Extreme Networks ExtremeWare Command Operating manual

Extreme Networks, Inc.
3585 Monroe Street
Santa Clara, California 95051
[phone]
http://www.extremenetworks.com
ExtremeWare
Command Reference Guide
Software Version 7.7
Published: October 2006
Part number: 100231-00

2
Alpine, Altitude, BlackDiamond, EPICenter, Ethernet Everywhere, Extreme Ethernet Everywhere, Extreme Networks,
Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, GlobalPx Content Director, the Go Purple Extreme
Solution Partners Logo, ServiceWatch, Summit, the Summit7i Logo, and the Color Purple, among others, are trademarks
or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and other countries. Other
names and marks may be the property of their respective owners.
© 2006 Extreme Networks, Inc. All Rights Reserved.
Specifications are subject to change without notice.
Adobe, Acrobat, and Reader are registered trademarks of Adobe Systems Incorporated. NetWare and Novell are
registered trademarks of Novell, Inc. Merit is a registered trademark of Merit Network, Inc. Solaris is a trademark of
Sun Microsystems, Inc. F5, BIG/ip, and 3DNS are registered trademarks of F5 Networks, Inc. see/IT is a trademark of
F5 Networks, Inc.
“Data Fellows”, the triangle symbol, and Data Fellows product names and symbols/logos are
trademarks of Data Fellows.
F-Secure SSH is a registered trademark of Data Fellows.
sFlow® is a registered trademark of InMon Corporation.
All other registered trademarks, trademarks and service marks are property of their respective owners.
Authors: Jeanine Healy, Meg Laycock, Richard Small, Barbara Weinstein, Rajeshkumar
Production: Christine Millbank

ExtremeWare 7.7 Command Reference Guide 3
Contents
Preface
Chapter 1 Command Reference Overview
Chapter 2 Commands for Accessing the Switch
clear account lockout 74
clear session 75
configure account 76
configure account password-policy char-validation 78
configure account password-policy history 80
configure account password-policy lockout-on-login-failures 81
configure account password-policy maxage 82
configure account password-policy min-pwd-length 83
configure banner 85
configure banner netlogin 86
configure dns-client add 87
configure dns-client add domain-suffix 88
configure dns-client add name-server 89
configure dns-client default-domain 90
configure dns-client delete 91
configure dns-client delete domain-suffix 92
configure dns-client delete name-server 93
configure idletimeouts 94
configure time 95
configure timezone 96

4ExtremeWare 7.7 Command Reference Guide
Contents
create account 100
delete account 102
disable clipaging 104
disable idletimeouts 105
enable clipaging 106
enable idletimeouts 107
enable license 108
history 110
reboot 111
show accounts password-policy 113
show accounts pppuser 115
show banner 117
show dns-client 118
show esrp-aware 119
show switch 120
traceroute 124
Chapter 3 Commands for Managing the Switch
configure snmp access-profile readonly 127
configure snmp access-profile readwrite 129
configure snmp add community 131
configure snmp add trapreceiver 133
configure snmp community 137
configure snmp delete community 139
configure snmp delete trapreceiver 141
configure snmp sysContact 143
configure snmp sysLocation 144
configure snmp sysName 145
configure snmpv3 add access 146
configure snmpv3 add community 148
configure snmpv3 add filter 150
configure snmpv3 add filter-profile 152
configure snmpv3 add group user 153
configure snmpv3 add mib-view 155

ExtremeWare 7.7 Command Reference Guide 5
Contents
configure snmpv3 add notify 157
configure snmpv3 add target-addr 158
configure snmpv3 add target-params 160
configure snmpv3 add user 162
configure snmpv3 add user clone-from 164
configure snmpv3 delete access 165
configure snmpv3 delete community 167
configure snmpv3 delete filter 168
configure snmpv3 delete filter-profile 169
configure snmpv3 delete group user 170
configure snmpv3 delete mib-view 172
configure snmpv3 delete notify 174
configure snmpv3 delete target-addr 175
configure snmpv3 delete target-params 176
configure snmpv3 delete user 177
configure snmpv3 engine-boots 178
configure snmpv3 engine-id 179
configure snmpv3 extreme-target-addr-ext 180
configure sntp-client server 182
configure sntp-client update-interval 183
configure web login-timeout 184
disable alt-queue-management 185
disable dhcp ports vlan 186
disable eapol-flooding 187
disable snmp access 188
disable snmp dot1dTpFdbTable 189
disable snmp traps 190
disable snmp traps exceed-committed-rate ports 191
disable snmp traps gratuitous-arp-protection 192
disable snmp traps mac-security 193
disable snmp traps port-up-down 194
disable sntp-client 195
disable system-watchdog 196
disable telnet 197

