Dell PowerConnect 2024 User manual

Dell Networking
2024/2048/3024/3048/4032/4064
CLI Reference Guide
Regulatory Model: N2024/N2024P/N2048/
N2048P/N3024/N3024F/N3024P/N3048/
N3048P/N4032/N4032F/N4064/N4064F
2CSNXXX_SWUM200.book Page 1 Tuesday, December 10, 2013 1:22 PM

Notes
NOTE: A NOTE indicates important information that helps you make better use of
your computer.
CAUTION: A CAUTION indicates potential damage to hardware or loss of data if
instructions are not followed.
____________________
Information in this publication is subject to change without notice.
© 2013 Dell Inc. All rights reserved.
Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc.
is strictly forbidden.
Trademarks used in this text: Dell™, the DELL logo, and PowerConnect™ are trademarks of Dell
Inc. StrataXGS®is a registered trademark of Broadcom Corp. sFlow®is a registered trademark of
InMon Corporation. Cisco®is a registered trademark of Cisco Systems, Inc. and/or its affiliates in the
United States and certain other countries. Microsoft®and Windows®are registered trademarks of
Microsoft Corporation in the United States and/or other countries.
Other trademarks and trade names may be used in this publication to refer to either the entities claiming
the marks and names or their products. Dell Inc. disclaims any proprietary interest in trademarks and
trade names other than its own.
Regulatory Model N2024/N2024P/N2048/N2048P/N3024/N3024F/N3024P/N3048/N3048P/N4032/N4032F/N4064/N4064F
2013 - December Rev. A02
2CSNXXX_SWUM200.book Page 2 Tuesday, December 10, 2013 1:22 PM

Contents 3
Contents
1 Command Groups . . . . . . . . . . . . . . . . . . 83
Introduction . . . . . . . . . . . . . . . . . . . . . . . 83
Command Groups . . . . . . . . . . . . . . . . . . . . 83
Mode Types . . . . . . . . . . . . . . . . . . . . . . . 87
Layer 2 Commands . . . . . . . . . . . . . . . . . . . . 89
Layer 3 Commands . . . . . . . . . . . . . . . . . . . . 127
Utility Commands . . . . . . . . . . . . . . . . . . . . 156
2 Using the CLI . . . . . . . . . . . . . . . . . . . . . 179
Introduction . . . . . . . . . . . . . . . . . . . . . . . 179
Entering and Editing CLI Commands. . . . . . . . . . . 179
CLI Command Modes . . . . . . . . . . . . . . . . . . 190
Starting the CLI. . . . . . . . . . . . . . . . . . . . . . 203
Using CLI Functions and Tools. . . . . . . . . . . . . . 203
2CSNXXX_SWUM200.book Page 3 Tuesday, December 10, 2013 1:22 PM

Contents 4
3 Layer 2 Switching Commands . . . . . . . . 215
4 AAA Commands . . . . . . . . . . . . . . . . . . . 217
TACACS+ Accounting . . . . . . . . . . . . . . . . . . 218
Commands in this Chapter. . . . . . . . . . . . . . . . 219
aaa authentication dot1x default . . . . . . . . . . . . 220
aaa authentication enable. . . . . . . . . . . . . . . . 221
aaa authentication login. . . . . . . . . . . . . . . . . 223
aaa authorization . . . . . . . . . . . . . . . . . . . . 224
aaa authorization network default radius. . . . . . . . 227
aaa ias-user username . . . . . . . . . . . . . . . . . 227
aaa new-model . . . . . . . . . . . . . . . . . . . . . 228
clear (IAS) . . . . . . . . . . . . . . . . . . . . . . . . 229
authorization . . . . . . . . . . . . . . . . . . . . . . . 229
enable authentication . . . . . . . . . . . . . . . . . . 230
enable password . . . . . . . . . . . . . . . . . . . . 231
ip http authentication . . . . . . . . . . . . . . . . . . 232
ip https authentication. . . . . . . . . . . . . . . . . . 233
login authentication . . . . . . . . . . . . . . . . . . . 235
password (aaa IAS User Configuration). . . . . . . . . 236
password (Line Configuration) . . . . . . . . . . . . . 237
2CSNXXX_SWUM200.book Page 4 Tuesday, December 10, 2013 1:22 PM

