Cisco Small Business 200 Series User manual

Cisco Small Business 200 Series Advanced Smart
Switch Command Line Reference
ADMINISTRATION
GUIDE

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 2
Contents
Chapter 1: Using the Command Line Interface 14
Command Syntax 15
Command Conventions 16
Interface Naming Convention 17
Using the No Form of a Command 17
Using a Space in a Command 18
Command Modes 18
Command Completion and Abbreviation 20
CLI Error Messages 20
Using CLI Help 20
Command Organization in this Document 21
Chapter 2: Administration 22
Control Packet Handling 23
protocol cdp 23
protocol {lldp | dot1x} 23
show protocol 24
Auto Configuration 25
boot autoinstall 25
boot autoinstall backup-bootfile 26
boot autoinstall backup-tftp 27
boot autoinstall default-config 28
show autoinstall 29
Bonjour 30
bonjour run 30
show bonjour 31
Port Mirroring 32
monitor session 33
show monitor session 34
Cable Diagnostics 35
show cablestatus 35
show fiber-ports optical-transceiver 37
PoE 38

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 3
Contents
lldp med transmit-tlv 38
lldp med transmit-tlv all 40
poe 41
poe power limit 42
poe power management 44
poe powered-device describe 46
poe priority 47
poe reset 48
poe usagethreshold 49
show poe 50
show poe port configuration 51
show poe port info 52
show poe port statistics 54
Switch Management Access Control 55
Authentication Methods 55
ip http authentication 55
login authentication 57
show authentication methods 58
User Logins and Passwords 59
password 59
passwords aging 59
passwords min-length 60
passwords strength-check 61
passwords strength check-username 62
passwords strength exclude-keyword 63
passwords strength maximum repeated-characters 64
show loginsession 65
show passwords configuration 66
show user accounts 67
show users 68
show users login-history 69
username 70
Management Access—General 72
network mgmt_vlan 72
show network 72
HTTP Access 73
ip http port 73
ip http server 74
ip http session soft-timeout 75

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 4
Contents
show ip http 75
Telnet Access 76
ip telnet server enable 76
telnet 77
telnetcon timeout 78
show telnetcon 79
SSH Access 80
copy nvram:sshkey-dsa 80
copy nvram:sshkey-rsa1 80
copy nvram:sshkey-rsa2 81
crypto key generate dsa 81
crypto key generate rsa 82
ip ssh protocol 83
ip ssh server enable 83
sshcon maxsessions 84
sshcon timeout 85
show ip ssh 86
Console Access 86
line console 86
serial baudrate 87
serial databits 88
serial parity 88
serial stopbits 89
serial timeout 90
show serial 90
Management Access Lists 91
deny 91
management access-class 93
management access-list 94
permit 95
show management access-list 96
show management access-class 97
SNTP and Time Settings 98
Clock Commands 98
clock date 98
clock summer-time 99
clock summertime date 99
clock summertime recurring 101
clock timezone 102

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 5
Contents
clock timezone config dhcp 103
show clock 104
SNTP Commands 105
sntp authenticate 105
sntp authentication-key 106
sntp broadcast client poll interval 107
sntp client mode 108
sntp client port 109
sntp server 110
sntp trusted-key 111
sntp unicast client poll-interval 112
show sntp 113
show sntp client 114
show sntp configuration 115
show sntp server 116
System Software and Configuration Management 117
copy 117
delete 121
set contact 122
set hostname 122
set location 123
reload 124
reset factory default 125
write memory 125
show config-file 126
show config-file list 127
show running-config 128
show language-packs detail 130
show language-packs summary 131
show sysinfo 132
Syslog 134
clear logging buffered 134
clear logging persistent 135
copy 135
logging aggregation enable 137
logging aggregation maxtime 137
logging buffered enable 138
logging buffered severity 139
logging console enable 140
logging console severity 140

