Cisco SPS2024 User manual

Cisco Small Business Pro
SPS208G/SPS224G4/SPS2024 Ethernet Switches
Command Line Interface
REFERENCE GUIDE

© 2008 Cisco Systems, Inc. All rights reserved. OL-18485-01
Xd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh
8^hXd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
889:!88:CI!8^hXd:dh!8^hXdAjb^c!8^hXdCZmjh!8^hXdHiVY^jbK^h^dc!8^hXdIZaZEgZhZcXZ!8^hXdLZW:m!i]Z8^hXdad\d!98:!VcYLZaXdbZidi]Z=jbVcCZildg`VgZigVYZbVg`h08]Vc\^c\i]ZLVnLZLdg`!
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh
8^hXd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
889:!88:CI!8^hXd:dh!8^hXdAjb^c!8^hXdCZmjh!8^hXdHiVY^jbK^h^dc!8^hXdIZaZEgZhZcXZ!8^hXdLZW:m!i]Z8^hXdad\d!98:!VcYLZaXdbZidi]Z=jbVcCZildg`VgZigVYZbVg`h08]Vc\^c\i]ZLVnLZLdg`!
A^kZ!EaVn!VcYAZVgcVcY8^hXdHidgZVgZhZgk^XZbVg`h0VcY6XXZhhGZ\^higVg!6^gdcZi!6hncXDH!7g^c\^c\i]ZBZZi^c\IdNdj!8ViVanhi!8896!889E!88>:!88>E!88C6!88CE!88HE!88KE!8^hXd!i]Z8^hXd8Zgi^[^ZY
>ciZgcZildg`:meZgiad\d!8^hXd>DH!8^hXdEgZhh!8^hXdHnhiZbh!8^hXdHnhiZbh8Ve^iVa!i]Z8^hXdHnhiZbhad\d!8^hXdJc^in!8daaVWdgVi^dcL^i]djiA^b^iVi^dc!:i]Zg;Vhi!:i]ZgHl^iX]!:kZci8ZciZg!;VhiHiZe!;daadlBZ
7gdlh^c\!;dgbH]VgZ!<^\V9g^kZ!=dbZA^c`!>ciZgcZiFjdi^Zci!>DH!^E]dcZ!^Fj^X`HijYn!>gdcEdgi!i]Z>gdcEdgiad\d!A^\]iHigZVb!A^c`hnh!BZY^VIdcZ!BZZi^c\EaVXZ!BZZi^c\EaVXZ8]^bZHdjcY!B<M!CZildg`Zgh!CZildg`^c\
6XVYZbn!CZildg`GZ\^higVg!E8Cdl!E>M!EdlZgEVcZah!Egd8dccZXi!HXg^eiH]VgZ!HZcYZg7VhZ!HB6GIcZi!HeZXigjb:meZgi!HiVX`L^hZ!I]Z;VhiZhiLVnid>cXgZVhZNdjg>ciZgcZiFjdi^Zci!IgVchEVi]!LZW:m!VcYi]ZLZW:m
ad\dVgZgZ\^hiZgZYigVYZbVg`hd[8^hXdHnhiZbh!>cX#VcY$dg^ihV[[^a^ViZh^ci]ZJc^iZYHiViZhVcYXZgiV^cdi]ZgXdjcig^Zh#
6aadi]ZgigVYZbVg`hbZci^dcZY^ci]^hYdXjbZcidglZWh^iZVgZi]ZegdeZgind[i]Z^ggZheZXi^kZdlcZgh#I]ZjhZd[i]ZldgYeVgicZgYdZhcdi^beanVeVgicZgh]^egZaVi^dch]^eWZilZZc8^hXdVcYVcndi]ZgXdbeVcn#%-%.G
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 1
Chapter 1: Introduction 18
Overview 18
CLI Command Modes 18
Accessing the Command Line Interface 22
Editing Features 28
Chapter 2: AAA Commands 33
aaa authentication login 33
aaa authentication enable 35
login authentication 36
enable authentication 37
ip http authentication 39
ip https authentication 40
show authentication methods 41
password 43
enable password 44
username 45
show users accounts 46
show privilege 47
Chapter 3: ACL Commands 48
ip access-list 48
permit (ip) 49
deny (IP) 52
mac access-list 56
permit (MAC) 57
deny (MAC) 58
service-policy 60
service-acl 60
show access-lists 61

