SISGM D-LRT. CLI Reference. 12-Port Managed Industrial Ethernet Switch Rev A Rev. A

Transcription

1 SISGM D-LRT 12-Port Managed Industrial Ethernet Switch CLI Reference Rev A Rev. A Page 1 of 117

2 Safety Warnings and Cautions These products are not intended for use in life support products where failure of a product could reasonably be expected to result in death or personal injury. Anyone using this product in such an application without express written consent of an officer of Transition Networks does so at their own risk, and agrees to fully indemnify Transition Networks for any damages that may result from such use or sale. Attention: this product, like all electronic products, uses semiconductors that can be damaged by ESD (electrostatic discharge). Always observe appropriate precautions when handling. Note: Emphasizes important information or calls your attention to related features or instructions. Warning: Alerts you to a potential hazard that could cause personal injury. Caution: Alerts you to a potential hazard that could cause loss of data, or damage the system or equipment. - TN PN Rev. A Record of Revisions Rev Date of Changes A 3/10/17 Initial release for software v1.00. Trademark notice: All trademarks and registered trademarks are the property of their respective owners. All other products or service names used in this publication are for identification purposes only, and may be trademarks or registered trademarks of their respective companies. All other trademarks or registered trademarks mentioned herein are the property of their respective holders. Copyright restrictions: 2017 Transition Networks, Inc. All rights reserved. No part of this work may be reproduced or used in any form or by any means (graphic, electronic, or mechanical) without written permission from Transition Networks. Address comments on this product or manual to: Transition Networks Inc Red Circle Drive, Minnetonka, MN tel: toll free: fax: sales@transition.com techsupport@transition.com customerservice@transition.com Rev. A Page 2 of 117

3 CONTENTS 1. SCOPE INTRODUCTION SCOPE REQUIRED KNOWLEDGE ACCESS TO HARDWARE INTERFACE RELATED MANUALS OPERATOR INTERFACE INTRODUCTION CONNECTION PARAMETERS SCREEN DESCRIPTION EXECUTION MODES GETTING HELP TERMINAL KEY FUNCTIONS NOTATION CONVENTIONS COMMANDS DESCRIPTIONS INITIALIZE MODE COMMANDS exit configure terminal enable show terminal show history show clock show clock detail ENABLE MODE COMMANDS configure terminal disable show aaa show access management show access-list show aggregation show alarm show cpu-load show green-ethernet show ip show ipmc show ipv show lacp show line show logging show loop-protect show ntp status show users show running-config show running-config interface Gigabit show running-config interface vlan show running-config all-defaults show running-config feature show running-config line show running-config vlan show version show clock show mac address table aging-time show mac address table show mac address table conf Rev. A Page 3 of 117

4 show mac address table count show mac address table learning show mac address table static show mac address table interface show mac address vlan <vlanid> show mvr show interface port < port_type_list > show interface port <portno> statistics show platform phy show port-security show profile alarm show sflow show snmp show spanning-tree show switchport forbidden show tacacs-server show vlan show vlan ID show vlan name show vlan brief show vlan ip-subnet show vlan mac show vlan protocol show vlan status show qos-queue-mapping show qos interface ports <portno> priority show qos show pvlan [ <pvlan_list> ] show pvlan isolation [ interface <port_type> [ <port_type_list> ] ] show pvlan interface gigabit <portno> port-isolation show interface gigabit <portno> storm-control show qos interface show qos maps show qos qce show qos storm {unknown-uc unknown-mc broadcast} show ringv show rmon show interface gigabit <portno> show interface vlan show interface vlan <vlanid> show vlan interface gigabit <portno> vlan show dot1x status show dot1x statistics show ddmi show radius-server [ statistics ] show voice vlan show web CONFIGURE MODE COMMANDS interface gigabit <portno> interface vlan <vlanid> aaa access access-list aggregation mode Example: alarm history clear banner default access-list rate-limiter profile schedule ntp server <1-5> ip-address <ip> clock timezone Rev. A Page 4 of 117

5 clock summer-time set [start-time] [end-time] account add <username> account delete <username> copy config (configuration save and replace) clear ip igmp snooping statistics clear logging clear mac address-table debug delete dir do duplex firmware flowcontrol frame-sizes green-ethernet eee green-ethernet eee optimize-for-power green-ethernet eee urgent-queues help iparp inspection Ip arp inspection translate Ip arp inspection entry ip arp inspection vlan ip dns proxy ip http secure-redirect ip http secure-server ip source binding interface ip ssh ip name-server ip route ip routing ip verify ipmc profile ipmc range lacp line logging host logging level logging on mac address-table aging-time mac address-table static more no ping port-security privilege reload rmon rmon alarm rmon event terminal vlan <vlanid> vlan <vlanid> <name> vlan disable <vlanid> aging <time> media-type monitor destination interface monitor source interface monitor source cpu speed tacacs-server host Rev. A Page 5 of 117

6 tacacs-server key tacacs-server timeout username web flow-control {enable disble} speed port {enable/disable} Date/Time VLAN MODE COMMANDS vlan vlan ethertype s-custom-port vlan protocol switchport access vlan switchport forbidden vlan switchport hybrid acceptable-frame-type switchport hybrid allowed vlan switchport hybrid egress-tag switchport hybrid ingress-filtering switchport mode switchport trunk allowed vlan switchport vlan protocol group INTERFACE VLAN MODE COMMANDS interface interface vlan ip address ip name-server ip dhcp excluded-address ip dhcp pool ip dhcp server ip dhcp relay ip dhcp relay information option ip dhcp retry interface vlan ip dhcp snooping ip helper-address ipv6 address ipv6mtu RINGV2 GROUP MODE COMMANDS ringv2 protect guard-time mode node1 interface GigabitEthernet <portno>} node2 interface GigabitEthernet <portno>} role SPANNING TREE COMMANDS spanning-tree spanning-tree aggregation spanning-tree auto-edge spanning-tree auto-edge spanning-tree bpdu-guard spanning-tree edge spanning-tree edge bpdu-filter spanning-tree mode spanning-tree mst cost spanning-tree mst port-priority spanning-tree mst priority spanning-tree mst vlan spanning-tree mst forward-time spanning-tree mst max-age spanning-tree mst max-hops spanning-tree mst name spanning-tree mst <instance> Rev. A Page 6 of 117

