access to the VLAN to unauthorized devices Console config if dotix auth not req dot1x multiple hosts The dot1x multiple hosts Interface Configuration mode command enables multiple hosts clients on an 802 1x authorized port where the authorization state of the port is set to auto To return to the default configuration use the no form of this command Syntax
258. or understanding how the commands are presented in this guide The Guide also provides command by command information of all available CLI commands inclusive of the command description command syntax any parameters other relevant command information and a basic example For the latest version of this manual see http support intel com Manual Organization Chapter Using CLI Chapter 2 AAA Commands Chapter 3 Address Table Commands Chapter 4 ACL Commands Chapter 5 Clock Commands Chapter 6 Configuration and Image File Commands Chapter 7 Ethernet Configuration Commands Chapter 8 GVRP Commands Chapter 9 IGMP Snooping Commands Chapter 10 IP Address Commands Chapter 11 LACP Commands Chapter 12 Line Commands Chapter 13 Management ACL Commands Chapter 14 PHY Diagnostics Commands Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide v vi Chapter 15 Port Channel Commands Chapter 16 Port Monitor Commands Chapter 17 QoS Commands Chapter 18 RMON Commands Chapter 19 RADIUS Commands Chapter 20 Web Server Commands Chapter 21 SNMP Commands Chapter 22 Spar mme Tree Commands Chapter 23 SSH Commands Chapter 24 Syslog Commands Chapter 25 System Management Commands Chapter 26 TACACS Commands Chapter 27 User Interface Commands Chapter 28 VLAN Commands Chapter 29 802 1x Commands Appendix A Getting Help Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CL
259. orFramesRx 0 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 397 802 1x Commands LastEapolFrameVersion 1 LastEapolFrameSource 00 08 78 32 98 78 The following table describes the significant fields shown in the display Field Description EapolFramesRx The number of valid EAPOL frames of any type that have been received by this Authenticator EapolFramesTx The number of EAPOL frames of any type that have been transmitted by this Authenticator EapolStartFramesRx The number of EAPOL Start frames that have been received by this Authenticator EapolLogoffFramesRx The number of EAPOL Logoff frames that have been received by this Authenticator EapolRespldFramesRx EapolRespFramesRx The number of EAP Resp Id frames that have been received by this Authenticator The number of valid EAP Response frames other than Resp Id frames that have been received by this Authenticator EapolReqidFramesTx The number of EAP Req Id frames that have been transmitted by this Authenticator EapolReqFramesTx The number of EAP Request frames other than Ra Id frames that have been transmitted by this Authenticator InvalidEapolFramesRx The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized EapLengthErrorFramesRx The number of EAPOL frames that have been received by this Authenticat
260. ority for IEEE Multiple Spanning Tree Protocol MSTP is 128 Command Modes Interface Configuration Ethernet port channel mode 272 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide User Guidelines There are no user guidelines for this command Example The following example configures the port priority of port g1 to 144 Spanning Tree Commands Console config interface ethernet ext 1 Console config if spanning tree mst 1 port priority 144 spanning tree mst cost The spanning tree mst cost Interface Configuration mode command configures the path cost for multiple spanning tree MST calculations If a loop occurs the spanning tree considers path cost when selecting an interface to put in the forwarding state To restore the default configuration use the no form of this command Syntax spanning tree mst instance id cost cost no spanning tree mst instance id cost Parameters e instance D ID of the spanning tree instance Range 1 16 e cost The port path cost Range 1 200 000 000 Default Configuration Default path cost is determined by port speed and path cost method long or short as shown below Interface Long Short Port channel 20 000 4 Gigabit Ethernet 1000 Mbps 20 000 4 Fast Ethernet 100 Mbps 200 000 19 Ethernet 10 Mbps 2 000 000 100 Command Modes Interface Configuration Ethernet port channel mode Intel
261. ort To return to the default configuration use the no form of this command Syntax qos cos default cos no qos cos Parameters e default cos Specifies the default CoS value of the port Range 0 7 Default Configuration Default CoS value of a port is 0 Command Mode Interface Configuration Ethernet port channel mode User Guidelines If the port is trusted the default CoS value of the port is used to assign a CoS value to all untagged packets entering the port 194 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example QoS Commands The following example configures port 15 default CoS value to 3 Console config interface ethernet ext 15 Console config if qos cos 3 qos dscp mutation Syntax The qos dscp mutation Global Configuration mode command applies the DSCP Mutation map to a system DSCP trusted port To return to the trust state with no DSCP mutation use the no form of this command qos dscp mutation no qos dscp mutation Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines The DSCP to DSCP mutation map is applied to a port at the boundary of a Quality of Service QoS administrative domain If two QoS domains have different DSCP definitions use the DSCP to DSCP mutation map to match one set of DSCP values with the DSCP values of another domain Apply the DSCP
262. ort id 128 1 Type P2p configured auto RSTP Designated bridge Priority 32768 Designated port id 128 25 Number of transitions to forwarding state BPDU sent 2 received 120638 Port 2 enabled State Forwarding Port id 128 2 Type Shared configured auto STP Designated bridge Priority 32768 Designated port id 128 2 Number of transitions to forwarding state BPDU sent 2 received 170638 Role Root Port cost 20000 Port Fast No configured no Address 00 01 42 97 e0 00 Designated path cost 0 Role Designated Port cost 20000 Port Fast No configured no Address 00 02 4b 29 7a 00 Designated path cost 20000 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 285 Spanning Tree Commands Port 3 disabled State N A Port id 128 3 Type N A configured auto Designated bridge Priority N A Designated port id N A Number of transitions to forwarding state BPDU sent N A received N A Port 4 enabled State Blocking Port id 128 4 Type Shared configured auto STP Designated bridge Priority 28672 Designated port id 128 25 Number of transitions to forwarding state BPDU sent 2 received 120638 Port 5 enabled State Disabled Port id 128 5 Type N A configured auto Designated bridge Priority N A Designated port id N A Number of transitions to forwarding state BPDU sent N A received N A 286 Intel Blade S
263. ostname host name command can be used to place a different host name in the DHCP option 12 field The no ip address dhcp command deconfigures any IP address that was acquired and sends a DHCPRELEASE message Example The following example acquires an IP address for Ethernet port 16 from DHCP Console config interface ethernet ext 16 Console config if ip address dhcp ip default gateway The ip default gateway Global Configuration mode command defines a default gateway device To restore the default configuration use the no form of this command Syntax ip default gateway ip address no ip default gateway Parameters e ip address Specifies the valid IP address of the currently defined default gateway Default Configuration No default gateway is defined Command Mode Global Configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 123 IP Address Commands User Guidelines This command is only operational in Switch mode Example The following example defines default gateway 192 168 1 Console config ip default gateway 192 168 1 1 show ip interface The show ip interface Privileged EXEC mode command displays the usability status of configured IP interfaces Syntax show ip interface ethernet interface number vlan vian id port channel port channel number Parameters e interface number Specifies the valid Ethernet port
264. ot be configured for a range of interfaces range context User Guidelines The name string may include numbers and other characters etc but no spaces Example The following example gives VLAN number 19 the name Marketing Console config interface vlan 19 Console config if name Marketing 358 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands switchport protected The switchport protected Interface Configuration mode command overrides the FDB decision and sends all Unicast Multicast and Broadcast traffic to an uplink port To disable overriding the FDB decision use the no form of this command Syntax switchport protected ethernet port port channel port channel number no switchport protected Parameters e port Specifies the uplink Ethernet port e port channel number Specifies the uplink port channel Default Configuration Switchport protected is disabled Command Mode Interface Configuration Ethernet port channel mode User Guidelines Example Private VLAN Edge PVE supports private communication by isolating PVE defined ports and ensuring that all Unicast Broadcast and Multicast traffic from these ports is only forwarded to uplink port s PVE requires only one VLAN on each device but not on every port this reduces the number of VLANs required by the device Private VLANs and the default VLAN function simultaneously in th
265. owing example defines a policer for classified traffic When the traffic rate exceeds 124 000 bps or the normal burst size exceeds 96000 bps the packet is dropped The class is called class and is in a policy map called policy1 Console config policy map policyl Console config pmap class class1 Console config pmap c police 124000 9600 exceed action drop service policy The service policy Interface Configuration Ethernet port Channel mode command applies a policy map to the input of a particular interface To detach a policy map from an interface use the no form of this command Syntax service policy input policy map name no service policy input Parameters e policy map name Specifies the name of the policy map to be applied to the input interface Default Configuration This command has no default configuration Command Mode Interface Configuration Ethernet port Channel mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 179 QoS Commands User Guidelines Only one policy map per interface per direction is supported Example The following example attaches a policy map called policy to the input interface Console config if service policy input policyl qos aggregate policer The qos aggregate policer Global Configuration mode command defines the policer parameters that can be applied to multiple traffic classes within the same policy ma