6ExtremeWare 7.7 Command Reference Guide
Contents
enable alt-queue-management 198
enable dhcp ports vlan 200
enable eapol-flooding 201
enable snmp access 202
enable snmp dot1dTpFdbTable 204
enable snmp traps 205
enable snmp traps exceed-committed-rate ports 206
enable snmp traps gratuitous-arp-protection 208
enable snmp traps mac-security 209
enable snmp traps port-up-down 210
enable sntp-client 211
enable system-watchdog 212
enable telnet 213
exit 215
logout 216
quit 217
show eapol-flooding 218
show management 219
show odometer 222
show session 224
show snmpv3 access 226
show snmpv3 context 229
show snmpv3 counters 230
show snmpv3 engine-info 232
show snmpv3 extreme-target-addr-ext 233
show snmpv3 filter 234
show snmpv3 filter-profile 235
show snmpv3 group 236
show snmpv3 mib-view 238
show snmpv3 notify 240
show snmpv3 target-addr 241
show snmpv3 target-params 242
show snmpv3 user 243
show sntp-client 245

ExtremeWare 7.7 Command Reference Guide 7
Contents
show vlan dhcp-address-allocation 247
show vlan dhcp-config 248
telnet 250
unconfigure management 252
Chapter 4 Commands for Configuring Slots and Ports on a Switch
clear slot 255
configure backplane-ls-policy 256
configure ip-mtu vlan 257
configure jumbo-frame size 259
configure mirroring add 261
configure mirroring delete 263
configure msm-failover link-action 265
configure msm-failover slave-config 267
configure msm-failover timeout 268
configure port aggregate-bandwidth percent 269
configure port interpacket-gap 270
configure ports 271
configure ports auto-polarity 274
configure ports auto off 275
configure ports auto on 277
configure ports display-string 279
configure ports link-detection-level 281
configure ports preferred-medium 282
configure ports redundant 284
configure ports vdsl 286
configure sharing address-based 287
configure slot 289
disable card-scan 292
disable edp ports 294
disable flooding ports 296
disable jumbo-frame ports 297
disable lbdetect port 298
disable learning ports 299

8ExtremeWare 7.7 Command Reference Guide
Contents
disable mirroring 300
disable ports 301
disable sharing 303
disable slot 304
disable smartredundancy 306
enable card-scan 307
enable edp ports 309
enable flooding ports 311
enable jumbo-frame ports 312
enable lbdetect port 313
enable learning ports 314
enable mirroring to port 315
enable ports 317
enable sharing grouping 319
enable slot 322
enable smartredundancy 324
restart ports 325
run msm-failover 326
show edp 327
show mirroring 329
show msm-failover 330
show ports vlan stats 332
show ports collisions 334
show ports configuration 336
show ports info 338
show ports packet 342
show ports redundant 344
show ports sharing 345
show ports utilization 347
show ports vlan info 350
show sharing address-based 352
show slot 353
unconfigure msm-failover 362
unconfigure port aggregate-bandwidth 363

ExtremeWare 7.7 Command Reference Guide 9
Contents
unconfigure ports display string 364
unconfigure ports redundant 365
unconfigure slot 366
Chapter 5 VLAN Commands
configure dot1q ethertype 368
configure mac-vlan add mac-address 369
configure mac-vlan delete 371
configure ports monitor vlan 372
configure protocol add 373
configure protocol delete 375
configure vlan add member-vlan 376
configure vlan add ports 377
configure vlan add ports loopback-vid 379
configure vlan add secondary-ip 381
configure vlan delete member-vlan 383
configure vlan delete port 384
configure vlan delete secondary-ip 385
configure vlan ipaddress 386
configure vlan name 387
configure vlan protocol 388
configure vlan tag 389
create protocol 390
create vlan 391
delete protocol 393
delete vlan 394
disable mac-vlan port 395
enable mac-vlan mac-group port 396
show mac-vlan 397
show protocol 398
show vlan 399
unconfigure ports monitor vlan 402
unconfigure vlan ipaddress 403
Chapter 6 FDB Commands