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 6
Contents
logging host 141
logging host remove 143
logging persistent enable 144
logging persistent severity 144
logging persistent size 146
logging syslog enable 146
logging syslog facility 147
logging syslog port 148
show logging 149
show logging buffered 151
show logging hosts 151
show logging persistent 152
show logging traplogs 154
RMON 155
rmon alarm 155
rmon collection history 157
rmon event 159
show environment 160
show process cpu 161
show rmon alarm 162
show rmon alarm-table 163
show rmon collection history 164
show rmon events 165
show rmon history 166
show rmon log 169
show rmon statistics 170
Chapter 3: Port Management 173
Switch Ports 173
auto-negotiate 173
auto-negotiate all 174
mtu 175
shutdown 176
shutdown all 176
speed 177
speed all 178
show interface advertise 179
show interface ethernet 180
show port 183

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 7
Contents
Green Ethernet 185
green-mode energy-detect 185
show green-mode 186
Flow Control and Storm Control 188
storm-control broadcast 188
storm-control broadcast level 189
storm-control broadcast rate 190
storm-control flowcontrol 191
storm-control multicast 192
storm-control multicast rate 193
storm-control multicast level 194
storm-control unicast 195
storm-control unicast level 196
storm-control unicast rate 197
show storm-control 198
Link Aggregation 199
addport 200
deleteport (Interface Config) 200
deleteport (Global Config) 201
port lacpmode 202
port lacpmode all 203
port lacptimeout (Interface Config) 203
port lacptimeout (Global Config) 204
port-channel adminmode 205
port-channel load-balance 206
port-channel static 208
show lacp actor 208
show lacp partner 211
show port-channel 213
show port-channel brief 214
show port-channel system priority 215
Chapter 4: VLAN Management 217
VLAN 217
vlan 217
vlan database 218
vlan default 218
vlan priority 219
switchport access vlan 220

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 8
Contents
switchport general acceptable-frame-type tagged-only 220
switchport general allowed vlan 221
switchport general pvid 222
switchport general ingress-filtering disable 223
switchport trunk allowed vlan 223
switchport mode 224
switchport trunk native-vlan 226
show interfaces switchport 226
LLDP-MED 228
lldp med 228
lldp med all 228
lldp med confignotification 229
lldp med confignotification all 229
lldp med inventory-tlv asset-id 230
lldp med location-tlv co-ordinate 231
lldp med location-tlv civic-addr 231
lldp med location-tlv elin-addr 233
lldp med location-tlv type 234
lldp med transmit-tlv 235
lldp med transmit-tlv all 236
show lldp med 237
show lldp med location-tlv 237
show lldp med local-device detail 238
show lldp med remote-device 240
show lldp med remote-device detail 241
Auto-VoIP 242
auto-voip oui 243
auto-voip oui-based 243
auto-voip oui-based all 244
auto-voip oui-priority 245
auto-voip oui-vlan 246
auto-voip protocol-based 247
auto-voip protocol-based all 247
show auto-voip oui-based interface 248
show auto-voip oui-table 249
show auto-voip protocol-based interface 250
show auto-voip sessions 251
Media VLAN 252
media-vlan (Global Config) 252

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 9
Contents
media-vlan (Interface Config) 253
show media-vlan 255
Chapter 5: Spanning Tree Protocol 257
spanning-tree 257
spanning tree auto edge 258
spanning-tree bpdufilter 258
spanning-tree bpdufilter default 259
spanning-tree bpdumigrationcheck 260
spanning-tree bpdu flood 260
spanning-tree bpdu flooding 261
spanning-tree configuration name 262
spanning-tree configuration revision 263
spanning-tree edgeport 264
spanning-tree forward-time 265
spanning-tree max-age 266
spanning-tree mode 267
spanning-tree mst 267
spanning-tree mst instance 270
spanning-tree mst priority 271
spanning-tree mst vlan 272
spanning-tree port mode 273
spanning-tree port mode all 274
spanning-tree priority 274
show spanning-tree 275
show spanning-tree brief 276
show spanning-tree interface 277
show spanning-tree mst port detailed 278
show spanning-tree mst port summary 280
show spanning-tree mst summary 282
show spanning-tree vlan 283
Chapter 6: MAC Address Tables 285
bridge address 285
bridge aging-time 286
clear mac-addr-table 287
show mac-addr-table 287
show mac-addr-table dynamic 290
show mac-addr-table static 291

