Extreme Networks Summit Summit24 User manual

Part number: 120139-00 Rev. 01 Published: September 2001 1
Summit24e3 Switch Quick
Reference Guide
Accessing the Switch Commands
Command Description
clear session <number> Terminates a Telnet session from the switch.
config account <username> {encrypted}
{<password>}
Configures a user account password. Passwords must have a
minimum of 1 character and can have a maximum of 32
characters. User names and passwords are case-sensitive.
config banner Configures the banner string. You can enter up to 24 rows of
79-column text that is displayed before the login prompt of each
session. Press [Return] at the beginning of a line to terminate the
command and apply the banner. To clear the banner, press
[Return] at the beginning of the first line.
config dns-client add <ipaddress> Adds a DNS name server(s) to the available server list for the
DNS client. Up to three name servers can be configured.
config dns-client default-domain
<domain_name>
Configures the domain that the DNS client uses if a fully qualified
domain name is not entered. For example, if the default domain
is configured to be foo.com, executing ping bar searches for
bar.foo.com.
config dns-client delete <ipaddress> Removes a DNS server.
config ssh2 key {pregenerated} Generates the SSH2 host key.
config sys-recovery-level [none | critical | all] Configures a recovery option for instances where an exception
occurs in ExtremeWare. Specify one of the following:
■none — Recovery without system reboot.
■critical — ExtremeWare logs an error to the syslog, and
reboots the system after critical exceptions.
■all — ExtremeWare logs an error to the syslog, and reboots
the system after any exception.
The default setting is none.
config time <date> <time> Configures the system date and time. The format is as follows:
mm/dd/yyyy hh:mm:ss
The time uses a 24-hour clock format. You cannot set the year
past 2036.

2 Summit24e3 Switch Quick Reference Guide
config timezone <gmt_offset> {autodst |
noautodst}
Configures the time zone information to the configured offset
from GMT time. The format of gmt_offset is +/- minutes from
GMT time. Specify:
■autodst —Enables automatic Daylight Savings Time
change.
■nosautodst —Disables automatic Daylight Savings Time
change.
The default setting is autodst.
config vlan <name> ipaddress <ip_address>
{<mask>}
Configures an IP address and subnet mask for a VLAN.
create account [admin | user] <username>
{encrypted} {<password>}
Creates a user account. This command is available to
admin-level users and to users with RADIUS command
authorization. The username is between 1 and 32 characters, the
password is between 0 and 16 characters.
create vlan <name> Creates a VLAN.
delete account <username> Deletes a user account.
delete vlan <name> Deletes a VLAN.
disable bootp vlan [<name> | all] Disables BOOTP for one or more VLANs.
disable cli-config-logging Disables logging of CLI commands to the Syslog.
disable clipaging Disables pausing of the screen display when a show command
output reaches the end of the page.
disable idletimeouts Disables the timer that disconnects all sessions. Once disabled,
console sessions remain open until the switch is rebooted or you
logoff. Telnet sessions remain open until you close the Telnet
client.
disable ports <portlist> Disables a port on the switch.
disable ssh2 Disables SSH2 Telnet access to the switch.
disable telnet Disables Telnet access to the switch.
enable bootp vlan [<name> | all] Enables BOOTP for one or more VLANs.
enable cli-config-logging Enables the logging of CLI configuration commands to the
Syslog for auditing purposes. The default setting is enabled.
enable clipaging Enables pausing of the screen display when show command
output reaches the end of the page. The default setting is
enabled.
enable idletimeouts Enables a timer that disconnects all sessions (both Telnet and
console) after 20 minutes of inactivity. The default setting is
disabled.
enable ssh2 {port <tcp_port_number>} Enables SSH2 Telnet sessions. By default, SSH2 uses TCP port
number 22.
enable telnet {port <tcp_port_number>} Enables Telnet access to the switch. By default, Telnet uses
TCP port number 23.
history Displays the previous 49 commands entered on the switch.
Command Description