266. p To remove an existing aggregate policer use the no form of this command Syntax qos aggregate policer aggregate policer name committed rate bps excess burst byte exceed action drop policed dscp transmit dscp dscp no qos aggregate policer Parameters e aggregate policer name Specifies the name of the aggregate policer e committed rate bps Specifies the average traffic rate CIR in bits per second bps e excess burst byte Specifies the normal burst size CBS in bytes e drop Indicates that when the rate is exceeded the packet is dropped e policed dscp transmit Indicates that when the rate is exceeded the DSCP of the packet is remarked e dscp Specifies the value that the DSCP would be remarked If unspecified the DSCP would be remarked according to the policed DSCP map as configured by the qos map policed dscp Global Configuration mode command Default Configuration No aggregate policer is define Command Mode Global Configuration mode 180 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands User Guidelines Policers that contain set or trust Policy map Class Configuration commands or that have ACL classifications cannot be attached to an output interface Define an aggregate policer if the policer is shared with multiple classes Policers in one port cannot be shared with other policers in another device traffic from two different por
267. p name Specifies the name of the policy map Default Configuration If the packet is an IP packet the DCSP value of the policy map is 0 If the packet is tagged the CoS value is 0 Command Mode Global Configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 173 QoS Commands User Guidelines Example Before configuring policies for classes whose match criteria are defined in a class map use the policy map Global Configuration mode command to specify the name of the policy map to be created or modified Class policies in a policy map can only be defined if match criteria has already been defined for the classes Use the class map Global Configuration and match Class map Configuration commands to define the match criteria of a class Only one policy map per interface per direction is supported A policy map can be applied to multiple interfaces and directions The following example creates a policy map called policy and enters the Policy map Configuration mode Console config policy map policyl Console config pmap class The class Policy map Configuration mode command defines a traffic classification and enters the Policy map Class Configuration mode To remove a class map from the policy map use the no form of this command Syntax class class map name access group acl name no class class map name Parameters e class map name Specifies the nam
268. panning tree portfast Parameters e auto Specifies that the software waits for 3 seconds With no BPDUs received on the interface before putting the interface into the PortFast mode Default Configuration PortFast mode is disabled 266 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands Command Modes Interface Configuration Ethernet port channel mode User Guidelines This feature should be used only with interfaces connected to end stations Otherwise an accidental topology loop could cause a data packet loop and disrupt device and network operations Example The following example enables PortFast on Ethernet port 15 Console config interface ethernet ext 15 Console config if spanning tree portfast spanning tree link type The spanning tree link type Interface Configuration mode command overrides the default link type setting determined by the duplex mode of the port and enables Rapid Spanning Tree Protocol RSTP transitions to the forwarding state To restore the default configuration use the no form of this command Syntax spanning tree link type point to point shared no spanning tree spanning tree link type Parameters e point to point Indicates that the port link type is point to point e shared Indicates that the port link type is shared Default Configuration The device derives the port link type from the duplex mode A full duplex
269. port channel mode User Guidelines There are no user guidelines for this command Example The following example disables Ethernet port 5 operations Console config interface ethernet ext 5 Console config if shutdown The following example restarts the disabled Ethernet port Console config interface ethernet ext 5 Console config if no shutdown description The description Interface Configuration Ethernet port channel mode command adds a description to an interface To remove the description use the no form of this command Syntax description string no description Parameters e string Comment or a description of the port to enable the user to remember what is attached to the port Range 1 64 characters Default Configuration The interface does not have a description Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 81 Ethernet Configuration Commands Command Mode Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example The following example adds a description to Ethernet port 5 Console config interface ethernet ext 5 Console config if description RD SW 3 speed The speed Interface Configuration Ethernet port channel mode command configures the speed of a given Ethernet interface when not using auto negotiation To restore the default configuration
270. port channel number list no bridge multicast forbidden address mac multicast address ip multicast address Parameters e add Adds ports to the group e remove Removes ports from the group e mac multicast address A valid MAC multicast address e ip multicast address A valid IP multicast address e interface list Separate nonconsecutive Ethernet ports with a comma and no spaces hyphen is used to designate a range of ports e port channel number list Separate nonconsecutive valid port channels with a comma and no spaces a hyphen is used to designate a range of port channels Default Configuration 24 No forbidden addresses are defined Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Address Table Commands Command Modes Interface Configuration VLAN mode User Guidelines Before defining forbidden ports the multicast group should be registered Example In this example MAC address 0100 5e02 0203 is forbidden on port 2 within VLAN 8 Console config interface vlan 8 Console config if bridge multicast address 0100 5e 02 0203 Console config if bridge multicast forbidden address 0100 5e02 0203 add ethernet ext 2 bridge multicast forward all The bridge multicast forward all Interface Configuration VLAN mode command enables forwarding all multicast packets on a port To restore the default configuration use the no form of this command Syntax
271. port is considered a point to point link and a half duplex port is considered a shared link Command Modes Interface Configuration Ethernet port channel mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 267 Spanning Tree Commands User Guidelines There are no user guidelines for this command Example The following example enables shared spanning tree on Ethernet port 15 Console config interface ethernet ext 15 Console config if spanning tree link type shared spanning tree pathcost method The spanning tree pathcost method Global Configuration mode command sets the default path cost method To return to the default configuration use the no form of this command Syntax spanning tree pathcost method long short no spanning tree pathcost method Parameters e long Specifies port path costs with a range of 1 200 000 000 e short Specifies port path costs with a range of 0 65 535 Default Configuration Short path cost method Command Mode Global Configuration mode User Guidelines This command is only operational with the device in Interface mode This command applies to all spanning tree instances on the device The cost is set using the spanning tree cost command 268 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands Example The following example sets the default path cost method t
272. port number no ip https port Parameters e port number Port number to be used by the HTTP server Range 0 65535 Default Configuration The default port number is 443 Command Mode Global Configuration mode User Guidelines Specifying 0 as the port number effectively disables HTTP access to the device Example The following example configures the https port number to 100 Console config ip https port 100 ip https exec timeout The ip https exec timeout command allows users to define the interval that the system waits for user input in https sessions before automatic logoff To return to default use the no form of this command Syntax ip https exec timout minutes seconds 226 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Web Server Commands no ip https exec timout Parameters e minutes Specifies the number of minutes to wait e seconds Specifies the number of seconds to wait Default Configuration The default timout is 10 minutes Command Mode Global Configuration mode User Guidelines To specify no timeout enter the ip https exec timeout 0 0 command crypto certificate generate The crypto certificate generate Global Configuration mode command generates a self signed HTTPS certificate Syntax crypto certificate number generate key generate length cn common name ou organization unit or organization loc location
273. port trunk native vlan getesetegegeten eebe EEN 362 switchport general allowed vlan EE 363 switchport general pvid E 364 switchport general ingress filtering disable csscccssessereessssseesecseseesosceseessssoeeesessnee 365 switchport general acceptable frame type tagged only ssssssseeeesseesererrrrrsssrrrrrrrnsssrrrena 366 SWitchport EENEG 366 ip internal usage vlan seaiccrensestcncetn ste ege deet EES 367 GUST 368 show vlan internal usage E 369 show interfaces switchport E 370 map protocol protocols group EE 373 switchport general Map protocols group vlan sssssesseeseeiseeseerirrtrtsessrirnrnnnsssttnnnnnnnnsennnnna 374 map MAG MACS GIOUP EE 375 switchport general MAP MACS GrOUP VIAN eee eee eeeeeee eee e eee eeeee eee e eter eee eeaaaeeeeeeteeeeteeaeeeeeees 376 map subnet subnets group E 377 switchport general map subnets group vlan ek 377 show vlan protocolsS groupS E 378 SHOW vlan MaCS grOUPS E 379 show vlan E ele 380 Chapter 29 802 1x Commands ciscccicccecestscccasscscnstsesevesssnesnseccsedersisanscesssseccanenassaies 383 aaa authentication OU IN E 383 elek en En Ee aide RE 384 3 2 6 015 Se E 384 dot ix re authentication NEE 386 dot x timeout re authperiod cccecceeeeseeeee eee eeeeeeeeneneeeeeeeeeseaneeeeeeeeeseseeeeeeeseeeneseseeneneaeeess 386 dot1x Ee uge 387 GOU K timeout quiet period ME 388 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide XV dot1x timeou
274. ps certificate 1 show crypto certificate mycertificate The show crypto certificate mycertificate Privileged EXEC mode command displays the SSH certificates of the device Syntax show crypto certificate mycertificate number Parameters e number Specifies the certificate number Range 1 2 Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command 232 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Web Server Commands Example The following example displays the certificate Console show crypto certificate mycertificate 1 erter BEGIN CERTIFICATE dHmUgUm9vdCBDZXJ 0aWZpZXIwxXDANBgkqhkiG9w0BAQEFAANLADBIAkKEAp4HS nnH xQSGA2 f kRBwU2XIxb7n8VPsTm1lxyJ1t11lalGaqchfMqqe0kmfhcoHSwr yf 1FpDOMWOTgDAwI DAQABo4 IBoj CCAZ4wEwYJKwY BBAGCNxQCBAY eBABDAEEw CwRO PBAQDAgFGMA8GA1UdEWEB wOFMAMBAf 8wWHOYDVROOBBYEFAf4MT9BRD47 ZVKBAELYGgp 6MIIBNgYDVRO fBIIBLTCCASkwgdKggc ggcyGgclsZGFw0i8v LOVByb3 h5JTIwvU2 9mdHdhcmU1Mj BSb2 9 0TTIw02VydGlmaWVyLENOPXN1cnZ1 END CERTIFICATE Issued by www verisign com Valid from 8 9 2003 to 8 9 2004 Subject CN router gm com 0 General Motors C US Finger print DC789788 DC88A988 127897BC BB789788 show ip http The show ip http Privileged EXEC mode comm
