Edge-Core ECS2100-10T User manual

CLI Reference Guide
www.edge-core.com
ECS2100-10T/PE/P
ECS2100-28T/P/PP
10/28-Port Web-smart Pro
Gigabit Ethernet Switch
Software Release v1.2.2.0

CLI Reference Guide
ECS2100-10T Gigabit Ethernet Switch
Web-smart Pro Gigabit Ethernet Switch
with 8 10/100/1000BASE-T (RJ-45) Ports
and 2 Gigabit SFP Ports
ECS2100-10PE Gigabit Ethernet Switch
Web-smart Pro Gigabit Ethernet Switch
with 8 10/100/1000BASE-T (RJ-45) 802.3 af/at PoE Ports
with 2 Gigabit SFP Ports (PoE Power Budget: 65W)
ECS2100-10P Gigabit Ethernet Switch
Web-smart Pro Gigabit Ethernet Switch
with 8 10/100/1000BASE-T (RJ-45) 802.3 af/at PoE Ports
and 2 Gigabit SFP Ports
(PoE Power Budget: 125 W)
ECS2100-28T Gigabit Ethernet Switch
Web-smart Pro Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports
and 4 Gigabit SFP Ports
ECS2100-28P Gigabit Ethernet Switch
Web-smart Pro Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) 802.3 af/at PoE Ports
and 4 Gigabit SFP Ports
(PoE Power Budget: 200 W)
ECS2100-28PP Gigabit Ethernet Switch
Web-smart Pro Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) 802.3 af/at PoE Ports
and 4 Gigabit SFP Ports
(PoE Power Budget: 370 W, can extend to 740 W)
E012017/ST-R02

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read This
Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How This Guide is
Organized
This guide describes the switch’s command line interface (CLI). For more detailed
information on the switch’s key features or information about the web browser
management interface refer to the Web Management Guide.
The guide includes these sections:
◆ Section I “Getting Started” — Includes information on initial configuration.
◆ Section II “Command Line Interface” — Includes all management options
available through the CLI.
◆ Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the CLI.
For information on how to manage the switch through the Web management
interface, see the following guide:
Web Management Guide
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information

How to Use This Guide
– 4 –
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Revision History This section summarizes the changes in each revision of this guide.
Revision Date Change Description
v1.2.2.0 01/2017 New:
•"Switch Clustering" on page 152
•"Flow Sampling Commands" on page 193
•"mac-authentication reauth-time" on page 267
•"network-access max-mac-count" on page 270
•"network-access mode mac-authentication" on
page 271
•"network-access port-mac-filter" on page 272
•"mac-authentication intrusion-action" on page 273
•"mac-authentication max-mac-count" on page 273
•"Web Authentication" on page 276
•"ip dhcp snooping information option remote-id" on
page 288
•"ip dhcp snooping information option circuit-id" on
page 292
•"dos-protection echo-chargen" on page 314
•"dos-protection tcp-flooding" on page 315
•"dos-protection udp-flooding" on page 317
•"dos-protection win-nuke" on page 318
•"switchport dot1q-tunnel priority map" on page 471
•"ERPS Commands" on page 489
•"Loopback Detection Commands" on page 417
•"qos map cos-queue" on page 526
•"qos map dscp-queue" on page 528
•"show qos map cos-queue" on page 530
•"show qos map dscp-queue" on page 531
•"IP Routing Commands" on page 689
•"show ip igmp snooping statistics" on page 566
•"File Management" on page 100 – SFTP
•"Denial of Service Protection" on page 314
•"dir" on page 107

How to Use This Guide
– 5 –
Updated:
•"dir" on page 107
•"File Management" on page 100 – SFTP
•"Denial of Service Protection" on page 314
•"switchport packet-rate" on page 415
Removed:
•“vlan-trunking”
•“qosmapcos-dscp”
•“qosmapdscp-mutation”
•"setphb"
•“setipdhcp”
• “show qos map cos-dscp”
•“showqosmapdscp-mutation”
v1.1.2.0 1/2016 Initial release
Revision Date Change Description