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 10
Contents
Chapter 7: Multicast 293
Multicast Forwarding and MAC Filtering 293
macfilter 293
macfilter adddest 294
macfilter adddest all 295
set multicast filter-unregistered 296
set multicast forward-all 297
set multicast forward-unregistered 298
show mac-address-table multicast 299
show mac-address-table staticfiltering 300
show multicast filtering 301
IGMP Snooping 302
set igmp 302
set igmp fast-leave 303
set igmp groupmembership-interval 304
set igmp maxresponse 305
set igmp mcrtrexpiretime 306
set igmp mrouter 307
set igmp mrouter interface 308
show igmpsnooping 308
show igmpsnooping mrouter interface 311
show igmpsnooping mrouter vlan 311
show mac-address-table igmpsnooping 312
MLD Snooping 314
set mld 314
set mld fast-leave 315
set mld groupmembership-interval 316
set mld maxresponse 316
set mld mcrtrexpiretime 317
set mld mrouter 318
set mld mrouter interface 319
show mac-address-table mldsnooping 320
show mldsnooping 321
show mldsnooping mrouter interface 323
show mldsnooping mrouter vlan 324
Chapter 8: Security 326
General 326
show net connections 326

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 11
Contents
RADIUS 327
radius server attribute nas-ip-addr 327
radius server deadtime 328
radius server host 329
radius server key 331
radius server msgauth 332
radius server priority 333
radius server retransmit 334
radius server timeout 335
show radius 336
show radius servers 337
show radius statistics 340
Dot1x 342
authentication dot1x 343
clear dot1x statistics 343
dot1x pae 344
dot1x port-control 345
dot1x port-control all 346
dot1x re-authentication 348
dot1x supplicant portcontrol 348
dot1x supplicant user 349
dot1x system-auth-control 350
dot1x timeout quiet-period 351
dot1x timeout reauth-period 352
dot1x timeout server-timeout 353
dot1x timeout supp-timeout 354
dot1x timeout tx-period 355
dot1x user 356
show dot1x 357
show dot1x clients 362
show dot1x users 363
MAC Based Port Security 364
port-security 364
port-security mac-address move 365
port-security max-dynamic 365
port-security max-static 366
port-security reset port 367
port-security violation action 367
show port-security 369

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 12
Contents
Chapter 9: Quality of Service 371
Rate Limit Profile Commands 371
rate-limit profile (Global) 371
rate-limit profile (Interface) 373
show rate-limit 373
show rate-limit profile 374
Class of Service Commands 376
classofservice dot1p-mapping 376
classofservice ip-dscp-mapping 377
classofservice ip-precedence-mapping 377
classofservice trust 378
cos-queue min-bandwidth 380
cos-queue wrr 381
traffic-shape 382
show classofservice dot1p-mapping 383
show classofservice ip-dscp mapping 384
show classofservice ip-precedence-mapping 385
show classofservice trust 386
show interfaces cos-queue 387
Chapter 10: IP Configuration 389
IP Addresses 389
clear arp-switch 389
clear network ipv6 dhcp statistics 390
dhcp client vendor-id-option 390
dhcp client vendor-id-option-string 391
network ipv6 address 392
network ipv6 enable 393
network ipv6 gateway 394
network ipv6 neighbor 394
network parms 395
network protocol 396
ping 397
ping ipv6 398
renew dhcp network-port 400
show arp switch 400
show dhcp client vendor-id-option 401
show dhcp client timezone-option 402
show network 402

Cisco Small Business 200E Series Advanced Smart Switch Command Reference 13
Contents
show network ipv6 dhcp statistics 403
show network ndp 405
DNS 406
clear host 407
ip domain lookup 407
ip domain name 408
ip domain retry 409
ip domain timeout 410
ip host 410
ip name server 411
ipv6 host 412
show hosts 413
Chapter 11: SNMP 415
snmp-server community 415
snmp-server enable 416
snmp-server enable traps authentication 416
snmp-server enable traps linkmode 417
snmp-server enable traps multiusers 418
snmp-server enable traps stpmode 418
snmp-server host traps 419
show snmp 420
snmp-server engineID local 420
snmp-server user 421
snmp-server v3-host 423
snmp trap link-status all 424
snmp trap link-status 424
show snmp engineid 425
show snmp users 425
show trapflags 427