10 ExtremeWare 7.7 Command Reference Guide
Contents
clear fdb 406
configure fdb agingtime 408
configure fdb-scan failure-action 409
configure fdb-scan period 411
create fdbentry secure-mac 412
create fdbentry vlan blackhole 413
create fdbentry vlan dynamic 415
create fdbentry vlan ports 417
delete fdbentry 419
disable fdb-scan 420
enable fdb-scan 422
run fdb-check 424
show fdb 426
unconfigure fdb-scan failure-action 429
unconfigure fdb-scan period 430
Chapter 7 QoS Commands
clear dlcs 433
configure diffserv examination code-point qosprofile ports 434
configure diffserv replacement priority vpri code-point ports 436
configure dot1p type 438
configure ports qosprofile 440
configure qosprofile 441
configure qostype priority 443
configure red drop-probability 445
configure vlan priority 446
configure vlan qosprofile 447
disable diffserv examination ports 448
disable diffserv replacement ports 449
disable dlcs 450
disable dot1p replacement ports 451
disable qosmonitor 452
disable red ports 453
enable diffserv examination ports 454

ExtremeWare 7.7 Command Reference Guide 11
Contents
enable diffserv replacement ports 455
enable dlcs 456
enable dot1p replacement ports 458
enable qosmonitor 460
enable red ports 461
show dlcs 462
show dot1p 463
show ports qosmonitor 464
show qosprofile 466
show qostype priority 468
unconfigure diffserv examination ports 469
unconfigure diffserv replacement ports 470
unconfigure qostype priority 471
Chapter 8 NAT Commands
clear nat 474
configure nat add vlan map 475
configure nat delete 479
configure nat finrst-timeout 481
configure nat icmp-timeout 482
configure nat syn-timeout 483
configure nat tcp-timeout 484
configure nat timeout 485
configure nat udp-timeout 486
configure nat vlan 487
disable nat 488
enable nat 489
show nat 490
Chapter 9 SLB Commands—“i” Series Switches Only
clear slb connections 494
clear slb persistence vip 495
configure flow-redirect add next-hop 496
configure flow-redirect delete next-hop 497
configure flow-redirect service-check ftp 498

12 ExtremeWare 7.7 Command Reference Guide
Contents
configure flow-redirect service-check http 499
configure flow-redirect service-check L4-port 500
configure flow-redirect service-check nntp 501
configure flow-redirect service-check ping 502
configure flow-redirect service-check pop3 503
configure flow-redirect service-check smtp 504
configure flow-redirect service-check telnet 505
configure flow-redirect timer ping-check 506
configure flow-redirect timer service-check 507
configure flow-redirect timer tcp-port-check 508
configure slb esrp vlan 509
configure slb failover alive-frequency 510
configure slb failover dead-frequency 511
configure slb failover failback-now 512
configure slb failover ping-check 513
configure slb failover unit 514
configure slb global connection-block 515
configure slb global connection-timeout 516
configure slb global ftp 517
configure slb global http 519
configure slb global nntp 521
configure slb global persistence-level 522
configure slb global persistence-method 523
configure slb global ping-check 524
configure slb global pop3 525
configure slb global service-check 527
configure slb global smtp 528
configure slb global synguard 529
configure slb global tcp-port-check 530
configure slb global telnet 531
configure slb gogo-mode health-check 533
configure slb gogo-mode ping-check 534
configure slb gogo-mode service-check ftp 536
configure slb gogo-mode service-check http 537

ExtremeWare 7.7 Command Reference Guide 13
Contents
configure slb gogo-mode service-check pop3 539
configure slb gogo-mode service-check smtp 540
configure slb gogo-mode service-check telnet 541
configure slb gogo-mode service-check timer 542
configure slb gogo-mode tcp-port-check add 544
configure slb gogo-mode tcp-port-check delete 546
configure slb gogo-mode tcp-port-check timer 548
configure slb L4-port 550
configure slb node max-connections 552
configure slb node ping-check 554
configure slb node tcp-port-check 555
configure slb pool add 557
configure slb pool delete 559
configure slb pool lb-method 561
configure slb pool member 562
configure slb proxy-client-persistence 564
configure slb vip 565
configure slb vip client-persistence-timeout 566
configure slb vip max-connections 567
configure slb vip service-check frequency 568
configure slb vip service-check ftp 569
configure slb vip service-check http 571
configure slb vip service-check nntp 573
configure slb vip service-check pop3 574
configure slb vip service-check smtp 576
configure slb vip service-check telnet 577
configure vlan slb-type 579
create flow-redirect 580
create slb pool 582
create slb vip 583
delete flow-redirect 584
delete slb pool 585
delete slb vip 586
disable flow-redirect 587