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 2
show interfaces access-lists 62
Chapter 4: ARP Inspection Commands 64
ip arp inspection 64
ip arp inspection vlan 65
ip arp inspection trust 66
ip arp inspection validate 67
ip arp inspection list create 68
ip mac 69
ip arp inspection list assign 70
ip arp inspection logging interval 71
show ip arp inspection 72
show ip arp inspection list 73
Chapter 5: Address Table Commands 75
bridge address 75
bridge multicast filtering 76
bridge multicast address 77
bridge multicast forbidden address 79
bridge multicast forward-all 80
bridge multicast forbidden forward-all 82
bridge aging time 83
clear bridge 84
port security 85
port security mode 86
port security max 87
show bridge address-table 88
show bridge address-table static 89
show bridge address-table count 91
show bridge multicast address-table 92

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 3
show bridge multicast address-table static 94
show bridge multicast filtering 95
show ports security 96
show ports security addresses 98
Chapter 6: Clock Commands 100
clock set 100
clock source 101
clock timezone 102
clock summer-time 103
sntp authentication-key 105
sntp authenticate 106
sntp port 107
sntp trusted-key 108
sntp client poll timer 109
sntp broadcast client enable 110
sntp anycast client enable 111
sntp client enable 112
sntp client enable (Interface) 113
sntp unicast client enable 114
sntp unicast client poll 115
sntp server 116
show clock 117
show sntp configuration 119
show sntp status 120
Chapter 7: Configuration and Image File Commands 122
copy 122
delete startup-config 125
show running-config 126

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 4
show startup-config 127
Chapter 8: DHCP Commands 129
ip dhcp snooping 129
ip dhcp snooping vlan 130
ip dhcp snooping trust 131
ip dhcp information option allowed-untrusted 132
ip dhcp snooping verify 133
ip dhcp snooping database 134
ip dhcp snooping database update-freq 135
ip dhcp snooping binding 136
clear ip dhcp snooping database 137
show ip dhcp snooping 138
show ip dhcp snooping binding 139
Chapter 9: DHCP Relay Commands 141
ip dhcp relay enable (global) 141
ip dhcp relay enable (interface) 142
ip dhcp relay address 143
show ip dhcp relay 144
Chapter 10: DHCP Option 82 Commands 145
ip dhcp information option 145
show ip dhcp information option 146
Chapter 11: DHCP Auto-configuration 147
ip dhcp autoconfig 147
ip dhcp autoconfig file 148
show ip dhcp autoconfig 149

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 5
Chapter 12: Ethernet Configuration Commands 150
interface ethernet 150
interface range ethernet 151
shutdown 152
description 153
speed 154
duplex 155
negotiation 156
port jumbo-frame 157
show system flowcontrol 158
flowcontrol 159
mdix 160
back-pressure 161
port jumbo-frame 162
sfp speed 163
clear counters 164
set interface active 165
show interfaces configuration 166
show interfaces status 167
show interfaces advertise 169
show interfaces description 170
show interfaces counters 171
show ports jumbo-frame 174
port storm-control broadcast enable 175
port storm-control broadcast rate 176
port storm-control include-multicast 177
port storm-control unknown-unicast fastethernet enable 178
port storm-control unknown-unicast fastethernet rate 179
show ports storm-control 180

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 6
Chapter 13: GVRP Commands 182
gvrp enable (Global) 182
gvrp enable (Interface) 183
garp timer 184
gvrp vlan-creation-forbid 185
gvrp registration-forbid 186
clear gvrp statistics 187
show gvrp configuration 188
show gvrp statistics 189
show gvrp error-statistics 190
Chapter 14: IGMP Snooping Commands 192
ip igmp snooping (global) 192
ip igmp snooping (Interface) 193
ip igmp snooping mrouter 194
ip igmp snooping querier enable 195
ip igmp snooping host-time-out 196
ip igmp snooping mrouter-time-out 197
ip igmp snooping leave-time-out 198
ip igmp snooping multicast-tv 199
ip igmp snooping map cpe vlan 200
show ip igmp snooping mrouter 201
show ip igmp snooping interface 202
show ip igmp snooping groups 203
show ip igmp snooping multicast-tv 205
show ip igmp snooping cpe vlans 206
Chapter 15: IP Address Commands 208
ip address 208
ip address dhcp 209