1
Cisco Small Business 200E Series Advanced Smart Switch Command Reference 14
Using the Command Line Interface
The command-line interface (CLI) provides a text-based way to manage and
monitor the system. You can access the CLI using a physical serial connection or a
remote logical connection with telnet.
This chapter describes the CLI syntax, conventions, and modes. It contains the
following sections:
•Command Syntax
•Command Conventions
•Interface Naming Convention
•Using the No Form of a Command
•Command Modes
•Command Completion and Abbreviation
•CLI Error Messages
•Command Organization in this Document

Using the Command Line Interface
Command Syntax
Cisco Small Business 200E Series Advanced Smart Switch Command Reference 15
1
Command Syntax
A command is one or more words that might include one or more parameters.
Parameters might be required or optional values.
Some commands, such as show network or clear vlan, do not require parameters.
Other commands, such as network parms, require that you supply a value after the
command. You must type the parameter values in a specific order. Optional
parameters follow required parameters. The following example describes the
network parms command syntax:
network parms ip-address netmask [gateway]
•network parms is the command name.
•ip-address and netmask are mandatory parameters that you must replace with
the actual value.
•gateway is an optional parameter that you can replace with text.
This reference lists each command by the command name and provides the
following information where applicable:
•Syntax Descriptions—describes each keyword and parameter.
•Defaults—describe any default values for the command parameters.
•Command Modes—identifies the CLI command modes in which you can
execute the command.
•Examples—one or more examples of the command string, the output, and
descriptions of the output fields, if applicable.
•Related Commands—other commands you can use in conjunction with the
primary command.

Using the Command Line Interface
Command Conventions
Cisco Small Business 200E Series Advanced Smart Switch Command Reference 16
1
Command Conventions
In this document the command elements include command key words and
parameters. Key words are entered as shown in the command. Parameters are
shown in italics and represent variable text. You must replace the parameter name
with an appropriate value, which might be an alphabetic, numeric, or alphanumeric
value. Parameters are order-dependent.
Keywords and parameters could be mandatory or optional, and might be one of
several choices. The following table describes the conventions this document
uses to distinguish command elements.
Symbol Examples Description
No brackets spanning-tree Mandatory parameter that is not in
italics. The command element is a
keyword. Enter it as shown.
When in italics, the command
element is a variable (placeholder
text). Enter your own text to replace
it.
ip-address A parameter in italics is a variable
(placeholder text). Enter the
command, replacing the variable in
the command with a value. For
example, the ip-address variable might
be replaced by 192.168.10.254.
[ ] square brackets [encrypted] Optional parameter entered as
show.
[ip-address]Optional variable that can be
replaced by a value.
[level 0-100]Optional parameter with a range of
values.

Using the Command Line Interface
Interface Naming Convention
Cisco Small Business 200E Series Advanced Smart Switch Command Reference 17
1
Interface Naming Convention
Fast Ethernet switch ports are represented in the CLI as e1 for port 1, e2 for port 2,
e3 for port 3, and so forth.
The gigabit Ethernet switch ports are represented as g1 and g2.
Link aggregation groups (LAGs) are configurable as logical interfaces and are
represented in the CLI as ch1, ch2, ch3, and so forth.
Using the No Form of a Command
The no keyword is a specific form of an existing configuration command and does
not represent a new or distinct command. Almost every configuration command
has a no form. In general, use the no form of the command to reverse the action of
a command or reset it to the default value. Example:
#no shutdown
Reverses the shutdown command to bring up the interface.
{} curly braces {drop | forward} A list of parameter choices, each
separated by a vertical bar, to be
entered as shown.
{ip-address | hostname}A list of parameter choices, each
separated by a vertical bar. The
chosen variable is replaced by the
appropriate value.
[{}] Braces within
square brackets
{source interface
interface [{rx |tx}]
A required choice within an optional
element. In the example, if you chose
to enter source interface, you must
enter a value for the interface
parameter, and you can optionally
chose the rx or the tx parameter.
Symbol Examples Description