Summit24e3 Switch Quick Reference Guide 3
nslookup <hostname> Displays the IP address of the requested host.
ping {continuous} {size <start_size> {-
<end_size>}} [<ip_address> | <hostname>]
{from <src_address> | with record-route | from
<src_ipaddress> with record-route}
Enables you to send Internet Control Message Protocol (ICMP)
echo messages to a remote IP device. Specify:
■continuous —Specifies ICMP echo messages to be sent
continuously. This option can be interrupted by pressing any
key.
■size —Specifies the size of the ICMP request. If both the
start_size and end_size are specified, transmits ICMP
requests using 1 byte increments, per packet. If no
end_size is specified, packets of start_size are sent.
■<ipaddress> —Specifies the IP address of the host.
■<hostname> —Specifies the name of the host. To use the
hostname, you must first configure DNS.
■from —Uses the specified source address in the ICMP
packet. If not specified, the address of the transmitting
interface is used.
■with record-route —Decodes the list of recorded routes
and displays them when the ICMP echo reply is received.
show banner Displays the user-configured banner.
show dns-client Displays the DNS configuration.
traceroute [<ip_address> | <hostname>] {from
<src_ipaddress>} {ttl <TTL>} {port <port>}
Enables you to trace the routed path between the switch and a
destination endstation. Specify:
■ip_address —is the IP address of the destination
endstation.
■hostname —is the hostname of the destination endstation.
To use the hostname, you must first configure DNS.
■from —uses the specified source address in the ICMP
packet. If not specified, the address of the transmitting
interface is used.
■ttl —configures the switch to trace up to the time-to-live
number of the switch.
■port —uses the specified UDP port number.
unconfig switch {all} Resets all switch parameters (with the exception of defined user
accounts, and date and time information) to the factory defaults.
If you specify the keyword all, the switch erases the currently
selected configuration image in flash memory and reboots. As a
result, all parameters are reset to default settings.
Command Description

4 Summit24e3 Switch Quick Reference Guide
Managing the Switch Commands
Command Description
config radius [primary | secondary] server
[<ipaddress> | <hostname>] {<udp_port>}
client-ip <ipaddress>
Configures the primary and secondary RADIUS server. Specify
the following:
■[primary | secondary] —Configure either the primary
or secondary RADIUS server.
■[<ipaddress> | <hostname>] —The IP address or
hostname of the server being configured.
■<udp_port> —The UDP port to use to contact the RADUIS
server. The default UDP port setting is 1645.
■client-ip <ipaddress> —The IP address used by the
switch to identify itself when communicating with the RADIUS
server.
The RADIUS server defined by this command is used for user
name authentication and CLI command authentication.
config radius [primary | secondary]
shared-secret {encrypted} <string>
Configures the authentication string used to communicate with
the RADIUS server.
config radius-accounting [primary | secondary]
server [<ipaddress> | <hostname>]
{<udp_port>} client-ip <ipaddress>
Configures the RADIUS accounting server. Specify the following:
■[primary | secondary] —Configure either the primary
or secondary RADIUS server.
■[<ipadress> | <hostname>] —The IP address or
hostname of the server being configured.
■<udp_port> —The UDP port to use to contact the RADUIS
server. The default UDP port setting is 1646.
■client-ip <ipaddress> —The IP address used by the
switch to identify itself when communicating with the RADIUS
server.
The accounting server and the RADIUS authentication server
can be the same.
config radius-accounting [primary | secondary]
shared-secret {encrypted} <string>
Configures the authentication string used to communicate with
the RADIUS accounting server.
config snmp add trapreceiver <ipaddress>
community <string>
Adds the IP address of a specified trap receiver. The IP address
can be a unicast, multicast, or broadcast address. A maximum of
16 trap receivers is allowed.
config snmp community [read-only |
read-write] <string>
Adds an SNMP read or read/write community string. The default
read-only community string is public. The default
read-write community string is private. Each community
string can have a maximum of 127 characters, and can be
enclosed by double quotation marks.
config snmp delete trapreceiver [<ip_address>
community <string> | all]
Deletes the IP address of a specified trap receiver or all
authorized trap receivers.
config snmp syscontact <string> Configures the name of the system contact. A maximum of 255
characters is allowed.

