Extreme Networks ExtremeWare Command Operating manual

Extreme Networks, Inc.
3585 Monroe Street
Santa Clara, California 95051
[phone]
http://www.extremenetworks.com
ExtremeWare
Command Reference Guide
Software Version 7.5
Published October, 2005
Part number: 100211-00 Rev. 01

2
Alpine, Altitude, BlackDiamond, EPICenter, Ethernet Everywhere, Extreme Ethernet Everywhere, Extreme Networks,
Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, GlobalPx Content Director, the Go Purple Extreme
Solution Partners Logo, ServiceWatch, Summit, the Summit7i Logo, and the Color Purple, among others, are trademarks
or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and other countries. Other
names and marks may be the property of their respective owners.
© 2005 Extreme Networks, Inc. All Rights Reserved.
Specifications are subject to change without notice.
Adobe, Acrobat, and Reader are registered trademarks of Adobe Systems Incorporated. NetWare and Novell are
registered trademarks of Novell, Inc. Merit is a registered trademark of Merit Network, Inc. Solaris is a trademark of
Sun Microsystems, Inc. F5, BIG/ip, and 3DNS are registered trademarks of F5 Networks, Inc. see/IT is a trademark of
F5 Networks, Inc.
“Data Fellows”, the triangle symbol, and Data Fellows product names and symbols/logos are
trademarks of Data Fellows.
F-Secure SSH is a registered trademark of Data Fellows.
sFlow® is a registered trademark of InMon Corporation.
All other registered trademarks, trademarks and service marks are property of their respective owners.
Authors: Jeanine Healy, Meg Laycock, Richard Small, Barbara Weinstein
Production: Christine Millbank

ExtremeWare 7.5 Command Reference Guide 3
Contents
Preface
Chapter 1 Command Reference Overview
Chapter 2 Commands for Accessing the Switch
clear account lockout 70
clear session 71
configure account 72
configure account password-policy char-validation 74
configure account password-policy history 76
configure account password-policy lockout-on-login-failures 77
configure account password-policy maxage 78
configure account password-policy min-pwd-length 79
configure banner 81
configure banner netlogin 82
configure dns-client add 83
configure dns-client add domain-suffix 84
configure dns-client add name-server 85
configure dns-client default-domain 86
configure dns-client delete 87
configure dns-client delete domain-suffix 88
configure dns-client delete name-server 89
configure idletimeouts 90
configure time 91
configure timezone 92

4ExtremeWare 7.5 Command Reference Guide
Contents
create account 96
delete account 98
disable clipaging 100
disable idletimeouts 101
enable clipaging 102
enable idletimeouts 103
enable license 104
history 106
reboot 107
show accounts password-policy 109
show accounts pppuser 111
show banner 113
show dns-client 114
show esrp-aware 115
show switch 116
traceroute 120
Chapter 3 Commands for Managing the Switch
configure snmp access-profile readonly 123
configure snmp access-profile readwrite 125
configure snmp add community 127
configure snmp add trapreceiver 129
configure snmp community 133
configure snmp delete community 135
configure snmp delete trapreceiver 137
configure snmp sysContact 139
configure snmp sysLocation 140
configure snmp sysName 141
configure snmpv3 add access 142
configure snmpv3 add community 144
configure snmpv3 add filter 146
configure snmpv3 add filter-profile 148
configure snmpv3 add group user 149
configure snmpv3 add mib-view 151

ExtremeWare 7.5 Command Reference Guide 5
Contents
configure snmpv3 add notify 153
configure snmpv3 add target-addr 154
configure snmpv3 add target-params 156
configure snmpv3 add user 158
configure snmpv3 add user clone-from 160
configure snmpv3 delete access 161
configure snmpv3 delete community 163
configure snmpv3 delete filter 164
configure snmpv3 delete filter-profile 165
configure snmpv3 delete group user 166
configure snmpv3 delete mib-view 168
configure snmpv3 delete notify 170
configure snmpv3 delete target-addr 171
configure snmpv3 delete target-params 172
configure snmpv3 delete user 173
configure snmpv3 engine-boots 174
configure snmpv3 engine-id 175
configure snmpv3 extreme-target-addr-ext 176
configure sntp-client server 178
configure sntp-client update-interval 179
configure web login-timeout 180
disable alt-queue-management 181
disable dhcp ports vlan 182
disable eapol-flooding 183
disable snmp access 184
disable snmp dot1dTpFdbTable 185
disable snmp traps 186
disable snmp traps exceed-committed-rate ports 187
disable snmp traps mac-security 188
disable snmp traps port-up-down 189
disable sntp-client 190
disable system-watchdog 191
disable telnet 192
disable web 193