275. queues The following example maps CoS 7 to queue 2 Console config wrr queue cos map 2 7 wrr queue bandwidth The wrr queue bandwidth Interface Configuration Ethernet port channel mode command assigns weights to each Weighted Round Robin WRR queue The weight ratio determines the frequency by which the packet scheduler dequeues packets from each queue To return to the default configuration use the no form of this command Syntax wrr queue bandwidth weight weight2 weight n no wrr queue bandwidth Parameters s weight weight2 weight_n Sets the ratio of the bandwidth assigned by the WRR packet scheduler for the packet queues Separate each value by a space Range 6 255 184 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands Default Configuration The default WRR weight ratio is one eighth of the sum of all queue weights each weight is set to 6 Command Mode Interface Configuration Ethernet port channel mode User Guidelines Example Use the priority queue out num of queues Global Configuration mode command to configure a queue as WRR or Strict Priority Use this command to define a WRR weight per interface The weight ratio for each queue is defined by the queue weight divided by the sum of all queue weights Oe the normalized weight This sets the bandwidth allocation for each queue A queue can be assigned a WRR weight of 0 in whic
276. r Guidelines There are no user guidelines for this command Example The following example sets all RADIUS server deadtimes to 10 minutes Console config radius server deadtime 10 show radius servers The show radius servers Privileged EXEC mode command displays the RADIUS server settings 220 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide RADIUS Commands Syntax show radius servers Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays RADIUS server settings Console show radius servers IP address Port TimeOut Retransmit DeadTime Source IP Priority Usage Auth ANE Lei 1645 Global Global Global 1 All 1722162062 1645 11 8 Global Global 2 All Global values TimeOut 3 Retransmit 3 Deadtime 0 Source IP 172 16 8 1 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 221 RADIUS Commands 222 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Web Server Commands 20 Web Server Commands ip http server The ip http server Global Configuration mode command enables configuring the device from a browser To disable this function use the no form of this command Syntax ip http server no ip http server Default Configur
277. raffic rate exceeds 124000 bps or the normal burst size exceeds 96000 bps Console config interface ethernet ext 5 Console config if traffic shape 124000 96000 show qos interface The show qos interface User EXEC mode command displays Quality of Service QoS information on the interface Syntax show qos interface ethernet interface number port channel number port channel number buffers queueing policers shapers Parameters e interface number Valid Ethernet port number e number Valid port channel number Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 187 QoS Commands e buffers Displays the buffer setting for the interface s queues Displays the queue depth for each queue and the thresholds for the WRED e queuing Displays the queue strategy WRR or EF the weight for WRR queues the CoS to queue map and the EF priority e policers Displays the shaper of the specified interface and the shaper for the queue on the specified interface e shapers Displays all the policers configured for this interface their setting and the number of policers currently unused Default Configuration There is no default configuration for this command Command Mode User EXEC mode User Guidelines If no keyword is specified port QoS QoS mode eg DSCP trusted CoS trusted untrusted default CoS value DSCP to DSCP mutation map attached to the port
278. ration Ethernet mode User Guidelines During the quiet period the device does not accept or initiate authentication requests 388 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands The default value of this command should only be changed to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers To provide a faster response time to the user a smaller number than the default value should be entered Example The following example sets the number of seconds that the device remains in the quiet state following a failed authentication exchange to 3600 Console config interface ethernet ext 16 Console config if dot1ix timeout quiet period 3600 dot1x timeout tx period The dot1x timeout tx period Interface Configuration mode command sets the number of seconds that the device waits for a response to an Extensible Authentication Protocol EAP request identity frame from the client before resending the request To return to the default configuration use the no form of this command Syntax dotlx timeout tx period seconds no dot1x timeout tx period Parameters e seconds Specifies the time in seconds that the device waits for a response to an EAP request identity frame from the client before resending the request Range 1 65535 seconds Default Configuration Timeout period is
279. re no user guidelines for this command Example The following example disables port ingress filtering on Ethernet port 1 Console config interface ethernet ext 1 Console config if switchport general ingress filtering disable Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 365 VLAN Commands switchport general acceptable frame type tagged only The switchport general acceptable frame type tagged only Interface Configuration mode command discards untagged frames at ingress To return to the default configuration use the no form of this command Syntax switchport general acceptable frame type tagged only no switchport general acceptable frame type tagged only Default Configuration All frame types are accepted at ingress Command Mode Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example The following example configures Ethernet port to discard untagged frames at ingress Console config interface ethernet ext 1 Console config if switchport general acceptable frame type tagged only switchport forbidden vian The switchport forbidden vlan Interface Configuration mode command forbids adding specific VLANs to a port To return to the default configuration use the remove parameter for this command Syntax switchport forbidden vlan add v an list remove vian list 366 Intel Blade S
280. registration request mobile registration reply domain name request domain name reply skip and photuris Range 0 255 icmp code Specifies an ICMP message code for filtering ICMP packets ICMP packets that are filtered by ICMP message type can also be filtered by the ICMP message code Range 0 255 igmp type IGMP packets can be filtered by IGMP message type Enter a number or one of the following values dvmrp host query host report pim or trace Range 0 255 destination port Specifies the UDP TCP destination port Range 0 65535 source port Specifies the UDP TCP source port Range 0 65535 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 43 ACL Commands e list of flags Specifies a list of TCP flags that can be triggered If a flag is set it is prefixed by ce 99 If a flag is not set it is prefixed by The possible values are t urg tack psh rst syn fin urg ack psh rst syn and Dn The flags are concatenated into one string For example fin ack Default Configuration No IPv4 ACL is defined Command Mode IP Access List Configuration mode User Guidelines Use the ip access list Global Configuration mode command to enable the IP Access List Configuration mode Before an Access Control Element ACE is added to an ACL all packets are permitted After an ACE is added an implied deny any any condition exists at the end
281. ress Hello Time 2 sec Interfaces Name State Prio Nbr 1 Enabled 128 1 2 Enabled 128 2 4 Enabled 128 4 00 02 4b 29 7a 00 Max Age 20 sec Cost Sts 20000 FWD 20000 FWD 20000 BLK Console show spanning tree blockedports Spanning tree enabled mode RSTP Default port cost method long Root ID Priority Address Path Cost Root Port Hello Time 2 sec Bridge ID Priority Address Hello Time 2 sec Interfaces Name State Prio Nbr 4 Enabled 128 4 284 32768 00 01 42 97 e0 00 20000 1 1 1 Max Age 20 sec 36864 00 02 4b 29 7a 00 Max Age 20 sec Forward Delay 15 sec Role PortFast Type Root No P2p RSTP Desg No Shared STP ALTN No Shared STP Forward Delay 15 sec Forward Delay 15 sec Role PortFast Type ALTN No Shared STP Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Console show spanning tree detail Spanning tree enabled mode RSTP Default port cost method long Spanning Tree Commands Root ID Priority 32768 Address 00 01 42 97 e0 00 Path Cost 20000 Root Port 1 1 1 Hello Time 2 sec Bridge ID Priority 36864 Max Age 20 sec Forward Delay 15 sec Address 00 02 4b 29 7a 00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Number of topology changes 2 last change occurred 2d18h ago Times hold 1 topology change 35 notification 2 hello 2 max age 20 forward delay 15 Port 1 1 1 enabled State Forwarding P
282. ress table static The show bridge address table static Privileged EXEC mode command displays statically created entries in the bridge forwarding database Syntax show bridge address table static vlan vlan ethernet interface port channel port channel number Parameters e vlan Specifies a valid VLAN such as VLAN 1 e interface A valid Ethernet port 32 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Address Table Commands e port channel number A valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example In this example all static entries in the bridge forwarding database are displayed Console show bridge address table static Aging time is 300 sec vlan mac address port type 1 00 60 70 4C 73 FF 8 Permanent 1 00 60 70 8C 73 FF 8 delete on timeout 200 00 10 0D 48 37 FF 9 delete on reset show bridge address table count The show bridge address table count Privileged EXEC mode command displays the number of addresses present in the Forwarding Database Syntax show bridge address table count vlan vlan ethernet interface number port channel port channel number Parameters e vlan Specifies a valid VLAN such as VLAN 1 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Gu
283. result in noncompliance with product regulations in the region s in which the product is sold System power on off The power button DOES NOT turn off the system AC power To remove power from system you must unplug the AC power cord from the wall outlet Make sure the AC power cord is unplugged before you open the chassis add or remove any components Hazardous conditions devices and cables Hazardous electrical conditions may be present on power telephone and communication cables Turn off the server and disconnect the power cord telecommunications systems networks and modems attached to the server before opening it Otherwise personal injury or equipment damage can result Electrostatic discharge ESD and ESD protection ESD can damage disk drives boards and other parts We recommend that you perform all procedures in this chapter only at an ESD workstation If one is not available provide some ESD protection by wearing an antistatic wrist strap attached to chassis ground any unpainted metal surface on your server when handling parts Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Preface About this Manual Thank you for purchasing and using an Intel Blade Server Ethernet Switch Module SBCEGBESW1 or SBCEGBESW10 This manual is written for System Administrators who have knowledge of device management through Command Line Interface CLI commands This document provides the basic rules f