Using the Command Line Interface
Using a Space in a Command
Cisco Small Business 200E Series Advanced Smart Switch Command Reference 18
1
Using a Space in a Command
To include a space in a string, enclose the string in quotes, such as "string space".
Example:
#set contact "Thom Dobro"
Command Modes
Modes group commands according to the function of each command. The
commands in a particular mode are not available until you change to that mode.
The command prompt changes in each command mode to identify the current
mode. The following table describes the command modes and the prompts for
that mode.
NOTE In the following table, the word switch in the prompt represents the switch
hostname. By default, the hostname is switch<last three bytes of the MAC address>.
You can use the set hostname command to configure a different hostname that will
display in the CLI prompt.
Command Mode Prompt Description
Privileged EXEC switch# The show commands that
display status and statistics,
some configuration commands,
and access to the Global
Config and VLAN Config
modes.
Global Config switch (Config)# General setup commands and
modifications to the running
configuration.
VLAN Config switch (Vlan)# VLAN configuration commands.
Interface Config (switch) (Interface
interface)#
Manage the interfaces.
Access List Config switch(config-macal)# Switch management access list
configuration commands.

Using the Command Line Interface
Command Modes
Cisco Small Business 200E Series Advanced Smart Switch Command Reference 19
1
The following table explains how to enter and exit each mode.
Line Console
Config
switch (config-line)# Outbound telnet settings and
console interface settings,
including console login and
authentication information.
Line SSH Config switch (config-ssh)# SSH login and authentication
information.
Line Telnet Config switch (config-telnet)# Telnet login and authentication
information.
Mode To Enter To Exit
Privileged EXEC Users enter this mode
when they log in.
To log out of the CLI session, enter
quit.
Global Config From the Privileged
EXEC mode, enter
configure or config.
To exit to the Privileged EXEC
mode, enter exit, or press Ctrl-Z.
VLAN Config From the Privileged
EXEC mode, enter
vlan database.
To exit to the Privileged EXEC
mode, enter exit or press Ctrl-Z.
Interface Config From the Global
Config mode, enter
interface interface
To exit to the Global Config mode,
enter exit. To return to Privileged
EXEC mode, enter Ctrl-Z.
Access List
Config
From the Global
Config mode, enter
management
access-list listname
To exit to the Global Config mode,
enter exit. To return to Privileged
EXEC mode, enter Ctrl-Z.
Line Console From the Global
Config mode, enter
line console.
To exit to the Global Config mode,
enter exit. To return to Privileged
EXEC mode, enter Ctrl-Z.
Line SSH From the Global
Config mode, enter
line ssh.
To exit to the Global Config mode,
enter exit. To return to Privileged
EXEC mode, enter Ctrl-Z.
Command Mode Prompt Description

Using the Command Line Interface
Command Completion and Abbreviation
Cisco Small Business 200E Series Advanced Smart Switch Command Reference 20
1
Command Completion and Abbreviation
The command completion feature finishes spelling the keyword when you type
enough letters of a command to uniquely identify the command keyword. After
you have entered enough letters, press the spacebar or Tab key to complete the
keyword.
The command abbreviation feature allows you to execute a command when you
have entered enough letters to uniquely identify the command. You must enter all
of the required keywords and parameters, however.
CLI Error Messages
If you enter a command and the system is unable to execute it, an error message
appears. The most common CLI error messages are:
•% Invalid input detected at '^' marker—You entered an
incorrect or unavailable command. The carat (^) shows where the invalid
text is detected. This message also appears if any of the parameters or
values are not recognized.
•Command not found / Incomplete command. Use ? to list
commands—You did not enter the required keywords or values.
•Ambiguous command—You did not enter enough letters to uniquely
identify the command.
Using CLI Help
Enter a question mark (?) at the command prompt to display the commands
available in the current mode.
Line telnet From the Global
Config mode, enter
line telnet.
To exit to the Global Config mode,
enter exit. To return to Privileged
EXEC mode, enter Ctrl-Z.
Mode To Enter To Exit