Contents 5
password (User EXEC) . . . . . . . . . . . . . . . . . . 238
show aaa ias-users . . . . . . . . . . . . . . . . . . . 238
show aaa statistics . . . . . . . . . . . . . . . . . . . 239
show authentication methods. . . . . . . . . . . . . . 240
show authorization methods . . . . . . . . . . . . . . 241
show users accounts . . . . . . . . . . . . . . . . . . 242
show users login-history . . . . . . . . . . . . . . . . 243
username. . . . . . . . . . . . . . . . . . . . . . . . . 244
username unlock . . . . . . . . . . . . . . . . . . . . 246
5 Administrative Profiles Commands . . . . 249
Overview . . . . . . . . . . . . . . . . . . . . . . . . . 249
Commands in this Chapter. . . . . . . . . . . . . . . . 250
admin-profile. . . . . . . . . . . . . . . . . . . . . . . 251
description (Administrative Profile Configuration) . . . 251
rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252
show admin-profiles. . . . . . . . . . . . . . . . . . . 253
show admin-profiles brief . . . . . . . . . . . . . . . . 254
show cli modes . . . . . . . . . . . . . . . . . . . . . 255
6 ACL Commands . . . . . . . . . . . . . . . . . . . 257
ACL Logging . . . . . . . . . . . . . . . . . . . . . . . 257
2CSNXXX_SWUM200.book Page 5 Tuesday, December 10, 2013 1:22 PM

Contents 6
Commands in this Chapter. . . . . . . . . . . . . . . . 260
ip access-list. . . . . . . . . . . . . . . . . . . . . . . 260
deny | permit (IP ACL) . . . . . . . . . . . . . . . . . . 261
deny | permit (Mac-Access-List-Configuration) . . . . 266
ip access-group . . . . . . . . . . . . . . . . . . . . . 268
mac access-group . . . . . . . . . . . . . . . . . . . . 270
mac access-list extended . . . . . . . . . . . . . . . . 271
mac access-list extended rename . . . . . . . . . . . 272
service-acl input. . . . . . . . . . . . . . . . . . . . . 273
show service-acl interface . . . . . . . . . . . . . . . 274
show access-lists interface. . . . . . . . . . . . . . . 274
show ip access-lists. . . . . . . . . . . . . . . . . . . 275
show mac access-lists . . . . . . . . . . . . . . . . . 276
7 Address Table Commands . . . . . . . . . . . 279
Commands in this Chapter. . . . . . . . . . . . . . . . 280
clear mac address-table. . . . . . . . . . . . . . . . . 280
mac address-table aging-time . . . . . . . . . . . . . 281
mac address-table multicast forbidden address . . . . 282
mac address-table static vlan . . . . . . . . . . . . . . 283
port security . . . . . . . . . . . . . . . . . . . . . . . 284
port security max . . . . . . . . . . . . . . . . . . . . 285
2CSNXXX_SWUM200.book Page 6 Tuesday, December 10, 2013 1:22 PM

Contents 7
show mac address-table multicast . . . . . . . . . . . 285
show mac address-table . . . . . . . . . . . . . . . . 287
show mac address-table address . . . . . . . . . . . . 287
show mac address-table count . . . . . . . . . . . . . 288
show mac address-table dynamic . . . . . . . . . . . 289
show mac address-table interface . . . . . . . . . . . 290
show mac address-table static . . . . . . . . . . . . . 291
show mac address-table vlan . . . . . . . . . . . . . . 292
show ports security . . . . . . . . . . . . . . . . . . . 293
show ports security addresses . . . . . . . . . . . . . 294
8 Auto-VoIP Commands . . . . . . . . . . . . . . 297
Commands in this Chapter. . . . . . . . . . . . . . . . 297
show switchport voice . . . . . . . . . . . . . . . . . 298
switchport voice detect auto . . . . . . . . . . . . . . 300
9 CDP Interoperability Commands . . . . . . 301
Commands in this Chapter. . . . . . . . . . . . . . . . 301
clear isdp counters . . . . . . . . . . . . . . . . . . . 301
clear isdp table . . . . . . . . . . . . . . . . . . . . . 302
isdp advertise-v2. . . . . . . . . . . . . . . . . . . . . 302
isdp enable. . . . . . . . . . . . . . . . . . . . . . . . 303
2CSNXXX_SWUM200.book Page 7 Tuesday, December 10, 2013 1:22 PM

