Edge-Core AS6700-32X Instruction Manual

CLI Reference Guide
www.edge-core.com
10G/40G Top-of-Rack Switches
AS5700-54X
AS6700-32X
Software Release v1.1.166.154

CLI Reference Guide
AS5700-54X
54-Port 10G Ethernet Switch with
48 10GBASE SFP+ Ports,
6 40GBASE QSFP Ports,
2 Power Supply Units,
and 4 Fan Trays (4 Fans – F2B and B2F Airflow)
AS6700-32X
32-Port 40G Data Center Switch
with 20 40G QSFP+ Ports,
2 40G Expansion Slots,
2 Power Supply Units,
and 5 Fan Trays (5 Fans – F2B or B2F Airflow)
E032016/ST-R02
149100000198A

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read This
Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How This Guide is
Organized
This guide describes the switch’s command line interface (CLI). For more detailed
information on the switch’s key features refer to the Administrator’s Guide.
The guide includes these sections:
◆Section I “Getting Started” — Includes information on connecting to the switch
and basic configuration procedures.
◆Section II “Command Line Interface” — Includes all management options
available through the CLI.
◆Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the CLI.
For information on how to manage the switch through the Web management
interface, see the following guide:
Web Management Guide
Note: For a general description of switch features, refer to “Introduction” in the
Web Management Guide.
For information on how to install the switch, see the following guide:
Installation Guide

How to Use This Guide
– 4 –
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Revision History This section summarizes the changes in each revision of this guide.
March 2016 Revision
This is the second version of this guide. This guide is valid for software release
v1.1.166.154. It contains the following changes:
October 2015 Revision
This is the first version of this guide. This guide is valid for software release
v1.1.0.152.
Table 1: Revision History
Description of Changes
Added:
Updated:
Deleted:

– 5 –
Contents
How to Use This Guide 3
Contents 5
Figures 43
Tables 45
Section I Getting Started 53
1 Initial Switch Configuration 55
Connecting to the Switch 55
Configuration Options 55
Connecting to the Console Port 56
Selecting Legacy or Hybrid Operation Mode 57
Logging Onto the Command Line Interface 57
Setting Passwords 58
Remote Connections (Network Interface or Craft Port) 58
Obtaining and Installing a License for the Network Ports 59
Configuring the Switch for Remote Management 61
Using the Service Port or Network Interface 61
Setting an IP Address 62
Enabling SNMP Management Access 67
Managing System Files 69
Upgrading the Operation Code 70
Saving or Restoring Configuration Settings 71
Configuring Automatic Installation of Operation Code and Configuration Settings
72
Downloading Operation Code from a File Server 72
Specifying a DHCP Client Identifier 75
Downloading a Configuration File Referenced by a DHCP Server 75

Contents
– 6 –
Setting the System Clock 77
Setting the Time Manually 78
Configuring SNTP 78
Configuring NTP 79
Section II Command Line Interface 81
2 Using the Command Line Interface 83
Accessing the CLI 83
Console Connection 83
Telnet Connection 83
Entering Commands 85
Keywords and Arguments 85
Minimum Abbreviation 85
Command Completion 85
Getting Help on Commands 86
Partial Keyword Lookup 87
Negating the Effect of Commands 88
Using Command History 88
Understanding Command Modes 88
Exec Commands 88
Configuration Commands 89
Command Line Processing 92
CLI Command Groups 93
3 General Commands 95
prompt 95
reload (Global Configuration) 96
enable 97
quit 98
show history 98
configure 99
disable 100
reload (Privileged Exec) 100
show reload 101

Contents
– 7 –
end 101
exit 101
4 System Management Commands 103
Device Designation 103
hostname 104
Banner Information 104
banner configure 105
banner configure company 106
banner configure dc-power-info 107
banner configure department 108
banner configure equipment-info 108
banner configure equipment-location 109
banner configure ip-lan 110
banner configure lp-number 110
banner configure manager-info 111
banner configure mux 112
banner configure note 112
show banner 113
System Status 113
location-led 114
show access-list tcam-utilization 115
show license file 116
show location-led status 117
show memory 117
show process cpu 117
show running-config 118
show startup-config 120
show system 120
show tech-support 122
show users 123
show version 123
show watchdog 124
watchdog software 124
Fan Control 125