6ExtremeWare 7.5 Command Reference Guide
Contents
enable alt-queue-management 194
enable dhcp ports vlan 196
enable eapol-flooding 197
enable snmp access 198
enable snmp dot1dTpFdbTable 200
enable snmp traps 201
enable snmp traps exceed-committed-rate ports 202
enable snmp traps mac-security 204
enable snmp traps port-up-down 205
enable sntp-client 206
enable system-watchdog 207
enable telnet 208
enable web 210
exit 211
logout 212
quit 213
show eapol-flooding 214
show management 215
show odometer 218
show session 220
show snmpv3 access 222
show snmpv3 context 225
show snmpv3 counters 226
show snmpv3 engine-info 228
show snmpv3 extreme-target-addr-ext 229
show snmpv3 filter 230
show snmpv3 filter-profile 231
show snmpv3 group 232
show snmpv3 mib-view 234
show snmpv3 notify 236
show snmpv3 target-addr 237
show snmpv3 target-params 238
show snmpv3 user 239
show sntp-client 241

ExtremeWare 7.5 Command Reference Guide 7
Contents
show vlan dhcp-address-allocation 243
show vlan dhcp-config 244
telnet 246
unconfigure management 248
Chapter 4 Commands for Configuring Slots and Ports on a Switch
clear slot 251
configure backplane-ls-policy 252
configure ip-mtu vlan 253
configure jumbo-frame size 255
configure mirroring add 257
configure mirroring delete 259
configure msm-failover link-action 261
configure msm-failover slave-config 263
configure msm-failover timeout 264
configure port aggregate-bandwidth percent 265
configure port interpacket-gap 266
configure ports 267
configure ports auto-polarity 270
configure ports auto off 271
configure ports auto on 273
configure ports display-string 275
configure ports link-detection-level 277
configure ports preferred-medium 278
configure ports redundant 280
configure ports vdsl 282
configure sharing address-based 283
configure slot 285
disable card-scan 288
disable edp ports 289
disable flooding ports 291
disable jumbo-frame ports 292
disable lbdetect port 293
disable learning ports 294

8ExtremeWare 7.5 Command Reference Guide
Contents
disable mirroring 295
disable ports 296
disable sharing 298
disable slot 299
disable smartredundancy 300
enable card-scan 301
enable edp ports 302
enable flooding ports 304
enable jumbo-frame ports 305
enable lbdetect port 306
enable learning ports 307
enable mirroring to port 308
enable ports 310
enable sharing grouping 312
enable slot 315
enable smartredundancy 316
restart ports 317
run msm-failover 318
show edp 319
show mirroring 321
show msm-failover 322
show ports vlan stats 324
show ports collisions 325
show ports configuration 327
show ports info 329
show ports packet 333
show ports redundant 335
show ports sharing 336
show ports utilization 338
show ports vlan info 341
show sharing address-based 343
show slot 344
unconfigure msm-failover 353
unconfigure port aggregate-bandwidth 354

ExtremeWare 7.5 Command Reference Guide 9
Contents
unconfigure ports display string 355
unconfigure ports redundant 356
unconfigure slot 357
Chapter 5 VLAN Commands
configure dot1q ethertype 360
configure gvrp port 361
configure mac-vlan add mac-address 363
configure mac-vlan delete 365
configure ports monitor vlan 366
configure protocol add 367
configure protocol delete 369
configure vlan add member-vlan 370
configure vlan add ports 371
configure vlan add ports loopback-vid 373
configure vlan add secondary-ip 375
configure vlan delete member-vlan 377
configure vlan delete port 378
configure vlan delete secondary-ip 379
configure vlan ipaddress 380
configure vlan name 381
configure vlan protocol 382
configure vlan tag 383
create protocol 384
create vlan 385
delete protocol 387
delete vlan 388
disable gvrp 389
disable mac-vlan port 390
enable gvrp 391
enable mac-vlan mac-group port 392
show gvrp 394
show mac-vlan 395
show protocol 396