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 7
renew dhcp 211
ip default-gateway 212
show ip interface 213
arp 214
arp timeout 215
clear arp-cache 216
show arp 217
ip domain-lookup 218
ip domain-name 219
ip name-server 220
ip host 221
clear host 222
clear host dhcp 223
show hosts 224
Chapter 16: IP Source Guard Commands 226
ip source-guard (global) 226
ip source-guard (interface) 227
ip source-guard binding 228
ip source-guard tcam retries-freq 229
show ip source-guard configuration 230
show ip source-guard status 231
show ip source-guard inactive 233
Chapter 17: LACP Commands 235
lacp system-priority 235
lacp port-priority 236
lacp timeout 237
show lacp ethernet 238
show lacp port-channel 240

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 8
Chapter 18: Line Commands 242
line 242
speed 243
exec-timeout 244
show line 245
Chapter 19: Management ACL Commands 247
management access-list 247
management access-class 248
permit (management) 249
deny (management) 251
show management access-list 252
show management access-class 253
Chapter 20: PHY Diagnostics Commands 254
test copper-port tdr 254
show copper-ports tdr 255
show copper-ports cable-length 256
show fiber-ports optical-transceiver 257
Chapter 21: Port Channel Commands 260
interface port-channel 260
interface range port-channel 261
channel-group 262
show interfaces port-channel 263
Chapter 22: Port Monitor Commands 265
port monitor 265
show ports monitor 266

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 9
Chapter 23: QoS Commands 268
qos 268
show qos 269
class-map 270
show class-map 271
match 272
policy-map 273
class 274
show policy-map 276
trust 277
set 279
police 280
qos aggregate-policer 281
show qos aggregate-policer 283
police aggregate 284
wrr-queue bandwidth 285
wrr-queue cos-map 286
priority-queue out num-of-queues 288
traffic-shape 289
rate-limit (Ethernet) 290
show qos interface 291
qos wrr-queue threshold 293
qos map policed-dscp 295
qos map dscp-queue 296
qos map dscp-dp 297
qos trust (Global) 298
qos trust (Interface) 299
qos cos 300
qos dscp-mutation 301

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 10
qos map dscp-mutation 302
show qos map 303
Chapter 24: RADIUS Commands 306
radius-server host 306
radius-server key 308
radius-server retransmit 309
radius-server source-ip 310
radius-server timeout 311
radius-server deadtime 312
show radius-servers 313
Chapter 25: RMON Commands 314
show rmon statistics 314
rmon collection history 317
show rmon collection history 318
show rmon history 319
rmon alarm 323
show rmon alarm-table 325
show rmon alarm 326
rmon event 329
show rmon events 330
show rmon log 331
rmon table-size 333
Chapter 26: SNMP Commands 334
snmp-server community 334
snmp-server view 336
snmp-server group 337
snmp-server user 339

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 11
snmp-server filter 341
snmp-server host 342
snmp-server v3-host 344
snmp-server engineID local 346
snmp-server enable traps 348
snmp-server trap authentication 349
snmp-server contact 350
snmp-server location 351
snmp-server set 352
show snmp 353
show snmp engineID 355
show snmp views 355
show snmp groups 356
show snmp filters 358
show snmp users 359
Chapter 27: RSA and Certificate Commands 361
crypto certificate generate 361
crypto key generate dsa 363
crypto key generate rsa 364
Chapter 28: Spanning Tree Commands 365
spanning-tree 365
spanning-tree mode 366
spanning-tree forward-time 367
spanning-tree hello-time 368
spanning-tree max-age 369
spanning-tree priority 370
spanning-tree disable 371
spanning-tree cost 372

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 12
spanning-tree port-priority 373
spanning-tree portfast 374
spanning-tree link-type 375
spanning-tree pathcost method 376
spanning-tree bpdu 377
spanning-tree guard root 378
clear spanning-tree detected-protocols 379
spanning-tree mst priority 380
spanning-tree mst max-hops 381
spanning-tree mst port-priority 382
spanning-tree mst cost 383
spanning-tree mst configuration 385
instance (mst) 386
name (mst) 387
revision (mst) 388
show (mst) 389
exit (mst) 390
abort (mst) 391
show spanning-tree 392
Chapter 29: SSH Commands 403
ip ssh port 403
ip ssh server 404
ip ssh pubkey-auth 405
crypto key pubkey-chain ssh 406
user-key 407
key-string 408
show ip ssh 410
show crypto key pubkey-chain ssh 411