7 spanning-tree recovery spanning-tree transmit SFLOW CONFIGURE COMMANDS sflow sflow agent-ip sflow collector-address sflow collector-address [ receiver <range_list> ] [ <word> ] sflow max-datagram-size sflow max-sampling-size sflow collector-port sflow sampling-rate sflow timeout SNMP CONFIGURE COMMANDS snmp-server snmp-server access snmp-server community v2c snmp-server community v snmp-server host snmp-server host traps snmp-server trap snmp-server user snmp-server version snmp-server view SNMP trap receive ipv6 host snmp-server contac snmp-server engine-id snmp-server location snmp-server security-to-group SNMP trap receive ipv4 host QOS FUNCTION COMMANDS qos qce qos storm qos cos qos dscp-classify qos dscp-remark qos dscp-translate qos map cos-dscp qos map cos-dscp qos map dscp-egress-translation qos map dscp-ingress-translation qos policer qos wrr qos queue-shaper qos queue-policer qos shaper <unit> IGMP FUNCTIONAL COMMANDS ip igmp host-proxy [ leave-proxy ] ip igmp snooping ip igmp snooping immediate-leave ip igmp snooping last-member-query-interval ip igmp snooping max-groups ip igmp snooping mrouter ip igmp snooping querier ip igmp snooping query-interval ip igmp snooping vlan ip igmp ssm-range ip igmp unknown-flooding clear ip igmp snooping statistics Example: MVR FUNCTIONAL COMMANDS mvr Rev. A Page 7 of 117

8 mvr immediate-leave mvr name channel mvr frame priority mvr name <word16> frame tagged mvr name <word16> igmp-address <ipv4_ucast> mvr name <word16> last-member-query-interval < > mvr name <word16> mode mvr name <word16> type mvr vlan mvr vlan <vlan_list> channel mvr vlan <vlan_list> frame priority mvr vlan <vlan_list> frame tagged mvr vlan <vlan_list> igmp-address mvr vlan <vlan_list> mode mvr vlan <vlan_list> type MLD FUNCTIONAL COMMANDS ipv6 mld host-proxy ipv6 mld snooping ipv6 mld snooping compatibility ipv6 mld snooping immediate-leave ipv6 mld snooping last-member-query-interval ipv6 mld snooping max-groups ipv6 mld snooping mrouter ipv6 mld snooping query-interval ipv6 mld snooping query-max-response-time ipv6 mld snooping vlan ipv6 mld ssm-range ipv6 mld unknown-flooding ipv6 route AUTHENTICATE MODE COMMANDS radius-server attribute radius-server attribute radius-server attribute radius-server deadtime radius-server host [ auth-port] [ acct-port ] [ timeout ] [ retransmit ] [ key] radius -server key radius-server retransmit radius-server timeout tacacs-server deadtime <1-1440> tacacs-server host [ auth-port] [ timeout ] [ key] tacacs-server deadtime <1-1440> tacacs-server deadtime <1-1440> dot1x feature dot1x authentication timer dot1x max-reauth-req dot1x re-authentication dot1x system-auth-controln dot1x timeout dot1x guest-vlan dot1x initialize dot1x port-control dot1x radius-vlan show radius-server [ statistics ] enable end exit hostname LOOP-PROTECTION CONFIGURE COMMANDS loop-protect loop-protect action loop-protect shutdown-time Rev. A Page 8 of 117

9 loop-protect transmit-time loop-protect tx-mode Example: LLDP CONFIGURE COMMANDS lldp holdtime lldp med lldp reinit <1-10> lldp timer < > lldp tlv-select lldp transmission-delay Example: LLDP Commands Example: LLDP Med Commands GVRP CONFIGURE COMMANDS gvrp gvrpjoin request vlan gvrpleave request vlan gvrp max-vlans gvrp time Example: VOICE VLAN CONFIGURE COMMANDS voice vlan voice vlan aging-time voice vlan class voice vlan oui voice vlan vid Example: PROFILE ALARM COMMANDS profile alarm alarm CLI COMMAND EXAMPLES CHANGE MANAGEMENT IP ADDRESS COPY RUNNING CONFIG TO STARTUP CONFIG RESET TO FACTORY DEFAULTS CLI COMMAND SUMMARY SERVICE, WARRANTY, AND TECH SUPPORT COMPLIANCE INFORMATION LIST OF TABLES Table 2-1 List of Execution Modes Table 2-2 List of Terminal Keys LIST OF FIGURES Figure 2-1 PuTTY Screen Example Figure 2-2 Telnet Screen Example Rev. A Page 9 of 117