How to Use This Guide
– 6 –

– 7 –
Contents
How to Use This Guide 3
Contents 7
Tables 33
Section I Getting Started 39
1 Initial Switch Configuration 41
Connecting to the Switch 41
Configuration Options 41
Connecting to the Console Port 42
Logging Onto the Command Line Interface 43
Setting Passwords 43
Remote Connections 44
Configuring the Switch for Remote Management 45
Using the Network Interface 45
Setting an IP Address 45
Enabling SNMP Management Access 51
Managing System Files 53
Upgrading the Operation Code 54
Saving or Restoring Configuration Settings 54
Automatic Installation of Operation Code and Configuration Settings 56
Downloading Operation Code from a File Server 56
Specifying a DHCP Client Identifier 59
Downloading a Configuration File and Other Parameters from a DHCP Server 60
Setting the System Clock 62
Setting the Time Manually 62
Configuring SNTP 63
Configuring NTP 63

Contents
– 8 –
Section II Command Line Interface 65
2 Using the Command Line Interface 67
Accessing the CLI 67
Console Connection 67
Telnet Connection 68
Entering Commands 69
Keywords and Arguments 69
Minimum Abbreviation 69
Command Completion 69
Getting Help on Commands 70
Partial Keyword Lookup 71
Negating the Effect of Commands 72
Using Command History 72
Understanding Command Modes 72
Exec Commands 72
Configuration Commands 73
Command Line Processing 75
Showing Status Information 75
CLI Command Groups 76
3 General Commands 79
prompt 79
reload (Global Configuration) 80
enable 81
quit 82
show history 82
configure 83
disable 84
reload (Privileged Exec) 84
show reload 85
end 85
exit 85

Contents
– 9 –
4 System Management Commands 87
Device Designation 87
hostname 88
System Status 88
show access-list tcam-utilization 89
show memory 90
show process cpu 91
show process cpu guard 91
show process cpu task 92
show running-config 94
show startup-config 95
show system 96
show tech-support 97
show users 98
show version 98
show watchdog 99
Frame Size 99
jumbo frame 100
File Management 100
General Commands 102
boot system 102
copy 102
delete 106
dir 107
whichboot 108
Automatic Code Upgrade Commands 109
upgrade opcode auto 109
upgrade opcode path 110
upgrade opcode reload 111
show upgrade 112
TFTP Configuration Commands 112
ip tftp retry 112
ip tftp timeout 113
show ip tftp 113

Contents
– 10 –
Line 114
line 115
databits 115
exec-timeout 116
login 117
parity 118
password 118
password-thresh 119
silent-time 120
speed 121
stopbits 121
timeout login response 122
disconnect 122
terminal 123
show line 124
Event Logging 125
logging command 125
logging facility 126
logging history 126
logging host 127
logging on 128
logging trap 129
clear log 129
show log 130
show logging 131
SMTP Alerts 132
logging sendmail 133
logging sendmail destination-email 133
logging sendmail host 134
logging sendmail level 134
logging sendmail source-email 135
show logging sendmail 136
Time 136
SNTP Commands 137
sntp client 137

Contents
– 11 –
sntp poll 138
sntp server 138
show sntp 139
NTP Commands 140
ntp authenticate 140
ntp authentication-key 140
ntp client 141
ntp server 142
show ntp 143
Manual Configuration Commands 143
clock summer-time (date) 143
clock summer-time (predefined) 145
clock summer-time (recurring) 146
clock timezone 147
calendar set 148
show calendar 149
Time Range 149
time-range 149
absolute 150
periodic 151
show time-range 152
Switch Clustering 152
cluster 153
cluster commander 154
cluster ip-pool 155
cluster member 156
rcommand 156
show cluster 157
show cluster members 157
show cluster candidates 158
5SNMPCommands 159
General SNMP Commands 161
snmp-server 161
snmp-server community 161

Contents
– 12 –
snmp-server contact 162
snmp-server location 163
show snmp 163
SNMP Target Host Commands 164
snmp-server enable traps 164
snmp-server host 165
snmp-server enable port-traps link-up-down 167
snmp-server enable port-traps mac-notification 168
show snmp-server enable port-traps 168
SNMPv3 Commands 169
snmp-server engine-id 169
snmp-server group 170
snmp-server user 171
snmp-server view 173
show snmp engine-id 174
show snmp group 175
show snmp user 176
show snmp view 177
Notification Log Commands 177
nlm 177
snmp-server notify-filter 178
show nlm oper-status 180
show snmp notify-filter 180
Additional Trap Commands 180
memory 180
process cpu 181
process cpu guard 182
6 Remote Monitoring Commands 185
rmon alarm 186
rmon event 187
rmon collection history 188
rmon collection rmon1 189
show rmon alarms 190
show rmon events 190