284. ring a parameter or argument e g show All possible parameters or arguments for the entered command are displayed 2 An abbreviated argument is entered and a help request is made for arguments matching the input e g show pr terminal datadump The terminal datadump User EXEC mode command enables dumping all the output of a show command without prompting To disable dumping use the no form of this command 350 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide User Interface Commands Syntax terminal datadump no terminal datadump Default Configuration Dumping is disabled Command Mode User EXEC mode User Guidelines By default a More prompt is displayed when the output contains more lines than can be displayed on the screen Pressing the Enter key displays the next line pressing the Spacebar displays the next screen of output The data dump command enables dumping all output immediately after entering the show command This command is relevant only for the current session Example This example dumps all output immediately after entering a show command Console gt terminal datadump show history The show history User EXEC mode command lists the commands entered in the current session Syntax show history Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEG
285. rives the queue is assigned per DSCP If a non IP packet arrives the queue is assigned per CoS VPT Example The following example configures the trust state for a class called class in a policy map called policy Console config policy map policyl Console config pmap class class1 Console config pmap c trust cos dscp set The set Policy map Class Configuration mode command sets new values in the IP packet Syntax set dscp new dscp queue queue id cos new cos no set Parameters e new dscp Specifies a new DSCP value for the classified traffic Range 0 63 e queue id Specifies an explicit queue ID for setting the egress queue e new cos Specifies a new user priority for marking the packet Range 0 7 Default Configuration This command has no default configuration Command Mode Policy map Class Configuration mode User Guidelines This command is mutually exclusive with the trust Policy map Class Configuration command within the same policy map Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 177 QoS Commands Example Policy maps that contain set or trust Policy map Class Configuration commands or that have ACL classifications cannot be attached to an egress interface by using the service policy Ethernet Port channel Interface Configuration mode command To return to the Policy map Configuration mode use the exit command To return
286. rs e add Forbids forwarding all multicast packets e remove Does not forbid forwarding all multicast packets e interface list Separates nonconsecutive Ethernet ports with a comma and no spaces a hyphen is used to designate a range of ports e port channel number list Separates nonconsecutive port channels with a comma and no spaces a hyphen is used to designate a range of port channels Default Configuration This setting is disabled Command Mode Interface Configuration VLAN mode 26 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Address Table Commands User Guidelines IGMP snooping dynamically discovers multicast device ports When a multicast device port is discovered all the multicast packets are forwarded to it unconditionally This command prevents a port from becoming a multicast device port Example In this example forwarding all multicast packets to 1 with VLAN 2 is forbidden Console config interface vlan 2 Console config if bridge multicast forbidden forward all add ethernet ext 1 bridge aging time The bridge aging time Global Configuration mode command sets the address table aging time To restore the default configuration use the no form of this command Syntax bridge aging time seconds no bridge aging time Parameters e seconds Time in seconds Range 10 630 seconds Default Configuration The default setting is 300
287. rted and are automatically detected On It is possible to connect to a PC only with a normal cable and to connect to another device only with a cross cable No It is possible to connect to a PC only with a cross cable and to connect to another device only with a normal cable Example In the following example automatic crossover is enabled on port 1 Console config interface ethernet ext 1 Console config if mdix auto 86 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands back pressure The back pressure Interface Configuration Ethernet port channel mode command enables back pressure on a given interface To disable back pressure use the no form of this command Syntax back pressure no back pressure Default Configuration Back pressure is enabled Command Mode Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example In the following example back pressure is enabled on port 1 Console config interface ethernet ext 1 Console config if back pressure port jumbo frame The port jumbo frame Global Configuration mode command enables jumbo frames on the device To disable jumbo frames use the no form of this command Syntax port jumbo frame no port jumbo frame Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10
288. rtime Acronym is PDT Recurring every year Begins at first Sunday of April at 2 00 Ends at last Sunday of October at 2 00 Offset is 60 minutes show sntp configuration The show sntp configuration Privileged EXEC mode command shows the configuration of the Simple Network Time Protocol SNTP Syntax show sntp configuration Default Configuration This command has no default configuration 66 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Clock Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the current SNTP configuration of the device Console show sntp configuration Polling interval 1024 seconds MD5 Authentication keys 8 9 Authentication is required for synchronization Trusted Keys 8 9 Unicast Clients Polling Enabled Server Polling Encryption Key 176 1 1 8 Enabled 9 176 1 8 179 Disabled Disabled Broadcast Clients Enabled Anycast Clients Enabled Broadcast Interfaces 1 3 show sntp status The show sntp status Privileged EXEC mode command shows the status of the Simple Network Time Protocol SNTP Syntax show sntp status Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 67 Clock Commands Default Configuration This command has no default configuration Command Mode Privileged EXEC mode
289. rver Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands 8 00M Copper Enabled 9 00M Copper Enabled 10 00M Copper Enabled 2 11 00M Copper Enabled 12 00M Copper Enabled 2n show interfaces configuration The show interfaces configuration Privileged EXEC mode command displays the configuration for all configured interfaces Syntax show interfaces configuration ethernet interface port channel port channel number Parameters interface Valid Ethernet port Full syntax unit port e port channel number Valid port channel number Default Configuration This command has no default configuration Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the configuration of all configured interfaces Console show interfaces configuration Port Type Duplex Speed Neg Flow Admin Back Mdix Ctrl State Pressure Mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 91 Ethernet Configuration Commands 1 00M Copper Full 00 Enabled Off Up Disabled Auto 2 00M Copper Full 00 Enabled Off Up Disabled Auto 3 00M Copper Full 00 Enabled Off Up Disabled Auto 4 00M Copper Full 00 Enabled Off Up Disabled Auto 5 00M Copper Full 00 Enabled Off Up Disabled Auto 6 00M Copper Full 00 Enabled Off Up
290. rver location Parameters e text Specifies a string that describes system location information Range 1 160 characters Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines Do not include spaces in the text string or place text that includes spaces inside quotation marks 250 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands Example The following example defines the device location as New_York Console config snmp server location New_York snmp server set The snmp server set Global Configuration mode command defines the SNMP MIB value Syntax snmp server set variable name namel value name2 value Parameters e variable name MIB variable name Range 1 160 characters e name value List of name and value pairs In the case of scalar MIBs only a single pair of name values In the case of an entry in a table at least one pair of name and value followed by one or more fields Range 1 160 characters Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines Although the CLI can set any required configuration there might be a situation where a SNMP user sets a MIB variable that does not have an equivalent command In order to generate configuration files that support those situations the snmp s
291. s class name Parameters e policy map name Specifies the name of the policy map to be displayed e class name Specifies the name of the class whose QoS policies are to be displayed Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 175 QoS Commands Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays all policy maps Console gt show policy map Policy Map policyl class classl set Ip dscp 7 Policy Map policy2 class class 2 police 96000 4800 exceed action drop class class3 police 124000 96000 exceed action policed dscp transmit trust cos dscp The trust cos dscp Policy map Class Configuration mode command configures the trust state The trust state determines the source of the internal DSCP value used by Quality of Service QoS To return to the default configuration use the no form of this command Syntax trust cos dscp no trust cos dscp Default Configuration The port is not in the trust mode If the port is in trust mode the internal DSCP value is derived from the ingress packet Command Mode Policy map Class Configuration mode 176 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands User Guidelines Action serviced to a class so that if an IP packet ar
292. s command Example The following example forbids dynamic registration of VLANs on Ethernet port 1 Console config interface ethernet ext 1 Console config if gvrp registration forbid clear gvrp statistics The clear gvrp statistics Privileged EXEC mode command clears all GVRP statistical information Syntax clear gvrp statistics ethernet interface port channel port channel number Parameters e interface A valid Ethernet port Full syntax unit port e port channel number A valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example clears all GVRP statistical information on Ethernet port 1 Console clear gvrp statistics ethernet ext 1 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 107 GVRP Commands show gvrp configuration The show gvrp configuration Privieged EXEC mode command displays GVRP configuration information including timer values whether GVRP and dynamic VLAN creation is enabled and which ports are running GVRP Syntax show gvrp configuration ethernet interface port channel port channel number Parameters e interface A valid Ethernet port Full syntax unit port e port channel number A valid port channel number Default Configuration