10 1. Scope Introduction Transition Networks SISGM D-LRT industrial Ethernet switch delivers high quality, wide operating temperature range, extended power input range, IP-30 design, and advanced VLAN and QoS features. It s ideal for harsh environments and mission critical applications. Managed QoS provides enterprise-class networking features to fulfill the needs of large network infrastructure and extreme environments. The SISGM D-LRT eases the effort to build a network infrastructure which offers a reliable, well managed and good QoS networking for any business requiring continuous and well-protected services in management environments. With the features such as Fast Failover ring protection and QoS, customers can ensure their network is qualified to deliver any real-time and high quality applications. Scope This manual describes the commands and parameters of the Command Line Interface (CLI) as implemented in the current version of SISGM D-LRT software. These commands are used to set-up, administer, and maintain the system. Required Knowledge The reader must be familiar with: Basic operations of SISGM D-LRT series (see the Install Guide). Security and activity monitoring constraints that limit how a command is implemented. Access to Hardware Interface Access to the hardware interface is by a terminal (or computer with terminal emulation software). Requirements for the terminal are: RS-232 ASCII port Selectable transmission baud rate Full alphanumeric capability Selectable odd/even or no parity check Related Manuals These manuals give additional information on how to operate the switch: SISGM D-LRT Quick Start Guide, SISGM D-LRT Install Guide, SISGM D-LRT Web User Guide, For Transition Networks Drivers, Firmware, Manual, etc. go to the Product Support webpage (logon required). For Transition Networks Application Notes, Brochures, Data Sheets, Specifications, etc. go to the Support Library (no login required). Note that this manual provides links to third party web sites for which Transition Networks is not responsible Rev. A Page 10 of 117

11 2. Operator Interface 2.1 Introduction Access to the Switch is protected by a logon security system. You can log on to the switch with the user name and password. After three failed logon attempts, the system refuses further attempts. After you log on, the system monitors the interface for periods of inactivity. If the interface is inactive for too long, you are automatically logged off. The CLI initial user name is root and password root. You should change the password as soon as possible, because the initial password is known to anyone who reads this manual. You can also change the user name or add additional user names. Use the account add command to enter a new user identification, password and authorization level. 2.2 Connection s Console : Baud rate=115200bps, Data bits=8, Parity=None, Stop bits=1. Telnet: Port 23 SSH: Port 22 (In Windows, you can run a terminal emulator such as PuTTY). 2.3 Screen 1. Connect to the switch Ethernet port (RJ45 Ethernet port). 2. In Telnet enter the command Login with default account and password: Username: root Password: root Figure 2-1 PuTTY Screen Example Figure 2-2 Telnet Screen Example Rev. A Page 11 of 117

12 2.4 Execution Modes The CLI contains several execution modes. Users will see different set of commands under different execution modes. Table 2-1 lists all the execution modes and their purposes. When you enter a certain execution mode, the corresponding mode prompt displays automatically on the screen. The mode prompts of all the execution modes are also listed in Table 2-1. Table 2-1 List of Execution Modes Mode Access Level Prompt Init Mode Guest > Enable Mode Guest # Config Mode Guest (conf)# Alarm Profile Config Mode Engineer (alarm-profile-conf)# Gigabit Interface Config Mode Engineer (gigabit-intf-conf)# ACL Profile Config Mode Engineer (acl-profile-conf)# scheduler Profile Config Mode Engineer (sch-profile-conf)# Vlan Interface Config Mode Engineer (vlan-intf-conf)# IGMP MVR Profile Config Mode Engineer (igmp-mvr-profile-conf)# IGMP ACL Profile Config Mode Engineer (igmp-acl-profile-conf)# RingV2 Group Config Mode Engineer (ring)# Trunk Group Config Mode Engineer (trunk-group-conf)# 2.5 Getting Help You can get help by entering a question mark? at each position in the command. The displayed result depends on the execution mode and previous input Rev. A Page 12 of 117

13 2.6 Terminal Key Functions Following is the list of all the terminal keys and their functions. Table 2-2 List of Terminal Keys ENTER CTRL-M TAB CTRL-I? <Up Arrow> CTRL-P <Down Arrow> CTRL-N Home CTRL-A End CTRL-E <Left Arrow> CTRL-B <Right Arrow> CTRL-F BACKSPACE CTRL-H Run a CLI config script Tab completion. If tab is pressed after a non-whitespace character, complete the word before the Tab. If tab is pressed after a whitespace character, complete the next word. Display available commands. If? is pressed after a non-whitespace character, show possible choices for this word. If? is pressed after a whitespace character, show possible choices for the next word. Up history Down history Move the cursor to the beginning of the input line. Move the cursor to the end of the input line. Move the cursor backward. Move the cursor forward. Erase the character before the cursor. Shift/Backspace also erases the prior character. 2.7 Notation Conventions The notation conventions for the parameter syntax of each CLI command are as follows: s enclosed in [ ] are optional. values are separated by a vertical bar only when one of the specified values can be used. values are enclosed in { } when you must use one of the values specified. To display more information: next page: continue: quit: Space bar g ^C Rev. A Page 13 of 117

14 3. Commands s 3.1 Initialize Mode Commands (page 15) 3.2 Enable Mode Commands (page 17) 3.3 Configure Mode Commands (page 40) 3.4 VLAN Mode Commands (page 60) 3.5 Interface VLAN Mode Commands (page 64) 3.6 RingV2 Group Mode Commands (page 67) 3.7 Spanning Tree Configure Commands (page 71) 3.8 sflow Configure Command (page 76) 3.9 SNMP Configure Command (page 79) 3.10 Qos Function Command (page 83) 3.11 IGMP Functional Commands (page 88) 3.12 MVR Functional Commands (page 91) 3.13 MLD Functional Commands (page 95) 3.14 Authenticate Mode Commands (page 97) 3.15 Loop-Protection Configure commands (page 103) 3.16 LLDP Configure commands (page 104) 3.17 GVRP Configure Commands (page 108) 3.18 Voice VLAN Configure Commands (page 109) Rev. A Page 14 of 90

15 3. Commands s 3.1 Initialize Mode Commands exit The commands in this section (except enable command) can be executed in all command modes. These commands are global commands. Exit current mode and quit CLI. exit None configure terminal Enter configuration mode. configure terminal None enable Enter enable mode. enable None show terminal show history show clock show clock detail Show CLI environment variables show terminal None Show command history (Note: commands issued in one execution mode only appear in history of that execution mode) show history None Show current time show clock [detail] None Show detailed information show clock detail None Examples: # configure terminal (config)# do show terminal Line is vty 0. * You are at this line now. Alive from Ssh. Default privileged level is Rev. A Page 15 of 90

