-1- Command Guide of SGS T2X

Transcription

1 -1- Command Guide of SGS T2X

2 Contents Command Guide of SGS T2X Chapter 1 COMMAND LINE INTERFACE Accessing the CLI Command Line Modes Requirements Chapter 2 CONSOLE CLI MANAGEMENT Terminal Setup Logon to the Console Configuring IP Address Chapter 3 TELNET CLI MANAGEMENT Telnet Login Chapter 4 Commands for CLI Configuration clear clear access management statistics clear access-list ace statistics clear dot1x statistics interface clear ip arp clear ip dhcp detailed statistics all clear ip dhcp detailed statistics client clear ip dhcp detailed statistics helper clear ip dhcp detailed statistics server clear ip dhcp detailed statistics snooping clear ip dhcp relay statistics clear ip dhcp server binding clear ip dhcp server binding automatic clear ip dhcp server binding expired clear ip dhcp server binding manual clear ip igmp snooping statistics clear ip igmp snooping vlan clear ip statistics icmp icmp-msg clear ip statistics icmp interface vlan clear ip statistics system icmp icmp-msg

3 clear ip statistics system icmp interface vlan clear ipv6 mld snooping statistics clear ipv6 mld snooping vlan clear ipv6 neighbors clear ipv6 statistics icmp icmp-msg clear ipv6 statistics icmp interface vlan clear ipv6 statistics system icmp icmp-msg clear ipv6 statistics system icmp interface vlan clear lacp statistics clear lldp statistics clear logging error info clear logging error warning clear logging info error clear logging info warning clear logging warning error clear logging warning info clear mac address-table clear mvr name clear mvr statistics clear mvr vlan clear network-clock clk-source clear spanning-tree detected-protocols interface * clear spanning-tree detected-protocols interface * clear spanning-tree detected-protocols interface GigabitEthernet clear spanning-tree detected-protocols interface 10GigabitEthernet clear spanning-tree statistics interface * clear spanning-tree statistics interface GigabitEthernet clear spanning-tree statistics interface 10GigabitEthernet clear statistics * clear statistics GigabitEthernet clear statistics 10GigabitEthernet configure terminal aaa authentication login console local aaa authentication login console radius aaa authentication login console tacacs aaa authentication login http local aaa authentication login http radius aaa authentication login http tacacs aaa authentication login ssh local aaa authentication login ssh radius aaa authentication login ssh tacacs

4 aaa authentication login telnet local aaa authentication login telnet radius aaa authentication login telnet tacacs access management access-list ace access-list ace update access-list rate-limiter access-list rate-limiter pps aggregation mode aggregation mode banner banner exec banner login banner motd clock summer-time clock timezone default access-list rate-limiter dot1x authentication timer inactivity dot1x authentication timer re-authenticate dot1x feature dot1x guest-vlan dot1x guest-vlan supplicant dot1x max-reauth-req dot1x system-auth-control dot1x timeout quiet-period dot1x timeout tx-period enable password enable password level enable secret end exit green-ethernet led interval green-ethernet led on-event help hostname interface * 10GigabitEthernet GigabitEthernet access-list action permit access-list action deny access-list logging access-list policy

5 access-list port-state access-list rate-limiter access-list redirect interface access-list shutdown aggregation group description do dot1x guest-vlan dot1x port-control dot1x radius-qos dot1x radius-vlan dot1x re-authenticate duplex end excessive-restart exit flowcontrol ip arp inspection check-vlan ip arp inspection logging ip arp inspection trust ip dhcp snooping trust ip igmp snooping filter ip igmp snooping immediate-leave ip igmp snooping max-groups ip igmp snooping mrouter ip verify source ip verify source limit ipv6 mld snooping filter ipv6 mld snooping immediate-leave ipv6 mld snooping max-groups ipv6 mld snooping mrouter lacp lacp key lacp port-priority lacp role lacp timeout lldp cdp-aware lldp med media-vlan policy-list lldp med transmit-tlv lldp receive lldp tlv-select management-address

6 lldp tlv-select port-description lldp tlv-select system-capabilities lldp tlv-select system-description lldp tlv-select system-name lldp transmit loop-protect loop-protect action loop-protect tx-mode loop-protect tx-mode mac address-table learning media-type mtu mvr immediate-leave mvr name mvr vlan network-clock synchronization ssm no ping ip port-security port-security maximum port-security violation port-security violation pvlan pvlan isolation qos cos qos dei qos dpl qos dscp-classify qos dscp-remark qos dscp-translate qos map cos-tag qos map tag-cos qos pcp qos policer qos queue-policer queue qos queue-shaper queue qos shaper qos storm broadcast qos storm unicast qos storm unknown qos tag-remark

7 qos tag-remark mapped qos trust dscp qos trust tag rmon collection history rmon collection stats shutdown spanning-tree spanning-tree auto-edge spanning-tree bpdu-guard spanning-tree edge spanning-tree link-type spanning-tree mst <Instance : 0-7> cost spanning-tree mst <Instance : 0-7> cost spanning-tree restricted-role spanning-tree restricted-tcn speed switchport access vlan switchport forbidden vlan add switchport forbidden vlan remove switchport hybrid acceptable-frame-type switchport hybrid allowed vlan switchport hybrid egress-tag switchport hybrid ingress-filtering switchport hybrid native vlan switchport hybrid port-type switchport mode switchport vlan ip-subnet switchport vlan mac switchport vlan mapping switchport vlan protocol group switchport voice vlan discovery-protocol switchport voice vlan mode switchport voice vlan security interface vlan do end exit ip address ip address dhcp ip address dhcp fallback ip dhcp server

8 ip igmp snooping ip igmp snooping compatibility ip igmp snooping last-member-query-interval ip igmp snooping priority ip igmp snooping querier address ip igmp snooping querier election ip igmp snooping query-interval ip igmp snooping query-max-response-time ip igmp snooping robustness-variable ip igmp snooping unsolicited-report-interval ipv6 address ipv6 mld snooping ipv6 mld snooping compatibility ipv6 mld snooping last-member-query-interval ipv6 mld snooping priority ipv6 mld snooping querier election ipv6 mld snooping query-interval ipv6 mld snooping query-max-response-time ipv6 mld snooping robustness-variable ipv6 mld snooping unsolicited-report-interval no ip arp inspection ip arp inspection entry interface ip arp inspection translate ip arp inspection translate interface ip arp inspection vlan ip dhcp excluded-address ip dhcp pool broadcast client-identifier fqdn client-identifier mac-address client-name default-router dns-server do domain-name end exit hardware-address host lease

9 netbios-name-server netbios-node-type netbios-scope network nis-domain-name nis-server no ntp-server vendor ip dns proxy ip helper-address ip http secure-redirect ip http secure-server ip igmp host-proxy ip igmp host-proxy leave-proxy ip igmp snooping ip igmp snooping vlan ip igmp ssm-range ip igmp unknown-flooding ip name-server ip name-server dhcp ip name-server dhcp interface vlan ip route ip routing ip source binding interface ip ssh ip verify source ip verify source translate ipmc profile ipmc profile <word16> default range description do end exit no range ipv6 mld host-proxy ipv6 mld host-proxy leave-proxy ipv6 mld snooping ipv6 mld snooping vlan

10 ipv6 mld ssm-range ipv6 mld unknown-flooding ipv6 route lacp system-priority line do editing end exec-banner exec-timeout exec-timeout exit history size length location motd-banner no privilege level width lldp holdtime lldp med datum lldp med fast lldp med location-tlv altitude lldp med location-tlv elin-addr lldp med location-tlv latitude lldp med location-tlv longitude lldp med media-vlan-policy lldp reinit lldp timer lldp transmission-delay logging host logging level logging on loop-protect loop-protect shutdown-time loop-protect transmit-time mac address-table aging-time mac address-table static monitor destination monitor source mvr

11 mvr name <mvr_name> channel mvr name <mvr_name> frame priority mvr name <mvr_name> frame tagged mvr name <mvr_name> igmp-address mvr name <mvr_name> last-member-query-interval mvr name <mvr_name> mode mvr vlan <vlan_list> mvr vlan <vlan_list> channel mvr vlan <vlan_list> frame priority mvr vlan <vlan_list> tagged mvr vlan <vlan_list> igmp-address mvr vlan <vlan_list> last-member-query-interval mvr vlan <vlan_list> mode mvr vlan <vlan_list> name network-clock clk-source <clk-source> aneg-mode no ntp ntp server port-security port-security aging port-security aging time privilege qos map cos-dscp qos map dscp-classify qos map dscp-cos qos map dscp-egress-translation qos map dscp-ingress-translation qos qce qos qce update qos qce refresh qos wred radius-server attribute radius-server attribute radius-server attribute radius-server deadtime radius-server host radius-server key radius-server retransmit radius-server timeout rmon alarm rmon event

12 sfp temperature-threshold snmp-server snmp-server access snmp-server community snmp-server contact snmp-server engine-id snmp-server host do end exit host no informs shutdown traps version spanning-tree aggregation do end exit no spanning-tree auto-edge spanning-tree bpdu-guard spanning-tree edge spanning-tree link-type spanning-tree mst <instance> cost spanning-tree mst <instance> port-priority spanning-tree restricted-role spanning-tree restricted-tcn switchport vlan mapping tacacs-server deadtime tacacs-server host transport authentication transport from transport smtp-server transport to upnp upnp advertising-duration upnp ttl username vlan

13 do end exit name no vlan ethertype s-custom-port vlan protocol voice vlan voice vlan aging-time voice vlan class voice vlan oui voice vlan vid web privilege group copy copy debug debug delete delete dir dir disable disable do do dot1x dot1x initialize enable enable exit exit firmware firmware swap firmware upgrade ip ip dhcp retry interface vlan

14 4.14 logout logout more more no no ping ping ip ping ipv reload reload cold reload defaults send send show show aaa show access management show access-list show access-list show access-list ace-status show aggregation show aggregation mode show clock show clock detail show dot1x statistics show dot1x status show green-ethernet show green-ethernet energy-detect show green-ethernet short-reach show history show interface <port_type> <port_type_list> capabilities show interface <port_type> <port_type_list> statistics show interface <port_type> <port_type_list> status show interface <port_type> <port_list> switchport show interface <port_type> <port_type_list> veriphy show interface <port_type> <port_type_list> veriphy show interface vlan show ip arp

15 show ip arp inspection show ip arp inspection show ip arp inspection entry show ip dhcp detailed statistics show ip dhcp excluded-address show ip dhcp pool show ip dhcp relay show ip dhcp server show ip dhcp server binding (GG) show ip dhcp server declined-ip (GG) show ip dhcp server statistics show ip dhcp snooping show ip dhcp snooping table show ip http server secure status show ip igmp snooping show ip igmp snooping mrouter show ip interface brief show ip name-server show ip route show ip source binding show ip ssh show ip statistics show ip verify source show ipmc profile show ipmc range show ipv6 interface show ipv6 mld snooping show ipv6 mld snooping mrouter show ipv6 neighbor show ipv6 route show ipv6 statistics show lacp show line show lldp med media-vlan-policy show lldp med remote-device show lldp neighbors show lldp statistics show logging show loop-protect show mac address-table show mep

16 show mvr show network-clock show ntp status show platform phy show platform phy failover show platform phy id show platform phy status show port-security port show port-security switch show privilege show pvlan show pvlan isolation show qos show radius-server show rmon alarm show rmon event show rmon history show rmon statistics show running-config show snmp show snmp access show snmp community v show snmp host show snmp mib context show snmp mib ifmib ifindex show snmp security-to-group show snmp user show snmp view show spanning-tree show switchport forbidden show tacacs-server show terminal show upnp show users show version show vlan show vlan ip-subnet show vlan mac show vlan protocol show voice vlan show web privilege group

17 4.21 terminal terminal editing terminal exec-timeout terminal history size terminal length terminal width

18 Chapter 1 COMMAND LINE INTERFACE 1.1 Accessing the CLI When accessing the management interface for the switch over a direct connection to the server s console port, or via a Telnet connection, the switch can be managed by entering command keywords and parameters at the prompt. Using the switch's command-line interface (CLI) is very similar to entering commands on a UNIX system. This chapter describes how to use the Command Line Interface (CLI). 1.2 Command Line Modes The CLI groups all the commands in appropriate modes according to the nature of the command. A sample of the CLI command modes are described below. Each of the command modes supports specific software commands. Mode-based Command Hierarchy The Command Line Interface (CLI) groups all the commands in appropriate modes by the nature of the commands. Examples of the CLI command modes are described below. Each of the command modes supports specific switch s commands. The CLI Command Modes table captures the command modes, the prompts visible in that mode and the exit method from that mode. Command Mode Access Method Prompt Exit or Access Previous Mode This is the first level of User Mode access. Perform basic tasks COMMAND> Enter Logout command and list system information. Privileged Mode From the User Mode, enter the enable command. Switch# To exit to the User Mode, enter exit or Logout. Global Config Mode From the Privileged Mode, enter the configuration command. Switch (Config)# To exit to the Privileged Mode, enter the exit command. Interface Config Mode From the Global Config mode, enter the interface <port#> command. Switch (Interface <port#>)# To exit to the Global Config mode, enter exit. Table 4-1 CLI Command Modes The CLI is divided into various modes. The commands in one mode are not available until the operator switches to that particular mode. The commands available to the operator at any point in time depend upon the mode. Entering a question mark (?) at the CLI prompt, and displays a list of the available commands and descriptions of the commands. -18-

19 The CLI provides the following modes: User Mode When the operator logs into the CLI, the User Mode is the initial mode. The User Mode contains a limited set of commands. The command prompt shown at this level is: Command Prompt: switch> Privileged Mode To have access to the full suite of commands, the operator must enter the Privileged Mode. The Privileged Mode requires password authentication. From Privileged Mode, the operator can issue any Exec command to enter the Global Configuration mode. The command prompt shown at this level is: Command Prompt: switch# Global Config Mode This mode permits the operator to make modifications to the running configuration. General setup commands are grouped in this mode. From the Global Configuration mode, the operator can enter the Interface Configuration mode. The command prompt at this level is: Command Prompt: switch(config)# From the Global Config mode, the operator may enter the following configuration modes: Interface Config Mode Many features are enabled for a particular interface. The Interface commands enable or modify the operation of an interface. In this mode, a physical port is set up for a specific logical connection operation. The command prompt at this level is: Command Prompt: Switch(Interface <port#>)# 1.3 Requirements Workstations running Windows XP/Vista/7/8/, Windows 2003/2008, MAC OS X or later, Linux, UNIX, or other platforms are compatible with TCP/IP protocols. Workstations are installed with Ethernet NIC (Network Interface Card) Serial Port Connection (Terminal) The above Workstations come with COM Port (DB9) or USB-to-RS-232 converter. The above Workstations have been installed with terminal emulator, such as Hyper Terminal included in Windows XP/2003. Serial cable -- one end is attached to the RS-232 serial port, while the other end to the console port of the Managed Switch. Ethernet Port Connection Network cables -- Use standard network (UTP) cables with RJ-45 connectors. The above PC is installed with Web Browser and JAVA runtime environment plug-in. -19-

20 Chapter 2 CONSOLE CLI MANAGEMENT 2.1 Terminal Setup To configure the system, connect a serial cable to a COM port on a PC or notebook computer and to RJ-45 type of serial (console) port of the Managed Switch. Figure 2-1 Managed Switch Console Connectivity The console port of the Managed Switch is a RJ-45 type, RS-232 serial port connector. It is an interface for connecting a terminal directly. Through the console port, it provides rich diagnostic information including IP Address setting, factory reset, port management, link status and system setting. Users can use the attached RS-232 cable in the package and connect to the console port on the device. After the connection, users can run any terminal emulation program (Hyper Terminal, ProComm Plus, Telix, Winterm and so on) to enter the startup screen of the device. SGS T2X Rear Panel Figure 2-2: Front Panel of SGS T2X A terminal program is required to make the software connection to the Managed Switch. Windows' Hyper Terminal program may be a good choice. The Hyper Terminal can be accessed from the Start menu. 1. Click START, then Programs, Accessories and then Hyper Terminal. 2. When the following screen appears, make sure that the COM port should be configured as: Baud : Data bits : 8 Parity : None Stop bits : 1 Flow control : None -20-

21 Figure 2-3 Hyper Terminal COM Port Configuration You can change these settings, if desired, after you log on. This management method is often preferred because you can remain connected and monitor the system during system reboots. Also, certain error messages are sent to the serial port, regardless of the interface through which the associated action was initiated. A Macintosh or PC attachment can use any terminal-emulation program for connecting to the terminal serial port. A workstation attachment under UNIX can use an emulator such as TIP. -21-

22 2.2 Logon to the Console Once the terminal is connected to the device, power on the Managed Switch, and the terminal will display running testing procedures. Then, the following message asks to log-in user name and password. The factory default user name and password are shown as follows and the login screen in Figure 3-1 appears. Username: admin Password: admin Figure 3-1: Managed Switch Console Login Screen The user can now enter commands to manage the Managed Switch. For a detailed description of the commands, please refer to the following chapters. 1. For security reason, please change and memorize the new password after this first setup. 2. Only accept command in lowercase letter under console interface. 2.3 Configuring IP Address The Managed Switch is shipped with default IP address shown below. IP Address: Subnet Mask: To check the current IP address or modify a new IP address for the Switch, please use the procedures as follows: -22-

23 Show the current IP Address 1. At the # prompt, enter show ip interface brief. 2. The screen displays the current IP address and Subnet Mask as shown in Figure 3-2. Figure 3-2: IP Information Screen Configuring IP Address 3. At the # prompt, enter the following command and press <Enter>. As shown in Figure 3-3. # configure terminal (config)# interface vlan 1 (config-if-vlan)# ip address The previous command would apply the following settings for the Managed Switch. IP Address: Subnet Mask: Figure 3-3: Configuring IP Address Screen -23-

24 4. Repeat step 1 to check if the IP address is changed. Store current switch configuration 5. At the # prompt, enter the following command and press <Enter>. # copy running-config startup-config Figure 3-4: Saving Current Configuration Command Screen If the IP is successfully configured, the Managed Switch will apply the new IP address setting immediately. You can access the Web interface of the Managed Switch through the new IP address. If you are not familiar with the console command or the related parameter, enter? anytime in console to get the help description. -24-

25 Chapter 3 TELNET CLI MANAGEMENT 3.1 Telnet Login The Managed Switch also supports telnet for remote management. The switch asks for user name and password for remote login when using telnet, please use admin for username & password. Default IP address: Username: admin Password: admin Figure 4-1 Managed Switch Telnet Login Screen -25-