Contents
– 8 –
fan-speed force-full 125
Frame Size 125
jumbo frame 126
File Management 126
General Commands 128
boot system 128
copy 129
delete 132
dir 133
onie 134
umount usbdisk 136
whichboot 136
Automatic Code Upgrade Commands 137
upgrade opcode auto 137
upgrade opcode path 138
upgrade opcode reload 139
show upgrade 140
TFTP Configuration Commands 140
ip tftp retry 140
ip tftp timeout 141
show ip tftp 141
Line 142
line 142
databits 143
exec-timeout 144
login 144
parity 145
password 146
password-thresh 147
silent-time 148
speed 148
stopbits 149
timeout login response 149
disconnect 150
terminal 151

Contents
– 9 –
show line 152
Event Logging 153
logging facility 153
logging history 154
logging host 155
logging on 155
logging trap 156
clear log 157
show log 157
show logging 158
SMTP Alerts 159
logging sendmail 160
logging sendmail host 160
logging sendmail level 161
logging sendmail destination-email 162
logging sendmail source-email 162
show logging sendmail 163
Time 163
SNTP Commands 164
sntp client 164
sntp poll 165
sntp server 166
show sntp 166
NTP Commands 167
ntp authenticate 167
ntp authentication-key 168
ntp client 169
ntp server 169
show ntp 170
Manual Configuration Commands 171
clock summer-time date 171
clock summer-time predefined 172
clock summer-time recurring 173
clock timezone 175
clock timezone-predefined 175

Contents
– 10 –
calendar set 176
show calendar 177
Time Range 177
time-range 178
absolute 178
periodic 179
show time-range 180
5 SNMP Commands 181
General SNMP Commands 182
snmp-server 182
snmp-server community 183
snmp-server contact 184
snmp-server location 184
show snmp 185
SNMP Target Host Commands 186
snmp-server enable traps 186
snmp-server host 187
snmp-server enable port-traps mac-notification 189
show snmp-server enable port-traps 190
SNMPv3 Commands 190
snmp-server engine-id 190
snmp-server group 191
snmp-server user 193
snmp-server view 194
show snmp engine-id 195
show snmp group 196
show snmp user 197
show snmp view 198
Notification Log Commands 199
nlm 199
snmp-server notify-filter 199
show nlm oper-status 201
show snmp notify-filter 201

Contents
– 11 –
Additional Trap Commands 201
memory 201
process cpu 202
6 Remote Monitoring Commands 203
rmon alarm 204
rmon event 205
rmon collection history 206
rmon collection rmon1 207
show rmon alarms 208
show rmon events 208
show rmon history 209
show rmon statistics 209
7 Authentication Commands 211
User Accounts 212
enable password 212
username 213
Authentication Sequence 214
authentication enable 214
authentication login 215
RADIUS Client 216
radius-server acct-port 217
radius-server auth-port 217
radius-server host 218
radius-server key 219
radius-server retransmit 219
radius-server timeout 220
show radius-server 220
TACACS+ Client 221
tacacs-server host 221
tacacs-server key 222
tacacs-server port 222
tacacs-server retransmit 223
tacacs-server timeout 223
show tacacs-server 224

Contents
– 12 –
Web Server 224
ip http port 225
ip http server 225
ip http secure-port 226
ip http secure-server 226
Telnet Server 228
ip telnet max-sessions 228
ip telnet port 229
ip telnet server 229
show ip telnet 229
Secure Shell 230
ip ssh authentication-retries 233
ip ssh server 233
ip ssh server-key size 234
ip ssh timeout 235
delete public-key 235
ip ssh crypto host-key generate 236
ip ssh crypto zeroize 237
ip ssh save host-key 237
show ip ssh 238
show public-key 238
show ssh 239
802.1X Port Authentication 240
General Commands 241
dot1x default 241
dot1x eapol-pass-through 241
dot1x system-auth-control 242
Authenticator Commands 243
dot1x intrusion-action 243
dot1x max-reauth-req 243
dot1x max-req 244
dot1x operation-mode 244
dot1x port-control 245
dot1x re-authentication 246
dot1x timeout quiet-period 246