10 ExtremeWare 7.5 Command Reference Guide
Contents
show vlan 397
unconfigure ports monitor vlan 400
unconfigure vlan ipaddress 401
Chapter 6 FDB Commands
clear fdb 404
configure fdb agingtime 406
configure fdb-scan failure-action 407
configure fdb-scan period 409
create fdbentry secure-mac 410
create fdbentry vlan blackhole 411
create fdbentry vlan dynamic 413
create fdbentry vlan ports 415
delete fdbentry 417
disable fdb-scan 418
enable fdb-scan 420
run fdb-check 422
show fdb 424
unconfigure fdb-scan failure-action 427
unconfigure fdb-scan period 428
Chapter 7 QoS Commands
clear dlcs 431
configure diffserv examination code-point qosprofile ports 432
configure diffserv replacement priority code-point ports 434
configure dot1p type 436
configure ports qosprofile 438
configure qosprofile 439
configure qostype priority 441
configure red drop-probability 443
configure vlan priority 444
configure vlan qosprofile 445
disable diffserv examination ports 446
disable diffserv replacement ports 447
disable dlcs 448

ExtremeWare 7.5 Command Reference Guide 11
Contents
disable dot1p replacement ports 449
disable qosmonitor 450
disable red ports 451
enable diffserv examination ports 452
enable diffserv replacement ports 453
enable dlcs 454
enable dot1p replacement ports 456
enable qosmonitor 458
enable red ports 459
show dlcs 460
show dot1p 461
show ports qosmonitor 462
show qosprofile 464
show qostype priority 466
unconfigure diffserv examination ports 467
unconfigure diffserv replacement ports 468
unconfigure qostype priority 469
Chapter 8 NAT Commands
clear nat 472
configure nat add vlan map 473
configure nat delete 477
configure nat finrst-timeout 479
configure nat icmp-timeout 480
configure nat syn-timeout 481
configure nat tcp-timeout 482
configure nat timeout 483
configure nat udp-timeout 484
configure nat vlan 485
disable nat 486
enable nat 487
show nat 488

12 ExtremeWare 7.5 Command Reference Guide
Contents
Chapter 9 SLB Commands—“i” Series Switches Only
clear slb connections 492
clear slb persistence vip 493
configure flow-redirect add next-hop 494
configure flow-redirect delete next-hop 495
configure flow-redirect service-check ftp 496
configure flow-redirect service-check http 497
configure flow-redirect service-check L4-port 498
configure flow-redirect service-check nntp 499
configure flow-redirect service-check ping 500
configure flow-redirect service-check pop3 501
configure flow-redirect service-check smtp 502
configure flow-redirect service-check telnet 503
configure flow-redirect timer ping-check 504
configure flow-redirect timer service-check 505
configure flow-redirect timer tcp-port-check 506
configure slb esrp vlan 507
configure slb failover alive-frequency 508
configure slb failover dead-frequency 509
configure slb failover failback-now 510
configure slb failover ping-check 511
configure slb failover unit 512
configure slb global connection-block 513
configure slb global connection-timeout 514
configure slb global ftp 515
configure slb global http 516
configure slb global nntp 518
configure slb global persistence-level 519
configure slb global persistence-method 520
configure slb global ping-check 521
configure slb global pop3 522
configure slb global service-check 523
configure slb global smtp 524
configure slb global synguard 525

ExtremeWare 7.5 Command Reference Guide 13
Contents
configure slb global tcp-port-check 526
configure slb global telnet 527
configure slb gogo-mode health-check 528
configure slb gogo-mode ping-check 529
configure slb gogo-mode service-check ftp 531
configure slb gogo-mode service-check http 532
configure slb gogo-mode service-check pop3 534
configure slb gogo-mode service-check smtp 535
configure slb gogo-mode service-check telnet 536
configure slb gogo-mode service-check timer 537
configure slb gogo-mode tcp-port-check add 539
configure slb gogo-mode tcp-port-check delete 541
configure slb gogo-mode tcp-port-check timer 543
configure slb L4-port 545
configure slb node max-connections 547
configure slb node ping-check 549
configure slb node tcp-port-check 550
configure slb pool add 552
configure slb pool delete 554
configure slb pool lb-method 556
configure slb pool member 557
configure slb proxy-client-persistence 559
configure slb vip 560
configure slb vip client-persistence-timeout 561
configure slb vip max-connections 562
configure slb vip service-check frequency 563
configure slb vip service-check ftp 564
configure slb vip service-check http 565
configure slb vip service-check nntp 567
configure slb vip service-check pop3 568
configure slb vip service-check smtp 569
configure slb vip service-check telnet 570
configure vlan slb-type 571
create flow-redirect 572

