Dell PowerConnect 8024 Instruction Manual

www.dell.com | support.dell.com
Dell™ PowerConnect™ PC8024/8024F
CLI Reference Guide
Model PC8024/PC8024F

Notes
NOTE: A NOTE indicates important information that helps you make better use of your computer.
____________________
Information in this document is subject to change without notice.
© 2009 Dell Inc. All rights reserved
Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.
Trademarks used in this text: Dell, the DELL logo, PowerEdge, PowerConnect, and OpenManage are trademarks of Dell Inc.; Microsoft and
Windows are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries; sFlow is a
registered trademark of InMon Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products.
Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.
Model PC8024/8024F
November 2009 Rev. A01

Contents 3
Contents
1 Command Groups
Introduction 47
Command Groups 47
Mode Types 51
Layer 2 Commands 52
Layer 3 Commands 77
Utility Commands 97
2 Using the CLI
Introduction 111
Entering and Editing CLI Commands 111
CLI Command Modes 116
Starting the CLI 125
Using CLI Functions and Tools 132
3 Layer 2 Commands
Introduction 145
4 AAA Commands
aaa authentication dot1x 147
aaa authentication enable 148
aaa authentication login 149
aaa authorization network default radius 151
enable authentication 151

4Contents
enable password 152
ip http authentication 153
ip https authentication 154
login authentication 155
password (Line Configuration) 155
password (User EXEC) 156
show authentication methods 157
show users accounts 158
show users login-history 158
username 159
5 ACL Commands
access-list 161
deny | permit 162
ip access-group 164
no ip access-group 164
mac access-group 165
mac access-list extended 166
mac access-list extended rename 166
show ip access-lists 167
show mac access-list 168
6 Address Table Commands
bridge address 170
bridge aging-time 170
bridge multicast address 171
bridge multicast filtering 172

Contents 5
bridge multicast forbidden address 173
bridge multicast forbidden forward-unregistered 174
bridge multicast forward-all 174
bridge multicast forward-unregistered 175
clear bridge 176
port security 176
port security max 177
show bridge address-table 178
show bridge address-table count 178
show bridge address-table static 179
show bridge multicast address-table 180
show bridge multicast filtering 181
show ports security 182
show ports security addresses 183
7 Auto-VoIP Commands
show switchport voice 185
switchport voice detect auto 187
8 CDP Interoperability Commands
clear isdp counters 189
clear isdp table 190
isdp advertise-v2 190
isdp enable 191
isdp holdtime 191
isdp timer 192
show isdp 193

6Contents
show isdp entry 193
show isdp interface 194
show isdp neighbors 196
show isdp traffic 198
9 Data Center Bridging Commands
clear priority-flow-control statistics 201
datacenter-bridging 202
priority-flow-control mode on 202
priority-flow-control priority 203
show interfaces datacenter-bridging 204
10 DHCP Layer 2 Relay Commands
dhcp l2relay (Global Configuration) 207
dhcp l2relay (Interface Configuration) 208
dhcp l2relay circuit-id 208
dhcp l2relay remote-id 209
dhcp l2relay trust 209
dhcp l2relay vlan 210
11 DHCP Snooping Commands
clear ip dhcp snooping statistics 211
ip dhcp snooping 212
ip dhcp snooping binding 212
ip dhcp snooping database 213
ip dhcp snooping database write-delay 214
ip dhcp snooping limit 214

Contents 7
ip dhcp snooping log-invalid 215
ip dhcp snooping trust 216
ip dhcp snooping verify mac-address 216
show ip dhcp snooping 217
show ip dhcp snooping binding 218
show ip dhcp snooping database 219
show ip dhcp snooping interfaces 219
show ip dhcp snooping statistics 220
12 Dynamic ARP Inspection Commands
arp access-list 223
clear counters ip arp inspection 224
ip arp inspection filter 224
ip arp inspection limit 225
ip arp inspection trust 226
ip arp inspection validate 226
ip arp inspection vlan 227
permit ip host mac host 228
show arp access-list 229
show ip arp inspection ethernet 229
show ip arp inspection statistics 230
show ip arp inspection vlan 232
13 Ethernet Configuration Commands
clear counters 235
description 236
duplex 237