Contents
– 13 –
dot1x timeout re-authperiod 247
dot1x timeout supp-timeout 247
dot1x timeout tx-period 248
dot1x re-authenticate 249
Information Display Commands 249
show dot1x 249
Management IP Filter 252
management 252
show management 253
8 General Security Measures 255
Port Security 256
mac-learning 256
port security 257
show port security 259
Network Access (MAC Address Authentication) 261
network-access aging 262
network-access mac-filter 263
mac-authentication reauth-time 263
network-access dynamic-qos 264
network-access dynamic-vlan 265
network-access guest-vlan 266
network-access link-detection 267
network-access link-detection link-down 267
network-access link-detection link-up 268
network-access link-detection link-up-down 268
network-access max-mac-count 269
network-access mode mac-authentication 269
network-access port-mac-filter 270
mac-authentication intrusion-action 271
mac-authentication max-mac-count 271
clear network-access 272
show network-access 272
show network-access mac-address-table 273
show network-access mac-filter 274

Contents
– 14 –
Web Authentication 274
web-auth login-attempts 275
web-auth quiet-period 276
web-auth session-timeout 276
web-auth system-auth-control 277
web-auth 277
web-auth re-authenticate (Port) 278
web-auth re-authenticate (IP) 278
show web-auth 279
show web-auth interface 279
show web-auth summary 280
DHCPv4 Snooping 280
ip dhcp snooping 281
ip dhcp snooping information option 283
ip dhcp snooping information option encode no-subtype 284
ip dhcp snooping information option remote-id 285
ip dhcp snooping information policy 286
ip dhcp snooping limit rate 286
ip dhcp snooping verify mac-address 287
ip dhcp snooping vlan 288
ip dhcp snooping information option circuit-id 288
ip dhcp snooping trust 290
clear ip dhcp snooping binding 291
clear ip dhcp snooping database flash 291
ip dhcp snooping database flash 291
show ip dhcp snooping 292
show ip dhcp snooping binding 292
DHCPv6 Snooping 293
ipv6 dhcp snooping 293
ipv6 dhcp snooping option remote-id 296
ipv6 dhcp snooping option remote-id policy 297
ipv6 dhcp snooping vlan 298
ipv6 dhcp snooping max-binding 299
ipv6 dhcp snooping trust 299
clear ipv6 dhcp snooping binding 300

Contents
– 15 –
clear ipv6 dhcp snooping statistics 301
show ipv6 dhcp snooping 301
show ipv6 dhcp snooping binding 301
show ipv6 dhcp snooping statistics 302
IPv4 Source Guard 302
ip source-guard binding 303
ip source-guard 305
ip source-guard max-binding 306
ip source-guard mode 307
clear ip source-guard binding blocked 308
show ip source-guard 308
show ip source-guard binding 309
IPv6 Source Guard 310
ipv6 source-guard binding 310
ipv6 source-guard 312
ipv6 source-guard max-binding 313
show ipv6 source-guard 314
show ipv6 source-guard binding 315
IPv6 Source Guard 315
ipv6 source-guard binding 316
ipv6 source-guard 317
ipv6 source-guard max-binding 319
show ipv6 source-guard 320
show ipv6 source-guard binding 320
ARP Inspection 321
ip arp inspection 322
ip arp inspection filter 323
ip arp inspection log-buffer logs 324
ip arp inspection validate 325
ip arp inspection vlan 325
ip arp inspection limit 326
ip arp inspection trust 327
show ip arp inspection configuration 328
show ip arp inspection interface 328
show ip arp inspection log 329

Contents
– 16 –
show ip arp inspection statistics 329
show ip arp inspection vlan 329
Port-based Traffic Segmentation 330
traffic-segmentation 330
traffic-segmentation session 332
traffic-segmentation uplink/downlink 332
traffic-segmentation uplink-to-uplink 333
show traffic-segmentation 334
9 Access Control Lists 335
IPv4 ACLs 335
access-list ip 336
permit, deny (Standard IP ACL) 337
permit, deny (Extended IPv4 ACL) 338
ip access-group 340
show ip access-group 341
show ip access-list 341
IPv6 ACLs 342
access-list ipv6 342
permit, deny (Standard IPv6 ACL) 343
permit, deny (Extended IPv6 ACL) 344
ipv6 access-group 345
show ipv6 access-group 346
show ipv6 access-list 346
MAC ACLs 347
access-list mac 347
permit, deny (MAC ACL) 348
mac access-group 350
show mac access-group 351
show mac access-list 351
ARP ACLs 352
access-list arp 352
permit, deny (ARP ACL) 353
show access-list arp 354
show arp access-list 354