14 ExtremeWare 7.5 Command Reference Guide
Contents
create slb pool 574
create slb vip 575
delete flow-redirect 576
delete slb pool 577
delete slb vip 578
disable flow-redirect 579
disable slb 580
disable slb 3dns 581
disable slb failover 582
disable slb failover manual-failback 583
disable slb failover ping-check 584
disable slb global synguard 585
disable slb gogo-mode 586
disable slb gogo-mode ping-check 587
disable slb gogo-mode service-check 588
disable slb gogo-mode tcp-port-check 589
disable slb L4-port 591
disable slb node 593
disable slb node ping-check 595
disable slb node tcp-port-check 596
disable slb proxy-client-persistence 598
disable slb vip 599
disable slb vip client-persistence 601
disable slb vip service-check 602
disable slb vip sticky-persistence 603
disable slb vip svcdown-reset 604
enable flow-redirect 605
enable slb 606
enable slb 3dns 607
enable slb failover 608
enable slb failover manual-failback 609
enable slb failover ping-check 610
enable slb global synguard 611
enable slb gogo-mode 612

ExtremeWare 7.5 Command Reference Guide 15
Contents
enable slb gogo-mode ping-check 613
enable slb gogo-mode service-check 614
enable slb gogo-mode tcp-port-check 615
enable slb L4-port 617
enable slb node 619
enable slb node ping-check 621
enable slb node tcp-port-check 622
enable slb proxy-client-persistence 624
enable slb vip 625
enable slb vip client-persistence 627
enable slb vip service-check 628
enable slb vip sticky-persistence 629
enable slb vip svcdown-reset 630
show flow-redirect 631
show slb 3dns members 633
show slb connections 634
show slb esrp 636
show slb failover 637
show slb global 639
show slb gogo-mode 641
show slb L4-port 642
show slb node 644
show slb persistence 646
show slb pool 647
show slb stats 648
show slb vip 649
unconfigure slb all 651
unconfigure slb gogo-mode health-check 652
unconfigure slb gogo-mode service-check 653
unconfigure slb vip service-check 654

16 ExtremeWare 7.5 Command Reference Guide
Contents
Chapter 10 Commands for Status Monitoring and Statistics
clear counters 657
clear log 658
clear log counters 660
clear log diag error 662
clear log diag remap 663
clear transceiver-test 664
configure flowstats export add port 666
configure flowstats export delete port 668
configure flowstats filter ports 669
configure flowstats source 671
configure flowstats timeout ports 672
configure log display 673
configure log filter events 675
configure log filter events match 678
configure log filter set severity 682
configure log filter set severity match 684
configure log target filter 686
configure log target format 688
configure log target match 692
configure log target severity 694
configure packet-mem-scan-recovery-mode 696
configure sflow agent 698
configure sflow backoff-threshold 699
configure sflow collector 701
configure sflow poll-interval 703
configure sflow sample-rate 704
configure sys-health-check alarm-level 705
configure sys-health-check auto-recovery 708
configure sys-health-check scan recovery 711
configure sys-recovery-level 713
configure syslog add 715
configure syslog delete 717
configure transceiver-test failure-action 718

ExtremeWare 7.5 Command Reference Guide 17
Contents
configure transceiver-test period 720
configure transceiver-test threshold 721
configure transceiver-test window 722
create log filter 723
delete log filter 725
disable cli-config-logging 726
disable flowstats 727
disable flowstats filter ports 728
disable flowstats ping-check 730
disable flowstats ports 731
disable log debug-mode 732
disable log display 733
disable log target 734
disable rmon 736
disable sflow 737
disable sflow backoff-threshold 738
disable sflow ports 739
disable sys-health-check 740
disable syslog 741
disable temperature-logging 742
disable transceiver-test 744
enable cli-config-logging 746
enable flowstats 747
enable flowstats filter ports 748
enable flowstats ping-check 750
enable flowstats ports 751
enable log debug-mode 752
enable log display 753
enable log target 754
enable rmon 756
enable sflow 758
enable sflow backoff-threshold 759
enable sflow ports 760
enable sys-health-check 761