14 ExtremeWare 7.7 Command Reference Guide
Contents
disable slb 588
disable slb 3dns 589
disable slb failover 590
disable slb failover manual-failback 591
disable slb failover ping-check 592
disable slb global synguard 593
disable slb gogo-mode 594
disable slb gogo-mode ping-check 595
disable slb gogo-mode service-check 596
disable slb gogo-mode tcp-port-check 597
disable slb L4-port 599
disable slb node 601
disable slb node ping-check 603
disable slb node tcp-port-check 604
disable slb proxy-client-persistence 606
disable slb vip 607
disable slb vip client-persistence 609
disable slb vip service-check 610
disable slb vip sticky-persistence 611
disable slb vip svcdown-reset 612
enable flow-redirect 613
enable slb 614
enable slb 3dns 615
enable slb failover 616
enable slb failover manual-failback 617
enable slb failover ping-check 618
enable slb global synguard 619
enable slb gogo-mode 620
enable slb gogo-mode ping-check 621
enable slb gogo-mode service-check 622
enable slb gogo-mode tcp-port-check 623
enable slb L4-port 625
enable slb node 627
enable slb node ping-check 629

ExtremeWare 7.7 Command Reference Guide 15
Contents
enable slb node tcp-port-check 630
enable slb proxy-client-persistence 632
enable slb vip 633
enable slb vip client-persistence 635
enable slb vip service-check 636
enable slb vip sticky-persistence 637
enable slb vip svcdown-reset 638
show flow-redirect 639
show slb 3dns members 641
show slb connections 642
show slb esrp 644
show slb failover 645
show slb global 647
show slb gogo-mode 649
show slb L4-port 650
show slb node 652
show slb persistence 654
show slb pool 655
show slb stats 656
show slb vip 657
unconfigure slb all 659
unconfigure slb gogo-mode health-check 660
unconfigure slb gogo-mode service-check 661
unconfigure slb vip service-check 662
Chapter 10 Commands for Status Monitoring and Statistics
clear counters 665
clear log 666
clear log counters 668
clear log diag error 670
clear log diag remap 671
clear transceiver-test 672
configure flowstats export add port 674
configure flowstats export delete port 676

16 ExtremeWare 7.7 Command Reference Guide
Contents
configure flowstats filter ports 677
configure flowstats source 679
configure flowstats timeout ports 680
configure log display 681
configure log filter events 683
configure log filter events match 686
configure log filter set severity 690
configure log filter set severity match 692
configure log target filter 694
configure log target format 696
configure log target match 700
configure log target severity 702
configure packet-mem-scan-recovery-mode 704
configure sflow agent 706
configure sflow backoff-threshold 707
configure sflow collector 709
configure sflow poll-interval 711
configure sflow sample-rate 712
configure sys-hardware-recovery 713
configure sys-health-check alarm-level 715
configure sys-health-check alarm-level msm 717
configure sys-health-check auto-recovery 719
configure sys-health-check scan recovery 722
configure sys-recovery-level 724
configure syslog add 726
configure syslog delete 728
configure transceiver-test failure-action 729
configure transceiver-test period 731
configure transceiver-test threshold 732
configure transceiver-test window 733
create log filter 734
delete log filter 736
disable cli-config-logging 737
disable flowstats 738

ExtremeWare 7.7 Command Reference Guide 17
Contents
disable flowstats filter ports 739
disable flowstats ping-check 741
disable flowstats ports 742
disable log debug-mode 743
disable log display 744
disable log target 745
disable rmon 747
disable sflow 748
disable sflow backoff-threshold 749
disable sflow ports 750
disable sys-hardware-recovery polling 751
disable sys-health-check 752
disable syslog 753
disable temperature-logging 754
disable transceiver-test 756
enable cli-config-logging 758
enable flowstats 759
enable flowstats filter ports 760
enable flowstats ping-check 762
enable flowstats ports 763
enable log debug-mode 764
enable log display 765
enable log target 766
enable rmon 768
enable sflow 770
enable sflow backoff-threshold 771
enable sflow ports 772
configure sys-hardware-recovery 773
configure sys-hardware-recovery poll-interval 775
enable sys-hardware-recovery polling 776
enable sys-health-check 777
enable syslog 779
enable temperature-logging 780
enable transceiver-test 782