Contents 8
isdp holdtime. . . . . . . . . . . . . . . . . . . . . . . 304
isdp timer . . . . . . . . . . . . . . . . . . . . . . . . 304
show isdp . . . . . . . . . . . . . . . . . . . . . . . . 305
show isdp entry . . . . . . . . . . . . . . . . . . . . . 306
show isdp interface . . . . . . . . . . . . . . . . . . . 307
show isdp neighbors. . . . . . . . . . . . . . . . . . . 308
show isdp traffic . . . . . . . . . . . . . . . . . . . . . 309
10 DHCP Layer 2 Relay Commands . . . . . . 311
Commands in this Chapter. . . . . . . . . . . . . . . . 311
dhcp l2relay (Global Configuration) . . . . . . . . . . . 312
dhcp l2relay (Interface Configuration) . . . . . . . . . 312
dhcp l2relay circuit-id . . . . . . . . . . . . . . . . . . 313
dhcp l2relay remote-id. . . . . . . . . . . . . . . . . . 314
dhcp l2relay trust . . . . . . . . . . . . . . . . . . . . 314
dhcp l2relay vlan. . . . . . . . . . . . . . . . . . . . . 315
show dhcp l2relay all . . . . . . . . . . . . . . . . . . 316
show dhcp l2relay interface. . . . . . . . . . . . . . . 316
show dhcp l2relay stats interface. . . . . . . . . . . . 317
show dhcp l2relay subscription interface . . . . . . . 318
show dhcp l2relay agent-option vlan . . . . . . . . . . 319
show dhcp l2relay vlan . . . . . . . . . . . . . . . . . 319
2CSNXXX_SWUM200.book Page 8 Tuesday, December 10, 2013 1:22 PM

Contents 9
show dhcp l2relay circuit-id vlan . . . . . . . . . . . . 320
show dhcp l2relay remote-id vlan. . . . . . . . . . . . 321
clear dhcp l2relay statistics interface . . . . . . . . . 322
11 DHCP Management Interface Commands 323
Commands in this Chapter. . . . . . . . . . . . . . . . 323
release dhcp . . . . . . . . . . . . . . . . . . . . . . . 324
renew dhcp . . . . . . . . . . . . . . . . . . . . . . . 325
debug dhcp packet . . . . . . . . . . . . . . . . . . . 326
show dhcp lease . . . . . . . . . . . . . . . . . . . . . 326
12 DHCP Snooping Commands . . . . . . . . . . 329
Commands in this Chapter. . . . . . . . . . . . . . . . 330
clear ip dhcp snooping binding . . . . . . . . . . . . . 330
clear ip dhcp snooping statistics . . . . . . . . . . . . 331
ip dhcp snooping. . . . . . . . . . . . . . . . . . . . . 331
ip dhcp snooping binding . . . . . . . . . . . . . . . . 332
ip dhcp snooping database . . . . . . . . . . . . . . . 333
ip dhcp snooping database write-delay . . . . . . . . 334
ip dhcp snooping limit . . . . . . . . . . . . . . . . . . 335
ip dhcp snooping log-invalid . . . . . . . . . . . . . . 336
ip dhcp snooping trust . . . . . . . . . . . . . . . . . . 337
2CSNXXX_SWUM200.book Page 9 Tuesday, December 10, 2013 1:22 PM

Contents 10
ip dhcp snooping verify mac-address . . . . . . . . . . 338
show ip dhcp snooping . . . . . . . . . . . . . . . . . 338
show ip dhcp snooping binding . . . . . . . . . . . . . 339
show ip dhcp snooping database . . . . . . . . . . . . 340
show ip dhcp snooping interfaces . . . . . . . . . . . 341
show ip dhcp snooping statistics . . . . . . . . . . . . 342
13 Dynamic ARP Inspection Commands . . 345
Commands in this Chapter. . . . . . . . . . . . . . . . 345
arp access-list . . . . . . . . . . . . . . . . . . . . . . 345
clear ip arp inspection statistics . . . . . . . . . . . . 346
ip arp inspection filter . . . . . . . . . . . . . . . . . . 347
ip arp inspection limit . . . . . . . . . . . . . . . . . . 347
ip arp inspection trust . . . . . . . . . . . . . . . . . . 348
ip arp inspection validate . . . . . . . . . . . . . . . . 349
ip arp inspection vlan . . . . . . . . . . . . . . . . . . 350
permit ip host mac host . . . . . . . . . . . . . . . . . 351
show arp access-list . . . . . . . . . . . . . . . . . . 351
show ip arp inspection . . . . . . . . . . . . . . . . . 352
show ip arp inspection vlan . . . . . . . . . . . . . . . 354
2CSNXXX_SWUM200.book Page 10 Tuesday, December 10, 2013 1:22 PM