3Com 4500G 3CR17761-91 User manual

Copyright © 2006-2008, 3Com Corporation. All rights reserved.
www.3Com.com
Part Number: 10014902 Rev. AB
Published: February 2008
3COM SWITCH 4500G FAMILY
QUICK REFERENCE GUIDE
Overview
This Command Reference applies to the following Switch 4500G models:
About the Command Line Interface
To use and navigate the command line interface of your unit, please refer to the following points for assistance:
■When initially accessing the command line interface, press Enter when prompted. The User View menu for the unit is
displayed. This is indicated by the chevron brackets around the name of the unit at the prompt, for example,
<4500G>.
■When in the System View menu, square brackets appear around the name of the unit at the prompt, for example,
[4500G].
■You must be in the System View menu to access the configurable CLI commands.
■Some commands can be entered directly at any prompt from anywhere in the interface.
■If you enter part of a command followed by a ? (with no space between), the CLI will show you all the commands
that begin in that way.
■The term ‘view’ may be used interchangeably with the term ‘menu’.
■The undo command is placed before the command you wish to undo, for example, undo setauthentication password.
■<CTRL-A> places the cursor back to the start of the command line.
■Enter the first few characters of a command and press TAB to enter the full command without having to input the
entire command (where there is only one command that starts with the entered characters).
■Use the Up Arrow key at the prompt to repeat the previous command string.
■Use the Delete key to delete the character after the cursor; the Backspace key deletes the character before the cursor.
■When entering physical port numbers, Enter the port number as x/0/z, where x is the unit number and z is the
physical port number.
Switch 4500G 24-Port (3CR17761-91)
Switch 4500G 24-Port PWR (3CR17771-91)
Switch 4500G 48-Port (3CR17762-91)
Switch 4500G 48-Port PWR (3C17772-91)

23Com Switch 4500G Family
Command Reference
Displaying Command Parameters
At the prompt, enter the name of the command followed by a space and ?. For example:
<4500G>boot ?
The following parameters are displayed:
attribute-switch Exchange the file main-attribute and backup-attribute.
boot-loader Select a file to boot at the next time
bootrom Update Bootrom
web-package Set web resource package
To specify boot loader, enter the command as follows:
<4500G>boot boot-loader ?
You only need to enter ? if parameters exist for the command.
Displaying Parent Menus
At the prompt, enter quit.
Displaying the User View Menu
Press <CTRL-Z>.
Obtaining Help
At the prompt, enter ?.
Further Information
For further information about how to use the command line interface, refer to the Command Reference Guide and
the Configuration Guide, which are both available as PDF documents on the CD that accompanied the unit.
Commands
access-limit
Use the access-limit command to set the maximum number of access users that can be contained in
current ISP domain.
ISP Domain view
accounting
Use the accounting command to configure the accounting action for the traffic behavior.
Traffic Behavior view
accounting default
Use the accounting default command to configure an accounting scheme for all users.
ISP Domain view
accounting lan-access
Use the accounting lan-access command to configure accounting for a lan-access user.
ISP Domain view
accounting login
Use the accounting login command to configure accounting for the login user.
ISP Domain view
accounting optional
Use the accounting optional command to open the accounting-optional switch.
ISP Domain view

3Com Switch 4500G Family 3
Command Reference
acl
Use the acl command enter ACL view. If the ACL does not exist, it is created first.
System view
acl
Use the acl command to apply an ACL to filter Telnet users.
User Interface view
activation-key
Use the activation-key command to define a shortcut key for starting a terminal session.
User Interface view
active region-configuration
Use the active region-configuration command to activate the settings of an MST (multiple spanning
tree) region.
MST Region view
add-member
Use the add-member command to add a candidate device to a cluster.
Cluster view
administrator-address
Use the administrator-address command to set the MAC address of the management device on a
member device.
Cluster view
apply cost
Use the apply cost command to set the cost for routing information.
Routing Policy view
apply cost
apply ip-address next-hop
Use the apply ip-address next-hop command to set the next hop for IPv4 routing information.
Routing Policy view
apply ipv6 next-hop
apply poe-profile
Use the apply poe-profile command to apply the existing PoE Profile configuration to the specified
Ethernet port.
PoE Interface view
apply poe-profile interface
Use the apply poe-profile interface command to apply the PoE configuration file to one or more PoE
interfaces.
System view
apply preference
Use the apply preference command to set preference for routing protocol.
Routing Policy view
apply preference
apply tag
Use the apply tag command to set specified tag value of routing information.
Routing Policy view
apply tag
arp check enable
Use the arp check enable command to enable ARP entry checking, preventing the device from learning
multicast MAC addresses.
System view
arp max-learning-num
Use the arp max-learning-num command to set the maximum number of ARP entries that an interface can
learn.
VLAN Interface view
arp static
Use the arp static command to configure the static ARP entry in the ARP mapping table.
System view
arp timer aging
Use the arp timer aging command to set the aging timer for dynamic ARP entries.
System view

43Com Switch 4500G Family
Command Reference
ascii
Use the ascii command to configure data transmission mode as ASCII mode.
FTP Client view
attribute
Use the attribute command to set the attributes of a user whose service type is lan-access.
Local User view
attribute
Use the attribute command to configure attribute rules of certificate issuers, certificate subject names, or
alternate certificate subject names.
Certificate Attribute Group view
authentication default
Use the authentication default command to configure authentication scheme for all users.
ISP Domain view
authentication lan-access
Use the authentication lan-access command to configure authentication scheme for a lan-access user.
ISP Domain view
authentication login
Use the authentication login command to configure authentication for a login user.
ISP Domain view
authentication-mode
Use the command authentication-mode to specify the authentication mode.
User Interface view
authorization command
Use the authorization command command to configure the authorization scheme for a CLI user.
ISP Domain view
authorization default
Use the authorization default command to configure the default authorization for all users.
ISP Domain view
authorization lan-access
Use the authorization lan-access command to configure authorization for a lan-access user.
ISP Domain view
authorization login
Use the authorization login command to configure authorization for a login user.
ISP Domain view
auto-build
Use the auto-build command to automatically build a cluster.
Cluster view
auto-execute command
Use the auto-execute command command to set the command that is executed automatically after a user
logs in.
VTY User Interface view
backup startup-configuration
Use the backup startup-configuration command to back up the configuration file for next startup with
the destination file name.
User view
binary
Use the binary command to specify that files be transferred in binary mode. That is, data is transferred in
binary streams.
FTP Client view
black-list add-mac
Use the black-list add-mac command to add a device into the blacklist.
Cluster view
black-list delete-mac
Use the black-list delete-mac command to delete a device from the blacklist.
Cluster view
boot-loader
Use the boot-loader command to configure the .app file to be used the next time the switch is booted.
User view

3Com Switch 4500G Family 5
Command Reference
bootrom
Use the bootrom command to upgrade the Bootrom of device.
User view
bootrom-update security-check enable
Use the bootrom-update security-check enable command to enable file validity check for upgrading.
System view
broadcast-suppression
Use the broadcast-suppression command to configure broadcast storm suppression ratio.
Ethernet Interface view
Port Group view
build
Use the build command to configure or modify the cluster name.
Cluster view
bye
Use the bye command to disconnect from the remote FTP server and exit to user view.
FTP Client view
bye
Use the bye command to terminate the connection to the remote SFTP server and return to system view.
SFTP Client view
ca identifier
Use the ca identifier command to specify the CA this device trusts and have the "name" CA bound with
this device.
PKI Domain view
car
Use the car command to configure TP for the traffic behavior.
Traffic Behavior view
cd
Use the cd command to change the current directory.
User view
cd
Use the cd command to change the current working directory path on the remote FTP server.
FTP Client view
cd
Use the cd command to change the current path on the remote SFTP server.
SFTP Client view
cdup
Use the cdup command to return from the current working directory path to the upper directory.
FTP Client view
cdup
Use the cdup command to change the working path and return to the upper-level directory.
SFTP Client view
certificate request entity
Use the certificate request entity command to specify the name of the entity for certificate request.
PKI Domain view
certificate request from
Use the certificate request from command to choose between CA and RA to register for certificate
request.
PKI Domain view
certificate request mode
Use the certificate request mode command to decide between the manual or the auto request mode.
PKI Domain view
certificate request polling
Use the certificate request polling command to specify the interval between two polls and the retry
times.
PKI Domain view
certificate request url
Use the certificate request url command to specify the server URL for certificate request through
SCEP protocol. SCEP is a protocol specialized in the communication with authentication authorities.
PKI Domain view

63Com Switch 4500G Family
Command Reference
check region-configuration
Use the check region-configuration command to view all the MST region configuration information,
including the region name, VLAN-to-instance mapping and revision level settings.
MST Region view
checkzero
Use the checkzero command to check the zero field of RIP-1 packet.
RIP view
checkzero
ciphersuite
Use the ciphersuite command to configure the cipher suite supported by an SSL server policy.
SSL Server Policy view
classifier behavior
Use the classifier behavior command to specify the behavior for the class in the policy.
Policy view
client-verify enable
Use the client-verify enable command to enable certificate-based SSL client authentication, meaning
the server needs to perform certificate-based authentication to the client.
SSL Server Policy view
clock datetime
Use the clock datetime command to set the current system time and date.
User view
clock summer-time
Use the clock summer-time command to set the name, starting and ending time of the daylight saving time.
User view
clock timezone
Use the clock timezone command to set local time zone information.
User view
close
Use the close command to terminate the connection to the FTP server, but remain in FTP client view.
FTP Client view
close-mode wait
Use the close-mode wait command to configure the close mode for an SSL connection to wait, meaning
after sending a close-notify alert message to the client, the server does not close a session until it receives
a close-notify alert message from the client.
SSL Server Policy view
cluster
Use the cluster command to enter cluster view.
System view
cluster enable
Use the cluster enable command to enable the cluster function on a switch.
System view
cluster switch-to
Use the cluster switch-to command to switch between the management device and member devices
for configuration and management.
User view
command-privilege level
Use the command-privilege level command to set the level of the specified command in a specified view.
System view
common-name
Use the common-name command to specify the common name of an entity, take User name for example.
PKI Entity view
copy
Use the copy command to copy a file.
User view
copy configuration
Use the copy configuration command to copy configurations on a specific interface to other interface(s).
The configuration can be copied include speed/duplex configuration, GVRP, STP, Port-isolate, VLAN,
LACP, and QoS.
System view

3Com Switch 4500G Family 7
Command Reference
count
Use the count command to configure the number of probes in a test.
NQA Test Group view
country
Use the country command to specify the code of the country to which the entity belongs. It is a standard
2-byte code, for example, CN for China.
PKI Entity view
crl check
Use the crl check command to enable or disable CRL checking.
PKI Domain view
crl update-period
Use the crl update-period command to specify the update period of CRL, which is the interval between
local downloads of CRLs from CRL access server.
PKI Domain view
crl url
Use the crl url command to specify the distribution point URL for CRL.
PKI Domain view
cut connection
Use the cut connection command to cut down one user connection or one type of user connections
forcibly.
System view
databits
Use the databits command to set the databits for the user interface.
AUX User Interface view
datafill
Use the datafill command to configure a string of fill characters for a test packet.
NQA Test Group view
datasize
Use the datasize command to configure the size of a test packet, namely, an echo request packet (IP
header and ICMP header excluded).
NQA Test Group view
debugging
Use the debugging command to enable specific type of debugging or all types of debugging.
User view
default cost
Use the default cost command to define a value for the default metric of the redistributed route.
RIP view
default-route originate
Use the default-route originate cost command to enable the current router to originate a default route
to RIP neighbors when the router needs to generate a default route with the specified cost.
RIP view
delete
Use the delete command to remove a file from the storage device to the recycle bin, where you can restore
the file with the undelete command or permanently delete it with the reset recycle-bin command.
User view
delete
Use the delete command to delete a file on the remote FTP server.
FTP Client view
delete
Use the delete command to delete a specified file from a server.
SFTP Client view
delete ipv6 static-routes all
Use the display ip routing-table command to display summary information about active routes in the
routing table.
Any view
delete-member
Use the delete-member command to remove a member device from the cluster.
Cluster view

83Com Switch 4500G Family
Command Reference
delete static-routes all
Use the delete static-routes all command to delete all the static routes.
System view
description
Use the description command to assign a description string to the current VLAN or VLAN interface. VLAN view
VLAN Interface view
description
Use the description command to enter a description of an Ethernet port.
Ethernet Interface view
description
Use the description command to create an ACL description, to describe the purpose of the ACL for
example. Basic IPv4 ACL view
Advanced IPv4 ACL view
Ethernet Frame Header ACL view
description
Use the description command to give a brief description of a test group, usually, the test type or test
purpose of a test group.
NQA Test Group view
destination-ip
Use the destination-ip command to configure the destination IP address in the test request packet.
NQA Test Group view
destination-port
Use the destination-port command to configure the destination port number for a test request packet.
NQA Test Group view
dhcp enable
Use the dhcp enable command to enable DHCP.
System view
dhcp relay address-check
Use the dhcp relay address-check enable command to enable IP address match checking on the relay
agent.
VLAN Interface view
dhcp relay information enable
Use the dhcp relay information enable command to enable the relay agent to support option 82.
VLAN Interface view
dhcp relay information format
Use the dhcp relay information format command to specify a padding format for option 82.
Interface view
dhcp relay information strategy
Use the dhcp relay information strategy command to configure DHCP relay agent handling strategy
for messages containing option 82.
Interface view
dhcp relay release
Use the dhcp relay release command to send a DHCP RELEASE request to a specified DHCP server or
server groups for releasing a specified client IP address.
VLAN Interface view
System view
dhcp relay security static
Use the dhcp relay security static command to configure a manual IP-to-MAC binding on the relay
agent.
System view
dhcp relay security tracker
Use the dhcp relay security tracker command to set a refreshing interval at which the relay agent
contacts the DHCP server for refreshing dynamic bindings.
System view
dhcp relay server-detect
Use the dhcp relay server-detect command to enable pseudo DHCP server detection on the DHCP
relay agent.
System view

3Com Switch 4500G Family 9
Command Reference
dhcp relay server-group
Use the dhcp relay server-group command to specify a DHCP server for a DHCP server group.
System view
dhcp relay server-select
Use the dhcp relay server-select command to correlate specified interface(s) to a specified DHCP
server group.
VLAN Interface view
dhcp select relay
Use the dhcp select relay command to enable the relay agent on the current interface, specified or all
interfaces. Upon receiving requests from an enabled interface, the relay agent will forward these requests
to outside DHCP servers for IP address allocation.
VLAN Interface view
dhcp-snooping
Use the dhcp-snooping command to enable the DHCP snooping.
System view
dhcp-snooping trust
Use the dhcp-snooping trust command to set a port as trusted.
Ethernet Interface view
dir
Use the dir command to display information about all files and folders in the current directory, excluding
those moved to the recycle bin.
User view
dir
Use the dir command to query for the details of all files and directories in the current directory.
FTP Client view
dir
Use the dir command to query files under a specified directory.
SFTP Client view
disconnect
Use the disconnect command to terminate a FTP connection without quitting FTP client view.
FTP Client view
display acl
Use the display acl command to display information about the specified or all IPv4 ACLs. This command
displays ACL rules in the matching order.
Any view
display arp
Use the display arp command to display information about ARP entries in the ARP mapping table.
Any view
display arp ip-address
Use the display arp ip address command to display information about the ARP entry for a specified
IP address.
Any view
display arp timer aging
Use the display arp timer aging command to display the aging time for dynamic ARP entries.
Any view
display boot-loader
Use the display boot-loader command to display the host software (.app file) that is adopted when the
switch reboots.
Any view
display bootp client
Use the display bootp client command to display relative information of a BOOTP client, including MAC
address of the BOOTP client and obtained IP address.
Any view
display brief interface
Use the display brief interface command to display brief interface information, including simple
interface name, link state, protocol link state, protocol type, and main IP address.
Any view

10 3Com Switch 4500G Family
Command Reference
display channel
Use the display channel command to display the details channel information.
Any view
display clipboard
Use the display clipboard command to view the contents of the clipboard.
Any view
display clock
Use the display clock command to display the current date and time of the system, so that you can adjust
them if they are wrong.
Any view
display cluster
Use the display cluster command to display the state and statistics of the cluster to which the current
switch belongs.
Any view
display cluster base-topology
Use the display cluster topology command to display the standard topology view of the cluster.
Any view
display cluster black-list
Use the display cluster black-list command to display the current blacklist of the cluster.
Any view
display cluster candidates
Use the display cluster candidates command to display the information about the candidate devices of
a cluster.
Any view
display cluster current-topology
Use the display cluster current topology command to display the current topology view or the topology
path between two points.
Any view
display cluster members
Use the display cluster members command to display the information about cluster members.
Any view
display connection
Use the display connection command to display information about specified or all user connections.
Any view
display cpu-usage
Use the display cpu-usage command to display the statistics of CPU usage entries.
Any view
display current-configuration
Use the display current-configuration command to display the current configuration of a switch.
Any view
display current-configuration
Use the display current-configuration command to display the current configuration of a switch.
Any view
display debugging
Use the display debugging command to display the enabled debugging on a specified device.
Any view
display device
Use the display device command to view module type and working status information of each card.
Any view
display dhcp client
Use the display dhcp client command to display DHCP client information.
Any view
display dhcp relay
Use the display dhcp relay command to display information about DHCP server groups correlated to an
interface or all interfaces.
Any view