Contents
– 13 –
show rmon history 191
show rmon statistics 191
7FlowSamplingCommands 193
sflow owner 193
sflow polling instance 195
sflow sampling instance 196
show sflow 197
8 Authentication Commands 199
User Accounts and Privilege Levels 200
enable password 200
username 201
privilege 203
show privilege 203
Authentication Sequence 204
authentication enable 204
authentication login 205
RADIUS Client 206
radius-server acct-port 206
radius-server auth-port 207
radius-server host 207
radius-server key 208
radius-server retransmit 209
radius-server timeout 209
show radius-server 210
TACACS+ Client 210
tacacs-server host 211
tacacs-server key 211
tacacs-server port 212
tacacs-server retransmit 212
tacacs-server timeout 213
show tacacs-server 213
AAA 214
aaa accounting commands 215
aaa accounting dot1x 216

Contents
– 14 –
aaa accounting exec 217
aaa accounting update 218
aaa authorization commands 218
aaa authorization exec 219
aaa group server 220
server 221
accounting dot1x 221
accounting commands 222
accounting exec 222
authorization commands 223
authorization exec 224
show accounting 224
show authorization 225
Web Server 226
ip http authentication 227
ip http port 227
ip http server 228
ip http secure-port 228
ip http secure-server 229
Telnet Server 230
ip telnet max-sessions 231
ip telnet port 231
ip telnet server 232
telnet (client) 232
show ip telnet 233
Secure Shell 233
ip ssh authentication-retries 236
ip ssh server 236
ip ssh server-key size 237
ip ssh timeout 238
delete public-key 238
ip ssh crypto host-key generate 239
ip ssh crypto zeroize 240
ip ssh save host-key 240
show ip ssh 241

Contents
– 15 –
show public-key 241
show ssh 242
802.1X Port Authentication 243
General Commands 244
dot1x default 244
dot1x system-auth-control 244
Authenticator Commands 245
dot1x intrusion-action 245
dot1x max-reauth-req 246
dot1x max-req 246
dot1x operation-mode 247
dot1x port-control 248
dot1x re-authentication 248
dot1x timeout quiet-period 249
dot1x timeout re-authperiod 249
dot1x timeout supp-timeout 250
dot1x timeout tx-period 250
dot1x re-authenticate 251
Supplicant Commands 252
dot1x timeout auth-period 252
dot1x timeout held-period 252
Information Display Commands 253
show dot1x 253
Management IP Filter 255
management 255
show management 256
9 General Security Measures 259
Port Security 260
mac-learning 260
port security 261
show port security 263
Network Access (MAC Address Authentication) 265
network-access aging 265
network-access mac-filter 266

Contents
– 16 –
mac-authentication reauth-time 267
network-access dynamic-qos 268
network-access dynamic-vlan 269
network-access guest-vlan 270
network-access max-mac-count 270
network-access mode mac-authentication 271
network-access port-mac-filter 272
mac-authentication intrusion-action 273
mac-authentication max-mac-count 273
clear network-access 274
show network-access 274
show network-access mac-address-table 275
show network-access mac-filter 276
Web Authentication 276
web-auth login-attempts 277
web-auth quiet-period 278
web-auth session-timeout 278
web-auth system-auth-control 279
web-auth 279
web-auth re-authenticate (Port) 280
web-auth re-authenticate (IP) 280
show web-auth 281
show web-auth interface 281
show web-auth summary 282
DHCPv4 Snooping 282
ip dhcp snooping 283
ip dhcp snooping information option 285
ip dhcp snooping information option encode no-subtype 286
ip dhcp snooping information option remote-id 288
ip dhcp snooping information option tr101 board-id 289
ip dhcp snooping information policy 289
ip dhcp snooping verify mac-address 290
ip dhcp snooping vlan 291
ip dhcp snooping information option circuit-id 292
ip dhcp snooping trust 293