18 ExtremeWare 7.7 Command Reference Guide
Contents
save log 784
show flowstats 786
show flowstats 788
show flowstats export 790
show log 791
show log components 795
show log configuration 797
show log configuration filter 799
show log configuration target 801
show log counters 802
show log events 804
show memory 806
show packet-mem-scan-recovery-mode 808
show packet miscompare 810
show ports rxerrors 811
show ports stats 814
show ports txerrors 817
show sflow configuration 820
show sflow statistics 822
show version 824
unconfigure flowstats filter ports 827
unconfigure flowstats ports 828
unconfigure log filter 829
unconfigure log target format 830
unconfigure packet-mem-scan-recovery-mode 832
unconfigure sflow agent 834
unconfigure sflow backoff-threshold 835
unconfigure sflow collector 836
unconfigure sys-hardware-recovery 837
unconfigure sys-health-check alarm-level msm 838
unconfigure transceiver-test failure-action 839
unconfigure transceiver-test period 840
unconfigure transceiver-test threshold 841
unconfigure transceiver-test window 842

ExtremeWare 7.7 Command Reference Guide 19
Contents
upload log 843
Chapter 11 Security Commands
clear netlogin state 849
clear netlogin state mac-address 850
configure access-profile add 851
configure access-profile delete 854
configure access-profile mode 855
configure auth mgmt-access local 856
configure auth mgmt-access radius 858
configure auth mgmt-access radius-accounting 860
configure auth mgmt-access tacacs 861
configure auth mgmt-access tacacs-accounting 863
configure auth netlogin radius 865
configure auth netlogin radius-accounting 866
configure cpu-dos-protect alert-threshold 867
configure cpu-dos-protect filter-precedence 868
configure cpu-dos-protect filter-type-allowed 869
configure cpu-dos-protect messages 870
configure cpu-dos-protect notice-threshold 871
configure cpu-dos-protect timeouts 872
configure cpu-dos-protect trusted-ports 873
configure cpu-dos-protect (Port-Based) 874
configure cpu-dos-protect trusted-ports 875
configure enhanced-dos-protect ipfdb agingtime 876
configure enhanced-dos-protect ipfdb cache-size 877
configure enhanced-dos-protect ipfdb learn-limit 878
configure enhanced-dos-protect ipfdb learn-window 879
configure enhanced-dos-protect ports 880
configure enhanced-dos-protect rate-limit 881
configure ip-subnet-lookup maskbits 883
configure mac-lockdown-timeout ports aging-time 884
configure netlogin agingtime 885
configure netlogin base-url 886

20 ExtremeWare 7.7 Command Reference Guide
Contents
configure netlogin dot1x guest-vlan 887
configure netlogin dot1x timers supplicant-response-timeout 888
configure netlogin dot1x guest-vlan supplicant-response-timeout 889
configure netlogin mac-address 891
configure netlogin mac auth-retry-count 892
configure netlogin mac reauth-period 893
configure netlogin redirect-page 894
configure netlogin dot1x timers reauth-period 895
configure radius server 896
configure radius shared-secret 898
configure radius timeout 899
configure radius-accounting server 901
configure radius-accounting shared-secret 902
configure radius-accounting timeout 903
configure route-map add 904
configure route-map add goto 906
configure route-map add match 907
configure route-map add set 909
configure route-map delete 911
configure route-map delete goto 912
configure route-map delete match 913
configure route-map delete set 915
configure security-profile default-user-vlan 917
configure security-profile dot11-auth network-auth encryption 919
configure security-profile dot1x-wpa-timers group-update-timer 922
configure security-profile dot1x-wpa-timers pairwise-update-timer 923
configure security-profile dot1x-wpa-timers reauth-period 924
configure security-profile ess-name 925
configure security-profile ssid-in-beacon 926
configure security-profile use-dynamic-vlan 927
configure security-profile wep default-key-index 929
configure security-profile wep key add 930
configure security-profile wep key delete 931
configure security-profile wpa-psk 932