Summit24e3 Switch Quick Reference Guide 5
config snmp syslocation <string> Configures the location of the switch. A maximum of 255
characters is allowed.
config snmp sysname <string> Configures the name of the switch. A maximum of 32 characters
is allowed. The default sysname is the model name of the device
(for example, Summit24e3). The sysname appears in the
switch prompt.
config sntp-client [primary | secondary] server
[<ipaddress> | <host_name>]
Configures an NTP server for the switch to obtain time
information. Queries are first sent to the primary server. If the
primary server does not respond within 1 second, or if it is not
synchronized, the switch queries the second server.
config sntp-client update-interval <seconds> Configures the interval between polling for time information from
SNTP servers. The default setting is 64 seconds.
config tacacs [primary | secondary] server
[<ipaddress> | <hostname>] {<udp_port>}
client-ip <ipaddress>
Configure the server information for a TACACS+ server. Specify
the following:
■primary | secondary —Specifies primary or secondary
server configuration. To remove a server, use the address
0.0.0.0.
■<ipaddress> | <hostname> —Specifies the TACACS+
server.
■<udp_port> —Optionally specifies the UDP port to be used.
■client-ip —Specifies the IP address used by the switch to
identify itself when communicating with the TACACS+ server.
config tacacs [primary | secondary]
shared-secret {encrypted} <string>
Configures the shared secret string used to communicate with
the TACACS+ server.
config tacacs-accounting [primary | secondary]
server [<ipaddress> | <hostname>]
{<udp_port>} client-ip <ipaddress>
Configures the TACACS+ accounting server. You can use the
same server for accounting and authentication.
config tacacs-accounting [primary | secondary]
shared-secret {encrypted} <string>
Configures the shared secret string used to communicate with
the TACACS+ accounting server.
disable radius Disables the RADIUS client.
disable radius-accounting Disables RADIUS accounting.
disable snmp access Disables SNMP on the switch. Disabling SNMP access does not
affect the SNMP configuration (for example, community strings).
disable snmp traps Prevents SNMP traps from being sent from the switch. Does not
clear the SNMP trap receivers that have been configured.
disable sntp-client Disables SNTP client functions.
disable tacacs Disables TACACS+.
disable tacacs-accounting Disables TACACS+ accounting.
disable tacacs-authorization Disables CLI command authorization.
Command Description

6 Summit24e3 Switch Quick Reference Guide
enable radius Enables the RADIUS client. When enabled, all CLI logins are
sent to the RADIUS servers for authentication. When used with a
RADIUS server that supports ExtremeWare CLI authorization,
each CLI command is sent to the RADIUS server for
authentication before it is executed.
enable radius-accounting Enables RADIUS accounting. The RADIUS client must also be
enabled.
enable snmp access Turns on SNMP support for the switch.
enable snmp traps Turns on SNMP trap support.
enable sntp-client Enables Simple Network Time Protocol (SNTP) client functions.
enable tacacs Enables TACACS+. Once enabled, all CLI logins are sent to one
of the two TACACS+ server for login name authentication and
accounting.
enable tacacs-accounting Enables TACACS+ accounting. If accounting is use, the
TACACS+ client must also be enabled.
enable tacacs-authorization Enables CLI command authorization. When enabled, each
command is transmitted to the remote TACACS+ server for
authorization before the command is executed.
show radius Displays the current RADIUS client configuration and statistics.
show sntp-client Displays configuration and statistics for the SNTP client.
show tacacs Displays the current TACACS+ configuration and statistics.
show tacacs-accounting Displays the current TACACS+ accounting client configuration
and statistics.
telnet [<ipaddress> | <hostname>]
{<port_number>}
Enables a Telnet session on the switch. Up to eight active Telnet
sessions can access the switch concurrently. You can Telnet to
a switch by entering the IP address of the switch or the
hostname of the switch. The Telnet session defaults to port 23.
unconfig management Restores default values to all SNMP-related entries.
unconfig tacacs {server [primary | secondary]} Unconfigures the TACACS+ client configuration.
unconfig tacacs-accounting {server [primary |
secondary]}
Unconfigures the TACACS+ accounting client configuration.
Command Description

Summit24e3 Switch Quick Reference Guide 7
Configuring Ports on a Switch Commands
Command Description
config ports <portlist> auto off {speed [10 |
100 | 1000]} duplex [half | full]
Changes the configuration of a group of ports. Specify the
following:
■auto off —The port will not autonegotiate the settings.
■speed —The speed of the port (for 10/100 Mbps or
100/1000 Mbps ports only).
■duplex —The duplex setting (half- or full-duplex).
config ports <portlist> auto on Enables autonegotiation for the particular port type; 802.3u for
10/100 Mbps ports or 802.3z for Gigabit Ethernet ports.
config ports <portlist> display-string <string> Configures a user-defined string for a port. The string is
displayed in certain show commands (for example, show port
all info). The string can be up to 16 characters.
config sharing address-based [mac_source |
mac_destination | mac_source_destination |
ip_source | ip_destination |
ip_source_destination]
Configures the part of the packet examined by the switch when
selecting the egress port for transmitting load-sharing data. This
feature is available using the address-based load-sharing
algorithm, only.
disable edp ports <portlist> Disable EDP on one or more ports.
disable ports <portlist Disables a port. Even when disabled, the link is available for
diagnostic purposes.
disable ports <portlist> Disables a port. Even when disabled, the link is available for
diagnostic purposes.
disable sharing <port> Disables a load-sharing group of ports.
enable edp ports <portlist> Enables the generation and processing of EDP messages on
one or more ports. The default setting is enabled.
enable ports <portlist> Enables a port.
enable sharing <port> grouping <portlist>
{address-based}
Defines a load-sharing group of ports. The ports specified in
<portlist> are grouped to the master port. The optional
load-sharing algorithm, address-based, uses addressing
information as criteria for egress port selection.
restart ports <portlist> Resets autonegotiation for one or more ports by resetting the
physical link.
show edp Displays EDP information.
show ports {<portlist>} collisions Displays real-time collision statistics.
show ports {<portlist>} configuration Displays the port configuration.
show ports {<portlist>} info {detail} Displays detailed system-related information.
show ports {<portlist>} packet Displays a histogram of packet statistics.
show ports {<portlist>} rxerrors Displays real-time receive error statistics.
show ports {<portlist>} stats Displays real-time port statistics.
show ports {<portlist>} txerrors Displays real-time transmit error statistics.

8 Summit24e3 Switch Quick Reference Guide
show ports {<portlist>} utilization Displays real-time port utilization information. Use the [Spacebar]
to toggle between packet, byte, and bandwidth utilization
information.
show sharing address-based Displays the address-based load sharing configuration.
unconfig ports <portlist> display-string <string> Clears the user-defined display string from a port.
unconfig ports <portlist> redundant <portlist> Clears a previously configured software-controlled redundant
port.
Command Description

Summit24e3 Switch Quick Reference Guide 9
VLAN Commands
Command Description
config vlan <name> delete port <portlist>
{tagged | untagged} {nobroadcast}
Deletes one or more ports from a VLAN.
config vlan <name> ipaddress <ipaddress>
{<mask>}
Assigns an IP address and an optional mask to the VLAN.
config vlan <name> tag <vlanid> Assigns a numerical VLANid. The valid range is from 1 to 4095.
config vlan <old_name> name <new_name> Renames a previously configured VLAN.
create vlan <name> Creates a named VLAN.
delete vlan <name> Removes a VLAN.
show vlan {<name>} Displays summary information about each VLAN, which includes:
■Name
■VLANid
■How the VLAN was created
■IP address
■STPD information
■QoS profile information
■Ports assigned
■Tagged/untagged status for each port
■How the ports were added to the VLAN
■Number of VLANs configured on the switch
unconfig vlan <name> ipaddress Resets the IP address of the VLAN.

10 Summit24e3 Switch Quick Reference Guide
FDB Commands
Command Description
clear fdb Clears all FDB entries.
config fdb agingtime <number> Configures the FDB aging time. The range is 15 through
1,000,000 seconds. The default value is 300 seconds. A value of
0 indicates that the entry should never be aged out.
create fdbentry <mac_address> vlan <name>
[blackhole | <portlist>] }
Creates an FDB entry. Specify the following:
■mac_address —Device MAC address, using colon
separated bytes.
■name —VLAN associated with MAC address.
■blackhole —Configures the MAC address as a blackhole
entry.
■portlist —Port numbers associated with MAC address.
If more than one port number is associated with a permanent
MAC entry, packets are multicast to the multiple destinations.
delete fdbentry <mac_address> vlan <name> Deletes a permanent FDB entry.
show fdb {<mac_address> | vlan <name> |
<portlist> | permanent}
Displays the switch FDB contents.