Contents
– 17 –
ip dhcp snooping max-number 294
ip dhcp snooping trust 295
clear ip dhcp snooping binding 296
clear ip dhcp snooping database flash 296
ip dhcp snooping database flash 296
show ip dhcp snooping 297
show ip dhcp snooping binding 297
IPv4 Source Guard 298
ip source-guard binding 298
ip source-guard 300
ip source-guard max-binding 302
ip source-guard mode 303
clear ip source-guard binding blocked 303
show ip source-guard 304
show ip source-guard binding 304
ARP Inspection 305
ip arp inspection 306
ip arp inspection filter 307
ip arp inspection log-buffer logs 308
ip arp inspection validate 309
ip arp inspection vlan 310
ip arp inspection limit 311
ip arp inspection trust 311
show ip arp inspection configuration 312
show ip arp inspection interface 312
show ip arp inspection log 313
show ip arp inspection statistics 313
show ip arp inspection vlan 313
Denial of Service Protection 314
dos-protection echo-chargen 314
dos-protection smurf 315
dos-protection tcp-flooding 315
dos-protection tcp-null-scan 316
dos-protection tcp-syn-fin-scan 316
dos-protection tcp-xmas-scan 317

Contents
– 18 –
dos-protection udp-flooding 317
dos-protection win-nuke 318
show dos-protection 318
Port-based Traffic Segmentation 319
traffic-segmentation 319
traffic-segmentation session 320
traffic-segmentation uplink/downlink 321
traffic-segmentation uplink-to-uplink 322
show traffic-segmentation 323
10 Access Control Lists 325
IPv4 ACLs 325
access-list ip 326
permit, deny (Standard IP ACL) 326
permit, deny (Extended IPv4 ACL) 327
ip access-group 330
show ip access-group 331
show ip access-list 331
IPv6 ACLs 332
access-list ipv6 332
permit, deny (Standard IPv6 ACL) 333
permit, deny (Extended IPv6 ACL) 334
ipv6 access-group 337
show ipv6 access-group 337
show ipv6 access-list 338
MAC ACLs 338
access-list mac 339
permit, deny (MAC ACL) 339
mac access-group 342
show mac access-group 343
show mac access-list 343
ARP ACLs 344
access-list arp 344
permit, deny (ARP ACL) 345
show access-list arp 346

Contents
– 19 –
ACL Information 346
clear access-list hardware counters 347
show access-group 347
show access-list 348
11 Interface Commands 349
Interface Configuration 350
interface 350
capabilities 351
description 352
flowcontrol 353
history 354
media-type 354
negotiation 355
shutdown 356
speed-duplex 356
clear counters 357
show interfaces brief 358
show interfaces counters 359
show interfaces history 362
show interfaces status 364
show interfaces switchport 365
Transceiver Threshold Configuration 366
transceiver-monitor 366
transceiver-threshold-auto 367
transceiver-threshold current 367
transceiver-threshold rx-power 368
transceiver-threshold temperature 369
transceiver-threshold tx-power 370
transceiver-threshold voltage 371
show interfaces transceiver 372
show interfaces transceiver-threshold 373
Cable Diagnostics 374
test cable-diagnostics 374
show cable-diagnostics 375

Contents
– 20 –
Power Savings 376
power-save 376
show power-save 377
12 Link Aggregation Commands 379
Manual Configuration Commands 380
port channel load-balance 380
channel-group 382
Dynamic Configuration Commands 383
lacp 383
lacp admin-key (Ethernet Interface) 384
lacp port-priority 385
lacp system-priority 386
lacp admin-key (Port Channel) 387
lacp timeout 388
Trunk Status Display Commands 389
show lacp 389
show port-channel load-balance 392
13 Power over Ethernet Commands 393
power inline compatible 394
power inline maximum allocation 395
power mainpower maximum allocation 396
power inline 397
power inline maximum allocation 397
power inline priority 398
power inline time-range 399
show power inline status 400
show power inline time-range 401
show power mainpower 402
14 Port Mirroring Commands 403
Local Port Mirroring Commands 403
port monitor 403
show port monitor 404