Contents
– 17 –
ACL Information 355
clear access-list hardware counters 355
show access-group 356
show access-list 356
10 Interface Commands 359
Interface Configuration 360
interface 360
alias 361
description 362
flowcontrol 362
history 363
media-type 364
shutdown 364
switchport mtu 365
clear counters 366
hardware profile portmode 367
show hardware profile portmode 368
show interfaces brief 369
show interfaces counters 369
show interfaces history 373
show interfaces status 376
show interfaces switchport 377
Transceiver Threshold Configuration 378
transceiver-threshold-auto 378
transceiver-monitor 379
transceiver-threshold current 379
transceiver-threshold rx-power 380
transceiver-threshold temperature 381
transceiver-threshold tx-power 382
transceiver-threshold voltage 383
show interfaces transceiver 384
show interfaces transceiver-threshold 386
Cable Diagnostics 387
test loop internal 387

Contents
– 18 –
show loop internal 387
11 Link Aggregation Commands 389
Manual Configuration Commands 391
port channel load-balance 391
channel-group 392
Dynamic Configuration Commands 393
lacp 393
lacp admin-key (Ethernet Interface) 394
lacp port-priority 395
lacp system-priority 396
lacp admin-key (Port Channel) 397
lacp timeout 398
Trunk Status Display Commands 399
show lacp 399
show port-channel load-balance 403
MLAG Commands 403
mlag 404
mlag peer-link 405
mlag group member 405
show mlag 407
show mlag domain 407
12 Port Mirroring Commands 409
Local Port Mirroring Commands 409
port monitor 409
show port monitor 410
RSPAN Mirroring Commands 411
rspan source 413
rspan destination 414
rspan remote vlan 415
no rspan session 416
show rspan 416
13 Congestion Control Commands 419
Rate Limit Commands 419

Contents
– 19 –
rate-limit 420
Storm Control Commands 421
switchport packet-rate 421
14 Loopback Detection Commands 423
loopback-detection 424
loopback-detection action 424
loopback-detection recover-time 425
loopback-detection transmit-interval 426
loopback detection trap 426
loopback-detection release 427
show loopback-detection 428
15 UniDirectional Link Detection Commands 429
udld detection-interval 429
udld message-interval 430
udld recovery 431
udld recovery-interval 431
udld aggressive 432
udld port 433
show udld 434
16 Address Table Commands 437
mac-address-table aging-time 437
mac-address-table static 438
clear mac-address-table dynamic 439
show mac-address-table 439
show mac-address-table aging-time 440
show mac-address-table count 441
17 Spanning Tree Commands 443
spanning-tree 444
spanning-tree forward-time 445
spanning-tree hello-time 445
spanning-tree max-age 446
spanning-tree mode 447
spanning-tree pathcost method 448

Contents
– 20 –
spanning-tree priority 449
spanning-tree mst configuration 449
spanning-tree system-bpdu-flooding 450
spanning-tree transmission-limit 450
max-hops 451
mst priority 451
mst vlan 452
name 453
revision 454
spanning-tree bpdu-filter 454
spanning-tree bpdu-guard 455
spanning-tree cost 456
spanning-tree edge-port 457
spanning-tree link-type 458
spanning-tree mst cost 459
spanning-tree mst port-priority 460
spanning-tree port-priority 461
spanning-tree root-guard 461
spanning-tree spanning-disabled 462
spanning-tree tc-prop-stop 463
spanning-tree protocol-migration 463
show spanning-tree 464
show spanning-tree mst configuration 466
18 VLAN Commands 467
GVRP and Bridge Extension Commands 468
bridge-ext gvrp 468
garp timer 469
switchport gvrp 470
show garp timer 470
show gvrp configuration 471
Editing VLAN Groups 472
vlan database 472
vlan 473
Configuring VLAN Interfaces 474