16 Command line editing is enabled Display EXEC banner is enabled. Display Day banner is enabled. Terminal width is 80. length is 24. history size is 32. exec-timeout is 10 min 0 second. Current session privilege is 15. Elapsed time is 0 day 0 hour 12 min 24 sec. Idle time is 0 day 0 hour 0 min 0 sec. (config)# exit # show history enable configure terminal profile alarm alarm 108 unmask exit profile alarm alarm 151 unmask exit enable configure terminal do show terminal exit show history # show clock System Time : T00:27:08+00:00 # show clock detail System Time : T00:27:17+00:00 Timezone : Timezone Offset : 0 ( 0 minutes) Timezone Acronym : Daylight Saving Time Mode : Disabled. Daylight Saving Time Start Time Settings : Week: 0 Day: 0 Month: 0 Date: 0 Year: 0 Hour: 0 Minute: 0 Daylight Saving Time End Time Settings : Week: 0 Day: 0 Month: 0 Date: 0 Year: 0 Hour: 0 Minute: 0 -- more --, next page: Space, continue: g, quit: ^C Rev. A Page 16 of 90

17 3.2 Enable Mode (Show) Commands All the show - - commands in this section can also be executed under any other command mode except Initialize Mode. configure terminal disable show aaa Enter configuration mode. configure None Enter init mode. Turn off privileged commands. disable None Show AAA (authentication, authorization, and accounting) show aaa None show access management Access management configuration show access management [ statistics <access_id_list> ] statistics Statistics data access_id_list ID of access management entry show access-list Access list show access-list [ interface [ ( <port_type> [ <v_port_type_list> ] ) ] ] [ rate-limiter [ <rate_limiter_list> ] ] [ ace statistics [ <ace_list> ] ] show access-list ace-status [ static ] [ link-oam ] [ loop-protect ] [ dhcp ] [ ptp ] [ upnp ] [ arp-inspection ] [ mep ] [ ipmc ] [ ip-source-guard ] [ ip-mgmt ] [ conflicts ] [ switch <switch_list> ] interface Select an interface to configure ace-status The local ACEs status port_type GigabitEthernet,1 Gigabit Ethernet Port v_port_type_list PORT_LIST, Port list in 1/1-8 rate-limiter Rate limiter rate_limiter_list <RateLimiterList : 1~16> Rate limiter ID ace Access list entry statistics Traffic statistics ace_list <AceId : 1~256> ACE ID static The ACEs that are configured by users manually loop-protect The ACEs that are configured by Loop Protect module ipmc The ACEs that are configured by IPMC module Rev. A Page 17 of 90

18 ip-source-guard dhcp conflicts arp-inspection The ACEs that are configured by IP Source Guard module The ACEs that are configured by DHCP module The ACEs that did not get applied to the hardware due to hardware limitations The ACEs that are configured by ARP Inspection module show aggregation Aggregation show aggregation [ mode ] mode Traffic distribution mode show alarm Alarm information show alarm { history current } current Show alarm current infomation history Show alarm history infomation show cpu-load show green-ethernet CPU LOAD show cpu-load Green Ethernet show green-ethernet [ interface ( <port_type> [ <port_list> ] ) ] show green-ethernet eee [ interface ( <port_type> [ <port_list> ] ) ] show green-ethernet energy-detect [ interface ( <port_type> [ <port_list> ] ) ] show green-ethernet short-reach [ interface ( <port_type> [ <port_list> ] ) ] eee Shows green ethernet EEE status for a specific port or ports energy-detect Shows green ethernet energy-detect status for a specific port or ports short-reach Shows green ethernet short-reach status for a specific port or ports interface Shows green ethernet status for a specific port or ports port_type GigabitEthernet, 1 Gigabit Ethernet Port port_list <port_type_list> Port list in 1/ Rev. A Page 18 of 90

19 show ip IP information show ip arp dhcp http igmp interface name-server route source ssh statistics verify Address Resolution Protocol Dynamic Host Configuration Protocol Hypertext Transfer Protocol Internet Group Management Protocol IP interface status and configuration Domain System Display the current IP routing table source command Secure Shell Traffic statistics verify command show ipmc IPMC information show ipmc profile [ <profile_name> ] [ detail ] show ipmc range [ <entry_name> ] profile IPMC profile configuration range A range of IPv4/IPv6 multicast addresses for the profile profile_name <Profile : word16> Profile name in 16 char's detail Detail information of a profile entry_name <Entry : word16> Range entry name in 16 char's show ipv6 IPv6 information show ipv6 interface Select an interface to configure mld Multicast Listener Discovery neighbor IPv6 neighbors route IPv6 routes statistics Traffic statistics show lacp LACP information show lacp { internal statistics system-id neighbour } internal Internal LACP configuration neighbour Neighbour LACP status statistics Internal LACP statistics system-id LACP system id Rev. A Page 19 of 90

20 show line show logging Alive line information show line [ alive ] alive Display information about alive lines Logging information show logging <log_id> [ switch <switch_list> ] show logging [ info ] [ warning ] [ error ] [ switch <switch_list> ] log_id <logging_id: > Logging ID error Error info Information warning Warning show loop-protect Loop protect information show loop-protect [ interface ( <port_type> [ <plist> ] ) ] interface Interface status and configuration port_type GigabitEthernet, 1 Gigabit Ethernet Port plist <port_type_list> Port list in 1/1-8 show ntp status show users show running-config Show NTP (Network Timing Protocol) information. show ntp None Show account list. show account None Show running configuration. show running-config None show running-config interface Gigabit Show port config show running-config interface ( <port_type> [ <list> ] ) [ all-defaults ] list <port_type_list> Port list in 1/1-8 all-defaults Include most/all default values Rev. A Page 20 of 90