8Contents
flowcontrol 237
interface ethernet 238
interface range ethernet 239
mtu 239
negotiation 240
negotiation <capability-list> 241
show interfaces advertise 242
show interfaces configuration 243
show interfaces counters 244
show interfaces description 249
show interfaces detail 250
show interfaces status 253
show statistics ethernet 256
show storm-control 261
shutdown 262
speed 263
storm-control broadcast 263
storm-control multicast 264
storm-control unicast 265
14 GVRP Commands
clear gvrp statistics 267
garp timer 268
gvrp enable (global) 269
gvrp enable (interface) 269
gvrp registration-forbid 270
gvrp vlan-creation-forbid 271

Contents 9
show gvrp configuration 271
show gvrp error-statistics 273
show gvrp statistics 274
15 IGMP Snooping Commands
ip igmp snooping (global) 277
ip igmp snooping (interface) 278
ip igmp snooping host-time-out 278
ip igmp snooping leave-time-out 279
ip igmp snooping mrouter-time-out 280
show ip igmp snooping groups 280
show ip igmp snooping interface 281
show ip igmp snooping mrouter 282
ip igmp snooping (VLAN) 283
ip igmp snooping fast-leave 284
ip igmp snooping groupmembership-interval 284
ip igmp snooping maxresponse 286
ip igmp snooping mcrtrexpiretime 287
16 IGMP Snooping Querier Commands
ip igmp snooping querier 289
ip igmp snooping querier election participate 290
ip igmp snooping querier query-interval 291
ip igmp snooping querier timer expiry 291
ip igmp snooping querier version 292
show igmp snooping querier 293

10 Contents
17 IP Addressing Commands
clear host 295
ip address 296
ip address 297
ip address vlan 298
ip default-gateway 298
ip domain-lookup 299
ip domain-name 300
ip host 300
ip name-server 301
ipv6 address 302
ipv6 enable 303
ipv6 gateway 303
show arp switch 304
show hosts 305
show ip helper-address 306
show ip interface management 307
18 IPv6 Access List Commands
{deny | permit} 309
ipv6 access-list 311
ipv6 access-list rename 311
ipv6 traffic-filter 312
show ipv6 access-lists 313
19 IPv6 MLD Snooping Querier Commands
ipv6 mld snooping querier 317

Contents 11
ipv6 mld snooping querier (VLAN mode) 318
ipv6 mld snooping querier address 318
ipv6 mld snooping querier election participate 319
ipv6 mld snooping querier query-interval 320
ipv6 mld snooping querier timer expiry 320
show ipv6 mld snooping querier 321
20 IP Source Guard Commands
ip verify source 325
ip verify source port-security 325
ip verify binding 326
show ip verify interface 326
show ip verify source interface 327
show ip source binding 327
21 iSCSI Flow Acceleration Commands
iscsi aging time 329
iscsi cos 330
iscsi enable 331
iscsi target port 331
show iscsi 332
show iscsi sessions 333
22 LACP Commands
lacp port-priority 337
lacp system-priority 338
lacp timeout 338

12 Contents
show lacp ethernet 339
show lacp port-channel 341
23 Link Dependency Commands
link-dependency group 343
no link-dependency group 344
add ethernet 344
add port-channel 345
no add port-channel 345
depends-on ethernet 346
no depends-on ethernet 347
depends-on port-channel 347
no depends-on port-channel 348
show link-dependency 348
24 LLDP Commands
clear lldp remote-data 351
clear lldp statistics 352
lldp med 353
lldp med confignotification 353
lldp med faststartrepeatcount 354
lldp med transmit-tlv 354
lldp notification 355
lldp notification-interval 356
lldp receive 356
lldp timers 357
lldp transmit 358

Contents 13
lldp transmit-mgmt 359
lldp transmit-tlv 359
show lldp 360
show lldp interface 361
show lldp local-device 362
show lldp med 363
show lldp med interface 364
show lldp med local-device 365
show lldp med remote-device 367
show lldp remote-device 370
show lldp statistics 371
25 Port Channel Commands
channel-group 375
interface port-channel 376
interface range port-channel 376
hashing-mode 377
no hashing-mode 378
show interfaces port-channel 378
show statistics port-channel 381
26 Port Monitor Commands
monitor session 385
show monitor session 386
27 QoS Commands
assign-queue 388

14 Contents
class 389
class-map 390
class-map rename 390
classofservice dot1p-mapping 391
classofservice ip-dscp-mapping 392
classofservice trust 392
conform-color 393
cos-queue min-bandwidth 394
cos-queue strict 395
diffserv 395
drop 396
mark cos 397
mark ip-dscp 397
mark ip-precedence 398
match class-map 398
match cos 400
match destination-address mac 401
match dstip 401
match dstip6 402
match dstl4port 403
match ethertype 403
match ip6flowlbl 404
match ip dscp 405
match ip precedence 405
match ip tos 406
match protocol 407
match source-address mac 408
match srcip 408