293. s8 no ip name server server address1 server address8 Parameters server address Specifies IP addresses of the name server Default Configuration No name server addresses are specified Command Mode Global Configuration mode User Guidelines The preference of the servers is determined by the order in which they were entered Up to 8 servers can be defined using one command or using multiple commands Example The following example sets the available name server Console config ip name server 176 16 1 18 130 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide IP Address Commands ip host The ip host Global Configuration mode command defines static host name to address mapping in the host cache To remove the name to address mapping use the no form of this command Syntax ip host name address no ip host name Parameters e name Specifies the name of the host Range 1 158 characters e address Specifies the associated IP address Default Configuration No host is defined Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example defines a static host name to address mapping in the host cache Console config ip host accounting intel com 126 10 23 1 clear host The clear host Privileged EXEC mode command deletes entries from the host name to address cache
294. same time Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 79 Ethernet Configuration Commands Syntax interface range ethernet port ist all Parameters e port list List of valid ports Where more than one port is listed separate the nonconsecutive ports with a comma and no spaces use a hyphen to designate a range of ports and group a list separated by commas in brackets e all All Ethernet ports Default Configuration This command has no default configuration Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each active interface in the range If the command returns an error on one of the active interfaces it does not stop executing commands on other active interfaces Example The following example shows how ports 10 to 12 and 1 to 14 are grouped to receive the same command Console config interface range ethernet 10 12 1 14 Console config if shutdown The shutdown Interface Configuration Ethernet port channel mode command disables an interface To restart a disabled interface use the no form of this command Syntax shutdown no shutdown 80 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands Default Configuration The interface is enabled Command Mode Interface Configuration Ethernet
295. se the no form of this command Syntax vlan vlan range no vlan vian range Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 355 VLAN Commands Parameters e vlan range Specifies a list of VLAN IDs to be added Separate nonconsecutive VLAN IDs with a comma and no spaces a hyphen designates a range of IDs Default Configuration This command has no default configuration Command Mode VLAN Configuration mode User Guidelines There are no user guidelines for this command Example The following example VLAN number 1972 is created Console config vlan database Console config vlan vlan 1972 interface vlan The interface vlan Global Configuration mode command enters the Interface Configuration VLAN mode Syntax interface vlan vlan id Parameters e vlan id Specifies an existing VLAN ID Default Configuration This command has no default configuration Command Mode Global Configuration mode 356 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands User Guidelines There are no user guidelines for this command Example The following example configures VLAN 1 with IP address 131 108 1 27 and subnet mask 255 255 255 0 Console config interface vlan 1 Console config if ip address 131 108 1 27 255 255 255 0 interface range vlan The interface range vlan Global Configuration mo
296. selected Ifa trap and inform are defined on the same target and an inform was sent the trap is not sent The following example enables SNMP traps for host 10 1 1 1 with community string management using SNMPv2 Console config snmp server host 10 1 1 1 management 2 snmp server v3 host The snmp server v3 host Global Configuration mode command specifies the recipient of Simple Network Management Protocol Version 3 notifications To remove the specified host use the no form of this command Syntax snmp server v3 host ip address hostname username traps informs noauth auth priv udp port port filter filtername timeout seconds retries retries no snmp server host ip address hostname username traps informs Parameters e ip address Specifies the IP address of the host targeted recipient e hostname Specifies the name of the host Range 1 158 characters e username Specifies the name of the user to use to generate the notification Range 1 24 e traps Indicates that SNMP traps are sent to this host e informs Indicates that SNMP informs are sent to this host e noauth Indicates no authentication of a packet Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 247 SNMP Commands auth Indicates authentication of a packet without encrypting it priv Indicates authentication of a packet with encryption port Specifies the
297. server group Global Configuration mode command configures a new Simple Management Protocol SNMP group or a table that maps SNMP users to SNMP views To remove a specified SNMP group use the no form of this command snmp server group groupname v1 v2 v3 noauth auth priv notify notifyview read readview write writeview Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 239 SNMP Commands no snmp server group groupname v1 v2 v3 noauth auth priv Parameters e groupname Specifies the name of the group Range 1 30 characters e vl Indicates the SNMP Version 1 security model e y2 Indicates the SNMP Version 2 security model e v3 Indicates the SNMP Version 3 security model e noauth Indicates no authentication of a packet Applicable only to the SNMP Version 3 security model e auth Indicates authentication of a packet without encrypting it Applicable only to the SNMP Version 3 security model e priv Indicates authentication of a packet with encryption Applicable only to the SNMP Version 3 security model e name Specifies the context of a packet The following context is supported Router If the context name is unspecified all contexts are defined e readview Specifies a string that is the name of the view that enables only viewing the contents of the agent If unspecified all objects except for the community table and SNMPv3 user and a
298. show hosts Privileged EXEC mode command displays the default domain name a list of name server hosts the static and the cached list of host names and addresses Syntax show hosts name Parameters e name Specifies the host name Range 1 158 characters Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 133 IP Address Commands Example The following example displays host information Console show hosts System name Device Default domain is gm com sales gm com usa sales gm com DHCP Name address lookup is enabled Name servers Preference order 176 16 1 18 176 16 1 19 Configured host name to address mapping Host Addresses ene Eanes 176 16 8 9 DHCP Cache TTL Hours Host Total Elapsed Type Addresses DEE 134 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide LACP Commands 11 LACP Commands lacp system priority The lacp system priority Global Configuration mode command configures the system priority To return to the default configuration use the no form of this command Syntax lacp system priority value no lacp system priority Parameters e value Specifies system priority value Range 1 65535 Default Configuration The default syst
299. signated port id 128 2 Designated path cost 20000 Number of transitions to forwarding state 1 BPDU sent 2 received 170638 MST 1 Vlans Mapped 10 20 Root ID Priority 24576 Address 00 02 4b 29 89 76 Path 20000 Cost Port 4 1 4 Cost Rem hops 19 Bridge ID Priority 32768 Address 00 02 4b 29 7a 00 Number of topology changes 2 last change occurred 1d9h ago Times hold 1 topology change 2 notification 2 hello 2 max age 20 forward delay 15 290 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Port 1 1 1 enabled State Forwarding Port id 128 1 Type P2p configured auto Boundary RSTP Designated bridge Priority 32768 Designated port id 128 1 Number of transitions to forwarding state 1 BPDU sent 2 received 120638 Port 2 1 2 enabled State Forwarding Port id 128 2 Type Shared configured auto Boundary STP Designated bridge Priority 32768 Designated port id 128 2 Number of transitions to forwarding state 1 BPDU sent 2 received 170638 Port 3 disabled State Blocking Port id 128 3 Type Shared configured auto Internal Designated bridge Priority 32768 Designated port id 128 78 Number of transitions to forwarding state 1 BPDU sent 2 received 170638 Port 4 enabled State Forwarding Port id 128 4 Type Shared configured auto Internal Designated bridge Priority 32768 Designated port id 128 2 Number of transi
300. sole config username admin password alansmith When working with the CLI the command options are not displayed The command is not selected from a menu but is manually entered To see what commands are available in each mode or within an Interface Configuration the CLI does provide a method of displaying the available commands the command syntax requirements and in some instances parameters required to complete the command The standard command to request help is 4 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Using CLI There are two instances where help information can be displayed e Keyword lookup The character is entered in place of a command A list of all valid commands and corresponding help messages are is displayed e Partial keyword lookup If a command is incomplete and or the character is entered in place of a parameter The matched keyword or parameters for this command are displayed To assist in using the CLI there is an assortment of editing features The following features are described e Terminal Command Buffer e Command Completion e Nomenclature e Keyboard Shortcuts e Terminal Command Buffer Every time a command is entered in the CLI it is recorded on an internally managed Command History buffer Commands stored in the buffer are maintained on a First In First Out FIFO basis These commands can be recalled reviewed modified and reissued This buff
301. sonpuaceeientartensd 276 FEVISION TVSU WE 276 SKOW MSI EE 277 SXI MSI EE 278 BEE 279 spanning tree guard root E 279 GUST E a e Le ET 280 Chapter 23 SSM Ree E TE 295 EES ee rte ee ee 295 HERE 295 crypto Re EE 296 crypto key generate E 297 Ip Soli p ubkey authi E 298 crypto key pubkey chain SSI cccrndacetesnctancasisd saniancevdeantaduenede ooteuedeiatuets Sheweddasnacancbenternamondnect 299 BEER Gesetten 300 KOV SINO Meare ee ee ee eee eee ree mee ee eae eee eee ee 301 E pe e e me ee ee ee ee ee ee eee ee er oe eee 302 show crypto key FAV OU yes sae ede gc eateae eect ccueid sana seuutss bn eee cere ged vas eae eee aeticc reek 303 show crypto key pubkey chaiin SSN cccecceeeeeeeeeeeeeeeeeeeeeeneeeeeeeeeeeseeeeeeeeeeeeeeeseeeeneeeeess 304 Chapter 24 Sy Slo Kee TE 307 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide xiii ese ets o E 307 te e EE 308 logging buffered E 309 logging d eut EE 310 clear NOE cc sessed eee ee cee ee 310 eelere ii EE 311 clear eelere 312 aaa logging vere Sees arertonteecatere ensceapctnca mane teams onanaatemsnc onda auaanconempaneanessnnesuresu tant aacansaanseeeenyiranaets 313 file system JOGGING EE 313 management logging EE 314 SHOW Le ML EE 315 SNOW logging UE 317 ee E 318 Chapter 25 System Management Commands ccccceseseeeeeeeeeeneeeseeeeeeeeeneeeeees 321 DING E 321 Uer tel EE 322 telnet eege 325 IG Don ET 328 EE 328 keh un 329 SN W