18 ExtremeWare 7.5 Command Reference Guide
Contents
enable syslog 763
enable temperature-logging 764
enable transceiver-test 766
save log 768
show flowstats 770
show flowstats 772
show flowstats export 774
show log 775
show log components 779
show log configuration 781
show log configuration filter 783
show log configuration target 785
show log counters 786
show log events 788
show memory 790
show packet-mem-scan-recovery-mode 792
show packet miscompare 794
show ports rxerrors 795
show ports stats 798
show ports txerrors 801
show sflow configuration 804
show sflow statistics 806
show version 808
unconfigure flowstats filter ports 811
unconfigure flowstats ports 812
unconfigure log filter 813
unconfigure log target format 814
unconfigure packet-mem-scan-recovery-mode 816
unconfigure sflow agent 817
unconfigure sflow backoff-threshold 818
unconfigure sflow collector 819
unconfigure transceiver-test failure-action 820
unconfigure transceiver-test period 821
unconfigure transceiver-test threshold 822

ExtremeWare 7.5 Command Reference Guide 19
Contents
unconfigure transceiver-test window 823
upload log 824
Chapter 11 Security Commands
clear netlogin state 830
clear netlogin state mac-address 831
configure access-profile add 832
configure access-profile delete 835
configure access-profile mode 836
configure auth mgmt-access local 837
configure auth mgmt-access radius 839
configure auth mgmt-access radius-accounting 840
configure auth mgmt-access tacacs 841
configure auth mgmt-access tacacs-accounting 843
configure auth netlogin radius 845
configure auth netlogin radius-accounting 846
configure cpu-dos-protect alert-threshold 847
configure cpu-dos-protect filter-precedence 848
configure cpu-dos-protect filter-type-allowed 849
configure cpu-dos-protect messages 850
configure cpu-dos-protect notice-threshold 851
configure cpu-dos-protect timeouts 852
configure cpu-dos-protect trusted-ports 853
configure cpu-dos-protect (Port-Based) 854
configure cpu-dos-protect trusted-ports 855
configure enhanced-dos-protect ipfdb agingtime 856
configure enhanced-dos-protect ipfdb cache-size 857
configure enhanced-dos-protect ipfdb learn-limit 858
configure enhanced-dos-protect ipfdb learn-window 859
configure enhanced-dos-protect ports 860
configure enhanced-dos-protect rate-limit 861
configure ip-subnet-lookup maskbits 863
configure mac-lockdown-timeout ports aging-time 864
configure netlogin base-url 865

20 ExtremeWare 7.5 Command Reference Guide
Contents
configure netlogin mac-address 866
configure netlogin mac auth-retry-count 867
configure netlogin mac reauth-period 868
configure netlogin redirect-page 869
configure radius server 870
configure radius shared-secret 872
configure radius timeout 873
configure radius-accounting server 875
configure radius-accounting shared-secret 876
configure radius-accounting timeout 877
configure route-map add 878
configure route-map add goto 880
configure route-map add match 881
configure route-map add set 883
configure route-map delete 885
configure route-map delete goto 886
configure route-map delete match 887
configure route-map delete set 889
configure security-profile default-user-vlan 891
configure security-profile dot11-auth network-auth encryption 892
configure security-profile dot1x-wpa-timers group-update-timer 895
configure security-profile dot1x-wpa-timers pairwise-update-timer 896
configure security-profile dot1x-wpa-timers reauth-period 897
configure security-profile ess-name 898
configure security-profile ssid-in-beacon 899
configure security-profile use-dynamic-vlan 900
configure security-profile wep default-key-index 902
configure security-profile wep key add 903
configure security-profile wep key delete 904
configure security-profile wpa-psk 905
configure security-profile wpa2-psk 906
configure security-profile wpa-only 907
configure ssh2 key 908
configure ssl certificate pregenerated 910