Contents 15
match srcip6 409
match srcl4port 410
match vlan 410
mirror 411
police-simple 412
policy-map 413
redirect 414
service-policy 414
show class-map 415
show classofservice dot1p-mapping 417
show classofservice ip-dscp-mapping 418
show classofservice trust 421
show diffserv 422
show diffserv service interface ethernet 423
show diffserv service interface port-channel 423
show diffserv service brief 424
show interfaces cos-queue 425
show policy-map 427
show policy-map interface 428
show service-policy 429
traffic-shape 430
28 RADIUS Commands
aaa accounting network default start-stop group radius 433
acct-port 434
auth-port 435
deadtime 436

16 Contents
key 436
msgauth 437
name 438
primary 438
priority 439
radius-server deadtime 440
radius-server host 440
radius-server key 441
radius-server retransmit 442
radius-server source-ip 443
radius-server timeout 443
retransmit 444
show radius-servers 445
show radius-servers statistics 447
source-ip 450
timeout 450
usage 451
29 Spanning Tree Commands
clear spanning-tree detected-protocols 454
exit (mst) 454
instance (mst) 455
name (mst) 456
revision (mst) 456
show spanning-tree 457
show spanning-tree summary 466
spanning-tree 467

Contents 17
spanning-tree auto-portfast 467
spanning-tree bpdu flooding 468
spanning-tree bpdu-protection 469
spanning-tree cost 470
spanning-tree disable 470
spanning-tree forward-time 471
spanning-tree guard 472
spanning-tree loopguard 472
spanning-tree max-age 473
spanning-tree max-hops 474
spanning-tree mode 474
spanning-tree mst 0 external-cost 475
spanning-tree mst configuration 476
spanning-tree mst cost 477
spanning-tree mst port-priority 477
spanning-tree mst priority 478
spanning-tree portfast 479
spanning-tree portfast bpdufilter default 480
spanning-tree portfast default 480
spanning-tree port-priority 481
spanning-tree priority 481
spanning-tree tcnguard 482
spanning-tree transmit hold-count 484
30 TACACS+ Commands
key 485
port 486

18 Contents
priority 486
show tacacs 487
tacacs-server host 488
tacacs-server key 488
tacacs-server timeout 489
timeout 490
31 VLAN Commands
dvlan-tunnel ethertype 492
interface vlan 493
interface range vlan 493
mode dvlan-tunnel 494
name 495
protocol group 495
protocol vlan group 496
protocol vlan group all 497
show dvlan-tunnel 498
show dvlan-tunnel interface 499
show interfaces switchport 500
show port protocol 503
show switchport protected 504
show vlan 504
show vlan association mac 505
show vlan association subnet 506
switchport access vlan 507
switchport forbidden vlan 508
switchport general acceptable-frame-type tagged-only 508

Contents 19
switchport general allowed vlan 509
switchport general ingress-filtering disable 510
switchport general pvid 511
switchport mode 511
switchport protected 512
switchport protected name 513
switchport trunk allowed vlan 514
vlan 514
vlan association mac 515
vlan association subnet 516
vlan database 516
vlan makestatic 517
vlan protocol group 518
vlan protocol group add protocol ethertype 518
vlan protocol group name 519
vlan protocol group remove 520
32 Voice VLAN Commands
voice vlan 523
voice vlan (Interface) 523
show voice vlan 524
33 802.1X Commands
dot1x mac-auth-bypass 527
dot1x max-req 528
dot1x max-users 529
dot1x port-control 530

20 Contents
dot1x re-authenticate 531
dot1x re-authentication 531
dot1x system-auth-control 532
dot1x timeout quiet-period 532
dot1x timeout re-authperiod 533
dot1x timeout server-timeout 534
dot1x timeout supp-timeout 535
dot1x timeout tx-period 535
show dot1x 536
show dot1x clients 539
show dot1x ethernet 541
show dot1x statistics 542
show dot1x users 544
dot1x guest-vlan 545
dot1x unauth-vlan 546
show dot1x advanced 547
radius-server attribute 4 548
34 Layer 3 Commands
Introduction 549
35 ARP Commands
arp 551
arp cachesize 552
arp dynamicrenew 552
arp purge 553
arp resptime 554