302. t To enable spanning tree on a port use the no form of this command Syntax spanning tree disable no spanning tree disable Default Configuration Spanning tree is enabled on all ports Command Modes Interface Configuration Ethernet port channel mode User Guidelines There are no user guidelines for this command Example The following example disables spanning tree on Ethernet port 5 Console config interface ethernet ext 5 Console config if spanning tree disable spanning tree cost The spanning tree cost Interface Configuration mode command configures the spanning tree path cost for a port To restore the default configuration use the no form of this command Syntax spanning tree cost cost no spanning tree cost 264 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Spanning Tree Commands Parameters e cost Path cost of the port Range 1 200 000 000 Default Configuration Default path cost is determined by port speed and path cost method long or short as shown below Interface Long Short Port channel 20 000 4 Gigabit Ethernet 1000 Mbps 20 000 4 Fast Ethernet 100 Mbps 200 000 19 Ethernet 10 Mbps 2 000 000 100 Command Modes Interface Configuration Ethernet port channel mode User Guidelines The path cost method is configured using the spanning tree pathcost method Global Configuration mode command
303. t Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 373 VLAN Commands Command Mode VLAN Database mode User Guidelines The following protocol names are reserved e ip arp e ipx Example The following example maps protocol ip arp to the group named 213 Console config vlan database Console config vlan map protocol ip arp protocols group 213 switchport general map protocols group vlan The switchport general map protocols group vlan interface configuration command sets a protocol based classification rule To delete a classification use the no form of this command Syntax switchport general map protocols group group vlan vlan id no switchport general map protocols group group Parameters e group Group number as defined in the map protocol protocols group command Range 1 2147483647 vlan id Define the VLAN ID in the classifying rule Default Configuration This command has no default configuration Command Mode Interface Configuration Ethernet port channel mode 374 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide VLAN Commands User Guidelines There are no user guidelines for this command Example The following example sets a protocol based classification rule of protocol group 1 to VLAN 8 Console config interface ethernet ext 8 Console config if switchport general map protocols group 1 vlan 8 map mac macs group Use t
304. t are executed independently on each interface in the range Example The following example groups port channels 1 2 and 6 to receive the same command Console config interface range port channel 1 2 6 channel group The channel group Interface Configuration Ethernet mode command associates a port with a port channel To remove a port from a port channel use the no form of this command 158 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Port Channel Commands Syntax channel group port channel number mode on auto no channel group Parameters e port channel_number Specifies the number of the valid port channel for the current port to join e on Forces the port to join a channel without an LACP operation e auto Allows the port to join a channel as a result of an LACP operation Default Configuration The port is not assigned to a port channel Command Mode Interface Configuration Ethernet mode User Guidelines There are no user guidelines for this command Example The following example forces port 1 to join port channel 1 without an LACP operation Console config interface ethernet ext 1 Console config if channel group 1 mode on show interfaces port channel The show interfaces port channel Privileged EXEC mode command displays port channel information Syntax show interfaces port channel port channel number In
305. t monitor vlan tagging 162 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Port Monitor Commands show ports monitor The show ports monitor User EXEC mode command displays the port monitoring status Syntax show ports monitor Default Configuration This command has no default configuration Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following example shows how the port monitoring status is displayed Console gt show ports monitor Source Port Destination Port Type Status VLAN Tagging L 8 RX TX Active No 2 8 RX TX Active No 18 8 RX Active No Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 163 Port Monitor Commands 164 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands 17 QoS Commands qos The qos Global Configuration mode command enables quality of service QoS on the device To disable QoS on the device use the no form of this command Syntax qos basic advanced service no qos Parameters e basic QoS basic mode advanced QoS advanced mode which enables the full range of QoS configuration e service QoS service mode which enables the user to define QOS in a simpler manner Default Configuration The QoS basic mode is enabled Command Mode Global Configuration mode User
306. t tx period WEE 389 OUI max WEE 390 dot1x timeout Dt E 391 dot1x timeout server tiMeout 0 0 0 eee ceeeeeeecceceeeeeeeeeteneneetenseeeetaneeneeteceeseeeenseaeeeeeeaneseentaneaes 392 SNOW elei EE 393 SNOW COttX USES ccceeeeecccecessccecceesceesceenceeeetauseceetaneaeeesanenseeseteaseeeensugeceetsageseeeeneaaeeseetanes 395 SHOW dotIx EE Le 397 ADVANCED FEA TURES sinomina N A E Saa 398 ole ak Wun Kuer EE 398 ele elt ee n Le 399 dot1x SINGIG MOSE VIGIAION E 400 ele ek guest BE 401 Cot1x guest vlan enable ce ceeeeeecencecee ener eeecee cece eee ee eee esaaaeeeeeeeeeensagaeeeeseneeeesesseeeeeseaeenees 402 SHOW GOt1 AAVANCEG WE 403 Appendix A Getting Help WE 405 Wond Wide Web EE 405 RT e cc inasescutcarstcntine tenia sy ea E EAA EESE EE E E 405 xvi Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 1 Using CLI Overview This document describes the Command Line Interface CLI used to manage the Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 The switches can operate as standalone systems or can be stacked together in the same system Most of the CLI commands are applicable to both switch modules This chapter describes how to start using the CLI and the CLI command editing features CLI Command Modes Introduction The Command Line Interface CLI is divided into different command modes Each command mode has its own set of specific commands Entering a quest
307. tel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 159 Port Channel Commands Parameters e port channel number Valid port channel number Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays information on all port channels Console show interfaces port channel Channel Ports 1 Active 1 2 2 Active 2 7 Inactive 1 3 Active 3 8 160 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Port Monitor Commands 16 Port Monitor Commands port monitor The port monitor Interface Configuration mode command starts a port monitoring session To stop a port monitoring session use the no form of this command Syntax port monitor s7c interface rx tx no port monitor s7c interface Parameters e src interface Valid Ethernet port Full syntax unit port e rx Monitors received packets only e tx DMonitors transmitted packets only Default Configuration Monitors both received and transmitted packets Command Mode Interface Configuration Ethernet mode User Guidelines This command enables traffic on one port to be copied to another port or between the source port src interface and a destination port port being configured The following restrictions apply to ports conf
308. the retransmit value Range 1 10 deadtime Length of time in minutes during which a RADIUS server is skipped over by transaction requests Range 0 2000 key string Specifies the authentication and encryption key for all RADIUS communications between the device and the RADIUS server This key must match the encryption used on the RADIUS daemon To specify an empty string enter Range 0 128 characters source Specifies the source IP address to use for communication 0 0 0 0 is interpreted as request to use the IP address of the outgoing IP interface priority Determines the order in which servers are used where 0 has the highest priority Range 0 65535 type Specifies the usage type of the server Possible values login dot 1x wireless or all Default Configuration No RADIUS server host is specified Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 215 RADIUS Commands The port number for authentication requests is 1812 The usage type is all Command Mode Global Configuration mode User Guidelines Example To specify multiple hosts multiple radius server host commands can be used If no host specific timeout retries deadtime or key string values are specified global values apply to each RADIUS server host The address type of the source parameter must be the same as the ip address parameter The following example specifies a RADIUS server host w
309. thernet ext 2 Console config if port storm control broadcast rate 4000 show ports storm control The show ports storm control Privileged EXEC mode command displays the storm control configuration Syntax show ports storm control interface Parameters interface A valid Ethernet port Full syntax unit port Default Configuration This command has no default configuration Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the storm control configuration Console show ports storm control Port State Rate Kbits Sec Included 1 Disabled 3500 Broadcast 2 Disabled 3500 Broadcast Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 101 Ethernet Configuration Commands 3 Disabled 3500 Broadcast 4 Disabled 3500 Broadcast 5 Disabled 3500 Broadcast 6 Disabled 3500 Broadcast 102 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 8 GVRP Commands gvrp enable Global GARP VLAN Registration Protocol GVRP is an industry standard protocol designed to propagate VLAN information from device to device With GVRP a single device is manually configured with all desired VLANs for the network and all other devices on the network learn these VLANs dynamically The gvrp enable Global Configuration mode command enables GVRP globally To disab
310. this command 254 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SNMP Commands Example The following example displays the configuration of views Console show snmp views Name OID Tree Type user view lees ncluded user view Re leZ lalat Excluded user view Le E E 2d ncluded show snmp groups The show snmp groups Privileged EXEC mode command displays the configuration of groups Syntax show snmp groups groupname Parameters e groupname Specifies the name of the group Range 1 30 Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 255 SNMP Commands Example The following example displays the configuration of views Console show snmp groups Name Security Views Model Level Read Write Notify user group V3 priv Default wn We managers group V3 priv Default Default um managers group V3 priv Default wN Dit The following table describes significant fields shown above Field Description Name Name of the group Security Model SNMP model in use v1 v2 or v3 Security Level Authentication of a packet with encryption Applicable only to SNMP v3 security Views Read Name of the view that enables only viewing the contents of the agent If