26 4.1 clear Chapter 4 Commands for CLI Configuration clear access management statistics clear access management statistics To clear the access management statistics. To clear the Switch s access management statistics. Switch# clear access management statistics clear access-list ace statistics clear access-list ace statistics To clear the Access list entry statistics. To clear the Switch s Access list entry statistics. Switch# clear access-list ace statistics -26-

27 4.1.3 clear dot1x statistics interface clear dot1x statistics interface GigabitEthernet 10GigabitEthernet To clear the dot1x statistics. To clear the Switch s GigabitEthernet 1/25 dot1x statistics. Switch# clear dot1x statistics interface GigabitEthernet 1/ clear ip arp clear ip arp To clear the ARP cache. To clear the Switch s ARP cache. Switch# clear ip arp clear ip dhcp detailed statistics all clear ip dhcp detailed statistics all -27-

28 To clear the DHCP detailed statistics for all. To clear the Switch s DHCP detailed statistics for all. Switch# clear ip dhcp detailed statistics all clear ip dhcp detailed statistics client clear ip dhcp detailed statistics client To clear the DHCP client statistics. To clear the Switch s DHCP client statistics. Switch# clear ip dhcp detailed statistics client clear ip dhcp detailed statistics helper clear ip dhcp detailed statistics helper To clear the DHCP normal L2 or L3 forward statistics. To clear the Switch s DHCP normal L2 or L3 forward statistics. Switch# clear ip dhcp detailed statistics helper -28-

29 4.1.8 clear ip dhcp detailed statistics server clear ip dhcp detailed statistics server To clear the DHCP server statistics. To clear the Switch s DHCP server statistics. Switch# clear ip dhcp detailed statistics server clear ip dhcp detailed statistics snooping clear ip dhcp detailed statistics snooping To clear the DHCP snooping statistics. To clear the Switch s DHCP normal L2 or L3 forward statistics. Switch# clear ip dhcp detailed statistics snooping clear ip dhcp relay statistics clear ip dhcp relay statistics -29-

30 To clear the DHCP relay statistics. To clear the Switch s DHCP relay statistics. Switch# clear ip dhcp relay statistics clear ip dhcp server binding <IP> A.B.C.D clear ip dhcp server binding <IP> To clear the DHCP server binding cache. To clear the Switch s DHCP server( ) binding cache. Switch# clear ip dhcp server binding clear ip dhcp server binding automatic clear ip dhcp server binding automatic To clear the DHCP automatic bindings cache. -30-

31 To clear the Switch s DHCP automatic bindings cache. Switch# clear ip dhcp server binding automatic clear ip dhcp server binding expired clear ip dhcp server binding expired To clear the DHCP expired bindings for free. To clear the Switch s DHCP expired bindings for free. Switch# clear ip dhcp server binding expired clear ip dhcp server binding manual clear ip dhcp server binding manual To clear the DHCP server manual binding cache. To clear the Switch s DHCP server manual binding cache. Switch# clear ip dhcp server binding manual clear ip igmp snooping statistics -31-

32 clear ip igmp snooping statistics To clear the IGMP snooping statistics. To clear the Switch s IGMP snooping statistics. Switch# clear ip igmp snooping statistics clear ip igmp snooping vlan clear ip igmp snooping vlan < vlan_list> statistics <vlan_list> VLAN identifier(s): VID To clear the IGMP snooping vlan < vlan_list> statistics. To clear the Switch s IGMP snooping vlan 1 statistics. Switch# clear ip igmp snooping vlan 1 statistics clear ip statistics icmp icmp-msg clear ip statistics icmp icmp-msg <Type : 0~255> <Type : 0~255> ICMP message type ranges from 0 to

33 To clear the IPv4 ICMP traffic for designated message type. To clear the Switch s IPv4 ICMP traffic for designated message type 0. Switch# clear ip statistics icmp icmp-msg clear ip statistics icmp interface vlan clear ip statistics icmp interface vlan <vlan_list> <vlan_list> VLAN identifier(s): VID To clear the IPv4 interface/icmp statistics for specific VLAN. To clear the Switch s IP interface/icmp statistics for specific VLAN 1. Switch# clear ip statistics icmp interface vlan clear ip statistics system icmp icmp-msg clear ip statistics system icmp icmp-msg <Type : 0~255> <Type : 0~255> ICMP message type ranges from 0 to 255 To clear the IPv4 ICMP statistics for specific ICMP message type. To clear the Switch s IPv4 ICMP statistics for specific ICMP message type 0. Switch# clear ip statistics system icmp icmp-msg 0-33-

34 clear ip statistics system icmp interface vlan Command Guide of SGS T2X clear ip statistics system icmp interface vlan <vlan_list> VLAN identifier(s): VID To clear the IPv4 ICMP interface statistics for specific VLAN. To clear the Switch s IPv4 ICMP interface statistics for specific VLAN 1. Switch# clear ip statistics system icmp interface vlan clear ipv6 mld snooping statistics clear ipv6 mld snooping statistics To clear the ipv6 mld snooping statistics. To clear the Switch s ipv6 mld snooping statistics. Switch# clear ipv6 mld snooping statistics clear ipv6 mld snooping vlan clear ipv6 mld snooping vlan <vlan_list> statistics <vlan_list> VLAN identifier(s): VID -34-

35 To clear the ipv6 mld snooping statistics for specific VLAN. To clear the Switch s ipv6 mld snooping statistics for specific VLAN 1. Switch# clear ipv6 mld snooping vlan 1 statistics clear ipv6 neighbors clear ipv6 neighbors To clear the ipv6 neighbors. To clear the Switch s ipv6 neighbors. Switch# clear ipv6 neighbors clear ipv6 statistics icmp icmp-msg clear ipv6 statistics icmp icmp-msg <Type : 0~255> <Type : 0~255> ICMP message type ranges from 0 to 255 To clear the IPv6 ICMP traffic for designated message type. -35-

36 To clear the Switch s IPv6 ICMP traffic for designated message type 0. Switch# clear ipv6 statistics icmp icmp-msg clear ipv6 statistics icmp interface vlan clear ipv6 statistics icmp interface vlan <vlan_list> <vlan_list> VLAN identifier(s): VID To clear the IPv6 interface/icmp statistics for specific VLAN. To clear the Switch s IPv6 interface/icmp statistics for specific VLAN 1. Switch# clear ipv6 statistics icmp interface vlan clear ipv6 statistics system icmp icmp-msg clear ipv6 statistics system icmp icmp-msg <Type : 0~255> <Type : 0~255> ICMP message type ranges from 0 to 255 To clear the IPv6 ICMP statistics for specific ICMP message type. To clear the Switch s IPv6 ICMP statistics for specific ICMP message type 0. Switch# clear ipv6 statistics system icmp icmp-msg 0-36-

37 clear ipv6 statistics system icmp interface vlan clear ipv6 statistics system icmp interface vlan <vlan_list> VLAN identifier(s): VID To clear the IPv6 ICMP interface statistics for specific VLAN. To clear the Switch s IPv6 ICMP interface statistics for specific VLAN 1. Switch# clear ipv6 statistics system icmp interface vlan clear lacp statistics clear lacp statistics To clear the lacp statistics. To clear the Switch s lacp statistics. Switch# clear lacp statistics clear lldp statistics clear lldp statistics -37-

38 To clear the lldp statistics. To clear the Switch s lldp statistics. Switch# clear lldp statistics clear logging error info clear logging error info To clear the logging error info. To clear the Switch s logging error info. Switch# clear logging error info clear logging error warning clear logging error warning To clear the logging error warning. To clear the Switch s logging error warning. Switch# clear logging error warning -38-

39 clear logging info error clear logging info error To clear the logging info error. To clear the Switch s logging info error. Switch# clear logging info error clear logging info warning clear logging info warning To clear the logging info warning. To clear the Switch s logging info warning. Switch# clear logging info warning clear logging warning error clear logging warning error -39-

40 To clear the logging warning error. To clear the Switch s logging warning error. Switch# clear logging warning error clear logging warning info clear logging warning info To clear the logging warning info. To clear the Switch s logging warning info. Switch# clear logging warning info clear mac address-table clear mac address-table To clear the mac address-table. To clear the Switch s mac address-table. Switch# clear mac address-table -40-

41 clear mvr name clear mvr name <MvrName : word16> <MvrName : word16> MVR multicast VLAN name To clear the mvr name profiles clear mvr statistics clear mvr statistics To clear the mvr statistics. To clear the Switch s mvr statistics. Switch# clear mvr statistics clear mvr vlan clear mvr vlan <vlan_list> statistics <vlan_list> MVR multicast VLAN list To clear the mvr vlan statistics for specific VLAN. To clear the Switch s mvr vlan statistics for specific VLAN

42 Switch# clear mvr vlan 1 statistics clear network-clock clk-source clear network-clock clk-source <clk-source : 1-2> <clk-source : 1-2> Clock source number To clear the ERPS WTR timer for a specific profile. To clear the Switch s ERPS WTR timer for a specific profile 1. Switch# clear network-clock clk-source clear spanning-tree detected-protocols interface * clear spanning-tree detected-protocols interface * To clear the spanning-tree detected-protocols for all. To clear the Switch s spanning-tree detected-protocols for all. Switch# clear spanning-tree detected-protocols interface * -42-

43 clear spanning-tree detected-protocols interface * clear spanning-tree detected-protocols interface * To clear the spanning-tree detected-protocols for all. To clear the Switch s spanning-tree detected-protocols for all. Switch# clear spanning-tree detected-protocols interface * clear spanning-tree detected-protocols interface GigabitEthernet clear spanning-tree detected-protocols interface GigabitEthernet <PORT_LIST> <PORT_LIST> Port list in X/X-XX To clear the spanning-tree detected-protocols for specific GigabitEthernet port. To clear the Switch s spanning-tree detected-protocols for specific GigabitEthernet 1/1. Switch# clear spanning-tree detected-protocols interface GigabitEthernet 1/1-43-

44 clear spanning-tree detected-protocols interface 10GigabitEthernet clear spanning-tree detected-protocols interface 10GigabitEthernet <PORT_LIST> <PORT_LIST> Port list in X/X-XX To clear the spanning-tree detected-protocols for specific 10GigabitEthernet port. To clear the Switch s spanning-tree detected-protocols for specific 10GigabitEthernet 1/1. Switch# clear spanning-tree detected-protocols interface 10GigabitEthernet 1/ clear spanning-tree statistics interface * clear spanning-tree statistics interface * To clear the spanning-tree statistics for all. To clear the Switch s spanning-tree statistics for all. Switch# clear spanning-tree statistics interface * clear spanning-tree statistics interface GigabitEthernet clear spanning-tree statistics interface GigabitEthernet <PORT_LIST> <PORT_LIST> Port list in X/X-XX -44-

45 To clear the spanning-tree statistics for specific GigabitEthernet port. To clear the Switch s spanning-tree statistics for specific GigabitEthernet 1/1. Switch# clear spanning-tree statistics interface GigabitEthernet 1/ clear spanning-tree statistics interface 10GigabitEthernet clear spanning-tree statistics interface 10GigabitEthernet <PORT_LIST> <PORT_LIST> Port list in X/X-XX To clear the spanning-tree statistics for specific 10GigabitEthernet port. To clear the Switch s spanning-tree statistics for specific 10GigabitEthernet 1/1. Switch# clear spanning-tree statistics interface 10GigabitEthernet 1/ clear statistics * clear statistics * To clear the statistics for all. To clear the Switch s statistics for all. -45-

46 Switch# clear statistics * clear statistics GigabitEthernet clear statistics GigabitEthernet <PORT_LIST> <PORT_LIST> Port list in X/X-XX To clear the statistics for specific GigabitEthernet port. To clear the Switch s statistics for specific GigabitEthernet 1/1. Switch# clear statistics GigabitEthernet 1/ clear statistics 10GigabitEthernet clear statistics 10GigabitEthernet <PORT_LIST> <PORT_LIST> Port list in X/X-XX To clear the statistics for specific 10GigabitEthernet port. To clear the Switch s statistics for specific 10GigabitEthernet 1/1. Switch# clear statistics 10GigabitEthernet 1/1-46-

47 4.2 configure terminal aaa authentication login console local aaa authentication login console local console : local To authenticate the local account via console only. To authenticate the local account via console. Switch (config)# aaa authentication login console local aaa authentication login console radius aaa authentication login console radius console : local To authenticate the radius account via console only. To authenticate the local and radius account via console. Switch (config)# aaa authentication login console local radius aaa authentication login console tacacs aaa authentication login console tacacs -47-

48 console : local To authenticate the tacacs account via console only. To authenticate the local and radius and tacacs account via console. Switch (config)# aaa authentication login console local radius tacacs aaa authentication login http local aaa authentication login http local http : local To authenticate the local account via http only. To authenticate the local account via http. Switch (config)# aaa authentication login http local aaa authentication login http radius aaa authentication login http radius http : local To authenticate the radius account via http only. -48-

49 To authenticate the local and radius account via http. Switch (config)# aaa authentication login http local radius aaa authentication login http tacacs aaa authentication login http tacacs http : local To authenticate the tacacs account via http only. To authenticate the local and radius and tacacs account via http. Switch (config)# aaa authentication login http local radius tacacs aaa authentication login ssh local aaa authentication login ssh local ssh : local To authenticate the local account via ssh only. To authenticate the local account via ssh. Switch (config)# aaa authentication login ssh local -49-

50 4.2.8 aaa authentication login ssh radius aaa authentication login ssh radius ssh : local To authenticate the radius account via ssh only. To authenticate the local and radius account via ssh. Switch (config)# aaa authentication login ssh local radius aaa authentication login ssh tacacs aaa authentication login ssh tacacs ssh : local To authenticate the tacacs account via ssh only. To authenticate the local and radius and tacacs account via console. Switch (config)# aaa authentication login ssh local radius tacacs aaa authentication login telnet local aaa authentication login telnet local -50-

51 telnet : local To authenticate the local account via telnet only. To authenticate the local account via telnet. Switch (config)# aaa authentication login telnet local aaa authentication login telnet radius aaa authentication login telnet radius telnet : local To authenticate the radius account via telnet only. To authenticate the local and radius account via telnet. Switch (config)# aaa authentication login telnet local radius aaa authentication login telnet tacacs aaa authentication login telnet tacacs telnet : local To authenticate the tacacs account via telnet only. To authenticate the local and radius and tacacs account via telnet. -51-

52 Switch (config)# aaa authentication login telnet local radius tacacs access management access management <AccessId : 1-16> <AccessVid : > <AddrRangeStart : ipv4_addr ipv6_addr> all snmp telnet to Web <AccessId : 1-16> <AccessVid : > ID of access management entry The VLAN ID for the access management entry <AddrRangeStart : ipv4_addr> <AddrRangeStart : ipv6_addr> Start IPv4 address Start IPv6 address all snmp telnet to web All services SNMP service TELNET/SSH service End address of the range Web service access management : disable To enable the access management profile to allow SNMP / Telnet / HTTP services. To create a Profile 1 enabling all services for VLAN 1 (IPv6 address 2001::7788). Switch (config)# access management ::7788 all access-list ace access-list ace <AceId : 1-512> action {deny, permit} dmac-type {any, broadcast, multicast, unicast} frametype {any, arp, etype, ipv4, ipv4-icmp, ipv4-tcp, ipv4-udp, ipv6, ipv6-icmp, ipv6-tcp, ipv6-udp} ingress {any, interface 10GigabitEthernet -52-

53 GigabitEthernet <PORT_ID>} logging {disable, next, policy, rate-limiter, shutdown, tag-priority, vid} next {<AceId : 1-512>, last} policy <PolicyId : 0-255> rate-limiter {<RateLimiterId : 1-16>, disable} redirect {disable, interface 10GigabitEthernet GigabitEthernet <PORT_ID>} tag-priority {0-1, 0-3, 2-3, 4-5, 4-7, 6-7, <TagPriority : 0-7>, any} vid {<Vid : >, any} <AceId : 1-512> action dmac-type frametype ingress logging ACE ID Access list action The type of destination MAC address Frame type Ingress Logging frame information. Note: The logging feature only works when the packet length is less than 1518 (without VLAN tags) and the System Log memory size and logging rate are limited. next policy rate-limiter redirect shutdown Insert the current ACE before the next ACE ID Policy Rate limiter Redirect frame to specific port Shutdown incoming port. The shutdown feature only works when the packet length is less than 1518 (without VLAN tags). tag-priority vid Tag priority VID field To create and set up a profile for the access list. To set a Profile 1 up (action: permit, dmac-type: unicast, frametype: ipv4-icmp, ingress: any, logging: disable, policy: 1, rate-limiter: 1, tag-priority: 1. vid: 1). Switch (config)# access-list ace 1 action permit dmac-type unicast frametype ipv4-icmp ingress any logging disable policy 1 rate-limiter 1 tag-priority 1 vid 1-53-

54 access-list ace update access-list ace update <AceId : 1-512> action {deny, permit} dmac-type {any, broadcast, multicast, unicast} frametype {any, arp, etype, ipv4, ipv4-icmp, ipv4-tcp, ipv4-udp, ipv6, ipv6-icmp, ipv6-tcp, ipv6-udp} ingress {any, interface 10GigabitEthernet GigabitEthernet <PORT_ID>} logging {disable, next, policy, rate-limiter, shutdown, tag-priority, vid} next {<AceId : 1-512>, last} policy <PolicyId : 0-255> rate-limiter {<RateLimiterId : 1-16>, disable} redirect {disable, interface 10GigabitEthernet GigabitEthernet <PORT_ID>} tag-priority {0-1, 0-3, 2-3, 4-5, 4-7, 6-7, <TagPriority : 0-7>, any} vid {<Vid : >, any} <AceId : 1-512> action dmac-type frametype ingress logging ACE ID Access list action The type of destination MAC address Frame type Ingress Logging frame information. Note: The logging feature only works when the packet length is less than 1518 (without VLAN tags) and the System Log memory size and logging rate are limited. next policy rate-limiter redirect shutdown Insert the current ACE before the next ACE ID Policy Rate limiter Redirect frame to specific port Shutdown incoming port. The shutdown feature only works when the packet length is less than 1518 (without VLAN tags). tag-priority vid Tag priority VID field To update the specific profile for the access list. Original: Profile 1 (action: permit, dmac-type: unicast, frametype: ipv4-icmp, ingress: any, logging: disable, policy: 1, rate-limiter: 1, tag-priority: 1. vid: 1). Updated: -54-