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 13
show crypto key mypubkey 412
crypto certificate request 413
crypto certificate import 415
crypto certificate export 417
show crypto certificate mycertificate 418
Chapter 30: Syslog Commands 420
logging on 420
logging 421
logging console 422
logging buffered 423
logging buffered size 424
clear logging 425
logging file 426
clear logging file 427
aaa logging 428
file-system logging 429
management logging 430
show logging 431
show logging file 432
show syslog-servers 434
Chapter 31: System Management Commands 436
ping 436
traceroute 438
telnet 441
resume 445
reload 446
hostname 447
service cpu-utilization 448

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 14
show cpu utilization 449
show users 450
show sessions 451
show system 452
show version 454
show system tcam utilization 455
Chapter 32: TACACS+ Commands 456
tacacs-server host 456
tacacs-server key 458
tacacs-server timeout 459
tacacs-server source-ip 460
show tacacs 461
Chapter 33: User Interface Commands 463
login 463
configure 464
exit (configuration) 464
exit(EXEC) 465
end 466
help 467
history 468
history size 469
terminal history 470
terminal history size 471
terminal datadump 472
debug-mode 473
show history 474
do 475

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 15
Chapter 34: VLAN Commands 477
switchport protected 477
switchport protected-port 478
switchport protected-port fastethernet 479
vlan database 480
vlan 481
default-vlan vlan 482
interface vlan 483
interface range vlan 484
name 485
switchport mode 486
switchport protected 487
switchport access vlan 488
switchport access multicast-tv vlan 489
switchport trunk allowed vlan 490
switchport trunk native vlan 491
switchport general allowed vlan 492
switchport general pvid 494
switchport general ingress-filtering disable 495
switchport general acceptable-frame-type tagged-only 496
switchport customer vlan 497
switchport customer multicast-tv vlan 498
switchport forbidden vlan 499
show interfaces protected-ports 500
show protected-ports fastethernet 501
show vlan 502
show vlan multicast-tv 503
show interfaces switchport 504

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 16
Chapter 35: Web Server Commands 506
ip http server 506
ip http port 507
ip http exec-timeout 508
ip https server 509
ip https port 510
ip https exec-timeout 511
ip https certificate 512
show ip http 513
show ip https 514
Chapter 36: 802.1x Commands 516
aaa authentication dot1x 516
dot1x system-auth-control 517
dot1x port-control 518
dot1x re-authentication 519
dot1x timeout re-authperiod 520
dot1x re-authenticate 521
dot1x timeout quiet-period 522
dot1x timeout tx-period 523
dot1x max-req 524
dot1x timeout supp-timeout 525
dot1x timeout server-timeout 527
show dot1x 528
show dot1x users 531
show dot1x statistics 532
Advanced Features 535
dot1x auth-not-req 535
dot1x multiple-hosts 536

Contents
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 17
dot1x radius-attributes vlan 537
dot1x single-host-violation 538
dot1x bpdu 539
show dot1x bpdu 541
dot1x guest-vlan 542
dot1x guest-vlan enable 543
dot1x mac-authentication 544
show dot1x advanced 545
Appendix A: Alias Names 547
Alias Name Support 547
Appendix B: Where to Go From Here 548
Product Resources 548
Related Documentation 548
Appendix C: Additional Information 549
Regulatory Compliance and Safety Information 549
Warranty 549
End User License Agreement (EULA) 549
Appendix D: Support Contacts 550

1
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 18
Introduction
Overview
This document describes the Command Line Interface (CLI) used to manage the
Linksys SPS208G, SPS224G4, and SPS2024 switches. Unless noted otherwise,
all of the CLI commands in this document apply to all three switches.
This chapter describes the CLI command modes, how to access the CLI, and the
CLI command editing features.
CLI Command Modes
For greater ease of use, the Command Line Interface (CLI) is divided into four
command modes arranged hierarchically by privilege level. The command modes
are (in the order in which they are accessed):
•User EXEC mode (lowest privilege)
•Privileged EXEC mode
•Global Configuration mode
•Interface Configuration mode (highest privilege)
Each command mode has its own unique console prompt and set of CLI
commands. Entering a question mark at the console prompt displays a list of
available commands for the current mode. Specific commands are used to switch
from one mode to another.