311. tings of the syslog servers Syntax show syslog servers Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command 318 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example The following example displays the settings of the syslog servers Syslog Commands Console show syslog servers Device Configuration IP address Port Severity 192 180 2 27 514 Informational 192 180 2 28 514 Warning Facility local7 local7 Description Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 319 Syslog Commands 320 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide System Management Commands 25 System Management Commands ping The ping User EXEC mode command sends ICMP echo request packets to another node on the network Syntax ping ip address hostname size packet_size count packet_count timeout time_out Parameters ip address IP address to ping hostname Host name to ping Range 1 158 characters packet_size Number of bytes in a packet The actual packet size is eight bytes larger than the specified size specified because the device adds header information Range 56 1472 bytes packet_count Number of packets to send If 0 is entered it pings until stopped
312. tion Index An index that uniquely identifies the entry Interface The sampled Ethernet interface Interval The interval in seconds between samples Requested Samples The requested number of samples to be saved Granted Samples The granted number of samples to be saved Owner The entity that configured this entry show rmon history The show rmon history Privileged EXEC mode command displays RMON Ethernet history statistics Syntax show rmon history index throughput errors other period seconds Parameters e index Specifies the requested set of samples Range 1 65535 e throughput Indicates throughput counters e errors Indicates error counters e other Indicates drop and collision counters e seconds Specifies the period of time in seconds Range 1 4294967295 Default Configuration This command has no default configuration Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 203 RMON Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays RMON Ethernet history statistics for index 1 Console show rmon history 1 throughput Sample Set 1 Owner CLI Interface 1 Interval 1800 Requested samples 50 Granted samples 50 Maximum table size 500 Time Octets Packets Broadcast Multicast Util Jan 18 2005 21 57 00 303595962 3575
313. tions to forwarding state 1 BPDU sent 2 received 170638 Spanning Tree Commands Role Boundary Port cost 20000 Port Fast No configured no Address 00 02 4b 29 7a 00 Designated path cost 20000 Role Designated Port cost 20000 Port Fast No configured no Address 00 02 4b 29 7a 00 Designated path cost 20000 Role Alternate Port cost 20000 Port Fast No configured no Address 00 02 4b 29 1a 19 Designated path cost 20000 Role Designated Port cost 20000 Port Fast No configured no Address 00 02 4b 29 7a 00 Designated path cost 20000 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 291 Spanning Tree Commands Console show spanning tree Spanning tree enabled mode MSTP Default port cost method long MST 0 Vlans Mapped 1 9 21 4094 CST Root ID Priority 32768 Address 00 01 42 97 e0 00 Path 20000 Cost Root T 171 Port Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec IST Master ID Priority 32768 Address 00 02 4b 19 7a 00 Path 10000 Cost Rem hops 19 Bridge ID Priority 32768 Address 00 02 4b 29 7a 00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Max hops 20 Console show spanning tree Spanning tree enabled mode MSTP Default port cost method long MST 0 Vlans Mapped 1 9 21 4094 CST Root ID Priority 32768 Address 00 01 42 97 e0 00 This switch is root for CST and IST master Root 1 1 2
314. to DSCP mutation map only to ingress and to DSCP trusted ports Applying this map to a port causes IP packets to be rewritten with newly mapped DSCP values at the ingress ports If the DSCP to DSCP mutation map is applied to an untrusted port class of service CoS or IP precedence trusted port this command has no immediate effect until the port becomes DSCP trusted Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 195 QoS Commands Example The following example applies the DSCP Mutation map to system DSCP trusted ports Console config qos dscp mutation qos map dscp mutation The gos map dscp mutation Global Configuration mode command modifies the DSCP to DSCP mutation map To return to the default DSCP to DSCP mutation map use the no form of this command Syntax qos map dscp mutation in dscp to out dscp no qos map dscp mutation Parameters e in dscp Specifies up to 8 DSCP values separated by spaces Range 0 63 e out dscp Specifies up to 8 DSCP values separated by spaces Range 0 63 Default Configuration The default map is the Null map which means that each incoming DSCP value is mapped to the same DSCP value Command Mode Global Configuration mode User Guidelines This is the only map that is not globally configured it is possible to have several maps and assign each one to different ports Example The following example changes DSCP values 1 2 4
315. to be displayed Default Configuration This command has no default configuration Command Mode User EXEC mode User Guidelines There are no user guidelines for this command Example The following example shows the class map for class1 Console gt show class map class1l Class Map match any classl id4 Match Ip dscp 11 21 match The match Class map Configuration mode command defines the match criteria for classifying traffic To delete the match criteria use the no form of this command Syntax match access group acl name no match access group ac name Parameters e acl name Specifies the name of an IP or MAC ACL Default Configuration No match criterion is supported 172 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide QoS Commands Command Mode Class map Configuration mode User Guidelines There are no user guidelines for this command Example The following example defines the match criterion for classifying traffic as an access group called enterprise in a class map called class1 Console config class map classl Console config cmap match access group enterprise policy map The policy map Global Configuration mode command creates a policy map and enters the Policy map Configuration mode To delete a policy map use the no form of this command Syntax policy map policy map name no policy map policy map name Parameters e policy ma
316. trap authentication Default Configuration SNMP failed authentication traps are enabled Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command Example The following example enables SNMP failed authentication traps Console config snmp server trap authentication snmp server contact The snmp server contact Global Configuration mode command configures the system contact sysContact string To remove system contact information use the no form of the command Syntax snmp server contact text no snmp server contact Parameters e text Specifies the string that describes system contact information Range 1 160 characters Default Configuration This command has no default configuration Command Mode Global Configuration mode Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 249 SNMP Commands User Guidelines Do not include spaces in the text string or place text that includes spaces inside quotation marks Example The following example configures the system contact point called Intel_ Technical Support console config snmp server contact Intel Technical Support snmp server location The snmp server location Global Configuration mode command configures the system location string To remove the location string use the no form of this command Syntax snmp server location text no snmp se
317. tring row AAAAB3Nza Console config pubkey key key string row Clyc2 show ip ssh The show ip ssh Privileged EXEC mode command displays the SSH server configuration Syntax show ip ssh Default Configuration This command has no default configuration Command Mode Privileged EXEC mode 302 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide SSH Commands User Guidelines There are no user guidelines for this command Example The following example displays the SSH server configuration Console show ip ssh SSH server enabled Port 22 RSA key was generated DSA DSS key was generated SSH Public Key Authentication is enabled Active incoming sessions IP address SSH username Version Cipher Auth Code 172 16 0 1 John Brown 2 0 3 DES HMAC SHA1 The following table describes the significant fields shown in the display Field Description IP address Client address SSH username User name Version SSH version number Cipher Encryption type 3DES Blowfish RC4 Auth Code Authentication Code HMAC MD5 HMAC SHA1 show crypto key mypubkey The show crypto key mypubkey Privileged EXEC mode command displays the SSH public keys on the device Syntax show crypto key mypubkey rsa dsa Parameters e rsa Indicates the RSA key e dsa Indicates the DSA key Intel Blade Server Ethernet Switch Modules
318. ts can be aggregated for policing purposes An aggregate policer can be applied to multiple classes in the same policy map An aggregate policer cannot be applied across multiple policy maps This policer can also be used in Cascade police to make a cascade policer An aggregate policer cannot be deleted if it is being used in a policy map The no police aggregate Policy map Class Configuration command must first be used to delete the aggregate policer from all policy maps Policing uses a token bucket algorithm CIR represents the speed with which the token is removed from the bucket CBS represents the depth of the bucket Example The following example defines the parameters of a policer called policer1 that can be applied to multiple classes in the same policy map When the average traffic rate exceeds 124 000 bps or the normal burst size exceeds 96000 bps the packet is dropped Console config qos aggregate policer policerl 124000 96000 exceed action drop show qos aggregate policer The show qos aggregate policer User EXEC mode command displays the aggregate policer parameter Syntax show qos aggregate policer aggregate policer name Parameters e aggregate policer name Specifies the name of the aggregate policer to be displayed Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 181 QoS Commands Default Configuration This command has no default configuration Command
319. uidelines Use the port storm control broadcast rate Interface Configuration Ethernet mode command to set the maximum allowable broadcast rate Use the port storm control include multicast Global Configuration mode command to enable counting multicast packets in the storm control calculation Example The following example enables broadcast storm control on port 1 of a device Console config interface ethernet ext 1 Console config if port storm control broadcast enable port storm control broadcast rate The port storm control broadcast rate Interface Configuration Ethernet mode command configures the maximum broadcast rate To restore the default configuration use the no form of this command Syntax port storm control broadcast rate rate no port storm control broadcast rate Parameters e rate Maximum kilobits per second of broadcast and multicast traffic on a port Range of 3500 1000000 Default Configuration The default storm control broadcast rate is 3500 Kbits Sec Command Mode Interface Configuration Ethernet mode User Guidelines Use the port storm control broadcast enable Interface Configuration mode command to enable broadcast storm control 100 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands Example The following example configures a port storm control broadcast rate 4000 on port 2 config interface e