21 show running-config interface vlan show running-config all-defaults Show default running configuration. show running-config interface vlan <vlan_list> [ all-defaults] None Show all default setting show running-config [ all-defaults ] None show running-config feature Show running config feature show running-config feature <feature_name> [ all-defaults ] feature_name CWORD all-defaults Valid words are 'GVRP' 'access' 'access-list' 'aggregation' 'alm_profile' 'arp-inspection' 'auth' 'clock' 'dhcp' 'dhcp-snooping' 'dhcp_server' 'dns' 'dot1x' 'green-ethernet' 'http' 'icli' 'ip-igmp-snooping' 'ip-igmp-snooping-port' 'ip-igmp-snooping-vlan' 'ipmc-profile' 'ipmc-profile-range' 'ipv4' 'ipv6' 'ipv6-mld-snooping' 'ipv6-mld-snooping-port' 'ipv6-mld-snooping-vlan' 'lacp' 'lldp' 'logging' 'loop-protect' 'mac' 'monitor' 'mstp' 'mvr' 'mvr-port' 'ntp' 'phy' 'port' 'port-security' 'pvlan' 'qos' 'rmon' 'snmp' 'source-guard' 'ssh' 'tring_g1' 'tring_g2' 'tring_g3' 'user' 'vlan' 'voice-vlan' 'web-privilege-group-level' Include most/all default values show running-config line Line information show running-config line { console vty } <list> [ all-defaults ] console Console vty VTY list <range_list> List of console/vtys all-defaults Include most/all default values Rev. A Page 21 of 90

22 show running-config vlan VLAN information show running-config vlan <list> [ all-defaults ] list <vlan_list> List of VLAN numbers all-defaults Include most/all default values show version show clock Show firmware hardware and software status. show version None Show current time. Show clock None show mac address table aging-time show mac address table show mac address table conf Show aging time for MAC learning table (system-wide). show aging time None Show MAC learning table. show mac address-table [ conf static aging-time { { learning count } [ interface <port_type> [ <port_type_list> ] ] } { address <mac_addr> [ vlan <vlan_id> ] } vlan <vlan_id> interface <port_type> [ <port_type_list> ] ] None User added static mac addresses show mac address-table [ conf static aging-time { { learning count } [ interface ( <port_type> [ <v_port_type_list> ] ) ] } { address <v_mac_addr> [ vlan <v_vlan_id> ] } vlan <v_vlan_id_1> interface ( <port_type> [ <v_port_type_list_1> ] ) ] Rev. A Page 22 of 90

23 show mac address table count Total number of mac addresse show mac address-table [ conf static aging-time { { learning count } [ interface ( <port_type> [ <v_port_type_list> ] ) ] } { address <v_mac_addr> [ vlan <v_vlan_id> ] } vlan <v_vlan_id_1> interface ( <port_type> [ <v_port_type_list_1> ] ) ] show mac address table learning Learn/disable/secure stat show mac address-table [ conf static aging-time { { learning count } [ interface ( <port_type> [ <v_port_type_list> ] ) ] } { address <v_mac_addr> [ vlan <v_vlan_id> ] } vlan <v_vlan_id_1> interface ( <port_type> [ <v_port_type_list_1> ] ) ] show mac address table static All static mac addresses show mac address-table [ conf static aging-time { { learning count } [ interface ( <port_type> [ <v_port_type_list> ] ) ] } { address <v_mac_addr> [ vlan <v_vlan_id> ] } vlan <v_vlan_id_1> interface ( <port_type> [ <v_port_type_list_1> ] ) ] show mac address table interface Show MAC learning table per port. show mac address-table [ interface <port_type> [ <port_type_list> ] ] <portno> Valid values: 1 ~10(GIE5010) or 1~8(GIE5008) Type: Mandatory show mac address vlan <vlanid> Show MAC learning table per VLAN index. show mac address-table { learning count } vlan <vlan_id> <vlanid> Valid values: 1~4094 Type: Mandatory Rev. A Page 23 of 90

24 show mvr Show MVR information; MVR must be enabled. show mvr [ vlan <v_vlan_list> name <mvr_name> ] [ group-database [ interface ( <port_type> [ <v_port_type_list> ] ) ] [ sfm-information ] ] [ detail ] vlan Search by VLAN v_vlan_list <vlan_list> MVR multicast VLAN list name Search by MVR name mvr_name <Mvr : word16> MVR multicast VLAN name group-database Multicast group database from MVR interface Search by port port_type GigabitEthernet, 1 Gigabit Ethernet Port v_port_type_list PORT_LIST, Port list in 1/1-8 sfm-information Including source filter multicast information from MVR detail Detail information/statistics of MVR group database show interface port < port_type_list > show interface port <portno> statistics Show interface information per \port. show interface <port_type> [ <port_type_list> ] status <port_type> Port type in Fast, Giga or Tengiga ethernet <portno> Valid values: 1 ~ 10 Type: Mandatory Show Ethernet counter per gigabit port. show interface <port_type> [ <port_type_list> ] statistics <port_type> Port type in Fast, Giga or Tengiga ethernet <portno> Valid values: 1 ~ 10 Type: Mandatory counter Show Gigabit Ethernet counter Rev. A Page 24 of 90

25 show platform phy Show PHY information show platform phy [ interface ( <port_type> [ <v_port_type_list> ] ) ] show platform phy id [ interface ( <port_type> [ <v_port_type_list> ] ) ] show platform phy instance show platform phy status [ interface ( <port_type> [ <v_port_type_list> ] ) ] id ID instance PHY Instance Information status Status interface Interface port_type GigabitEthernet, 1 Gigabit Ethernet Port v_port_type_list PORT_LIST, Port list in 1/1-8 show port-security show profile alarm Port security show port-security port Show MAC Addresses learned by Port Security switch Show Port Security status interface Interface port_type GigabitEthernet, 1 Gigabit Ethernet Port v_port_type_list PORT_LIST, Port list in 1/1-8 Profile alarm show profile alarm None show sflow Sflow information show sflow show sflow statistics { receiver [ <rcvr_idx_list> ] samplers [ interface [ <samplers_list> ] ( <port_type> [ <v_port_type_list> ] ) ] } receiver Show statistics for receiver samplers Show statistics for samplers interface Interface port_type GigabitEthernet, 1 Gigabit Ethernet Port v_port_type_list <port_type_list> Port list in 1/ Rev. A Page 25 of 90

26 Example: # show profile alarm Alarm ID Mask Level Port 1 Link Down Mask Minor 102 Port 2 Link Down Mask Minor 103 Port 3 Link Down Mask Minor 104 Port 4 Link Down Mask Minor 105 Port 5 Link Down Mask Minor 106 Port 6 Link Down Mask Minor 107 Port 7 Link Down Mask Minor 108 Port 8 Link Down UnMask Minor 109 Port 9 Link Down Mask Minor 110 Port 10 Link Down Mask Minor 111 Port 11 Link Down Mask Minor 112 Port 12 Link Down Mask Minor 151 Power Alarm UnMask Minor # show sflow Agent Configuration: ==================== Agent Address: Receiver Configuration: ======================= Owner : <none> Receiver : UDP Port : 6343 Max. Datagram: 1400 bytes Time left : 0 seconds No enabled collectors (receivers). Skipping displaying per-port info. # show sflow statistics? receiver Show statistics for receiver. samplers Show statistics for samplers. # Rev. A Page 26 of 90

27 show snmp SNMP information show snmp show snmp access [ <group_name> { v1 v2c v3 any } { auth noauth priv } ] show snmp community v3 [ <community> ] show snmp host [ <conf_name> ] [ system ] [ switch ] [ interface ] [ aaa ] show snmp mib context show snmp mib ifmib ifindex show snmp security-to-group [ { v1 v2c v3 } <security_name> ] show snmp user [ <username> <engineid> ] show snmp view [ <view_name> <oid_subtree> ] access access configuration group_name <Group : word32> group name any any security model v1 v1 security model v2c v2c security model v3 v3 security model auth authnopriv Security Level noauth noauthnopriv Security Level priv authpriv Security Level community Community community <Community : word127> Specify community name host Set SNMP host's configurations conf_name <Conf : word32> of the host configuration aaa AAA event group interface Interface event group switch Switch event group system System event group mib MIB(Management Information Base) context MIB context ifmib IF-MIB ifindex The IfIndex that is defined in IF-MIB security-to-group security-to-group configuration security_name <Security : word32> security group name user User username <Username : word32> Security user name engineid <Engiedid : word10-32> Security Engine ID view MIB view configuration view_name <View : word32> MIB view name oid_subtree <OidSubtree : word255> MIB view OID Rev. A Page 27 of 90

28 show spanning-tree System Wide Spanning Tree Setting/Status. show spanning-tree [ summary active { interface ( <port_type> [ <v_port_type_list> ] ) } { detailed [ interface ( <port_type> [ <v_port_type_list_1> ] ) ] } { mst [ configuration { <instance> [ interface ( <port_type> [ <v_port_type_list_2> ] ) ] } ] } ] active detailed interface mst summary STP active interfaces STP statistics Choose port Configuration STP summary show switchport forbidden Lookup VLAN Forbidden port entry show switchport forbidden [ { vlan <vid> } { name <name> } ] vlan Show forbidden access for specific VLAN id vid VLAN id name Show forbidden access for specific VLAN name name VLAN name show tacacs-server show vlan TACACS+ configuration show tacacs-server Show bridge port memberset/status. show vlan None show vlan ID Show bridge port member set/status per VLAN index (1~4094). show vlan id <vlanid> <vlanid> Valid values: 1~4094 Type: Mandatory. show vlan name Show bridge port member set/status per VLAN name ( 32 words ). show vlan name <vword32> < vword32> Valid values: 32 words Type: Mandatory Rev. A Page 28 of 90

29 show vlan brief VLAN summary information show vlan [ id <vlan_list> name <name> brief ] id VLAN status by VLAN id vlan_list <vlan_list> VLAN IDs name VLAN status by VLAN name name <vword32> A VLAN name brief VLAN summary information show vlan ip-subnet Show VLAN ip-subnet entries show vlan ip-subnet [ id <subnet_id> ] id Show a specific ip-subnet entry subnet_id <1-128> The specific ip-subnet to show show vlan mac Show VLAN MAC entries show vlan mac [ address <mac_addr> ] address Show a specific MAC entry mac_addr <mac_ucast> The specific MAC entry to show show vlan protocol Protocol-based VLAN status show vlan protocol [ eth2 { <etype> arp ip ipx at } ] [ snap { <oui> rfc-1042 snap-8021h } <pid> ] [ llc <dsap> <ssap> ] eth2 Ethernet protocol based VLAN status etype 0x600-0xffff> Ether Type(Range: 0x600-0xFFFF) arp Ether Type is ARP ip Ether Type is IP ipx Ether Type is IPX at Ether Type is AppleTalk llc LLC-based VLAN status dsap <0x0-0xff> DSAP (Range: 0x00-0xFF) ssap <0x0-0xff> SSAP (Range: 0x00-0xFF) snap SNAP-based VLAN status oui <0x0-0xffffff> SNAP OUI (Range 0x XFFFFFF) rfc-1042 SNAP OUI is rfc-1042 snap-8021h SNAP OUI is 8021h Rev. A Page 29 of 90

30 show vlan status Show the VLANs configured for each interface show vlan status [ interface ( <port_type> [ <plist> ] ) ] [ combined admin nas mvr voice-vlan mstp erps vcl evc gvrp all conflicts ] admin Show the VLANs configured by administrator all Show all VLANs configured combined Show the VLANs configured by a combination conflicts Show VLANs configurations that has conflicts gvrp Show the VLANs configured by GVRP interface Show the VLANs configured for a specific interface(s) mstp Show the VLANs configured by MSTP. mvr Show the VLANs configured by MVR nas Show the VLANs configured by NAS vcl Show the VLANs configured by VCL voice-vlan Show the VLANs configured by Voice VLAN show qos-queue-mapping Show CoS queue mapping table. show qos maps None show qos interface ports <portno> priority Show QoS per gigabit port. show interface <port_type> [ <port_type_list> ] statistics { priority [ <0~7> ] } priority [ <0~7> ] Valid values:0 ~7 Type: Mandatory <port_type> Port type in Fast, Giga or Tengiga ethernet <portno> Valid values:0 ~ 10 Type: Mandatory show qos Show scheduler profile table. show queue-scheduler profile None show pvlan [ <pvlan_list> ] PVLAN ID show pvlan [ <pvlan_list> ] pvlan_list PVLAN ID to show configuration for Rev. A Page 30 of 90

31 show pvlan isolation [ interface <port_type> [ <port_type_list> ] ] Show all port isolation information. show pvlan isolation [ interface <port_type> [ <port_type_list> ] ] None <port_type> Port type in Fast, Giga or Tengiga ethernet <portno> Valid values: 1 ~ 10 Type: Mandatory show pvlan interface gigabit <portno> port-isolation Show isolation information per gigabit port. show pvlan isolation [ interface <port_type> [ <port_type_list> ] ] <portno> Valid values: 1 ~ 10 Type: Mandatory show interface gigabit <portno> storm-control show qos interface Show storm control information per gigabit port. show interface gigabit <portno> storm-control <port_type> Port type in Fast, Giga or Tengiga ethernet <portno> Valid values: 1~10 Type: Mandatory Show QoS interface information show qos [ { interface [ ( <port_type> [ <port> ] ) ] } interface Interface port_type GigabitEthernet, 1 Gigabit Ethernet Port port PORT_LIST, Port list in 1/1-8 show qos maps Show QoS Maps show qos maps { maps [ dscp-cos ] [ dscp-ingress-translation ] [ dscp-classify ] [ cos-dscp ] [ dscp-egress-translation ] } cos-dscp Map for cos to dscp dscp-classify Map for dscp classify enable dscp-cos Map for dscp to cos dscp-egress-translation Map for dscp egress translation dscp-ingress-translation Map for dscp ingress translation Rev. A Page 31 of 90

32 show qos qce QCE show qos { qce [ <qce> ] } qce <Id : 1-256> QCE ID show qos storm {unknown-uc unknown-mc broadcast} Show storm control information by VLAN. show vlan unknown-uc show vlan unknown-mc show vlan broadcast unknown-uc unknown-mc broadcast Show unknown unicast storm control information by VLAN. Type: Mandatory Show unknown multicast storm control information by VLAN. Type: Mandatory Show broadcast storm control information by VLAN. Type: Mandatory show ringv2 show rmon Show ring protection information show ring None show rmon alarm [ <id_list> ] show rmon event [ <id_list> ] show rmon history [ <id_list> ] show rmon statistics [ <id_list> ] alarm event history statistics id_list Display the RMON alarm table Display the RMON event table Display the RMON history table Display the RMON statistics table <1~65535>, Statistics entry list Rev. A Page 32 of 90

33 show interface gigabit <portno> Show interface gigaport information show interface gigabit <portno> <portno> Gigabit port. Valid values: 1 ~ 10 Type: Mandatory show interface vlan Show VLAN interface information of all VLANs. show interface vlan None show interface vlan <vlanid> Show VLAN interface information of specify VLAN. show interface vlan <vlanid> <vlanid> show vlan interface gigabit <portno> vlan show dot1x status VLAN ID. Valid values: 1 ~ 4094 Type: Mandatory Show vlan information per port show vlan interface gigabit <portno> vlan <portno> Gigabit port. Valid values: 1 ~ 10 Type: Mandatory Show dot1x stats. show dot1x status [ interface <port_type> [ <port_type_list> ] ] [ brief ] None show dot1x statistics Show dot1x statistics show dot1x statistics { eapol radius all } [ interface ( <port_type> [ <v_port_type_list> ] ) ] all Show all dot1x statistics eapol Show EAPOL statistics radius Show Backend Server statistics interface Interface port_type GigabitEthernet, 1 Gigabit Ethernet Port v_port_type_list PORT_LIST, Port list in 1/ Rev. A Page 33 of 90

34 show ddmi Show DDMI Digital Diagnostic Monitoring Interface) enabled or disabled show ddmi [ statistics ] Count radius packet statistics show radius-server [ statistics ] show radius-server statistics show radius-server [ statistics ] [ statistics ] Count radius packet statistics show voice vlan Show Vlan for voice traffic show voice vlan [ oui <oui> interface ( <port_type> [ <port_list> ] ) ] vlan Vlan for voice traffic oui OUI configuration oui OUI value interface Select an interface to configure port_type GigabitEthernet, 1 Gigabit Ethernet Port port_list <port_type_list> Port list in 1/1-8 show web Show Web privilege show web privilege group [ <group_name> ] level privilege group group_name level Web privilege Web privilege grou CWORD Valid words are 'Aggregation' 'DHCP' 'Debug' 'Dhcp_Client' 'Diagnostics' 'EEE' 'Green_Ethernet' 'IP2' 'IPMC_Snooping' 'LACP' 'LLDP' 'Loop_Protect' 'MAC_Table' 'MVR' 'Maintenance' 'Mirroring' 'NTP' 'Ports' 'Private_VLANs' 'QoS' 'RPC' 'Security' 'Spanning_Tree' 'System' 'Timer' 'VCL' 'VLANs' 'Voice_VLAN' 'XXRP' 'sflow' Web privilege group level Rev. A Page 34 of 90

35 Examples: (alm-profile-config)# exit (config)# exit # enable # configure terminal (config)# do show terminal Line is vty 0. * You are at this line now. Alive from Ssh. Default privileged level is 2. Command line editing is enabled Display EXEC banner is enabled. Display Day banner is enabled. Terminal width is 80. length is 24. history size is 32. exec-timeout is 10 min 0 second. Current session privilege is 15. Elapsed time is 0 day 0 hour 12 min 24 sec. Idle time is 0 day 0 hour 0 min 0 sec. (config)# exit # show history enable configure terminal profile alarm alarm 108 unmask exit profile alarm alarm 151 unmask exit enable configure terminal do show terminal exit show history # show clock System Time : T00:27:08+00:00 # show clock detail System Time : T00:27:17+00:00 Timezone : Timezone Offset : 0 ( 0 minutes) Timezone Acronym : Daylight Saving Time Mode : Disabled. Daylight Saving Time Start Time Settings : Week: 0 Day: 0 Month: 0 Date: 0 Year: 0 Hour: 0 Minute: 0 Daylight Saving Time End Time Settings : Week: 0 Day: 0 Month: Rev. A Page 35 of 90

36 Date: 0 Year: 0 Hour: 0 Minute: 0 # configure terminal (config)# disable ^ % Invalid word detected at '^' marker. (config)# end # d? debug Debugging functions delete Delete one file in flash: file system dir Directory of all files in flash: file system disable Turn off privileged commands do To run exec commands in config mode dot1x IEEE Standard for port-based Network Access Control # show a? aaa Login methods access Access management access-list Access list aggregation Aggregation port configuration alarm Show alarm infomation. # show aaa console : local telnet : local ssh : local http : local # show access management Switch access management mode is disabled W: WEB/HTTPS S: SNMP T: TELNET/SSH Idx VID Start IP Address End IP Address W S T Rev. A Page 36 of 90

37 # show access-list Switch access-list ace number: 0 Switch access-list rate limiter ID 1 is 1 pps Switch access-list rate limiter ID 2 is 1 pps Switch access-list rate limiter ID 3 is 1 pps Switch access-list rate limiter ID 4 is 1 pps Switch access-list rate limiter ID 5 is 1 pps Switch access-list rate limiter ID 6 is 1 pps Switch access-list rate limiter ID 7 is 1 pps Switch access-list rate limiter ID 8 is 1 pps Switch access-list rate limiter ID 9 is 1 pps Switch access-list rate limiter ID 10 is 1 pps Switch access-list rate limiter ID 11 is 1 pps Switch access-list rate limiter ID 12 is 1 pps Switch access-list rate limiter ID 13 is 1 pps Switch access-list rate limiter ID 14 is 1 pps Switch access-list rate limiter ID 15 is 1 pps Switch access-list rate limiter ID 16 is 1 pps GigabitEthernet 1/1 : # show alarm? current Show alarm current infomation. history Show alarm history infomation. # show alarm current SeqNo ID Position Level State Time GE-8 Port 8 Link Down Minor Set T00:07:54+00: System Power Alarm Minor Set T00:16:46+00: # show alarm history SeqNo ID Position Level State Time GE-8 Port 8 Link Down Minor Set T00:07:54+00: System Power Alarm Minor Set T00:16:46+00: # show cpu-load? Output modifiers <cr> # show cpu-load All numbers running average. (unit: %) ====================================== ID 100ms 1s 10s ====================================== Rev. A Page 37 of 90

38 # show green-ethernet? eee Shows green ethernet EEE status for a specific port or ports. energy-detect Shows green ethernet energy-detect status for a specific port or ports. interface short-reach <cr> # show green-ethernet Interface Shows green ethernet status for a specific port or ports. Shows green ethernet short-reach status for a specific port or ports. Lnk Energy-detect Short-Reach EEE Capable EEE Enabled LP EEE Capable In Power Save GigabitEthernet 1/1 Yes No No Yes No No No GigabitEthernet 1/2 No No No Yes No No No GigabitEthernet 1/3 No No No Yes No No No GigabitEthernet 1/4 No No No Yes No No No GigabitEthernet 1/5 No No No Yes No No No GigabitEthernet 1/6 No No No Yes No No No GigabitEthernet 1/7 No No No Yes No No No GigabitEthernet 1/8 No No No Yes No No No GigabitEthernet 1/9 No N/A N/A No N/A N/A N/A # show ip? arp dhcp http igmp interface name-server route source ssh statistics Address Resolution Protocol Dynamic Host Configuration Protocol Hypertext Transfer Protocol Internet Group Management Protocol IP interface status and configuration Domain System Display the current ip routing table source command Secure Shell Traffic statistics Rev. A Page 38 of 90

39 verify # show version verify command MEMORY : Total=95565 KBytes, Free=81833 KBytes, Max=81821 KBytes FLASH : 0x x40ffffff, 64 x 0x40000 blocks MAC Address : 00-c0-f2-7a-ce-e3 Previous Restart : Cold System Contact : System : System Location : System Time : T00:34:57+00:00 System Uptime : 00:34:59 Active Image Image Version Date : managed : v b04 : T16:39:50+08:00 Alternate Image Image : managed.bk Version : v b04 -- more --, next page: Space, continue: g, quit: ^C Rev. A Page 39 of 90