55 Profile 1 (action: deny, dmac-type: any, frametype: ipv4-icmp, ingress: any, logging: disable, policy: 1, rate-limiter: 1, tag-priority: 1. vid: 1). Switch (config)# access-list ace update 1 action deny dmac-type any access-list rate-limiter access-list rate-limiter <RateLimiterList : 1~16> pps <PpsRate : > <RateLimiterList : 1~16> <PpsRate : > Rate limiter ID Rate value 0 To set pps rate for specific rate-limiter ID. To set pps rate(10000 pps) for specific rate-limiter ID 1. Switch (config)# access-list rate-limiter 1 pps access-list rate-limiter pps access-list rate-limiter pps <PpsRate : > <PpsRate : > Rate value 0 To set pps rate for all rate-limiter ID. To set pps rate(10000 pps) for all rate-limiter ID. -55-

56 Switch (config)# access-list rate-limiter pps aggregation mode aggregation mode dmac ip port smac dmac ip port smac Destination MAC affects the distribution IP address affects the distribution IP port affects the distribution Source MAC affects the distribution SMAC : Enabled DMAC : Disabled IP : Enabled Port : Enabled To configure static aggregation mode type. To configure static aggregation mode type with Destination MAC affects the distribution and Source MAC affects the distribution only. Switch (config)# access-list rate-limiter pps aggregation mode aggregation mode dmac ip port smac dmac ip port smac Destination MAC affects the distribution IP address affects the distribution IP port affects the distribution Source MAC affects the distribution -56-

57 SMAC : Enabled DMAC : Disabled IP : Enabled Port : Enabled To configure static aggregation mode type. To configure static aggregation mode type with Destination MAC affects the distribution and Source MAC affects the distribution only. Switch (config)# access-list rate-limiter pps banner banner <LINE> <LINE> c banner-text c, where 'c' is a delimiting character To configure banner-text. To configure banner-text with word ddddd. Switch (config)# banner 1 Enter TEXT message. End with the character '1'. ddddd 1 Telnet ddddd Username: -57-

58 banner exec banner login <LINE> <LINE> c banner-text c, where 'c' is a delimiting character To configure login banner-text. To configure login banner-text with word wwwwwwwwww. Switch (config)# banner exec 1 Enter TEXT message. End with the character '1'. gggggg 1 Telnet : Username: admin Password: gggggg # banner login banner login <LINE> <LINE> c banner-text c, where 'c' is a delimiting character To configure login banner-text. -58-

59 To configure login banner-text with word wwwwwwwwww. Switch (config)# banner login 1 Enter TEXT message. End with the character '1'. wwwwwwwwww 1 Console: Press ENTER to get started wwwwwwwwww Username: admin Password: banner motd banner motd <LINE> <LINE> c banner-text c, where 'c' is a delimiting character To configure motd banner-text. To configure motd banner-text with word ffffff. Switch (config)# banner motd 1 Enter TEXT message. End with the character '1'. ffffff 1 Console: -59-

60 ffffff Press ENTER to get started Username: clock summer-time clock summer-time <WORD> date <Monthstart: 1-12> <Daystart: 1-31> <Yearstart: 1-12> <Timestart: hh:mm > <Monthend: 1-12> <Dayend: 1-31> <Yearend: 1-12> <Timeend: hh:mm > <Offset minutes: > To set daylight saving. To set daylight saving (Started time: Feb, :8AM, End time: Dec, :8AM, Offset time: 60 minutes). Switch (config)# clock summer-time 1 date : : clock timezone clock timezone <WORD> <timezone: > <WORD> name of time zone 0 To set timezone. -60-

61 To set timezone (GMT -15) with profile 1. Switch (config)# clock timezone default access-list rate-limiter default access-list rate-limiter <RateLimiterId : 1-16> <RateLimiterId : 1-16> Rate limiter ID 0 To default the Rate limiter. To default the Rate limiter ID 1. Switch (config)# default access-list rate-limiter dot1x authentication timer inactivity dot1x authentication timer inactivity < > Aging period: 300 To set the Aging period for Network Access Server. To set the Aging period (147 seconds). -61-

62 Switch (config)# dot1x authentication timer inactivity dot1x authentication timer re-authenticate dot1x authentication timer re-authenticate <1-3600> Re-authenticated Period: 3600 To set the Re-authenticated Period for Network Access Server. To set the Re-authenticated Period (777 seconds). Switch (config)# dot1x authentication timer re-authenticate dot1x feature dot1x feature guest-vlan radius-qos radius-vlan Disable To enable the guest-vlan, radius-qos, radius-vlan for Network Access Server To enable the guest-vlan, radius-qos, radius-vlan for Network Access Server. Switch (config)# dot1x authentication timer re-authenticate

63 dot1x guest-vlan dot1x guest-vlan <1-4095> <1-4095> Guest VLAN ID used when entering the Guest VLAN. 1 To set the value of guest-vlan for Network Access Server To set the value of guest-vlan(2) for Network Access Server Switch (config)# dot1x guest-vlan dot1x guest-vlan supplicant dot1x guest-vlan supplicant supplicant The switch remembers if an EAPOL frame has been received on the port for the life-time of the port. Once the switch considers whether to enter the Guest VLAN, it will first check if this option is enabled or disabled. Disable To allow all frames automatically entering guest-vlan for Network Access Server To allow all frames automatically entering guest-vlan for Network Access Server Switch (config)# dot1x guest-vlan supplicant -63-

64 dot1x max-reauth-req dot1x max-reauth-req <1-255> 2 To define 802.1X re-authentication frequency for Network Access Server To define 802.1X re-authentication frequency with 78 times for Network Access Server Switch (config)# dot1x max-reauth-req dot1x system-auth-control dot1x system-auth-control Disable To enable 802.1X service for Network Access Server To enable 802.1X service for Network Access Server Switch (config)# dot1x system-auth-control dot1x timeout quiet-period dot1x timeout quiet-period < > quiet-period Time in seconds before a MAC-address that failed authentication gets a new authentication chance. -64-

65 10 To configure 802.1X hold time for Network Access Server To configure 802.1X hold time(12 seconds) for Network Access Server Switch (config)# dot1x timeout quiet-period dot1x timeout tx-period dot1x timeout tx-period < > tx-period The time between EAPOL retransmissions. 30 To configure 802.1X EPOAL timeout for Network Access Server To configure 802.1X EPOAL timeout (45 seconds) for Network Access Server Switch (config)# dot1x timeout tx-period enable password enable password <WORD> <WORD> The UNENCRYPTED (cleartext) password. Disable To configure enable password for user -65-

66 To configure enable password(admin) for user Switch (config)# enable password admin Press ENTER to get started Username: Password: > enable Password: ***** # enable password level enable password level <1-15> <WORD> <1-15> Level number <WORD> The UNENCRYPTED (cleartext) password. Disable To configure enable password and specific level for user To configure enable password(admin) and specific level(15) for user Switch (config)# enable password level 15 admin Press ENTER to get started Username: Password: > enable -66-

67 Password: admin # enable secret enable secret 0 5 level <1-15> <WORD> 0 Specifies an UNENCRYPTED password will follow 5 Specifies an ENCRYPTED secret will follow <1-15> Level number <WORD> The UNENCRYPTED (cleartext) / ENCRYPTED(MD5) password. Disable To configure enable password to encrypted secret in the system configurations and specific level for user To configure enable password(cisco) to encrypted secret in the system configurations and specific level(15) for user Switch (config)# enable secret 0 level 15 cisco # show running-config Building configuration... enable secret 5 level 15 FC89368B9513DE BCE9A1DA90A Press ENTER to get started Username: Password: > enable Password: cisco # -67-

68 end end To level the configure terminal mode To level the configure terminal mode Switch (config)# end # exit exit To exit configure terminal mode. To exit configure terminal mode. Switch (config)# exit # -68-

69 green-ethernet led interval green-ethernet led interval <0~24> intensity <0-100> <0~24> Interval from to (00 is used to start at midnight, while 24 is used to stop at midnight). intensity LEDs intensity. <0-100> Intensity from 0% (LEDs OFF) to 100% To configure LED Power reduction for interval time. To configure LED Power reduction as tabled below. Switch (config)# green-ethernet led interval 8-13 intensity green-ethernet led on-event green-ethernet led on-event error link-change < > error link-change Set LEDs intensity to 100% if an error occurs. Specifies how long to turn LEDs intensity into 100%, when a link changes state. < > Number of seconds to set LEDs intensity at 100% at link change. To configure LED Power on-event to trigger LED light To configure LED Power on-event as tabled below: -69-

70 Switch (config)# green-ethernet led on-event error link-change help help To explain how to use commands. To explain how to use commands. Switch (config)# help Help may be requested at any point in a command by entering a question mark '?'. If nothing matches, the help list will be empty and you must back up until entering a '?' showing the available options. Two styles of help are provided: 1. Full help is available when you are ready to enter a command argument (e.g. 'show?') and describes each possible argument. 2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match the input (e.g. 'show pr?'.) -70-

71 hostname hostname < WORD > < WORD > This system's network name To configure switch s hostname. To configure switch s hostname with planetbestswitch Switch (config)# hostname planetbestswitch planetbestswitch(config)# interface * 10GigabitEthernet GigabitEthernet interface * 10GigabitEthernet <port_type_list> GigabitEthernet <port_type_list> * All switches or All ports GigabitEthernet 10GigabitEthernet 1 Gigabit Ethernet Port 10 Gigabit Ethernet Port To enter the interface mode. To enter the interface 10GigabitEthernet 1/2 Switch (config)# interface 10GigabitEthernet 1/2 Switch (config-if) # -71-

72 access-list action permit access-list action permit action Access list action Permit To configure Permit for the ACL action. To configure Permit ACL action for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # access-list action permit access-list action deny access-list action deny action Access list action Deny To configure Deny for the ACL action. To configure Deny ACL action for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # access-list action deny -72-

73 access-list logging access-list logging logging Logging frame information. Note: The logging feature only works when the packet length is less than 1518 (without VLAN tags) and the System Log memory size and logging rate is limited. Disable To enable Logging function for the ACL. To enable ACL Logging function for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # access-list logging access-list policy access-list policy <PolicyId : 0-255> policy Policy <PolicyId : 0-255> Policy ID Policy ID: 0 To configure Policy ID for the ACL. To configure ACL Policy ID 1 for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X -73-

74 Switch (config-if) # access-list policy access-list port-state access-list port-state port-state Re-enable shutdown port that was shutdown by access-list module Enable To enable Port-state function for the ACL. To configure ACL Port-state function for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # access-list port-state access-list rate-limiter access-list rate-limiter <RateLimiterId : 1-16> rate-limiter Rate limiter <RateLimiterId : 1-16> Rate limiter ID Disable To apply Rate Limiter ID for the ACL. To apply ACL Rate Limiter ID 1 for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X -74-

75 Switch (config-if) # access-list rate-limiter access-list redirect interface access-list redirect interface 10GigabitEthernet <port_type_list> GigabitEthernet <port_type_list> redirect Redirect frame to specific port Disable To redirect frames to specific Port. To redirect GigabitEthernet X/X frames to GigabitEthernet 1/2. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # access-list redirect interface GigabitEthernet 1/ access-list shutdown access-list shutdown shutdown Shut down incoming port. The shutdown feature only works when the packet length is less than 1518 (without VLAN tags). Disable To enable Shutdown function for the ACL. To enable ACL Shutdown function for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X -75-

76 Switch (config-if) # access-list shutdown aggregation group aggregation group <uint> aggregation Create an aggregation group <uint> Create an aggregation group The aggregation group id To configure aggregation group. To configure aggregation group 7 for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # aggregation group description description <string> description <string> Port description specifies a comment or a description of the port to assist the user. (Length: 1-12 characters) To configure port description. To configure port description (IPTV_Port) for the GigabitEthernet X/X. -76-

77 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # description IPTV_Port do do < exec commands > do To run exec commands in config mode To run exec commands in configure terminal mode To run show aaa in configure terminal mode. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # do show aaa console : local telnet : local ssh http : local : local dot1x guest-vlan dot1x guest-vlan dot1x guest-vlan IEEE Standard for port-based Network Access Control Enables/disables guest VLAN Disable To enable Guest VLAN To enable Guest VLAN for GigabitEthernet X/X. -77-

78 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # dot1x guest-vlan dot1x port-control dot1x port-control auto force-authorized force-unauthorized mac-based multi single dot1x port-control auto force-authorized force-unauthorized mac-based multi single IEEE Standard for port-based Network Access Control Sets the port security state. Port-based 802.1X Authentication Port access is allowed Port access is not allowed Switch authenticates on behalf of the client Multiple Host 802.1X Authentication Single Host 802.1X Authentication Force-authorized To configure Port-control mode for 802.1X To configure Port-Based 802.1X(Auto) mode for GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # dot1x port-control auto dot1x radius-qos dot1x radius-qos dot1x radius-qos IEEE Standard for port-based Network Access Control Enables/disables per-port state of RADIUS-assigned QoS. -78-

79 Disable To enable RADIUS-assigned QoS for 802.1X To enable RADIUS-assigned QoS for GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # dot1x radius-qos dot1x radius-vlan dot1x radius-vlan dot1x radius-vlan IEEE Standard for port-based Network Access Control Enables/disables per-port state of RADIUS-assigned VLAN. Disable To enable RADIUS-assigned VLAN for 802.1X To enable RADIUS-assigned VLAN for GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # dot1x radius-vlan dot1x re-authenticate dot1x re-authenticate dot1x re-authenticate IEEE Standard for port-based Network Access Control Refresh (restart) 802.1X authentication process. -79-

80 To restart 802.1X authentication process. To restart 802.1X authentication process for GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # dot1x re-authenticate duplex duplex auto full half duplex Interface duplex auto full half Auto negotiation of duplex mode. Forced full duplex. Forced half duplex. Auto To configure duplex mode for interface. To configure auto duplex mode for GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # duplex auto end end end Go back to EXEC mode -80-

81 Auto To back to EXEC mode To back to EXEC mode Switch (config)# interface GigabitEthernet X/X Switch (config-if) # end Switch# excessive-restart excessive-restart excessive-restart Restart backoff algorithm after 16 collisions (No excessive-restart means discard frame after 16 collisions) Discard To enable Backoff Algorithm for the specific interface To enable Backoff Algorithm for the GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # excessive-restart exit exit exit Exit from current mode -81-

82 None To exit current mode To exit current mode. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # exit Switch (config)# flowcontrol flowcontrol off on flowcontrol Traffic flow control. off on Disable flow control. Enable flow control. Disable To enable Flow-control for specific interface To enable Flow-control for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # flowcontrol on ip arp inspection check-vlan ip arp inspection check-vlan -82-

83 arp inspection Address Resolution Protocol ARP inspection check-vlan ARP inspection VLAN mode config Disable To configure Check-VLAN mode into ARP inspection for specific interface To configure Check-VLAN mode (Enabled) into ARP inspection for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip arp inspection check-vlan ip arp inspection logging ip arp inspection logging all deny permit arp inspection logging Address Resolution Protocol ARP inspection ARP inspection logging mode config all deny permit log all entries log denied entries log permitted entries None To configure Logging type into ARP inspection for specific interface To configure Logging type (All) into ARP inspection for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip arp inspection logging all -83-

84 ip arp inspection trust ip arp inspection trust arp inspection trust Address Resolution Protocol ARP inspection ARP inspection trust config Trusted To configure Trusted into ARP inspection for specific interface To configure Trusted into ARP inspection for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip arp inspection trust ip dhcp snooping trust ip dhcp snooping trust Trusted To configure Trusted into DHCP Snooping for specific interface To configure Trusted into DHCP Snooping for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip dhcp snooping trust -84-

85 ip igmp snooping filter ip igmp snooping filter <ProfileName : word16> <ProfileName : word16> Profile name in 16 words To apply the IGMP Snooping filter ID for specific interface To apply the IGMP Snooping filter ID 1 for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip igmp snooping filter ip igmp snooping immediate-leave ip igmp snooping immediate-leave Disabled To enable IGMP Snooping Immediate-leave (Fast Leave) for specific interface To enable IGMP Snooping Immediate-leave (Fast Leave) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip igmp snooping immediate-leave ip igmp snooping max-groups -85-

86 ip igmp snooping max-groups <Throttling : 1-10> max-groups <Throttling : 1-10> IGMP group throttling configuration Maximum number of IGMP group registration Unlimited To limit maximum number of IGMP group for specific interface To limit 5 groups of IGMP for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip igmp snooping max-groups ip igmp snooping mrouter ip igmp snooping mrouter [ automatic fix none ] mrouter automatic Multicast router port configuration auto mode fix none fix mode none mode Auto To configure Multicast router port mode for specific interface To configure Multicast router port mode (fix) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip igmp snooping mrouter fix -86-

87 ip verify source ip verify source Disabled To enable IP Source Guard for specific interface To enable IP Source Guard for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip verify source ip verify source limit ip verify source limit <0-2> <0-2> the number of limit Unlimited To limit numbers of Dynamic Client for specific interface To limit 2 numbers of Dynamic Client for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ip verify source limit 2-87-

88 ipv6 mld snooping filter ipv6 mld snooping filter <ProfileName : word16> filter Access control on MLD multicast group registration <ProfileName : word16> Profile name in 16 words To apply the MLD Snooping filter ID for specific interface To apply the MLD Snooping filter ID 1 for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ipv6 mld snooping filter ipv6 mld snooping immediate-leave ipv6 mld snooping immediate-leave Disabled To enable MLD Snooping Immediate-leave (Fast Leave) for specific interface To enable MLD Snooping Immediate-leave (Fast Leave) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ipv6 mld snooping immediate-leave ipv6 mld snooping max-groups -88-

89 ipv6 mld snooping max-groups <Throttling : 1-10> max-groups <Throttling : 1-10> IGMP group throttling configuration Maximum number of IGMP group registration Unlimited To limit maximum number of MLD group for specific interface To limit 5 groups of MLD for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ipv6 mld snooping max-groups ipv6 mld snooping mrouter ipv6 mld snooping mrouter [ automatic fix none] mrouter automatic Multicast router port configuration auto mode fix none fix mode none mode Auto To configure MLD router port mode for specific interface To configure MLD router port mode (fix) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ipv6 mld snooping mrouter fix -89-

90 lacp lacp lacp Enable LACP on this interface Disabled To enable LACP for specific interface To enable LACP for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lacp lacp key lacp key < > auto lacp key Enable LACP on this interface Key of the LACP aggregation < > Key value auto Choose a key based on port speed Auto To configure LACP key for specific interface To configure LACP key (555) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lacp key

91 lacp port-priority lacp port-priority < > lacp port-priority Enable LACP on this interface LACP priority of the port < > Priority value, lower means higher priority To configure LACP port-priority for specific interface To configure LACP port-priority (555) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lacp port-priority lacp role lacp role active passive lacp role active passive Enable LACP on this interface Active / Passive (speak if spoken to) role Transmit LACP BPDUs continously Wait for neighbour LACP BPDUs before transmitting Active To configure LACP role for specific interface To configure LACP role (passive) for GigabitEthernet X/X -91-

92 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lacp role passive lacp timeout lacp timeout fast slow lacp timeout fast slow Enable LACP on this interface The period between BPDU transmissions Transmit BPDU each second (fast timeout) Transmit BPDU each 30th second (slow timeout) Fast To configure LACP timeout type for specific interface To enable LACP timeout type (slow) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lacp timeout slow lldp cdp-aware lldp cdp-aware lldp cdp-aware LLDP configurations Configures if the interface shall be CDP aware (CDP discovery information is added to the LLDP neighbor table) Passive To configure MIB variable retrieve local info or remote info of LLDP for specific interface -92-

93 To configure MIB variable retrieve (local info) of LLDP for GigabitEthernet X/X Command Guide of SGS T2X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp cdp-aware lldp med media-vlan policy-list lldp med media-vlan policy-list <v_range_list> lldp med media-vlan policy-list LLDP configurations Media Endpoint Discovery Media VLAN assignment Assignment of policies <v_range_list> Policies to assign to the interface To apply MED Media-VLAN policy of LLDP for specific interface To apply MED Media-VLAN policy 2 of LLDPfor GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp med media-vlan policy-list lldp med transmit-tlv lldp med transmit-tlv [ capabilities ] [ location ] [ network-policy ] lldp med LLDP configurations Media Endpoint Discovery -93-

94 transmit-tlv capabilities location network-policy LLDP-MED Location Type Length Value parameter. Enable transmission of the optional capabilities TLV. Enable transmission of the optional location TLV. Enable transmission of the optional network-policy TLV. To configure LLDP-MED TLV Type for specific interface To enable LLDP-MED TLV (capabilities and location) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp med transmit-tlv capabilities location lldp receive lldp receive lldp receive LLDP configurations Enable/Disable decoding of received LLDP frames. Both (Tx +Rx) To configure LLDP Rx only mode for specific interface To configure LLDP Rx only mode for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp receive -94-

95 lldp tlv-select management-address lldp tlv-select management-address lldp tlv-select LLDP configurations To transmit which optional TLVs. management-address Enable/Disable transmission of management address. Enabled To enable management address of LLDP TLV for specific interface To enable management address of LLDP TLV for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp tlv-select management-address lldp tlv-select port-description lldp tlv-select port-description lldp tlv-select LLDP configurations To transmit which optional TLVs. port-description Enable/Disable transmission of port description. Enabled To enable port-description of LLDP TLV for specific interface To enable port-description of LLDP TLV for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp tlv-select port-description -95-

96 lldp tlv-select system-capabilities Command Guide of SGS T2X lldp tlv-select system-capabilities lldp tlv-select LLDP configurations To transmit which optional TLVs. system-capabilities Enable/Disable transmission of system capabilities. Enabled To enable system-capabilities of LLDP TLV for specific interface To enable system-capabilities of LLDP TLV for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp tlv-select system-capabilities lldp tlv-select system-description lldp tlv-select system-description lldp tlv-select LLDP configurations To transmit which optional TLVs. system-description Enable/Disable transmission of system description. Enabled To enable system-description of LLDP TLV for specific interface To enable system-description of LLDP TLV for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp tlv-select system-description -96-

97 lldp tlv-select system-name lldp tlv-select system-name lldp tlv-select LLDP configurations To transmit which optional TLVs. system-name Enable/Disable transmission of system name. Enabled To enable system-name of LLDP TLV for specific interface To enable system-name of LLDP TLV for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp tlv-select system-name lldp transmit lldp transmit lldp transmit LLDP configurations Enable/Disabled transmision of LLDP frames. Both (Tx +Rx) To configure LLDP Tx only mode for specific interface To configure LLDP Tx only mode for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # lldp transmit -97-

98 loop-protect loop-protect loop-protect Loop protection configuration Enabled To enable loop-protect for specific interface To enable loop-protect for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # loop-protect loop-protect action loop-protect action [log] [shutdown] loop-protect Loop protection configuration action log shutdown Action if loop detected Generate log Shutdown port Shutdown To configure action mode of Loop protection for specific interface To configure action mode (log and shutdown) of Loop protection for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # loop-protect action shutdown log -98-

99 loop-protect tx-mode loop-protect tx-mode loop-protect tx-mode Loop protection configuration Actively generate PDUs Enabled To enable tx-mode of Loop protection for specific interface To enable tx-mode of Loop protection for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # loop-protect tx-mode loop-protect tx-mode loop-protect tx-mode loop-protect tx-mode Loop protection configuration Actively generate PDUs Enabled To enable tx-mode of Loop protection for specific interface To enable tx-mode of Loop protection for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # loop-protect tx-mode -99-

100 mac address-table learning mac address-table learning [secure] mac address-table MAC keyword MAC table configuration learning secure Port learning mode Port Secure mode Enabled (Auto) To enable learning of MAC address table for specific interface To enable learning of MAC address table for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # mac address-table learning media-type media-type dual rj45 sfp media-type Media type. dual rj45 sfp Dual media interface (copper & fiber interface). rj45 interface (copper interface). sfp interface (fiber interface). To configure Copper or Fiber mode of media type for specific interface To configure Copper mode of media type for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X -100-

101 Switch (config-if) # media-type rj mtu mtu < > mtu Maximum transmission unit < > Maximum frame size in bytes To configure MTU sizes for specific interface To configure MTU sizes (9000) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # mtu mvr immediate-leave mvr immediate-leave mvr immediate-leave Multicast VLAN Registration configuration Immediate leave configuration Disabled To enable Immediate-leave of MVR for specific interface To enable Immediate-leave of MVR for GigabitEthernet X/X -101-

102 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # mvr immediate-leave mvr name mvr name <MvrName : word16> type [receiver source] mvr name <MvrName : word16> Multicast VLAN Registration configuration MVR multicast name MVR multicast VLAN name type receiver source MVR port role configuration MVR receiver port MVR source port Inactive To configure port role of specific MVR profile for specific interface To configure port role (source) of MVR profiles (111) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # mvr name 111 type source mvr vlan mvr vlan <v_vlan_list> type [source receiver ] mvr vlan <vlan_list> Multicast VLAN Registration configuration MVR multicast vlan MVR multicast VLAN list type receiver source MVR port role configuration MVR receiver port MVR source port -102-

103 Inactive To configure port role of specific MVR VLAN ID for specific interface To configure port role (source) of MVR VLAN ID (111) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # mvr name 111 type source network-clock synchronization ssm network-clock synchronization ssm network-clock synchronization network-clock SSM enable/disable. ssm SSM enable/disable. Disable To enable SSM of SyncE for specific interface To enable SSM of SyncE for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # network-clock synchronization ssm no no no Negate a command or set its defaults -103-

104 To default the function for specific interface To enable the function (network-clock synchronization ssm) for GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # no network-clock synchronization ssm ping ip ping ip <ipv4_addr> size <size: > ping The ping command allows you to test connectivity to a network host from the appliance ip ip <ipv4_addr> IP address size size <size: > Default is 56 (excluding MAC, IP and ICMP headers) To run Ping function for specific interface To run Ping function (IP address: with size 88 bytes) for GigabitEthernet X/X. Switch (config)# interface GigabitEthernet X/X Switch (config-if) # ping ip size port-security port-security port-security Enable/disable port security per interface

105 Disabled To enable Port-security for specific interface To enable Port-security for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # port-security port-security maximum port-security maximum <Number of addresses : > port-security maximum Enable/disable port security per interface. Maximum number of MAC addresses that can be learned on this set of interfaces. <Number of addresses : > Number of addresses None To configure number of Port-security addresses for specific interface To configure 100 Port-security addresses for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # port-security maximum port-security violation port-security violation [protect shutdown trap trap-shutdown] port-security Enable/disable port security per interface

106 violation protect shutdown trap The action involved with exceeding the limit. Don't do anything Shut down the port Send an SNMP trap trap-shutdown Send an SNMP trap and shut down the port None (Protected) To configure protected mode of Port-security for specific interface To configure protected mode (trap-shutdown) of Port-security for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # port-security violation trap-shutdown port-security violation port-security violation [protect shutdown trap trap-shutdown] port-security Enable/disable port security per interface. violation protect shutdown trap The action involved with exceeding the limit. Don't do anything Shutdown the port Send an SNMP trap trap-shutdown Send an SNMP trap and shut down the port None (Protected) To configure protected mode of Port-security for specific interface To configure protected mode (trap-shutdown) of Port-security for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # port-security violation trap-shutdown -106-

107 pvlan pvlan <range_list> pvlan <range_list> Private VLAN list of PVLANs. Range is from 1 to number of ports. None To create PVLAN ID for specific interface To create PVLAN ID (5) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # pvlan pvlan isolation pvlan isolation pvlan isolation Private VLAN Port isolation None To enable PVLAN isolation for specific interface To enable PVLAN isolation for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # pvlan isolation -107-

108 qos cos qos cos <Cos : 0-7> qos cos <Cos : 0-7> Quality of Service Class of service configuration Specific class of service 0 To configure CoS of QoS for specific interface To configure CoS (4) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos cos qos dei qos dei <Dei : 0-1> qos dei <Dei : 0-1> Quality of Service Drop Eligible Indicator configuration Specific Drop Eligible Indicator 0 To configure DEI of QoS for specific interface To configure DEI (1) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos dei

109 qos dpl qos dpl <Dei : 0-1> qos dpl <Dpl : dpl> Quality of Service Drop precedence level configuration Specific drop precedence level 0 To configure DPL of QoS for specific interface To configure DPL (1) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos dpl qos dscp-classify qos dscp-classify any selected zero qos dscp-classify Quality of Service DSCP ingress classification any selected Classify to new DSCP always Classify to new DSCP if classify is enabled for specific DSCP value in global dscp-classify map zero Classify to new DSCP if DSCP is 0 Disabled To configure DSCP Classify of QoS for specific interface To configure DSCP Classify (Any) of QoS for GigabitEthernet X/X -109-

110 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos dscp-classify any qos dscp-remark qos dscp-remark remap rewrite qos dscp-remark remap Quality of Service DSCP egress remarking Rewrite DSCP field using classified DSCP remapped through global dscp-egress-translation map rewrite Rewrite DSCP field with classified DSCP value (no translation) Disabled To configure DSCP egress remarking of QoS for specific interface To configure DSCP egress remarking (Remap) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos dscp-remark remap qos dscp-translate qos dscp-translate qos dscp-translate Quality of Service DSCP ingress translation Disabled To configure DSCP ingress translation of QoS for specific interface -110-

111 To configure DSCP ingress translation of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos dscp-translate qos map cos-tag qos map cos-tag cos <Cos : 0~7> dpl <Dpl : 0~1> pcp <Pcp : 0-7> dei <Dei : 0-1> qos map cos-tag cos Quality of Service QoS Map/Table configuration Map for cos to tag configuration Specify class of service <Cos : 0~7> Specific class of service or range dpl Specify drop precedence level <Dpl : 0~1> Specific drop precedence level or range pcp Specify PCP (Priority Code Point) <Pcp : 0-7> Specific PCP dei Specify DEI (Drop Eligible Indicator) <Dei : 0-1> Specific DEI Disabled To configure (QoS class, DP level) to (PCP, DEI) Mapping of QoS for specific interface To configure (QoS class, DP level) to (PCP, DEI) Mapping of QoS as below table for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos map cos-tag cos 1 dpl 1 pcp 6 dei

112 qos map tag-cos qos map tag-cos pcp <Pcp : 0-7> dei <Dei : 0-1> cos <Cos : 0~7> dpl <Dpl : 0~1> qos map tag-cos pcp Quality of Service QoS Map/Table configuration Map for tag to cos configuration Specify PCP (Priority Code Point) <Pcp : 0-7> Specific PCP dei Specify DEI (Drop Eligible Indicator) <Dei : 0-1> Specific DEI cos Specify class of service <Cos : 0~7> Specific class of service or range dpl Specify drop precedence level <Dpl : 0~1> Specific drop precedence level or range Disabled To configure (PCP, DEI) to (QoS class, DP level) Mapping of QoS for specific interface To configure (PCP, DEI) to (QoS class, DP level) Mapping of QoS as below table for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos map tag-cos pcp 4 dei 0 cos 5 dpl qos pcp qos pcp <Pcp : 0-7> qos pcp <Pcp : 0-7> Quality of Service Priority Code Point configuration Specific Priority Code Point -112-

113 0 To configure PCP of QoS for specific interface To configure PCP (6) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos pcp qos policer qos policer <Rate : > qos policer Quality of Service Policer configuration <Rate : > Policer rate (default kbps) 0 To configure Ingress Port Policers Rate of QoS for specific interface To configure Ingress Port Policers Rate (9999 Kbps) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos policer qos queue-policer queue qos queue-policer queue <Queue : 0~7> <Rate : > qos queue-policer Quality of Service Queue policer configuration -113-

114 queue Specify queue <Queue : 0~7> Specific queue or range <Rate : > Policer rate in kbps 0 To configure Ingress Queue Policers Rate of QoS for specific interface To configure Ingress Queue (4) Policers Rate (9999 Kbps) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos queue-policer queue qos queue-shaper queue qos queue-shaper queue <Queue : 0~7> <Rate : > qos queue-shaper Quality of Service Queue shaper configuration queue Specify queue <Queue : 0~7> Specific queue or range <Rate : > Policer rate in kbps 0 To configure Egress Queue Shapers Rate of QoS for specific interface To configure Egress Queue (4) Shapers Rate (9999 Kbps) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos queue-shaper queue

115 qos shaper qos shaper <Rate : > qos shaper Quality of Service Shaper configuration <Rate : > Shaper rate in kbps 0 To configure Egress Port Shapers Rate of QoS for specific interface To configure Egress Port (4) Shapers Rate (9999 Kbps) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos queue-shaper queue qos storm broadcast qos storm broadcast <Rate : > [fps] qos storm broadcast Quality of Service Storm policer Police broadcast frames <Rate : > Policer rate (default kbps) fps Rate is fps 500 To configure Broadcast Frames Storm Control Rate of QoS for specific interface To configure Broadcast Frames Storm Control Rate (999 fps) of QoS for GigabitEthernet X/X -115-

116 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos storm broadcast 999 fps qos storm unicast qos storm unicast <Rate : > [fps] qos storm unicast Quality of Service Storm policer Police unicast frames <Rate : > Policer rate (default kbps) fps Rate is fps 500 To configure Unicast Frames Storm Control Rate of QoS for specific interface To configure Unicast Frames Storm Control Rate (999 Kbps) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos storm unicast qos storm unknown qos storm unknown <Rate : > [fps] qos storm unknown Quality of Service Storm policer Police unknown (flooded) frames <Rate : > Policer rate (default kbps) fps Rate is fps

117 To configure Unknown Frames Storm Control Rate of QoS for specific interface To configure Unknown Frames Storm Control Rate (999 fps) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos storm unicast 999 fps qos tag-remark qos tag-remark pcp <Pcp : 0-7> dei <Dei : 0-1> qos tag-remark pcp Quality of Service Tag remarking configuration Specify default PCP <Pcp : 0-7> Specific PCP dei Specify default DEI <Dei : 0-1> Specific DEI 0 To enable Tag-remark default mode of QoS for specific interface To enable Tag-remark default mode (PCP:1, DEI:1) of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos tag-remark pcp 1 dei qos tag-remark mapped qos tag-remark mapped qos Quality of Service -117-

118 tag-remark mapped Tag remarking configuration Used mapped values (cos,dpl -> pcp,dei) Classified To enable Tag-remark mapped mode of QoS for specific interface To enable Tag-remark mapped mode of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos tag-remark mapped qos trust dscp qos trust dscp qos trust dscp Quality of Service Trust configuration DSCP value Disabled To enable DSCP Classification of QoS for specific interface To enable DSCP Classification of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos trust dscp qos trust tag -118-

119 qos trust tag qos trust tag Quality of Service Trust configuration VLAN tag Disabled To enable VLAN tag Classification of QoS for specific interface To enable VLAN tag Classification of QoS for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # qos trust tag rmon collection history rmon collection history < > buckets < > interval <1-3600> rmon collection history buckets interval Configure Remote Monitoring on an interface Configure Remote Monitoring Collection on an interface Configure history Requested buckets of intervals. Default is 50 buckets Interval to sample data for each bucket. Default is 1800 seconds To configure RMON History Configuration for specific interface To configure RMON History Configuration as below table for GigabitEthernet X/X -119-

120 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # rmon collection history 1 buckets 5 interval rmon collection stats rmon collection stats < > rmon collection stats Configure Remote Monitoring on an interface Configure Remote Monitoring Collection on an interface Configure statistics 0 To configure RMON Statistics Configuration for specific interface To configure RMON Statistics Configuration (2) as below table for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # rmon collection stats shutdown shutdown shutdown Shutdown of the interface. No shutdown To shut down specific interface -120-

121 To shut down GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # shutdown spanning-tree spanning-tree spanning-tree Spanning Tree protocol Disabled To enable STP for specific interface To enable STP for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree spanning-tree auto-edge spanning-tree auto-edge spanning-tree auto-edge Spanning Tree protocol Auto detects edge status Enabled To enable Auto Edge of CIST Normal Port Configuration for specific interface -121-

122 To enable Auto Edge of CIST Normal Port Configuration for GigabitEthernet X/X Command Guide of SGS T2X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree auto-edge spanning-tree bpdu-guard spanning-tree bpdu-guard spanning-tree auto-edge Spanning Tree protocol Auto detects edge status Disabled To enable BPDU Guard of CIST Normal Port Configuration for specific interface To enable BPDU Guard of CIST Normal Port Configuration for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree bpdu-guard spanning-tree edge spanning-tree edge spanning-tree edge Spanning Tree protocol Edge port Non-Edge To enable edge port of CIST Normal Port Configuration for specific interface -122-

123 To enable edge port of CIST Normal Port Configuration for GigabitEthernet X/X Command Guide of SGS T2X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree edge spanning-tree link-type spanning-tree link-type auto point-to-point shared spanning-tree link-type auto point-to-point shared Spanning Tree protocol Port link-type Auto detect Forced to point-to-point Forced to Shared Auto To configure point to point mode of CIST Normal Port Configuration for specific interface To enable point to point mode (shared) of CIST Normal Port Configuration for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree edge spanning-tree mst <Instance : 0-7> cost spanning-tree mst <Instance : 0-7> cost <Cost : > auto spanning-tree mst <Instance : 0-7> cost Spanning Tree protocol STP bridge instance instance 0-7 (CIST=0, MST2=1...) STP Cost of this port <Cost : > Cost range -123-

124 auto Use auto cost Auto To configure Path Cost of CIST / MST Normal Port Configuration for specific interface To enable Path Cost (100) of CIST / MST Normal Port Configuration (CIST) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree mst 0 cost spanning-tree mst <Instance : 0-7> cost spanning-tree mst <Instance : 0-7> port-priority <Prio : 0-240> spanning-tree mst <Instance : 0-7> port-priority <Prio : 0-240> auto Spanning Tree protocol STP bridge instance instance 0-7 (CIST=0, MST2=1...) STP priority of this port Range (lower higher priority) Use auto cost Auto To configure Path Cost of CIST / MST Normal Port Configuration for specific interface To enable Path Cost (32) of CIST / MST Normal Port Configuration (CIST) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree mst 0 port-priority

125 spanning-tree restricted-role spanning-tree restricted-role spanning-tree restricted-role Spanning Tree protocol Port role is restricted (never root port) Disabled To enable Restricted-role of CIST Normal Port Configuration for specific interface To enable Restricted-role of CIST Normal Port Configuration for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree restricted-role spanning-tree restricted-tcn spanning-tree restricted-tcn spanning-tree restricted-tcn Spanning Tree protocol Restrict topology change notifications Disabled To enable Restrict topology change notifications of CIST Normal Port Configuration for specific interface To enable Restrict topology change notifications of CIST Normal Port Configuration for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # spanning-tree restricted-tcn -125-

126 speed speed [ g auto] speed Configures interface speed. If you use 10, 100, or 1000 keywords with the auto keyword the port will only advertise the specified speeds Mbps Mbps Gbps 10g auto 10Gbps Auto negotiation Auto To configure line speed for specific interface To configure line speed (1Gbps) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # speed switchport access vlan switchport access vlan <vlan_id> switchport access Switching mode characteristics Set access mode characteristics of the interface vlan Set VLAN when interface is in access mode <vlan_id> VLAN ID of the VLAN when this port is in access mode 1 To configure access VLAN ID for specific interface To configure access VLAN ID (5) for GigabitEthernet X/X -126-

127 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport access vlan switchport forbidden vlan add switchport forbidden vlan add <vlan_list> switchport forbidden vlan add <vlan_list> Switching mode characteristics Adds or removes forbidden VLANs from the current list of forbidden VLANs Add or modify VLAN entry in forbidden table. Add to existing list. VLAN IDs 1 To add forbidden VLAN ID for specific interface To add forbidden VLAN ID (5) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport forbidden vlan add switchport forbidden vlan remove switchport forbidden vlan remove <vlan_list> switchport forbidden Switching mode characteristics Adds or removes forbidden VLANs from the current list of forbidden VLANs vlan remove Add or modify VLAN entry in forbidden table. Remove from existing list. <vlan_list> VLAN IDs -127-

128 1 To remove forbidden VLAN ID for specific interface To remove forbidden VLAN ID (5) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport forbidden vlan remove switchport hybrid acceptable-frame-type switchport hybrid acceptable-frame-type all tagged untagged switchport hybrid Switching mode characteristics Change PVID for hybrid port acceptable-frame-type Set acceptable frame type on a port. all tagged untagged Allow all frames Allow only tagged frames Allow only untagged frames All To configure acceptable-frame-type of Hybrid VLAN for specific interface To configure acceptable-frame-type (tagged) of Hybrid VLAN for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport hybrid acceptable-frame-type tagged -128-

129 switchport hybrid allowed vlan switchport hybrid allowed vlan [all none add <vlan_list> remove <vlan_list> except <vlan_list>] switchport hybrid allowed <vlan_list> add all except none remove Switching mode characteristics Change PVID for hybrid port Set allowed VLAN characteristics when interface is in hybrid mode VLAN IDs of the allowed VLANs when this port is in hybrid mode Add VLANs to the current list All VLANs All VLANs except the following No VLANs Remove VLANs from the current list All To configure VLAN list of Hybrid VLAN for specific interface To configure VLAN list (None) of Hybrid VLAN for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport hybrid allowed vlan none switchport hybrid egress-tag switchport hybrid egress-tag [none all all except-native] switchport hybrid egress-tag Switching mode characteristics Change PVID for hybrid port Egress VLAN tagging configuration all none Tag all frames No egress tagging except-native Tag all frames except frames classified to native VLAN of the hybrid port -129-

130 Untagged Port VLAN To configure Egress Tagging VLAN mode for specific interface To configure Egress Tagging VLAN mode (None) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport hybrid egress-tag none switchport hybrid ingress-filtering switchport hybrid ingress-filtering switchport hybrid Switching mode characteristics Change PVID for hybrid port ingress-filtering VLAN Ingress filter configuration Enabled To enable Ingress-filtering with Hybrid VLAN mode for specific interface To enable Ingress-filtering with Hybrid VLAN mode for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport hybrid ingress-filtering switchport hybrid native vlan switchport hybrid native vlan <vlan_id> switchport hybrid Switching mode characteristics Change PVID for hybrid port -130-

131 native vlan Set native VLAN Set native VLAN when interface is in hybrid mode <vlan_id> VLAN ID of the native VLAN when this port is in hybrid mode 1 To configure PVID in Hybrid VLAN mode for specific interface To enable PVID (5) in Hybrid VLAN mode for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport hybrid native vlan switchport hybrid port-type switchport hybrid port-type c-port s-custom-port s-port unaware switchport hybrid port-type c-port Switching mode characteristics Change PVID for hybrid port Set port type Customer port s-custom-port s-port unaware Custom Provider port Provider port Port in not aware of VLAN tags. C-port To configure Port type in Hybrid VLAN mode for specific interface To enable Port type (Unaware) in Hybrid VLAN mode for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport hybrid port-type unaware -131-

132 switchport mode switchport mode c-port s-custom-port s-port unaware switchport mode port-type c-port s-custom-port s-port unaware Switching mode characteristics Set mode of the interface Set port type Customer port Custom Provider port Provider port Port in not aware of VLAN tags. unaware To configure VLAN mode for specific interface To configure VLAN mode (trunk) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport mode trunk switchport vlan ip-subnet switchport vlan ip-subnet id <1-128> <ipv4_subnet> vlan <vlan_id> switchport vlan ip-subnet Switching mode characteristics VLAN commands VCL IP Subnet-based VLAN configuration. id id keyword <1-128> Unique VCE ID for each VCL entry (1-128) <ipv4_subnet> Source IP address and mask (Format: xx.xx.xx.xx/mm.mm.mm.mm). vlan vlan keyword <vlan_id> VLAN ID required for the group to VLAN mapping (Range: ) None -132-

133 To configure IP Subnet-based VLAN for specific interface To configure IP Subnet-based VLAN as below table for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport vlan ip-subnet id / vlan switchport vlan mac switchport vlan mac <mac_ucast> vlan <vlan_id> switchport vlan mac <mac_ucast> Switching mode characteristics VLAN commands MAC-based VLAN commands 48 bit unicast MAC address: xx:xx:xx:xx:xx:xx vlan vlan keyword <vlan_id> VLAN ID required for the group to VLAN mapping (Range: ) None To configure MAC-based VLAN for specific interface To configure MAC-based VLAN as below table for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport vlan mac 00:55:44:33:22:11 vlan

134 switchport vlan mapping switchport vlan mapping <group id : 1-29> switchport vlan mapping Switching mode characteristics VLAN commands Maps an interface to a VLAN translation group. <group id : 1-29> Group id None To configure Group mapping Table for specific interface To configure Group mapping (Group 25) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport vlan mapping switchport vlan protocol group switchport vlan protocol group <word16> vlan <vlan_id> switchport vlan protocol Switching mode characteristics VLAN commands Protocol-based VLAN commands group <word16> Protocol-based VLAN group commands Group Name (Range: 1-16 characters) vlan vlan keyword <vlan_id> VLAN ID required for the group to VLAN mapping (Range: ) None To configure VLAN protocol group for specific interface To configure VLAN protocol group as tabled below for GigabitEthernet X/X -134-

135 Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport vlan protocol group 8081 vlan switchport voice vlan discovery-protocol switchport voice vlan discovery-protocol both lldp oui switchport Switching mode characteristics voice vlan Voice appliance attributes Vlan for voice traffic discovery-protocol Set Voice VLAN port discovery protocol both lldp oui Detect telephony device by OUI address and LLDP Detect telephony device by LLDP Detect telephony device by OUI address OUI To configure Discovery-protocol in the Voice VLAN for specific interface To configure Discovery-protocol (LLDP) in the Voice VLAN for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport voice vlan discovery-protocol lldp switchport voice vlan mode switchport voice vlan mode auto disable force switchport voice Switching mode characteristics Voice appliance attributes vlan Vlan for voice traffic -135-

136 mode auto disable force Set Voice VLAN port mode Enable auto detect mode disjoin Voice VLAN Force to join Voice VLAN Disabled To configure Voice VLAN mode for specific interface To configure Voice VLAN mode (Auto) for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport voice vlan mode auto switchport voice vlan security switchport voice vlan security switchport voice Switching mode characteristics Voice appliance attributes vlan security Vlan for voice traffic Enable Voice VLAN port security mode Disabled To enable Voice VLAN security for specific interface To enable Voice VLAN security for GigabitEthernet X/X Switch (config)# interface GigabitEthernet X/X Switch (config-if) # switchport voice vlan security -136-

137 interface vlan interface vlan <vlan_list> vlan VLAN interface configurations <vlan_list> List of VLAN interface numbers, 1~4095 To enter the VLAN interface mode. To enter the VLAN 1 interface mode Switch (config)# interface vlan 1 Switch (config-if-vlan)# do do < exec commands > do To run exec commands in config mode To run exec commands in configure terminal mode To run show aaa in configure terminal mode. Switch (config)# interface vlan X Switch (config-if-vlan)# do show aaa console : local telnet : local ssh : local -137-

138 http : local end end end Go back to EXEC mode Auto To back to EXEC mode To back to EXEC mode Switch (config)# interface vlan X Switch (config-if-vlan)# end Switch# exit exit exit Exit from current mode None To exit current mode To exit current mode. Switch (config)# interface vlan X -138-

139 Switch (config-if-vlan)# exit Switch (config)# ip address ip address <ipv4_addr> <ipv4_netmask> ip address Interface Internet Protocol config commands Address configuraton <ipv4_addr> <ipv4_netmask> IP address IP netmask None To configure IP address mode for specific VLAN To configure IP address mode ( /24) for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip address ip address dhcp ip address dhcp ip address dhcp Interface Internet Protocol config commands Address configuraton Enable DHCP None To configure IP address mode for specific VLAN -139-

140 To configure IP address mode (DHCP) for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip address dhcp ip address dhcp fallback ip address dhcp fallback <ipv4_addr> <ipv4_netmask> ip address dhcp Interface Internet Protocol config commands Address configuraton Enable DHCP <ipv4_addr> <ipv4_netmask> DHCP fallback address DHCP fallback netmask None To configure DHCP fallback IP address for specific VLAN To configure DHCP fallback IP address ( /24) for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip address dhcp fallback ip dhcp server ip dhcp server ip dhcp server Interface Internet Protocol config commands Configure DHCP server parameters Enable DHCP server per VLAN -140-

141 None To enable IPv4 DHCP Server for specific VLAN To enable IPv4 DHCP Server for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip dhcp server ip igmp snooping ip igmp snooping ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping Snooping IGMP Disabled To enable IGMP snooping for specific VLAN To enable IGMP snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping ip igmp snooping compatibility ip igmp snooping compatibility auto v1 v2 v3-141-

142 ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping compatibility Snooping IGMP Interface compatibility auto v1 v2 v3 Compatible with IGMPv1/IGMPv2/IGMPv3 Forced IGMPv1 Forced IGMPv2 Forced IGMPv3 Auto To configure IGMP snooping version for specific VLAN To configure IGMP snooping V2 for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping compatibility v ip igmp snooping last-member-query-interval ip igmp snooping last-member-query-interval <IpmcLmqi : > ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping Snooping IGMP last-member-query-interval Last Member Query Interval in tenths of seconds <IpmcLmqi : > tenths of seconds 10 To configure Last-member-query-interval of IGMP snooping for specific VLAN To configure Last-member-query-interval (100 seconds) of IGMP snooping for VLAN X -142-

143 Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping last-member-query-interval ip igmp snooping priority ip igmp snooping priority <CosPriority : 0-7> ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping priority Snooping IGMP Interface CoS priority <CosPriority : 0-7> CoS priority ranges from 0 to 7 0 To configure CoS priority of IGMP snooping for specific VLAN To configure CoS priority (5) of IGMP snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping priority ip igmp snooping querier address ip igmp snooping querier address <ipv4_ucast> ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping querier address <ipv4_ucast> Snooping IGMP IGMP Querier configuration IGMP Querier address configuration A valid IPv4 unicast address

144 To configure Querier address of IGMP snooping for specific VLAN To configure Querier address ( ) of IGMP snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping querier address ip igmp snooping querier election ip igmp snooping querier election ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping querier election Snooping IGMP IGMP Querier configuration Act as an IGMP Querier to join Querier-Election Enabled To enable Querier-election of IGMP snooping for specific VLAN To enable Querier-election of IGMP snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping querier election ip igmp snooping query-interval ip igmp snooping query-interval <IpmcQi : > ip igmp Interface Internet Protocol config commands Internet Group Management Protocol -144-

145 snooping Snooping IGMP query-interval <IpmcQi : > Query Interval in seconds seconds 125 To configure Querier-interval of IGMP snooping for specific VLAN To configure Querier-interval (600 seconds) of IGMP snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping query-interval ip igmp snooping query-max-response-time ip igmp snooping query-max-response-time <IpmcQi : > ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping Snooping IGMP query-max-response-time Query Response Interval in tenths of seconds <IpmcQri : > tenths of seconds 125 To configure Querier-interval of IGMP snooping for specific VLAN To configure Querier-interval (60 seconds) of IGMP snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping query-max-response-time

146 ip igmp snooping robustness-variable Command Guide of SGS T2X ip igmp snooping robustness-variable <IpmcRv : 1-255> ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping Snooping IGMP robustness-variable Robustness Variable <IpmcRv : 1-255> Packet loss tolerance count from 1 to To configure Robustness Variable of IGMP snooping for specific VLAN To configure Robustness Variable (88) of IGMP snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping robustness-variable ip igmp snooping unsolicited-report-interval ip igmp snooping unsolicited-report-interval <IpmcUri : > ip igmp Interface Internet Protocol config commands Internet Group Management Protocol snooping Snooping IGMP robustness-variable <IpmcUri : > Robustness Variable seconds 1 To configure Unsolicited-Report-Interval of IGMP snooping for specific VLAN To configure Unsolicited-Report-Interval (99 seconds) of IGMP snooping for VLAN X -146-

147 Switch (config)# interface vlan X Switch (config-if-vlan)# ip igmp snooping unsolicited-report-interval ipv6 address Ipv6 address X:X:X:X::X/<0-128> ipv6 address IPv6 configuration commands Configure the IPv6 address of an interface X:X:X:X::X/<0-128> IPv6 prefix x:x::y/z None To configure IPv6 address for specific VLAN To configure IPv6 address (2001::7788/64) for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 address 2001::7788/ ipv6 mld snooping ipv6 mld snooping ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping Snooping MLD Disabled To enable MLD snooping for specific VLAN To enable MLD snooping for VLAN X -147-

148 Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping ipv6 mld snooping compatibility ipv6 mld snooping compatibility auto v1 v2 ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping compatibility Snooping MLD Interface compatibility auto v1 v2 Compatible with MLDv1/MLDv2 Forced MLDv1 Forced MLDv2 Auto To configure MLD snooping version for specific VLAN To configure MLD snooping V2 for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping compatibility v ipv6 mld snooping last-member-query-interval ipv6 mld snooping last-member-query-interval <IpmcLmqi : > ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping Snooping MLD last-member-query-interval Last Member Query Interval in tenths of seconds <IpmcLmqi : > tenths of seconds -148-

149 10 To configure Last-member-query-interval of MLD snooping for specific VLAN To configure Last-member-query-interval (100 seconds) of MLD snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping last-member-query-interval ipv6 mld snooping priority ipv6 mld snooping priority <CosPriority : 0-7> ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping priority Snooping MLD Interface CoS priority <CosPriority : 0-7> CoS priority ranges from 0 to 7 0 To configure CoS priority of MLD snooping for specific VLAN To configure CoS priority (5) of MLD snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping priority ipv6 mld snooping querier election ipv6 mld snooping querier election -149-

150 ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping querier election Snooping MLD MLD Querier configuration Act as an MLD Querier to join Querier-Election Enabled To enable Querier-election of MLD snooping for specific VLAN To enable Querier-election of MLD snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping querier election ipv6 mld snooping query-interval ipv6 mld snooping query-interval <IpmcQi : > ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping Snooping MLD query-interval <IpmcQi : > Query Interval in seconds seconds 125 To configure Querier-interval of MLD snooping for specific VLAN To configure Querier-interval (600 seconds) of MLD snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping query-interval

151 ipv6 mld snooping query-max-response-time ipv6 mld snooping query-max-response-time <IpmcQi : > ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping Snooping MLD query-max-response-time Query Response Interval in tenths of seconds <IpmcQri : > tenths of seconds 125 To configure Querier-interval of MLD snooping for specific VLAN To configure Querier-interval (60 seconds) of MLD snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping query-max-response-time ipv6 mld snooping robustness-variable ipv6 mld snooping robustness-variable <IpmcRv : 1-255> ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping Snooping MLD robustness-variable Robustness Variable <IpmcRv : 1-255> Packet loss tolerance count from 1 to To configure Robustness Variable of MLD snooping for specific VLAN To configure Robustness Variable (88) of MLD snooping for VLAN X -151-

152 Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping robustness-variable ipv6 mld snooping unsolicited-report-interval ipv6 mld snooping unsolicited-report-interval <IpmcUri : > ipv6 mld IPv6 configuration commands Multicast Listener Discovery snooping Snooping MLD robustness-variable <IpmcUri : > Robustness Variable seconds 1 To configure Unsolicited-Report-Interval of MLD snooping for specific VLAN To configure Unsolicited-Report-Interval (99 seconds) of MLD snooping for VLAN X Switch (config)# interface vlan X Switch (config-if-vlan)# ipv6 mld snooping unsolicited-report-interval no no no Negate a command or set its defaults To default the function for specific interface To disable the function (ip address dhcp) for VLAN X -152-

153 Switch (config)# interface vlan X Switch (config-if-vlan)# no ip address dhcp ip arp inspection ip arp inspection ip arp inspection Internet Protocol Address Resolution Protocol ARP inspection To enable ARP inspection To enable ARP inspection Switch (config)# ip arp inspection ip arp inspection entry interface ip arp inspection entry interface [10GigabitEthernet GigabitEthernet] <vlan_id> <mac_ucast> <ipv4_ucast> ip arp inspection entry interface Internet Protocol Address Resolution Protocol ARP inspection arp inspection entry arp inspection entry interface config GigabitEthernet 10GigabitEthernet 1 Gigabit Ethernet Port 10 Gigabit Ethernet Port <vlan_id> <mac_ucast> <ipv4_ucast> Select a VLAN id to configure Select a MAC address to configure Select an IP Address to configure -153-

154 To configure Static ARP Inspection Table. To configure Static ARP Inspection Table as below table. Switch (config)# ip arp inspection entry interface GigabitEthernet 1/1 1 00:11:22:33:44: ip arp inspection translate ip arp inspection translate ip arp inspection translate Internet Protocol Address Resolution Protocol ARP inspection arp inspection translate all entries To translate dynamic entries into static ARP inspection table. To translate dynamic entries into static ARP inspection table. Switch (config)# ip arp inspection translate ARP Inspection: Translate 1 dynamic entries into static entries

155 ip arp inspection translate interface ip arp inspection translate interface [10GigabitEthernet GigabitEthernet] <vlan_id> <mac_ucast> <ipv4_ucast> ip arp inspection translate interface Internet Protocol Address Resolution Protocol ARP inspection arp inspection translate all entries arp inspection entry interface config GigabitEthernet 10GigabitEthernet 1 Gigabit Ethernet Port 10 Gigabit Ethernet Port <vlan_id> <mac_ucast> <ipv4_ucast> Select a VLAN id to configure Select a MAC address to configure Select an IP Address to configure To translate dynamic entries into static ARP inspection table for specific interface. To translate below dynamic entries into static ARP inspection table for GigabitEthernet 1/1. Switch (config)# ip arp inspection translate interface GigabitEthernet 1/1 1 00:11:22:33:44: ip arp inspection vlan ip arp inspection vlan <vlan_list> logging all deny permit ip arp inspection vlan <vlan_list> Internet Protocol Address Resolution Protocol ARP inspection arp inspection vlan setting arp inspection vlan list -155-

156 logging all deny permit ARP inspection vlan logging mode config log all entries log denied entries log permitted entries To configure VLAN mode of ARP inspection. To configure VLAN mode (VLAN 1, Log type: Permit) of ARP inspection. Switch (config)# ip arp inspection vlan 1 logging permit ip dhcp excluded-address ip dhcp excluded-address <A.B.C.D> ip dhcp Internet Protocol Dynamic Host Configuration Protocol excluded-address Prevent DHCP from assigning certain addresses <A.B.C.D> Low IP address To configure excluded IP range of DHCP Server. To configure excluded IP range ( ~ ) of DHCP Server. Switch (config)# ip dhcp excluded-address

157 ip dhcp pool ip dhcp pool <WORD> ip dhcp pool <WORD> Internet Protocol Dynamic Host Configuration Protocol Configure DHCP address pools Pool name in 32 characters To create a DHCP pool. To create a DHCP pool (Name: planetbestswitch). Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# broadcast broadcast <A.B.C.D> broadcast <A.B.C.D> Broadcast address in use on the client's subnet Broadcast IP address None To configure Broadcast IP address (DHCP option 28) of DHCP Server To configure Broadcast IP address ( ) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# broadcast

158 client-identifier fqdn client-identifier fqdn <LINE> client-identifier fqdn Client identifier FQDN type of client identifier <LINE> FQDN in 128 characters None To configure FQDN of DHCP Server To configure FQDN (123) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# client-identifier fqdn client-identifier mac-address client-identifier mac-address <MAC> client-identifier mac-address Client identifier MAC address type of client identifier <MAC> MAC address of client None To configure Bind IP to MAC of DHCP Server To configure Bind IP to MAC (00:11:22:33:44:55) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# client-identifier mac-address 00:11:22:33:44:

159 client-name client-name client-name Client host name None To configure Client-name of DHCP Server To configure Client-name (555) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# client-name default-router default-router <A.B.C.D> default-router <A.B.C.D> Default routers Router's IP address None To configure Default Gateway of DHCP Server To configure Default Gateway ( ) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# default-router

160 dns-server dns-server <A.B.C.D> dns-server <A.B.C.D> DNS servers Server's IP address None To configure DNS Server of DHCP Server To configure DNS Server ( , ) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# dns-server do do < exec commands > do To run exec commands in config mode To run exec commands To run show aaa. Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# do show aaa console : local telnet : local ssh : local -160-

161 http : local domain-name domain-name <word128> domain-name <word128> Domain name Domain name None To configure Domain Name of DHCP Server To configure Domain Name (planet.com) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# domain-name planet.com end end end Go back to EXEC mode Auto To back to EXEC mode To back to EXEC mode Switch (config)# ip dhcp pool planetbestswitch -161-

162 Switch (config-dhcp-pool)# end Switch# exit exit exit Exit from current mode None To exit current mode To exit current mode. Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# exit Switch (config)# hardware-address hardware-address <MAC> hardware-address Client hardware address <MAC> Client MAC address None To configure MAC address of DHCP Server while the pool is in the host type. To configure MAC address (00:11:22:33:44:55) of DHCP Server for pool planetbestswitch while the pool is in the host type

163 Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# hardware-address 00:11:22:33:44: host host <IP: A.B.C.D> <Subnet: A.B.C.D> host Client IP address and mask <IP: A.B.C.D> Network number <Subnet: A.B.C.D> Network mask in dotted-decimal notation, excluding None To configure Host IP address of DHCP Server. To configure Host IP address ( /24) of DHCP Server for pool planetbestswitch. Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# host lease lease <0-365> <0-23> <0-59> infinite lease Address lease time <0-365> Days <0-23> Hours <0-59> Minutes infinite Infinite lease 1 day -163-

164 To configure Lease Time of DHCP Server. To configure Lease Time (119 minutes) of DHCP Server for pool planetbestswitch. Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# lease netbios-name-server netbios-name-server <A.B.C.D> netbios-name-server NetBIOS (WINS) name servers <A.B.C.D> Server's IP address None To configure NetBIOS Name Server of DHCP Server. To configure NetBIOS Name Server ( ) of DHCP Server for pool planetbestswitch. Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# netbios-name-server netbios-node-type netbios-node-type b-node h-node m-node p-node netbios-node-type NetBIOS node type b-node h-node m-node p-node Broadcast node Hybrid node Mixed node Peer-to-peer node -164-

165 None To configure NetBIOS node type of DHCP Server. To configure NetBIOS node type (B-node) of DHCP Server for pool planetbestswitch. Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# netbios-node-type b-node netbios-scope netbios-scope <LINE> netbios-scope NetBIOS scope <LINE> Netbios scope identifier, in 128 characters None To configure NetBIOS scope of DHCP Server. To configure NetBIOS scope (planet) of DHCP Server for pool planetbestswitch. Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# netbios-scope planet network network <IP: A.B.C.D> <Subnet: A.B.C.D> network <IP: A.B.C.D> Network number and mask Network number <Subnet: A.B.C.D> Network mask in dotted-decimal notation, excluding None -165-

166 To configure Network IP address of DHCP Server. To configure Network IP address ( /24) of DHCP Server for pool planetbestswitch. Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# network nis-domain-name nis-domain-name <word128> nis-domain-name NIS domain name <word128> Domain name None To configure NIS Domain Name of DHCP Server To configure NIS Domain Name (planet.com) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# nis-domain-name planet.com nis-server nis-server <A.B.C.D> nis-server <A.B.C.D> Network information servers Server's IP address None -166-

167 To configure NIS Server of DHCP Server To configure NIS Server ( ) of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# nis-server no no no Negate a command or set its defaults To default the function To disable the function (nis-domain-name planet.com) for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# no nis-domain-name planet.com ntp-server ntp-server <A.B.C.D> ntp-server <A.B.C.D> NTP servers Server's IP address None To configure NTP Server of DHCP Server -167-

168 To configure NTP Server ( ) of DHCP Server for pool planetbestswitch Command Guide of SGS T2X Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# ntp-server vendor vendor class-identifier < 0x > specific-info <HEX-VALUE> vendor Vendor configuration class-identifier Vendor class identifier "<0x >" Class identifier in 64 characters specific-info <HEX-VALUE> Vendor specific information Hex values in 64 octets None To configure Vendor ID and info of DHCP Server To configure Vendor ID and info as below table of DHCP Server for pool planetbestswitch Switch (config)# ip dhcp pool planetbestswitch Switch (config-dhcp-pool)# vendor class-identifier "0x8" specific-info 0x ip dns proxy ip dns proxy ip dns Internet Protocol Domain Name System -168-

169 proxy DNS proxy service Disabled To enable DNS proxy. To enable DNS proxy. Switch (config)# ip dns proxy ip helper-address ip helper-address <Ip : ipv4_ucast> ip Internet Protocol helper-address <Ip : ipv4_ucast> DHCP relay server IP address of the DHCP relay server None To configure IP address of DHCP. To configure IP address ( ) of DHCP. Switch (config)# ip helper-address ip http secure-redirect ip http secure-redirect ip http Internet Protocol Hypertext Transfer Protocol -169-

170 secure-redirect Secure HTTP web redirection Disabled To redirect WebUI from HTTP to HTTPs To redirect WebUI from HTTP to HTTPs Switch (config)# ip http secure-redirect ip http secure-server ip http secure-server ip http Internet Protocol Hypertext Transfer Protocol secure-server Secure HTTP web server Disabled To enable HTTPs WebUI. To enable HTTPs WebUI. Switch (config)# ip http secure-server ip igmp host-proxy ip igmp host-proxy ip Internet Protocol -170-

171 igmp host-proxy Internet Group Management Protocol IGMP proxy configuration Disabled To enable IGMP Proxy To enable IGMP Proxy. Switch (config)# ip igmp host-proxy ip igmp host-proxy leave-proxy ip igmp host-proxy leave-proxy ip igmp host-proxy Internet Protocol Internet Group Management Protocol IGMP proxy configuration leave-proxy IGMP proxy for leave configuration Disabled To enable IGMP leave-proxy To enable IGMP leave-proxy. Switch (config)# ip igmp host-proxy leave-proxy ip igmp snooping -171-

172 ip igmp snooping ip igmp snooping Internet Protocol Internet Group Management Protocol Snooping IGMP Disabled To enable IGMP Snooping. To enable IGMP Snooping. Switch (config)# ip igmp snooping ip igmp snooping vlan ip igmp snooping vlan <vlan_list> ip igmp snooping Internet Protocol Internet Group Management Protocol Snooping IGMP vlan IGMP VLAN <vlan_list> VLAN identifier(s): VID Disabled To enable IGMP Snooping for specific VLAN. To enable IGMP Snooping for VLAN 1. Switch (config)# ip igmp snooping vlan

173 ip igmp ssm-range ip igmp ssm-range <ipv4_mcast> <Ipv4PrefixLength : 4-32> ip igmp ssm-range Internet Protocol Internet Group Management Protocol IPv4 address range of Source Specific Multicast <ipv4_mcast> <vlan_list> Valid IPv4 multicast address VLAN identifier(s): VID <Ipv4PrefixLength : 4-32> Prefix length ranges from 4 to /8 To enable SSM Range of IGMP. To enable SSM Range ( /32) of IGMP. Switch (config)# ip igmp ssm-range ip igmp unknown-flooding ip igmp unknown-flooding ip igmp Internet Protocol Internet Group Management Protocol unknown-flooding Flooding unregistered IPv4 multicast traffic Enabled To flood unregistered IPv4 multicast traffic. To flood unregistered IPv4 multicast traffic

174 Switch (config)# ip igmp unknown-flooding ip name-server ip name-server <ipv4_ucast> ip Internet Protocol name-server <ipv4_ucast> Domain Name System A valid IPv4 unicast address Enabled To configure DNS server IP address. To configure DNS server IP address ( ). Switch (config)# ip name-server ip name-server dhcp ip name-server dhcp ip name-server dhcp Internet Protocol Domain Name System Dynamic Host Configuration Protocol None To configure DNS IP address via DHCP Server. To configure DNS IP address via DHCP Server

175 Switch (config)# ip name-server ip name-server dhcp interface vlan ip name-server dhcp interface vlan <vlan_id> ip Internet Protocol name-server Domain Name System dhcp vlan Dynamic Host Configuration Protocol VLAN Interface <vlan_id> VLAN identifier(s): VID None To configure DNS IP address via specific VLAN DHCP Server. To configure DNS IP address via specific VLAN 5 DHCP Server. Switch (config)# ip name-server dhcp interface vlan ip route ip route <ipv4_addr> <ipv4_netmask> <ipv4_gateway> ip route Internet Protocol Add IP route <ipv4_addr> <ipv4_netmask> <ipv4_gateway> Network Netmask Gateway None To configure static route -175-

176 To configure static route as below table. Switch (config)# ip route ip routing ip routing ip routing Internet Protocol Enable routing for IPv4 and IPv6 None To enable IP routing To enable IP routing Switch (config)# ip routing ip source binding interface ip source binding interface 10GigabitEthernet GigabitEthernet <port_type_id> <ipv4_ucast> <ipv4_netmask> ip source binding Internet Protocol source command ip source binding -176-

177 interface ip source binding entry interface config <ipv4_ucast> <ipv4_netmask> Select an IP Address to configure Select a subnet mask to configure None To enable Static IP Source Guard Table for specific interface To enable Static IP Source Guard Table as below table for GigabitEthernet 1/1 Switch (config)# ip source binding interface GigabitEthernet 1/ ip ssh ip ssh ip ssh Internet Protocol Secure Shell None To enable SSH service To enable SSH service Switch (config)# ip ssh -177-

178 ip verify source ip verify source ip verify source Internet Protocol verify command verify source Disabled To enable IP Source Guard To enable IP Source Guard Switch (config)# ip verify source ip verify source translate ip verify source translate ip verify source translate Internet Protocol verify command verify source ip verify source translate all entries Disabled To translate dynamic entries to IP Source Guard table To translate dynamic entries to IP Source Guard table Switch (config)# ip verify source translate -178-

179 ipmc profile ipmc profile ipmc profile IPv4/IPv6 multicast configuration IPMC profile configuration Disabled To enable IPMC profile To enable IPMC profile Switch (config)# ipmc profile ipmc profile <word16> ipmc profile <word16> ipmc profile <word16> IPv4/IPv6 multicast configuration IPMC profile configuration Profile name Disabled To enter IPMC profile mode To enter IPMC profile mode (planet) Switch (config)# ipmc profile planet Switch (config-ipmc-profile)# -179-

180 default range default range <EntryName : word16> default range Set a command to its defaults A range of IPv4/IPv6 multicast addresses for the profile <EntryName : word16> Range entry name None To default IPMC Profile Rule for specific IPMC Profile To default IPMC Profile Rule (Entry 1) for specific IPMC Profile (planet) Switch (config)# ipmc profile planet Switch (config-ipmc-profile)# default range description description <ProfileDesc : line64> description Additional description about the profile <ProfileDesc : line64> Description for the designated IPMC filtering profile None To configure description for specific IPMC Profile To configure description (999) for specific IPMC Profile (planet) Switch (config)# ipmc profile planet Switch (config-ipmc-profile)# description

181 do do < exec commands > do To run exec commands in config mode To run exec commands To run show aaa. Switch (config)# ipmc profile planet Switch (config-ipmc-profile)# do show aaa console : local telnet : local ssh http : local : local end end end Go back to EXEC mode Auto To back to EXEC mode To back to EXEC mode Switch (config)# ipmc profile planet Switch (config-ipmc-profile)#end -181-

182 Switch# exit exit exit Exit from current mode None To exit current mode To exit current mode. Switch (config)# ipmc profile planet Switch (config-ipmc-profile)# exit Switch (config)# no no no Negate a command or set its defaults To default the function. To enable the function (description 999). Switch (config)# ipmc profile planet -182-

183 Switch (config-ipmc-profile)# no description range range <EntryName : word16> deny permit description Additional description about the profile <EntryName : word16> Range entry name deny permit Deny matching addresses Permit matching addresses Deny To configure action of entry for specific IPMC Profile To configure action (permit) of entry (1) for specific IPMC Profile (planet) Switch (config)# ipmc profile planet Switch (config-ipmc-profile)# range 1 permit ipv6 mld host-proxy ipv6 mld host-proxy ipv6 mld IPv6 configuration commands Multicast Listener Discovery host-proxy MLD proxy configuration Disabled To enable MLD Proxy To enable MLD Proxy

184 Switch (config)# ipv6 mld host-proxy ipv6 mld host-proxy leave-proxy ipv6 mld host-proxy leave-proxy ipv6 mld IPv6 configuration commands Multicast Listener Discovery host-proxy leave-proxy MLD proxy configuration MLD proxy for leave configuration Disabled To enable MLD leave-proxy To enable MLD leave-proxy. Switch (config)# ipv6 mld host-proxy leave-proxy ipv6 mld snooping ipv6 mld snooping ipv6 mld snooping IPv6 configuration commands Multicast Listener Discovery Snooping MLD Disabled To enable MLD Snooping

185 To enable MLD Snooping. Switch (config)# ipv6 mld snooping ipv6 mld snooping vlan ipv6 mld snooping vlan <vlan_list> ipv6 mld snooping IPv6 configuration commands Multicast Listener Discovery Snooping MLD vlan MLD VLAN <vlan_list> VLAN identifier(s): VID Disabled To enable MLD Snooping for specific VLAN. To enable MLD Snooping for VLAN 1. Switch (config)# ipv6 mld snooping vlan ipv6 mld ssm-range ipv6 mld ssm-range <ipv6_mcast> <Ipv6PrefixLength : 8-128> ipv6 mld IPv6 configuration commands Multicast Listener Discovery ssm-range <ipv6_mcast> IPv6 address range of Source Specific Multicast Valid IPv6 multicast address <Ipv6PrefixLength : 8-128> Prefix length ranges from 8 to 128 ff3e:: /

186 To enable SSM Range of MLD. To enable SSM Range (ff3e::7788/128) of MLD. Switch (config)# ipv6 mld ssm-range ff3e:: ipv6 mld unknown-flooding ipv6 mld unknown-flooding ipv6 mld IPv6 configuration commands Multicast Listener Discovery unknown-flooding Flooding unregistered IPv6 multicast traffic Enabled To flood unregistered IPv6 multicast traffic. To flood unregistered IPv6 multicast traffic. Switch (config)# ipv6 mld unknown-flooding ipv6 route Ipv6 route <X:X:X:X::X/<0-128>> {<X:X:X:X::X>, interface vlan <vlan_id> <FE80::X:X:X >} ipv6 route IPv6 configuration commands Add IP route <X:X:X:X::X/<0-128>> IPv6 prefix x:x::y/z <X:X:X:X::X> interface IPv6 unicast address (except link-local address) of next-hop Select an interface to configure vlan VLAN Interface -186-

187 <vlan_id> VLAN identifier(s): VID <FE80::X:X:X> IPv6 link-local address of next-hop None To configure static route for IPv6 Example 1: To configure static route as below table for IPv6. Switch (config)# ipv6 route 2001::7788/ ::1 Example 2: To configure static route as below table for IPv6. Switch (config)# ipv6 route 2001::7788/128 interface vlan 1 fe80:: lacp system-priority lacp system-priority < > lacp LACP settings system-priority System priority < > Priority value, lower means higher priority To configure LACP system-priority. To configure LACP system-priority (99)

188 Switch (config)# lacp system-priority line line { <0~16> console 0 vty <0~15> } line Configure a terminal line <0~16> List of line numbers console vty Console terminal line Virtual terminal To enter line mode To enter line mode (vty 1) Switch (config)# line vty 1 Switch (config-line)# do do < exec commands > do To run exec commands. To run exec commands. To run show aaa

189 Switch (config)# line vty 1 Switch (config-line)# do show aaa console : local telnet : local ssh http : local : local editing editing editing Enable command line editing Enabled To allow user editing command line. To allow user editing command line. Switch (config)# line vty 1 Switch (config-line)# editing end end end Go back to EXEC mode None To back to EXEC mode To back to EXEC mode -189-

190 Switch (config)# line vty 1 Switch (config-line)#end Switch# exec-banner exec-banner exec-banner Enable the display of the EXEC banner Enabled To enable the display of the EXEC banner To enable the display of the EXEC banner Switch (config)# line vty 1 Switch (config-line)# exec-banner exec-timeout exec-timeout <0-1440> exec-timeout Set the EXEC timeout <0-1440> Timeout in minutes To configure EXEC timeout To configure EXEC timeout (10 minutes) -190-

191 Switch (config)# line vty 1 Switch (config-line)# exec-timeout exec-timeout exec-timeout <0-1440> exec-timeout Set the EXEC timeout <0-1440> Timeout in minutes To configure EXEC timeout To configure EXEC timeout (10 minutes) Switch (config)# line vty 1 Switch (config-line)# exec-timeout exit exit exit Exit from current mode None To exit current mode To exit current mode

192 Switch (config)# line vty 1 Switch (config-line)# exit Switch (config)# history size history size <0-32> history size Control the command history function Set history buffer size <0-32> Number of history commands, 0 means disable None To exit current mode To exit current mode. Switch (config)# line vty 1 Switch (config-line)# history size length length <0 or 3-512> length Set number of lines on a screen <0 or 3-512> Number of lines on screen (0 for no pausing) None To configure displayed lines on a screen

193 To configure displayed lines on a screen. Switch (config)# line vty 1 Switch (config-line)# length location location <LINE> location <LINE> Enter terminal location description One text line describing the terminal's location None To configure description of location. To configure description (taiwan) of location. Switch (config)# line vty 1 Switch (config-line)# location taiwan motd-banner motd-banner motd-banner Enable the display of the MOTD banner Enabled To enable MOTD banner. To enable MOTD banner

194 Switch (config)# line vty 1 Switch (config-line)# motd-banner no no no Negate a command or set its defaults To default the function To disable the function (motd-banner) for vty 1 Switch (config)# line vty 1 Switch (config-line)# no motd-banner privilege level privilege level <0-15> privilege level Change privilege level for line Assign default privilege level for line <0-15> Default privilege level for line 15 To configure privilege level To configure privilege level (5) for vty

195 Switch (config)# line vty 1 Switch (config-line)# privilege level width width <0 or > width Set width of the display terminal <0 or > Number of characters on a screen line (0 for unlimited width) 0 To configure width of the display terminal. To configure width (50) of the display terminal for vty 1. Switch (config)# line vty 1 Switch (config-line)# width lldp holdtime lldp holdtime <2-10> lldp holdtime LLDP configurations. Sets LLDP hold time (The neighbor switch will discarded the LLDP information after "hold time" multiplied <2-10> 2-10 seconds with "timer" seconds ). 4 To enable LLDP hold time -195-

196 To enable LLDP hold time (5) Switch (config)# lldp holdtime lldp med datum lldp med datum nad83-mllw nad83-navd88 wgs84 lldp med datum LLDP configurations. Media Endpoint Discovery Datum (geodetic system) type nad83-mllw Mean lower low water datum 1983 nad83-navd88 North American vertical datum 1983 wgs84 World Geodetic System 1984 WGS84 To configure Datum type of LLDP To configure Datum type (nad83-mllw) of LLDP Switch (config)# lldp med datum nad83-mllw lldp med fast lldp med fast <1-10> lldp med fast LLDP configurations. Media Endpoint Discovery Number of times to repeat LLDP frame transmission at fast start

197 4 To configure frame transmission time of LLDP To configure frame transmission time (6) of LLDP Switch (config)# lldp med fast lldp med location-tlv altitude lldp med location-tlv altitude [floors <Meters or floors>] [meters <Meters or floors>] lldp med LLDP configurations. Media Endpoint Discovery location-tlv altitude LLDP-MED Location Type Length Value parameter Altitude parameter floors Specify the altitude in floor. <Meters or floors> Altitude value. meters Specify the altitude in meters. 0 To configure altitude of LLDP-MED To configure altitude (Floors 5) of LLDP-MED Switch (config)# lldp med location-tlv altitude floors lldp med location-tlv elin-addr lldp med location-tlv elin-addr <ELIN number> lldp LLDP configurations

198 med location-tlv elin-addr Media Endpoint Discovery LLDP-MED Location Type Length Value parameter Emergency Location Identification Number, (e.g. E911 and others), such as defined by TIA or NENA. <ELIN number> ELIN value 0 To configure Emergency Location Identification Number of LLDP-MED To configure Emergency Location Identification Number (911) of LLDP-MED Switch (config)# lldp med location-tlv elin-addr lldp med location-tlv latitude lldp med location-tlv latitude north <Degrees> south <Degrees> lldp med location-tlv latitude LLDP configurations. Media Endpoint Discovery LLDP-MED Location Type Length Value parameter Latitude parameter north south Setting latitude direction to north. Setting latitude direction to south <Degrees> Latitude degrees ( ) North, 0 To configure latitude direction of LLDP-MED To configure latitude direction (south, 5) of LLDP-MED Switch (config)# lldp med location-tlv latitude south

199 lldp med location-tlv longitude lldp med location-tlv longitude east <Degrees> west <Degrees> lldp med location-tlv longitude LLDP configurations. Media Endpoint Discovery LLDP-MED Location Type Length Value parameter Longitude parameter east west Setting longitude direction to east. Setting longitude direction to west. <Degrees> Longitude degrees ( ) North, 0 To configure longitude direction of LLDP-MED To configure longitude direction (east, 5) of LLDP-MED Switch (config)# lldp med location-tlv longitude east lldp med media-vlan-policy lldp med media-vlan-policy <Index : 0-31> {guest-voice guest-voice-signaling softphone-voice streaming-video video-conferencing video-signaling voice voice-signaling} {tagged untagged} <vlan_id> dscp <0-63> l2-priority <0-7> lldp med LLDP configurations. Media Endpoint Discovery media-vlan-policy <Index : 0-31> guest-voice Use the media-vlan-policy to create a policy, which can be assigned to an interface. Policy id for the policy which is created. Create a guest voice policy. guest-voice-signaling softphone-voice streaming-video video-conferencing video-signaling Create a guest voice signaling policy. Create a softphone voice policy. Create a streaming video policy. Create a video conferencing policy. Create a video signaling policy

200 voice voice-signaling Create a voice policy. Create a voice signaling policy. tagged untagged <vlan_id> dscp The policy uses tagged frames. The policy uses un-tagged frames. The VLAN the policy uses tagged frames. Differentiated Services Code Point. <0-63> DSCP value 0-63 l2-priority Layer 2 priority. <0-7> Priority To configure media-vlan-policy of LLDP-MED To configure media-vlan-policy as below table of LLDP-MED Switch (config)# lldp med media-vlan-policy 1 guest-voice tagged 1 dscp 45 l2-priority lldp reinit lldp reinit <1-10> lldp reinit LLDP configurations. LLDP tx reinitialization delay in seconds <1-10> 1-10 seconds. 2 To configure Tx re-initialization delay time of LLDP To configure Tx re-initialization delay time (5) of LLDP -200-

201 Switch (config)# lldp reinit lldp timer lldp timer < > lldp timer LLDP configurations. Sets LLDP TX interval (The time between each LLDP frame transmitted in seconds) < > seconds. 30 To configure Tx interval time of LLDP To configure Tx interval time (555) of LLDP Switch (config)# lldp timer lldp transmission-delay lldp transmission-delay <1-8192> lldp LLDP configurations. transmission-delay Sets LLDP transmision-delay. LLDP transmission delay (the amount of time that the <1-8192> seconds. transmission of LLDP frames will delayed after LLDP configuration has changed) in seconds.) 2 To configure Tx transmission-delay time of LLDP To configure Tx transmission-delay time (88) of LLDP -201-

202 Switch (config)# lldp transmission-delay logging host logging host <hostname> <ipv4_ucast> logging Syslog host host <hostname> <ipv4_ucast> Domain name of the log server IP address of the log server 0 To configure address of log server To configure address of log server Switch (config)# logging host logging level logging level error info warning logging Syslog level error info warning level Error Information Warning Info -202-

203 To configure level of log server To configure level of log server Switch (config)# logging level error logging on logging on logging on Syslog Enable syslog server Disabled To enable log server To enable log server Switch (config)# logging on loop-protect loop-protect loop-protect Loop protection configuration Disabled To enable Loop Protection To enable Loop Protection -203-

204 Switch (config)# loop-protect loop-protect shutdown-time loop-protect shutdown-time < > loop-protect shutdown-time Loop protection configuration Loop protection shutdown time interval < > Shutdown time in second 180 To configure shutdown time interval of Loop Protection To configure shutdown time interval (888) of Loop Protection Switch (config)# loop-protect shutdown-time loop-protect transmit-time loop-protect transmit-time <0-10> loop-protect transmit-time Loop protection configuration Loop protection transmit time interval <1-10> Transmit time in second 5 To configure Transmission Time of Loop Protection To configure Transmission Time (8) of Loop Protection -204-

205 Switch (config)# loop-protect transmit-time mac address-table aging-time mac address-table aging-time <0, > mac MAC table entries/configuration address-table MAC table entries/configuration <0, > Aging time in seconds, 0 disables aging 300 To configure Aging Time of MAC Address Table To configure Aging Time (888) of MAC Address Table Switch (config)# mac address-table aging-time mac address-table static mac address-table static <mac_addr> vlan <vlan_id> interface * 10GigabitEthernet <port_type_list> GigabitEthernet <port_type_list> mac MAC table entries/configuration address-table MAC table entries/configuration static <mac_addr> Static MAC address 48 bit MAC address: xx:xx:xx:xx:xx:xx vlan VLAN keyword <vlan_id> VLAN IDs interface Select an interface to configure * All switches or All ports GigabitEthernet 1 Gigabit Ethernet Port -205-

206 10GigabitEthernet 10 Gigabit Ethernet Port 300 To configure Static MAC Address Table To configure Static MAC Address Table as below table Switch (config)# mac address-table static 00:11:22:33:44:55 vlan 1 interface GigabitEthernet 1/ monitor destination monitor destination interface 10GigabitEthernet <port_type_list> GigabitEthernet <port_type_list> monitor destination Set monitor configuration The destination port. That is the port that trafficed should be mirrored to Disabled To configure Mirroring Port To set Mirroring Port (GigabitEthernet 1/2) Switch (config)# monitor destination interface GigabitEthernet 1/ monitor source -206-

207 monitor source interface * 10GigabitEthernet <port_type_list> GigabitEthernet <port_type_list> { both rx tx } monitor source Set monitor configuration The source port(s). That is the ports to be mirrored to the destination port. Disabled To configure Mirrored Port To set Mirrored Port (GigabitEthernet 1/1, Tx + Rx) Switch (config)# monitor source interface GigabitEthernet 1/1 both mvr mvr mvr Multicast VLAN Registration configuration Disabled To enable MVR To enable MVR Switch (config)# mvr mvr name <mvr_name> channel mvr name <mvr_name> channel <ProfileName : word16> -207-

208 mvr name Multicast VLAN Registration configuration MVR multicast name <MvrName : word16> MVR multicast VLAN name channel MVR channel configuration <ProfileName : word16> Profile name None To configure channel interface of MVR profile To configure channel interface (1) of MVR profile (123) Switch (config)# mvr name 123 channel mvr name <mvr_name> frame priority mvr name <mvr_name> frame priority <CosPriority : 0-7> mvr name Multicast VLAN Registration configuration MVR multicast name <MvrName : word16> MVR multicast VLAN name frame priority MVR control frame in TX Interface CoS priority <CosPriority : 0-7> CoS priority ranges from 0 to 7 0 To configure frame priority of MVR profile To configure frame priority (5) of MVR profile (123) Switch (config)# mvr name 123 frame priority

209 mvr name <mvr_name> frame tagged Command Guide of SGS T2X mvr name <mvr_name> frame tagged mvr name Multicast VLAN Registration configuration MVR multicast name <MvrName : word16> MVR multicast VLAN name frame tagged MVR control frame in TX Tagged IGMP/MLD frames will be sent None To configure frame tagged of MVR profile To configure frame tagged (frame tagged) of MVR profile (123) Switch (config)# mvr name 123 frame tagged mvr name <mvr_name> igmp-address mvr name <mvr_name> igmp-address <ipv4_ucast> mvr name Multicast VLAN Registration configuration MVR multicast name <MvrName : word16> MVR multicast VLAN name igmp-address <ipv4_ucast> MVR address configuration used in IGMP A valid IPv4 unicast address To configure the MVR address of MVR profile To configure the MVR address ( ) of MVR profile (123) -209-

210 Switch (config)# mvr name 123 igmp-address mvr name <mvr_name> last-member-query-interval mvr name <mvr_name> last-member-query-interval <IpmcLmqi : > mvr name Multicast VLAN Registration configuration MVR multicast name <MvrName : word16> MVR multicast VLAN name last-member-query-interval Last Member Query Interval in tenths of seconds <IpmcLmqi : > tenths of seconds 5 To configure the Last Member Query Interval of MVR profile To configure the Last Member Query Interval (50 seconds) of MVR profile (123) Switch (config)# mvr name 123 last-member-query-interval mvr name <mvr_name> mode mvr name <mvr_name> mode { compatible dynamic } mvr name Multicast VLAN Registration configuration MVR multicast name <MvrName : word16> MVR multicast VLAN name mode MVR mode of operation compatible dynamic Compatible MVR operation mode Dynamic MVR operation mode Dynamic -210-

211 To configure the mode of MVR profile To configure the mode (compatible) of MVR profile (123) Switch (config)# mvr name 123 mode compatible mvr vlan <vlan_list> mvr vlan <vlan_list> mvr vlan Multicast VLAN Registration configuration MVR multicast vlan <vlan_list> MVR multicast VLAN list None To create a profile of MVR VLAN To create a profile of MVR VLAN (5) Switch (config)# mvr vlan mvr vlan <vlan_list> channel mvr vlan <vlan_list> channel <ProfileName : word16> mvr vlan Multicast VLAN Registration configuration MVR multicast vlan <vlan_list> channel MVR multicast VLAN list MVR channel configuration <ProfileName : word16> Profile name -211-

212 0 To configure the channel of MVR profile To configure the channel (1) of MVR VLAN (5) Switch (config)# mvr vlan 5 channel mvr vlan <vlan_list> frame priority mvr vlan <vlan_list> frame priority <CosPriority : 0-7> mvr vlan Multicast VLAN Registration configuration MVR multicast vlan <vlan_list> frame priority MVR multicast VLAN list MVR control frame in TX Interface CoS priority <CosPriority : 0-7> CoS priority ranges from 0 to 7 0 To configure the frame priority of MVR VLAN To configure the frame priority (5) of MVR VLAN (123) Switch (config)# mvr vlan 123 frame priority mvr vlan <vlan_list> tagged mvr vlan <vlan_list> tagged mvr vlan Multicast VLAN Registration configuration MVR multicast vlan -212-

213 <vlan_list> tagged MVR multicast VLAN list Tagged IGMP/MLD frames will be sent Enabled To enable the IGMP/MLD frame tagged of MVR VLAN To enable the IGMP/MLD frame tagged of MVR VLAN (123) Switch (config)# mvr vlan 123 tagged mvr vlan <vlan_list> igmp-address mvr vlan <vlan_list> igmp-address <ipv4_ucast> mvr vlan Multicast VLAN Registration configuration MVR multicast vlan <vlan_list> igmp-address <ipv4_ucast> MVR multicast VLAN list MVR address configuration used in IGMP A valid IPv4 unicast address To configure the MVR address of MVR VLAN To configure the MVR address ( ) of of MVR VLAN (123) Switch (config)# mvr vlan 123 igmp-address mvr vlan <vlan_list> last-member-query-interval -213-

214 mvr vlan <vlan_list> last-member-query-interval <IpmcLmqi : > mvr vlan Multicast VLAN Registration configuration MVR multicast vlan <vlan_list> MVR multicast VLAN list last-member-query-interval Last Member Query Interval in tenths of seconds <IpmcLmqi : > tenths of seconds 5 To configure the Last Member Query Interval of MVR VLAN To configure the Last Member Query Interval (50 seconds) of MVR VLAN (123) Switch (config)# mvr vlan 123 last-member-query-interval mvr vlan <vlan_list> mode mvr vlan <vlan_list> mode [ compatible dynamic ] mvr vlan Multicast VLAN Registration configuration MVR multicast vlan <vlan_list> MVR multicast VLAN list mode MVR mode of operation compatible dynamic Compatible MVR operation mode Dynamic MVR operation mode Dynamic To configure the mode of MVR VLAN To configure the mode (compatible) of MVR VLAN (123) Switch (config)# mvr vlan 123 mode compatible -214-

215 mvr vlan <vlan_list> name mvr vlan <vlan_list> name mvr vlan Multicast VLAN Registration configuration MVR multicast vlan <vlan_list> MVR multicast VLAN list name MVR multicast name None To configure profile name of MVR VLAN To configure profile name (6) of MVR VLAN (5) Switch (config)# mvr vlan 5 name network-clock clk-source <clk-source> aneg-mode network-clock clk-source <clk-source> aneg-mode { master slave forced } network-clock clk-source <clk-source : 1-2> aneg-mode network-clock clk-source - commands related to a specific clock source. Clock source number Sets the preferred negotiation. forced master slave Activate forced slave negotiation Activate prefer master negotiation Activate prefer slave negotiation None To configure preferred negotiation of network-clock To configure preferred negotiation (slave) of network-clock (source 1) -215-

216 Switch (config)# network-clock clk-source 1 aneg-mode slave no no no Negate a command or set its defaults To default the function To disable the function (loop-protect) Switch (config)# no loop-protect ntp ntp ntp Configure NTP Disabled To enable the NTP service To enable the NTP service Switch (config)# ntp -216-

217 ntp server ntp server <1-5> ip-address { <ipv4_var> <ipv6_var> <name_var> } ntp server Configure NTP Configure NTP server <1-5> index number <hostname> <ipv4_ucast> <ipv6_ucast> domain name ipv4 address ipv6 address None To configure the IP addresses of NTP Server To configure the IP address ( ) of NTP Server for index 1 Switch (config)# ntp server 1 ip-address port-security port-security port-security Enable/disable port security globally Disabled To enable the Port Security To enable the Port Security Switch (config)# port-security -217-

218 port-security aging port-security aging port-security Enable/disable port security globally aging Enable/disable port security aging Disabled To enable the Port Aging To enable the Port Aging Switch (config)# port-security port-security aging port-security aging time port-security aging time < > port-security Enable/disable port security globally aging time Enable/disable port security aging Time in seconds between check for activity on learned MAC addresses < > seconds 3600 To configure the Aging Period of Port Security To configure the Aging Period (159) of Port Security Switch (config)# port-security aging time

219 privilege privilege { exec configure config-vlan line interface if-vlan ipmc-profile snmps-host stp-aggr dhcp-pool rfc2544-profile } level <privilege> <cmd> privilege config-vlan configure dhcp-pool exec if-vlan interface ipmc-profile line rfc2544-profile snmps-host stp-aggr Command privilege parameters VLAN Configuration Mode Global configuration mode DHCP Pool Configuration Mode Exec mode VLAN Interface Mode Port List Interface Mode IPMC Profile Mode Line configuration mode RFC2544 Profile Mode SNMP Server Host Mode STP Aggregation Mode level Set privilege level of command <0-15> Privilege level <cmd> Initial valid words and literals of the command to modify None To configure the Privilege Level for Command Line To configure the Privilege Level (DHCP Pool mode, Level 12, host) for Command Line Switch (config)# privilege dhcp-pool level 12 host qos map cos-dscp qos map cos-dscp <cos> dpl <dpl> dscp { <dscp_num> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } } -219-

220 qos map cos-dscp Quality of Service Global QoS Map/Table Map for cos to dscp <Cos : 0~7> Specific class of service or range dscp Specify DSCP <DscpNum : 0-63> Specific DSCP af11 Assured Forwarding PHB AF11(DSCP 10) af12 Assured Forwarding PHB AF12(DSCP 12) af13 Assured Forwarding PHB AF13(DSCP 14) af21 Assured Forwarding PHB AF21(DSCP 18) af22 Assured Forwarding PHB AF22(DSCP 20) af23 Assured Forwarding PHB AF23(DSCP 22) af31 Assured Forwarding PHB AF31(DSCP 26) af32 Assured Forwarding PHB AF32(DSCP 28) af33 Assured Forwarding PHB AF33(DSCP 30) af41 Assured Forwarding PHB AF41(DSCP 34) af42 Assured Forwarding PHB AF42(DSCP 36) af43 Assured Forwarding PHB AF43(DSCP 38) be Default PHB(DSCP 0) for best effort traffic cs1 Class Selector PHB CS1 precedence 1(DSCP 8) cs2 Class Selector PHB CS2 precedence 2(DSCP 16) cs3 Class Selector PHB CS3 precedence 3(DSCP 24) cs4 Class Selector PHB CS4 precedence 4(DSCP 32) cs5 Class Selector PHB CS5 precedence 5(DSCP 40) cs6 Class Selector PHB CS6 precedence 6(DSCP 48) cs7 Class Selector PHB CS7 precedence 7(DSCP 56) ef Expedited Forwarding PHB(DSCP 46) va Voice Admit PHB(DSCP 44) 0 To configure the DSCP Classification To configure the DSCP Classification (QoS Class 3: DSCP CS1) Switch (config)# qos map cos-dscp 3 dscp cs1-220-

221 qos map dscp-classify qos map dscp-classify { <dscp_num> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } } qos map Quality of Service Global QoS Map/Table dscp-classify Map for dscp classify enable <DscpNum : 0-63> Specific DSCP af11 Assured Forwarding PHB AF11(DSCP 10) af12 Assured Forwarding PHB AF12(DSCP 12) af13 Assured Forwarding PHB AF13(DSCP 14) af21 Assured Forwarding PHB AF21(DSCP 18) af22 Assured Forwarding PHB AF22(DSCP 20) af23 Assured Forwarding PHB AF23(DSCP 22) af31 Assured Forwarding PHB AF31(DSCP 26) af32 Assured Forwarding PHB AF32(DSCP 28) af33 Assured Forwarding PHB AF33(DSCP 30) af41 Assured Forwarding PHB AF41(DSCP 34) af42 Assured Forwarding PHB AF42(DSCP 36) af43 Assured Forwarding PHB AF43(DSCP 38) be Default PHB(DSCP 0) for best effort traffic cs1 Class Selector PHB CS1 precedence 1(DSCP 8) cs2 Class Selector PHB CS2 precedence 2(DSCP 16) cs3 Class Selector PHB CS3 precedence 3(DSCP 24) cs4 Class Selector PHB CS4 precedence 4(DSCP 32) cs5 Class Selector PHB CS5 precedence 5(DSCP 40) cs6 Class Selector PHB CS6 precedence 6(DSCP 48) cs7 Class Selector PHB CS7 precedence 7(DSCP 56) ef Expedited Forwarding PHB(DSCP 46) va Voice Admit PHB(DSCP 44) Disabled To enabled the DSCP Ingress Classification To configure the DSCP Ingress Classification (DSCP 36) -221-

222 Switch (config)# qos map dscp-classify af qos map dscp-cos qos map dscp-cos { <dscp_num> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } } cos <cos> dpl <dpl> qos map dscp-cos Quality of Service Global QoS Map/Table Map for dscp to cos <DscpNum : 0-63> Specific DSCP af11 Assured Forwarding PHB AF11(DSCP 10) af12 Assured Forwarding PHB AF12(DSCP 12) af13 Assured Forwarding PHB AF13(DSCP 14) af21 Assured Forwarding PHB AF21(DSCP 18) af22 Assured Forwarding PHB AF22(DSCP 20) af23 Assured Forwarding PHB AF23(DSCP 22) af31 Assured Forwarding PHB AF31(DSCP 26) af32 Assured Forwarding PHB AF32(DSCP 28) af33 Assured Forwarding PHB AF33(DSCP 30) af41 Assured Forwarding PHB AF41(DSCP 34) af42 Assured Forwarding PHB AF42(DSCP 36) af43 Assured Forwarding PHB AF43(DSCP 38) be Default PHB(DSCP 0) for best effort traffic cs1 Class Selector PHB CS1 precedence 1(DSCP 8) cs2 Class Selector PHB CS2 precedence 2(DSCP 16) cs3 Class Selector PHB CS3 precedence 3(DSCP 24) cs4 Class Selector PHB CS4 precedence 4(DSCP 32) cs5 Class Selector PHB CS5 precedence 5(DSCP 40) cs6 Class Selector PHB CS6 precedence 6(DSCP 48) cs7 Class Selector PHB CS7 precedence 7(DSCP 56) ef Expedited Forwarding PHB(DSCP 46) va Voice Admit PHB(DSCP 44) cos <Cos : 0-7> dpl <Dpl : dpl> Specify class of service Specific class of service Specify drop precedence level Specific drop precedence level -222-

223 0 To configure the DSCP-Based QoS Ingress Classification To configure the DSCP-Based QoS Ingress Classification (DSCP: 44, QoS Class: 6, DPL: 2) Switch (config)# qos map dscp-cos va cos 6 dpl qos map dscp-egress-translation qos map dscp-egress-translation { <dscp_num> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } } to { <dscp_num_tr> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } } qos map Quality of Service Global QoS Map/Table dscp-egress-translation Map for dscp egress translation <DscpNum : 0-63> Specific DSCP af11 Assured Forwarding PHB AF11(DSCP 10) af12 Assured Forwarding PHB AF12(DSCP 12) af13 Assured Forwarding PHB AF13(DSCP 14) af21 Assured Forwarding PHB AF21(DSCP 18) af22 Assured Forwarding PHB AF22(DSCP 20) af23 Assured Forwarding PHB AF23(DSCP 22) af31 Assured Forwarding PHB AF31(DSCP 26) af32 Assured Forwarding PHB AF32(DSCP 28) af33 Assured Forwarding PHB AF33(DSCP 30) af41 Assured Forwarding PHB AF41(DSCP 34) af42 Assured Forwarding PHB AF42(DSCP 36) af43 Assured Forwarding PHB AF43(DSCP 38) be Default PHB(DSCP 0) for best effort traffic cs1 Class Selector PHB CS1 precedence 1(DSCP 8) cs2 Class Selector PHB CS2 precedence 2(DSCP 16) cs3 Class Selector PHB CS3 precedence 3(DSCP 24) cs4 Class Selector PHB CS4 precedence 4(DSCP 32) cs5 Class Selector PHB CS5 precedence 5(DSCP 40) -223-

224 cs6 Class Selector PHB CS6 precedence 6(DSCP 48) cs7 Class Selector PHB CS7 precedence 7(DSCP 56) ef Expedited Forwarding PHB(DSCP 46) va Voice Admit PHB(DSCP 44) None To configure the DSCP Egress Translation To configure the DSCP Egress Translation (AF11 to AF12) Switch (config)# qos map dscp-egress-translation af11 to af qos map dscp-ingress-translation qos map dscp-ingress-translation { <dscp_num> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } } to { <dscp_num_tr> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } } qos map Quality of Service Global QoS Map/Table dscp-ingress-translation Map for dscp ingress translation <DscpNum : 0-63> Specific DSCP af11 Assured Forwarding PHB AF11(DSCP 10) af12 Assured Forwarding PHB AF12(DSCP 12) af13 Assured Forwarding PHB AF13(DSCP 14) af21 Assured Forwarding PHB AF21(DSCP 18) af22 Assured Forwarding PHB AF22(DSCP 20) af23 Assured Forwarding PHB AF23(DSCP 22) af31 Assured Forwarding PHB AF31(DSCP 26) af32 Assured Forwarding PHB AF32(DSCP 28) af33 Assured Forwarding PHB AF33(DSCP 30) af41 Assured Forwarding PHB AF41(DSCP 34) af42 Assured Forwarding PHB AF42(DSCP 36) af43 Assured Forwarding PHB AF43(DSCP 38) be Default PHB(DSCP 0) for best effort traffic -224-

225 cs1 Class Selector PHB CS1 precedence 1(DSCP 8) cs2 Class Selector PHB CS2 precedence 2(DSCP 16) cs3 Class Selector PHB CS3 precedence 3(DSCP 24) cs4 Class Selector PHB CS4 precedence 4(DSCP 32) cs5 Class Selector PHB CS5 precedence 5(DSCP 40) cs6 Class Selector PHB CS6 precedence 6(DSCP 48) cs7 Class Selector PHB CS7 precedence 7(DSCP 56) ef Expedited Forwarding PHB(DSCP 46) va Voice Admit PHB(DSCP 44) None To configure the DSCP Ingress Translation To configure the DSCP Ingress Translation (AF11 to AF12) Switch (config)# qos map dscp-ingress-translation af11 to af qos qce qos qce <qce_id> [ { next <qce_id_next> } last ] [ interface ( <port_type> [ <port_list> ] ) ] [ smac { <smac> <smac_24> any } ] [ dmac { <dmac> unicast multicast broadcast any } ] [ tag { [ type { untagged tagged c-tagged s-tagged any } ] [ vid { <ot_vid> any } ] [ pcp { <ot_pcp> any } ] [ dei { <ot_dei> any } ] } ] [ inner-tag { [ type { untagged tagged c-tagged s-tagged any } ] [ vid { <it_vid> any } ] [ pcp { <it_pcp> any } ] [ dei { <it_dei> any } ] } ] [ frame-type { any { etype [ { <etype_type> any } ] } { llc [ dsap { <llc_dsap> any } ] [ ssap { <llc_ssap> any } ] [ control { <llc_control> any } ] } { snap [ { <snap_data> any } ] } { ipv4 [ proto { <pr4> tcp udp any } ] [ sip { <sip4> any } ] [ dip { <dip4> any } ] [ dscp { <dscp4> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } any } ] [ fragment { yes no any } ] [ sport { <sp4> any } ] [ dport { <dp4> any } ] } { ipv6 [ proto { <pr6> tcp udp any } ] [ sip { <sip6> any } ] [ dip { <dip6> any } ] [ dscp { <dscp6> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } any } ] [ sport { <sp6> any } ] [ dport { <dp6> any } ] } } ] [ action { [ cos { <action_cos> default } ] [ dpl { <action_dpl> default } ] -225-

226 [ pcp-dei { <action_pcp> <action_dei> default } ] [ dscp { <action_dscp_dscp> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } default } ] [ policy { <action_policy> default } ] } ] qos qce action dmac Quality of Service QoS Control Entry Setup action Setup matched DMAC frame-type interface Setup matched frame type Interfaces last next smac tag Place QCE at the end Place QCE before the next QCE ID Setup matched SMAC Setup tag options None To configure the QCE To configure the QCE 1 (below table) for interface GigabitEthernet 1/1-2 Switch (config)# qos qce 1 interface GigabitEthernet 1/1-2 tag type tagged vid 5 pcp 3 dei 1 dmac unicast frame-type ipv4 proto udp dscp 19 frag no sport 55 action cos 0 dpl 1 dscp

227 qos qce update qos qce update <qce_id> [ { next <qce_id_next> } last ] [ interface ( <port_type> [ <port_list> ] ) ] [ smac { <smac> <smac_24> any } ] [ dmac { <dmac> unicast multicast broadcast any } ] [ tag { [ type { untagged tagged c-tagged s-tagged any } ] [ vid { <ot_vid> any } ] [ pcp { <ot_pcp> any } ] [ dei { <ot_dei> any } ] } ] [ inner-tag { [ type { untagged tagged c-tagged s-tagged any } ] [ vid { <it_vid> any } ] [ pcp { <it_pcp> any } ] [ dei { <it_dei> any } ] } ] [ frame-type { any { etype [ { <etype_type> any } ] } { llc [ dsap { <llc_dsap> any } ] [ ssap { <llc_ssap> any } ] [ control { <llc_control> any } ] } { snap [ { <snap_data> any } ] } { ipv4 [ proto { <pr4> tcp udp any } ] [ sip { <sip4> any } ] [ dip { <dip4> any } ] [ dscp { <dscp4> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } any } ] [ fragment { yes no any } ] [ sport { <sp4> any } ] [ dport { <dp4> any } ] } { ipv6 [ proto { <pr6> tcp udp any } ] [ sip { <sip6> any } ] [ dip { <dip6> any } ] [ dscp { <dscp6> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } any } ] [ sport { <sp6> any } ] [ dport { <dp6> any } ] } } ] [ action { [ cos { <action_cos> default } ] [ dpl { <action_dpl> default } ] [ pcp-dei { <action_pcp> <action_dei> default } ] [ dscp { <action_dscp_dscp> { be af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef va } default } ] [ policy { <action_policy> default } ] } ] qos qce update action dmac Quality of Service QoS Control Entry Update an existing QCE Setup action Setup matched DMAC frame-type interface Setup matched frame type Interfaces last next smac tag Place QCE at the end Place QCE before the next QCE ID Setup matched SMAC Setup tag options None To update the QCE To update the QCE 1 (DMAC: Unicast, Action: Cos 0)

228 Switch (config)# qos qce update 1 dmac unicast action cos qos qce refresh qos qce refresh qos qce refresh Quality of Service QoS Control Entry Refresh QCE tables in hardware None To refresh the QCE To refresh the QCE. Switch (config)# qos qce refresh qos wred qos wred queue <queue> min-th <min_th> mdp-1 <mdp_1> mdp-2 <mdp_2> mdp-3 <mdp_3> qos wred queue Quality of Service Weighted Random Early Discard Specify queue <Queue : 0~5> Specific queue or range min-th Specify minimum threshold <MinTh : 0-100> Specific minimum threshold in percent mdp-1 Specify drop probability for drop precedence level 1 <Mdp1 : 0-100> Specific drop probability in percent mdp-2 Specify drop probability for drop precedence level 2 <Mdp2 : 0-100> Specific drop probability in percent -228-

229 mdp-3 Specify drop probability for drop precedence level 3 <Mdp3 : 0-100> Specific drop probability in percent To configure the Weighted Random Early Detection To configure the Weighted Random Early Detection (below table) Switch (config)# qos wred queue 1 min-th 2 mdp-1 3 mdp-2 4 mdp radius-server attribute 32 radius-server attribute 32 <Id : line1-253> radius-server Configure RADIUS 32 NAS-Identifier None To configure the NAS-Identifier To configure the NAS-Identifier (planet) -229-