320. uration mode command applies an ACL to the input interface To detach an ACL from an input interface use the no form of this command Syntax service acl input ac name no service acl input Parameters e acl name Specifies the ACL to be applied to the input interface Default Configuration This command has no default configuration Command Mode Interface Ethernet port channel Configuration mode User Guidelines In advanced mode when an ACL is bound to an interface the port trust mode is set to trust 12 13 and not to 12 Example The following example binds services an ACL to VLAN 2 Console config interface vlan 2 Console config if service acl input macll show access lists The show access lists Privileged EXEC mode command displays access control lists ACLs defined on the device Syntax show access lists name 50 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide ACL Commands Parameters e name The name of the ACL Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays access lists defined on a device Console show access lists IP access list ACL1 permit ip host 172 30 40 1 any permit rsvp host 172 30 8 8 any show interfaces access lists The show interf
321. urce addresses that are not the supplicant address e discard shutdown Discards frames with source addresses that are not the supplicant address The port is also shut down e trap Indicates that SNMP traps are sent e seconds Specifies the minimum amount of time in seconds between consecutive traps Range 1 1000000 Default Configuration 400 Frames with source addresses that are not the supplicant address are discarded Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands No traps are sent Command Mode Interface Configuration Ethernet mode User Guidelines The command is relevant when multiple hosts is disabled and the user has been successfully authenticated Example The following example forwards frames with source addresses that are not the supplicant address and sends consecutive traps at intervals of 100 seconds Console config if dotix single host violation forward trap 100 dot1x guest vian The dot1x guest vlan Interface Configuration mode command defines a guest VLAN To return to the default configuration use the no form of this command Syntax dot1x guest vlan no dot1x guest vlan Default Configuration No VLAN is defined as a guest VLAN Command Mode Interface Configuration VLAN mode User Guidelines Use the dot1x guest vlan enable Interface Configuration mode command to enable unauthorized users on an int
322. ure an engine ID of 123400000000000000000000 you can specify snmp server engineID local 1234 Since the engine ID should be unique within an administrative domain the following is recommended For a this device use the default keyword to configure the engine ID Changing the value of the engine ID has the following important side effect A user s password entered on the command line is converted to an MDS or SHA security digest This digest is based on both the password and the local engine ID The user s command line password is then destroyed as required by RFC 2274 As a result the security digests of SNMPv3 users become invalid if the local value of the engine ID change and the users will have to be reconfigured You cannot specify an engine ID that consists of all 0x0 all OxF or 0x000000001 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 243 SNMP Commands The show running config Privileged EXEC mode command does not display the SNMP engine ID configuration To see the SNMP engine ID configuration enter the snmp server engineID local Global Configuration mode command Example The following example enables SNMPv3 on the device and sets the local engine ID of the device to the default value Console config snmp server engineID local default snmp server enable traps The snmp server enable traps Global Configuration mode command enables the device to send SNMP traps
323. use the no form of this command Syntax speed 10 100 1000 10000 no speed Parameters e 10 Forces10 Mbps operation e 100 Forces 100 Mbps operation e 1000 Forces 1000 Mbps operation e 10000 Forces 10000 Mbps operation Default Configuration Maximum port capability Command Mode Interface Configuration Ethernet port channel mode 82 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Ethernet Configuration Commands User Guidelines The no speed command in a port channel context returns each port in the port channel to its maximum capability Example The following example configures the speed operation of Ethernet port 5 to 100 Mbps operation Console config interface ethernet ext 5 Console config if speed 100 duplex The duplex Interface Configuration Ethernet mode command configures the full half duplex operation of a given Ethernet interface when not using auto negotiation To restore the default configuration use the no form of this command Syntax duplex half full no duplex Parameters e half Forces half duplex operation e full Forces full duplex operation Default Configuration The interface is set to full duplex Command Mode Interface Configuration Ethernet mode User Guidelines When configuring a particular duplex mode on the port operating at 10 100 Mbps disable the auto negotiation on that port
324. username Bob Username Bob Port Username Session Time Auth Method MAC Address 1 Bob 1d 03 08 58 Remote 0008 3b79 8787 The following table describes significant fields shown above Field Description Port The port number Username The username representing the identity of the Supplicant Session Time The period of time the Supplicant is connected to the system Authentication Method Authentication method used by the Supplicant to open the session MAC Address MAC address of the Supplicant 396 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 802 1x Commands show dot1x statistics The show dot1x statistics Privileged EXEC mode command displays 802 1x statistics for the specified interface Syntax show dot1x statistics ethernet interface Parameters e interface Valid Ethernet port Full syntax unit port Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays 802 1x statistics for the specified interface Console show dot1ix statistics ethernet ext 1 EapolFramesRx 11 EapolFramesTx 12 EapolStartFramesRx 12 EapolLogoffFramesRx 1 EapolRespIdFramesRx 3 EapolRespFramesRx 6 EapolReqidFramesTx 3 EapolReqFramesTx 6 InvalidEapolFramesRx 0 EapLengthErr
325. utes that packets will actually take when traveling to their destination JO UG LA bit 9 Type Tracing the route to umaxp1 physics lsa umich edu 141 211 101 64 i2 gateway stanford ed du 192 68 191 83 0 msec 0 msec 0 msec STAN POS calren2 NET 171 64 1 213 0 msec 0 msec 0 msec SUNV STAN POS calren2 net 198 32 249 73 1 msec 1 msec 1 msec Abilene QSV POS calren2 net 198 32 249 162 1 msec 1 msec 1 msec kscyng snvang abilene ucaid edu 198 32 8 103 33 msec 35 msec 35 msec iplsng kscyng abilene ucaid edu 198 32 8 80 47 msec 45 msec 45 msec so 0 2 0xl aal mich net 192 122 183 9 56 msec 53 msec 54 msec atm1 0x24 michnet8 mich net 198 108 23 82 56 msec 56 msec 57 msec Console gt traceroute umaxpl physics 1lsa umich edu Esc to abort kK Kk k 10 A ARB3 LSA NG c SEB umnet umich edu 141 211 5 22 58 msec 58 msec 58 msec 11 umaxpl physics lsa umich edu 141 211 101 64 62 msec 63 msec 63 msec The following table describes significant fields shown above Field Description 1 Indicates the sequence number of the device in the path to the host i2 gateway stanford edu Host name of this device 192 68 191 83 IP address of this device 1 msec 1 msec 1 msec Round trip time for each probe sent The following table describes characters that may appear in the traceroute command output Field Description The probe timed out Unknown packet typ
326. ward time 25 spanning tree hello time The spanning tree hello time Global Configuration mode command configures the spanning tree bridge hello time which is how often the device broadcasts hello messages to other devices To restore the default configuration use the no form of this command Syntax spanning tree hello time seconds no spanning tree hello time Parameters e seconds Time in seconds Range 1 10 Default Configuration The default hello time for IEEE Spanning Tree Protocol STP is 2 seconds Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 261 Spanning Tree Commands Command Modes Global Configuration mode User Guidelines When configuring the hello time the following relationship should be kept Max Age gt 2 Hello Time 1 Example The following example configures spanning tree bridge hello time to 5 seconds Console config spanning tree hello time 5 spanning tree max age The spanning tree max age Global Configuration mode command configures the spanning tree bridge maximum age To restore the default configuration use the no form of this command Syntax spanning tree max age seconds no spanning tree max age Parameters e seconds Time in seconds Range 6 40 Default Configuration The default maximum age for IEEE Spanning Tree Protocol STP is 20 seconds Command Modes Global Configuration mode User Guidelines W
327. x Chapter 10 IP Address COMmManndS cccccccccceeeeeeeeeeeeeeneneneenseeneeeeeeeeeeeeeeeeeeeess 121 ee 121 ip address ee EE 122 ip Ee E 123 ShOwWIp Internato beer 124 Cl e ET 125 SECHER eege 126 e E e 127 le IO E 127 eelef HOGI RE 128 ef Et nn 129 P FING SIV EE 130 WEE 131 cleat NOSE E 131 EE 132 SNOW TMS ts eda ea tee tet eae dae ca eee ese ec tac neta meee de te ced ete eee 133 Chapter 11 LACP Commands sisisiscscsicsssnnntssensacssdtassnanderesnsaacecacwaivesasnandnansadaneianavin 135 LACS V SECTIONS eet egen eene eats 135 DEVS UNUM EE 135 VME Fo SLIT N E 136 show lacp ethernet cisco Screen cae nacensarrevadacattncelnatania gta tmcemiuests sonateneeaddadnndecearernat clue caerteneet 137 SHOW lacp port ch annel eeneg eegen tte eebe ES KE iS 139 Chapter 12 Line GOMMANGS issccicctscccscodctcccsectsncnddccnsnccssceccnseentecsocensastiesssencecwsscisacs 141 Be 141 EE eaten a at th aa ae ects ees 141 Chapter 13 Management ACL Command eecceeeeeeeeeeeeeeeeseeeeeeneeeeeeeeeeeees 145 DEER nee re een ee ee eee ee 145 Chapter 14 PHY Diagnostics COMMAMNAS cceeeseeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeenes 153 test copper port tdr ceseccovecalate cea ge ae 153 SHOW COpper POrtS E 154 SHOW copper ports cable length vecveccavacsnorseccencazevenceerdinortanervescnicenmrdesenGavereceatuenvenccecertieees 155 A Eeer EES ege 155 Chapter 15 Port Channel Commande ccccccceeeeeeeeeneeeeeeseeeeneees
328. x show rmon log event Parameters e event Specifies the event index Range 0 65535 212 Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide RMON Commands Default Configuration This command has no default configuration Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command Example The following example displays the RMON log table Console show rmon log Maximum table size 500 Event Description Time 1 Errors Jan 18 2006 23 48 19 1 Errors Jan 18 2006 23 58 17 2 High Broadcast Jan 18 2006 23 59 48 Console show rmon log Maximum table size 500 800 after reset Event Description Time 1 Errors Jan 18 2006 23 48 19 1 Errors Jan 18 2006 23 58 17 2 High Broadcast Jan 18 2006 23 59 48 The following table describes the significant fields shown in the display Field Description Event An index that uniquely identifies the event Description A comment describing this event Time The time this entry was created Intel Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 213 RMON Commands rmon table size The rmon table size Global Configuration mode command configures the maximum size of RMON tables To return to the default configuration use the no form of this command Syntax rmon table size history entries log entries no rmon table size history log P

Intel Switch SBCEGBESW1 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents