Alaxala AX1250S Series Mounting instructions

AX1250S / AX1240S Software Manual
Configuration Command Reference
For Version 2.2
AX1240S-S003-30X

Relevant products
This manual applies to models of theAX1250S andAX1240S models of switches. It also describes the functions of
the AX1250S andAX1240S software, version 2.2, which are supported by the OS-LT3, OS-LT2 software, and
optional licenses.
Export Restrictions
If you export this product, please check all restrictions, such as Japan's Foreign Exchange and Foreign Trade Law
and USA export control laws and regulations, and carry out all required procedures.
If you require more information, please contact your ALAXALAsales representative.
Trademarks
Ethernet is a product name of XeroxCorporation.
Microsoft is a registered trademark of Microsoft Corporation in the United States and other countries.
Windows is a registered trademark of Microsoft Corporation in the United States and other countries.
RSA and SecurID are trademarks or registered trademarks of RSA Security Inc. in the United States and other
countries.
Other company and product names in this manual are trademarks or registered trademarks of their respective
owners.
Reading and storing this manual
Before you use the equipment, carefully read the manual andmake sure thatyou understand all safety precautions.
After reading the manual, keep it in a convenient place for easy reference.
Note
Information in this document is subject to change without notice.
Edition history
January 2010 (Edition 4) AX1240S-S003-30X
Copyright
Copyright (c) 2008,2010,ALAXALA Networks Corporation.All rights reserved.

History of Amendments
Ver. 2.2 (Edition 4)
Table Summary of amendments
Location and title Changes
Addition of series A description of the AX1250S was added.
1. Reading the Manuals A description of the AX1250S was added.
6. Device Management Descriptions about the following command have been changed:
system recovery
8. Ethernet Descriptions have been added with the support of the 100BASE-FX
(SFP).
duplex
flowcontrol
interface gigabitethernet
media-type
speed
19. Access Lists Notes on the following commands have been added:
deny (mac access-list extended)
permit (mac access-list extended)
20. QoS Notes on the following command has been added:
qos (mac qos-flow-list)
27. Uplink Redundancy The following command has been added:
switchport-backup startup-active-port-selection
In addition to the above changes, minor editorial corrections have been made.
Ver. 2.2 (Edition 3)
Table Summary of amendments
Location and title Changes
Reading the Manuals The list of command modes has been changed.
Login Security and RADIUS The following commands have been added:
aaa group server radius
radius-server attribute station-id capitalize
server
Parameters for the following command have been added:
radius-server host
Device Management The following command has been added:
system recovery

Location and title Changes
Power Saving Timing when the change for the following command is applied has been
changed:
system fan-control
Ethernet The following command has been added:
linkscan-mode
VLAN Descriptions about parameters of the following command have been
changed:
switchport mode
Ring Protocol This section was added.
IEEE 802.1X The following commands have been added:
aaa accounting dot1x
dot1x authentication
Notes on the following commands have been changed:
dot1x force-authorized
dot1x force-authorized vlan
dot1x vlan dynamic enable
dot1x vlan dynamic radius-vlan
Parameters for the following command have been added:
dot1x radius-server host
The following command name has been changed:
aaa authentication dot1x default to aaa authentication
dot1x
WebAuthentication The following commands have been added:
aaa accounting web-authentication
web-authentication html-fileset
web-authentication authentication
web-authentication user-group
web-authentication user replacement
Notes on the following commands have been changed:
web-authentication force-authorized vlan
web-authentication static-vlan force-authorized
web-authentication vlan
Parameters for the following command have been added:
web-authentication radius-server host
The following command name has been changed:
aaa authentication web-authentication default to aaa
authentication web-authentication

Location and title Changes
MAC-basedAuthentication The following commands have been added:
aaa accounting mac-authentication
mac-authentication authentication
Parameters for the following command have been added:
mac-authentication radius-server host
Notes on the following commands have been changed:
mac-authentication interface
mac-authentication force-authorized vlan
mac-authentication vlan
mac-authentication static-vlan force-authorized
The following command name has been changed:
aaa authentication web-authentication default to aaa
authentication web-authentication
MultistepAuthentication Parameters for the following command have been added:
authentication multi-step
CFM This section was added.
SNMP Parameters for the following command have been added:
snmp-server host
Log Output Functionality The following command has been added:
logging syslog-header
Error Messages Displayed During
Configuration Editing Descriptions about the following items have been added:
Login Security and RADIUS
Ring Protocol
CFM
Error messages for the following items have been changed:
Power saving
Ethernet
Link aggregation
Spanning tree
IEEE802.1X
Web authentication (including DHCP server information)
MAC-based authentication
Uplink redundancy
In addition to the above changes, minor editorial corrections have been made.
Ver. 2.1 (Edition 2)

Table Summary of amendments
Location and title Changes
Editing andWorking with
Configurations Responsemessages output by the following commands have been added:
end
exit
Login Security and RADIUS Descriptions about the following commands have been changed:
radius-server dead-interval
radius-server host
radius-server key
radius-server retransmit
radius-server timeout
Time Settings and NTP Note on the following command has been changed:
clock timezone
Power Saving The following commands have been added:
power-control port cool-standby
schedule-power-control port cool-standby
schedule-power-control port-led
schedule-power-control shutdown interface
schedule-power-control system-sleep
schedule-power-control time-range
system fan-control
system port-led trigger console
system port-led trigger interface
system port-led trigger mc
Descriptions about the following command have been changed:
system port-led
Ethernet Notes on the following command have been changed:
shutdown
MAC Address Table Notes on the following commands have been changed:
mac-address-table aging-time
mac-address-table static
VLAN Notes on the following commands have been changed:
switchport mac
switchport mode
vlan
IGMP Snooping Descriptions about the following command have been changed:
ip igmp snooping mrouter

Location and title Changes
MLD Snooping Descriptions about the following commands have been changed:
ipv6 mld snooping source
ipv6 mld snooping mrouter
Common to Layer 2 Authentication This section was moved.
The following commands have been added:
authentication force-authorized enable
authentication force-authorized vlan
IEEE 802.1X The following commands have been added:
dot1x auto-logout
dot1x radius-server dead-interval
dot1x radius-server host
Parameters for the following command have been added:
dot1x supplicant-detection
Notes on the following commands have been changed:
dot1x force-authorized
dot1x force-authorized eapol
dot1x force-authorized vlan
dot1x port-control
dot1x vlan dynamic enable
dot1x vlan dynamic radius-vlan
WebAuthentication The following commands have been added:
web-authentication radius-server dead-interval
web-authentication radius-server host
Parameters for the following command have been added:
aaa authentication web-authentication default
Notes on the following commands have been changed:
web-authentication force-authorized vlan
web-authentication static-vlan force-authorized
web-authentication vlan
MAC-basedAuthentication The following commands have been added:
mac-authentication radius-server dead-interval
mac-authentication radius-server host
Parameters for the following command have been added:
aaa authentication mac-authentication default
Notes on the following commands have been changed:
mac-authentication force-authorized vlan
mac-authentication interface
mac-authentication static-vlan force-authorized
mac-authentication timeout quiet-period
mac-authentication vlan

Location and title Changes
MultistepAuthentication This section was added.
Secure Wake-on-LAN [OP-WOL] Notes on the following command have been changed:
http-server
Uplink Redundancy The following commands have been added:
switchport backup mac-address-table update transmit
switchport backup mac-address-table update exclude-vlan
switchport backup mac-address-table update retransmit
Storm Control Parameters for the following command have been added:
storm-control
Port Mirroring Note on the following command has been changed:
monitor session
Error Messages Displayed During
Configuration Editing Descriptions about the following items have been added:
Power saving
Multistep authentication
Storm control
Error messages for the following items have been changed:
Link aggregation
MAC address table
VLAN
IGMP snooping
MLD snooping
Common to Layer 2 authentication
IEEE802.1X
Web authentication (including DHCP server information)
MAC-based authentication
Uplink redundancy
Port mirroring
In addition to the above changes, minor editorial corrections have been made.

I
Preface
Applicable products and software versions
This manual applies to models of the AX1250S and AX1240S models of switches. It also
describes the functions of theAX1250S and AX1240S software, version 2.2, which are
supported by the OS-LT3, OS-LT2 software, and optional licenses.
Before you operate the equipment, carefully read the manual and make sure that you
understand all instructions and cautionary notes. After reading themanual, keep it in a
convenient place for easy reference.
Unless otherwise noted, this manual describes the functions applicableto the AX1250S and
AX1240S. Model-specific functions are indicated as follows:
[AX1250S]:
The description applies to the AX1250S switch.
[AX1240S]:
The description applies to the AX1240S switch. Unless otherwise noted, this manual
describes the functions of the OS-LT3 and OS-LT base software. The functions of
software supported by optional licenses are indicated as follows:
[OP-WOL]:
The description applies to the OP-WOL optional license.
[OP-OTP]:
The description applies to the OP-OTP optional license.
Corrections to the manual
Any corrections to this manual will be included in the Release Notes and Manual
Corrections provided with the software.
Intended readers
This manual is intended for system administrators who configure and operate a network
system that uses these Switches.
Readers must have an understanding of the following:
The basics of network system management
Manual URL
You can view this manual on ourWeb site at:
http://www.alaxala.com/en/index.html
Reading sequence of the manuals
The following shows the manuals you need to consult according to your requirements
determined from the following workflow for installing, setting up, and starting regular
operation of these Switches.

Preface
II
Abbreviations used in the manual
AC Alternating Current
ACK ACKnowledge
ADSL Asymmetric Digital Subscriber Line
ALG Application Level Gateway
ANSI American National Standards Institute
ARP Address Resolution Protocol
AS Autonomous System
AUX Auxiliary
BGP Border Gateway Protocol
BGP4 Border Gateway Protocol - version 4
BGP4+ Multiprotocol Extensions for Border Gateway Protocol - version 4
bit/s Bits per second (can also appear as bps)

Preface
III
BPDU Bridge Protocol Data Unit
BRI Basic Rate Interface
CC Continuity Check
CDP Cisco Discovery Protocol
CFM Connectivity Fault Management
CIDR Classless Inter-Domain Routing
CIR Committed Information Rate
CIST Common and Internal Spanning Tree
CLNP ConnectionLess Network Protocol
CLNS ConnectionLess Network System
CONS Connection Oriented Network System
CRC Cyclic Redundancy Check
CSMA/CD Carrier Sense Multiple Access with Collision Detection
CSNP Complete Sequence Numbers PDU
CST Common Spanning Tree
DA Destination Address
DC Direct Current
DCE Data Circuit terminating Equipment
DHCP Dynamic Host Configuration Protocol
DIS Draft International Standard/Designated Intermediate System
DNS Domain Name System
DR Designated Router
DSAP Destination Service Access Point
DSCP Differentiated Services Code Point
DTE Data Terminal Equipment
DVMRP Distance Vector Multicast Routing Protocol
E-Mail Electronic Mail
EAP ExtensibleAuthentication Protocol
EAPOL EAP Over LAN
EFM Ethernet in the First Mile
ES End System
FAN Fan Unit
FCS Frame Check Sequence
FDB Filtering DataBase
FQDN Fully Qualified Domain Name
FTTH Fiber To The Home
GBIC GigaBit Interface Converter
GSRP Gigabit Switch Redundancy Protocol
HMAC Keyed-Hashing for Message Authentication
IANA Internet Assigned Numbers Authority
ICMP Internet Control Message Protocol
ICMPv6 Internet Control Message Protocol version 6
ID Identifier
IEC International Electrotechnical Commission
IEEE Institute of Electrical and Electronics Engineers, Inc.
IETF the Internet Engineering Task Force
IGMP Internet Group Management Protocol
IP Internet Protocol
IPCP IP Control Protocol
IPv4 Internet Protocol version 4
IPv6 Internet Protocol version 6
IPV6CP IP Version 6 Control Protocol
IPX Internetwork Packet Exchange
ISO International Organization for Standardization
ISP Internet Service Provider
IST Internal Spanning Tree
L2LD Layer 2 Loop Detection
LAN Local Area Network

Preface
IV
LCP Link Control Protocol
LED Light Emitting Diode
LLC Logical Link Control
LLDP Link Layer Discovery Protocol
LLQ+3WFQ Low Latency Queueing + 3 Weighted Fair Queueing
LSP Label Switched Path
LSP Link State PDU
LSR Label Switched Router
MA Maintenance Association
MAC Media Access Control
MC Memory Card
MD5 Message Digest 5
MDI Medium Dependent Interface
MDI-X Medium Dependent Interface crossover
MEP Maintenance association End Point
MIB Management Information Base
MIP Maintenance domain Intermediate Point
MRU Maximum Receive Unit
MSTI Multiple Spanning Tree Instance
MSTP Multiple Spanning Tree Protocol
MTU Maximum Transfer Unit
NAK Not AcKnowledge
NAS Network Access Server
NAT Network Address Translation
NCP Network Control Protocol
NDP Neighbor Discovery Protocol
NET Network Entity Title
NLA ID Next-LevelAggregation Identifier
NPDU Network Protocol Data Unit
NSAP Network Service Access Point
NSSA Not So Stubby Area
NTP Network Time Protocol
OADP Octpower Auto Discovery Protocol
OAM Operations, Administration, and Maintenance
OSPF Open Shortest Path First
OUI Organizationally Unique Identifier
PAD PADding
PAE Port Access Entity
PC Personal Computer
PCI Protocol Control Information
PDU Protocol Data Unit
PICS Protocol Implementation Conformance Statement
PID Protocol IDentifier
PIM Protocol Independent Multicast
PIM-DM Protocol Independent Multicast-Dense Mode
PIM-SM Protocol Independent Multicast-Sparse Mode
PIM-SSM Protocol Independent Multicast-Source Specific Multicast
PoE Power over Ethernet
PRI Primary Rate Interface
PS Power Supply
PSNP Partial Sequence Numbers PDU
QoS Quality of Service
RA Router Advertisement
RADIUS Remote Authentication Dial In User Service
RDI Remote Defect Indication
REJ REJect
RFC Request For Comments
RIP Routing Information Protocol

Preface
V
RIPng Routing Information Protocol next generation
RMON Remote Network Monitoring MIB
RPF Reverse Path Forwarding
RQ ReQuest
RSTP Rapid Spanning Tree Protocol
SA Source Address
SD Secure Digital
SDH Synchronous Digital Hierarchy
SDU Service Data Unit
SEL NSAP SELector
SFD Start Frame Delimiter
SFP Small Form factor Pluggable
SMTP Simple Mail Transfer Protocol
SNAP Sub-Network Access Protocol
SNMP Simple Network Management Protocol
SNP Sequence Numbers PDU
SNPA Subnetwork Point ofAttachment
SPF Shortest Path First
SSAP Source Service Access Point
STP Spanning Tree Protocol
TA Terminal Adapter
TACACS+ Terminal Access Controller Access Control System Plus
TCP/IP Transmission Control Protocol/Internet Protocol
TLA ID Top-Level Aggregation Identifier
TLV Type, Length, and Value
TOS Type Of Service
TPID Tag Protocol Identifier
TTL Time To Live
UDLD Uni-Directional Link Detection
UDP User Datagram Protocol
ULR Uplink Redundant
UPC Usage Parameter Control
UPC-RED Usage Parameter Control - Random Early Detection
VAA VLAN Access Agent
VLAN Virtual LAN
VRRP Virtual Router Redundancy Protocol
WAN Wide Area Network
WDM Wavelength Division Multiplexing
WFQ Weighted Fair Queueing
WRED Weighted Random Early Detection
WS Work Station
WWW World-Wide Web
XFP 10 gigabit small Form factor Pluggable
Conventions such as KB (kilobytes)
This manual uses the following conventions:
1 KB (kilobyte) is 1,024 bytes.
1 MB (megabyte) is 1,0242bytes.
1 GB (gigabyte) is 1,0243bytes.
1 TB (terabyte) is 1,0244bytes.

Preface
VI
Conventions: The terms "Switch" and "switch"
The term Switch (upper-case "S") is an abbreviation for any or all of the following models:
AX1250S series switch
AX1240S series switch
The term switch (lower-case "s") might refer to a Switch, another type of switch from the
current vendor, or a switch from another vendor. The context decides the meaning.

i
Contents
Part 1: Reading the Manuals...................................................................................................1
1. Reading the Manuals..........................................................................................................1
Command description format.............................................................................................2
Command mode list ..........................................................................................................3
Specifiable values for parameters......................................................................................4
List of character codes ......................................................................................................8
Part 2: Operation and Management of Switches...................................................................9
2. Connecting from an Operation Terminal ...........................................................................9
ftp-server.........................................................................................................................10
line vty ............................................................................................................................11
transport input.................................................................................................................13
3. Editing and Working with Configurations .......................................................................14
end .................................................................................................................................15
exit..................................................................................................................................16
save (write) .....................................................................................................................17
show...............................................................................................................................18
top ..................................................................................................................................19
4. Login Security and RADIUS.............................................................................................20
aaa group server radius...................................................................................................21
aaa authentication login...................................................................................................23
ip access-group...............................................................................................................24
radius-server attribute station-id capitalize.......................................................................26
radius-server dead-interval..............................................................................................27
radius-server host ...........................................................................................................29
radius-server key.............................................................................................................32
radius-server retransmit...................................................................................................34
radius-server timeout.......................................................................................................36
server..............................................................................................................................38
5. Time Settings and NTP.....................................................................................................40
clock timezone................................................................................................................41
ntp client server...............................................................................................................43
ntp client broadcast.........................................................................................................44
ntp client multicast...........................................................................................................45
ntp interval ......................................................................................................................46
6. Device Management .........................................................................................................47
system function...............................................................................................................48
system l2-table mode......................................................................................................51
system recovery..............................................................................................................53
7. Power Saving....................................................................................................................54
power-control port cool-standby.......................................................................................55
schedule-power-control port cool-standby........................................................................56
schedule-power-control port-led ......................................................................................57
schedule-power-control shutdown interface.....................................................................59
schedule-power-control system-sleep..............................................................................61
schedule-power-control time-range..................................................................................63
system fan-control...........................................................................................................68

Contents
ii
system port-led ...............................................................................................................69
system port-led trigger console........................................................................................71
system port-led trigger interface ......................................................................................72
system port-led trigger mc...............................................................................................73
Part 3: Network Interface......................................................................................................74
8. Ethernet.............................................................................................................................74
bandwidth .......................................................................................................................75
description ......................................................................................................................76
duplex.............................................................................................................................77
flowcontrol.......................................................................................................................79
interface fastethernet.......................................................................................................81
interface gigabitethernet..................................................................................................82
link debounce..................................................................................................................83
linkscan-mode.................................................................................................................84
mdix auto........................................................................................................................85
media-type......................................................................................................................86
mtu .................................................................................................................................88
power inline.....................................................................................................................90
power inline allocation.....................................................................................................92
power inline priority-control disable..................................................................................94
shutdown ........................................................................................................................95
speed..............................................................................................................................96
system mtu .....................................................................................................................99
9. Link Aggregation............................................................................................................101
channel-group lacp system-priority................................................................................102
channel-group max-active-port ......................................................................................103
channel-group mode .....................................................................................................105
channel-group periodic-timer.........................................................................................107
description ....................................................................................................................108
interface port-channel....................................................................................................109
lacp port-priority ............................................................................................................110
lacp system-priority .......................................................................................................112
shutdown ......................................................................................................................113
Part 4: Layer 2 Switching....................................................................................................114
10. MAC Address Table......................................................................................................114
mac-address-table aging-time .......................................................................................115
mac-address-table static ...............................................................................................117
11. VLAN.............................................................................................................................119
interface vlan.................................................................................................................120
l2protocol-tunnel eap.....................................................................................................121
l2protocol-tunnel stp......................................................................................................122
mac-address.................................................................................................................123
name.............................................................................................................................124
protocol.........................................................................................................................126
state..............................................................................................................................127
switchport access..........................................................................................................128
switchport isolation........................................................................................................129
switchport mac..............................................................................................................131
switchport mode............................................................................................................134
switchport protocol ........................................................................................................136
switchport trunk.............................................................................................................138
vlan...............................................................................................................................140

Contents
iii
vlan-protocol .................................................................................................................144
12. Spanning Trees.............................................................................................................146
instance........................................................................................................................148
name.............................................................................................................................150
revision .........................................................................................................................151
spanning-tree bpdufilter.................................................................................................152
spanning-tree bpduguard ..............................................................................................153
spanning-tree cost.........................................................................................................154
spanning-tree disable....................................................................................................156
spanning-tree guard......................................................................................................157
spanning-tree link-type..................................................................................................159
spanning-tree loopguard default....................................................................................161
spanning-tree mode ......................................................................................................162
spanning-tree mst configuration.....................................................................................163
spanning-tree mst cost..................................................................................................164
spanning-tree mst forward-time.....................................................................................166
spanning-tree mst hello-time .........................................................................................167
spanning-tree mst max-age...........................................................................................168
spanning-tree mst max-hops.........................................................................................169
spanning-tree mst port-priority.......................................................................................171
spanning-tree mst root priority.......................................................................................173
spanning-tree mst transmission-limit..............................................................................175
spanning-tree pathcost method .....................................................................................176
spanning-tree port-priority .............................................................................................178
spanning-tree portfast....................................................................................................179
spanning-tree portfast bpduguard default.......................................................................180
spanning-tree portfast default ........................................................................................181
spanning-tree single......................................................................................................182
spanning-tree single cost...............................................................................................183
spanning-tree single forward-time..................................................................................185
spanning-tree single hello-time......................................................................................186
spanning-tree single max-age........................................................................................187
spanning-tree single mode ............................................................................................188
spanning-tree single pathcost method ...........................................................................189
spanning-tree single port-priority ...................................................................................191
spanning-tree single priority...........................................................................................192
spanning-tree single transmission-limit..........................................................................193
spanning-tree vlan.........................................................................................................194
spanning-tree vlan cost .................................................................................................195
spanning-tree vlan forward-time ....................................................................................197
spanning-tree vlan hello-time.........................................................................................199
spanning-tree vlan max-age ..........................................................................................201
spanning-tree vlan mode...............................................................................................203
spanning-tree vlan pathcost method..............................................................................205
spanning-tree vlan port-priority......................................................................................207
spanning-tree vlan priority .............................................................................................209
spanning-tree vlan transmission-limit.............................................................................211
13. Ring Protocol................................................................................................................213
axrp ..............................................................................................................................214
axrp vlan-mapping.........................................................................................................215
axrp-ring-port ................................................................................................................217
control-vlan ...................................................................................................................219
disable..........................................................................................................................221
forwarding-shift-time......................................................................................................222

Contents
iv
mode.............................................................................................................................224
name.............................................................................................................................225
vlan-group.....................................................................................................................226
14. DHCP Snooping............................................................................................................228
ip arp inspection limit rate..............................................................................................229
ip arp inspection trust....................................................................................................230
ip arp inspection validate...............................................................................................231
ip arp inspection vlan.....................................................................................................233
ip dhcp snooping...........................................................................................................235
ip dhcp snooping database url.......................................................................................236
ip dhcp snooping database write-delay..........................................................................238
ip dhcp snooping information option allow-untrusted......................................................240
ip dhcp snooping limit rate.............................................................................................241
ip dhcp snooping trust...................................................................................................242
ip dhcp snooping verify mac-address.............................................................................243
ip dhcp snooping vlan....................................................................................................244
ip source binding...........................................................................................................245
ip verify source..............................................................................................................247
15. IGMP Snooping.............................................................................................................249
ip igmp snooping (global)..............................................................................................250
ip igmp snooping (interface) ..........................................................................................251
ip igmp snooping mrouter..............................................................................................252
ip igmp snooping querier...............................................................................................254
16. MLD Snooping..............................................................................................................255
ipv6 mld snooping (global).............................................................................................256
ipv6 mld snooping (interface).........................................................................................257
ipv6 mld snooping source..............................................................................................258
ipv6 mld snooping mrouter............................................................................................259
ipv6 mld snooping querier .............................................................................................261
Part 5: IPv4 Packet Forwarding..........................................................................................262
17. IPv4, ARP, and ICMP.....................................................................................................262
ip address.....................................................................................................................263
ip route..........................................................................................................................265
ip mtu............................................................................................................................267
Part 6: Common to Filtering and QoS................................................................................269
18. Flow Detection Mode....................................................................................................269
flow detection mode ......................................................................................................270
Part 7: Filters.......................................................................................................................272
19. Access Lists .................................................................................................................272
Names that can be specified .........................................................................................273
deny (ip access-list extended) .......................................................................................280
deny (ip access-list standard)........................................................................................286
deny (mac access-list extended) ...................................................................................288
ip access-group.............................................................................................................291
ip access-list extended..................................................................................................293
ip access-list resequence..............................................................................................295
ip access-list standard...................................................................................................297
mac access-group.........................................................................................................299
mac access-list extended ..............................................................................................301
mac access-list resequence ..........................................................................................303

Contents
v
permit (ip access-list extended).....................................................................................305
permit (ip access-list standard)......................................................................................311
permit (mac access-list extended) .................................................................................313
remark ..........................................................................................................................316
Part 8: QoS..........................................................................................................................318
20. QoS ...............................................................................................................................318
Names and values that can be specified........................................................................319
ip qos-flow-group...........................................................................................................326
ip qos-flow-list ...............................................................................................................328
ip qos-flow-list resequence............................................................................................329
limit-queue-length..........................................................................................................331
mac qos-flow-group.......................................................................................................333
mac qos-flow-list ...........................................................................................................335
mac qos-flow-list resequence........................................................................................336
qos (ip qos-flow-list) ......................................................................................................338
qos (mac qos-flow-list) ..................................................................................................345
qos-queue-group...........................................................................................................349
qos-queue-list ...............................................................................................................351
remark ..........................................................................................................................355
traffic-shape rate ...........................................................................................................356
control-packet user-priority............................................................................................358
Part 9: Layer 2 Authentication............................................................................................359
21. Common to Layer 2 Authentication.............................................................................359
authentication arp-relay.................................................................................................360
authentication force-authorized enable..........................................................................362
authentication force-authorized vlan ..............................................................................364
authentication ip access-group......................................................................................366
22. IEEE 802.1X ..................................................................................................................368
Correspondence between configuration commands and authentication modes..............369
aaa accounting dot1x....................................................................................................371
aaa authentication dot1x...............................................................................................372
aaa authorization network default..................................................................................374
dot1x authentication......................................................................................................375
dot1x auto-logout ..........................................................................................................377
dot1x force-authorized...................................................................................................378
dot1x force-authorized eapol .........................................................................................380
dot1x force-authorized vlan ...........................................................................................381
dot1x ignore-eapol-start.................................................................................................384
dot1x max-req...............................................................................................................386
dot1x multiple-authentication.........................................................................................387
dot1x port-control ..........................................................................................................389
dot1x radius-server dead-interval ..................................................................................391
dot1x radius-server host................................................................................................393
dot1x reauthentication...................................................................................................396
dot1x supplicant-detection.............................................................................................397
dot1x system-auth-control.............................................................................................399
dot1x timeout keep-unauth............................................................................................400
dot1x timeout quiet-period.............................................................................................402
dot1x timeout reauth-period...........................................................................................403
dot1x timeout server-timeout .........................................................................................405
dot1x timeout supp-timeout ...........................................................................................406
dot1x timeout tx-period..................................................................................................408
dot1x vlan dynamic enable............................................................................................410

Contents
vi
dot1x vlan dynamic ignore-eapol-start ...........................................................................412
dot1x vlan dynamic max-req..........................................................................................414
dot1x vlan dynamic radius-vlan......................................................................................415
dot1x vlan dynamic reauthentication..............................................................................417
dot1x vlan dynamic supplicant-detection........................................................................418
dot1x vlan dynamic timeout quiet-period........................................................................420
dot1x vlan dynamic timeout reauth-period......................................................................422
dot1x vlan dynamic timeout server-timeout....................................................................424
dot1x vlan dynamic timeout supp-timeout......................................................................426
dot1x vlan dynamic timeout tx-period.............................................................................428
23. Web Authentication......................................................................................................430
Correspondence between configuration commands and authentication modes..............431
aaa accounting web-authentication................................................................................434
aaa authentication web-authentication...........................................................................435
web-authentication authentication .................................................................................437
web-authentication auto-logout......................................................................................439
web-authentication force-authorized vlan.......................................................................440
web-authentication html-fileset ......................................................................................443
web-authentication ip address.......................................................................................445
web-authentication jump-url...........................................................................................447
web-authentication logout ping tos-windows ..................................................................449
web-authentication logout ping ttl ..................................................................................451
web-authentication logout polling count.........................................................................453
web-authentication logout polling enable.......................................................................455
web-authentication logout polling interval ......................................................................457
web-authentication logout polling retry-interval ..............................................................459
web-authentication max-timer........................................................................................461
web-authentication max-user.........................................................................................463
web-authentication max-user (interface)........................................................................465
web-authentication port.................................................................................................467
web-authentication radius-server dead-interval..............................................................468
web-authentication radius-server host ...........................................................................470
web-authentication redirect-mode..................................................................................473
web-authentication redirect enable................................................................................475
web-authentication redirect tcp-port...............................................................................476
web-authentication roaming...........................................................................................478
web-authentication static-vlan force-authorized .............................................................480
web-authentication static-vlan max-user........................................................................482
web-authentication static-vlan max-user (interface) .......................................................484
web-authentication static-vlan roaming..........................................................................486
web-authentication system-auth-control.........................................................................488
web-authentication user-group......................................................................................489
web-authentication user replacement ............................................................................491
web-authentication vlan.................................................................................................492
web-authentication web-port..........................................................................................494
default-router.................................................................................................................496
dns-server.....................................................................................................................497
ip dhcp excluded-address..............................................................................................498
ip dhcp pool ..................................................................................................................499
lease.............................................................................................................................500
max-lease .....................................................................................................................502
network.........................................................................................................................504
service dhcp..................................................................................................................506
24. MAC-based Authentication..........................................................................................507