FoxGate S6124 Installation instructions

1
Content
CHAPTER 1 COMMANDS FOR BASIC SWITCH
CONFIGURATION......................................................................22
1.1 COMMANDS FOR BASIC CONFIGURATION ...............................................22
1.1.1 authentication line ...................................................................................22
1.1.2 boot img....................................................................................................23
1.1.3 boot startup-config..................................................................................23
1.1.4 clock set....................................................................................................24
1.1.5 config.........................................................................................................24
1.1.6 debug ssh-server.....................................................................................24
1.1.7 enable........................................................................................................25
1.1.8 enable password......................................................................................25
1.1.9 end.............................................................................................................25
1.1.10 exec-timeout...........................................................................................26
1.1.11 exit ...........................................................................................................26
1.1.12 help..........................................................................................................26
1.1.13 hostname ................................................................................................27
1.1.14 ip host......................................................................................................27
1.1.15 ipv6 host..................................................................................................28
1.1.16 ip http server ..........................................................................................28
1.1.17 language..................................................................................................29
1.1.18 login.........................................................................................................29
1.1.19 password.................................................................................................29
1.1.20 reload.......................................................................................................30
1.1.21 service password-encryption...............................................................30
1.1.22 service terminal-length..........................................................................30
1.1.23 sysContact..............................................................................................31
1.1.24 sysLocation ............................................................................................31
1.1.25 set default ...............................................................................................31
1.1.26 setup........................................................................................................32
1.1.27 show clock..............................................................................................32
1.1.28 show temperature..................................................................................32
1.1.29 show tech-support.................................................................................32

2
1.1.30 show version..........................................................................................33
1.1.31 username ................................................................................................33
1.1.32 web language .........................................................................................34
1.1.33 write.........................................................................................................34
1.2 COMMANDS FOR TELNET ......................................................................35
1.2.1 authentication ip access-class...............................................................35
1.2.2 authentication ipv6 access-class...........................................................35
1.2.3 authentication line login..........................................................................35
1.2.4 authentication securityip ........................................................................36
1.2.5 authentication securityipv6 ....................................................................37
1.2.6 authorization.............................................................................................37
1.2.7 terminal length .........................................................................................38
1.2.8 terminal monitor.......................................................................................38
1.2.9 telnet..........................................................................................................39
1.2.10 telnet server enable ...............................................................................39
1.2.11 telnet-server max-connection...............................................................40
1.2.12 ssh-server authentication-retries.........................................................40
1.2.13 ssh-server enable...................................................................................41
1.2.14 ssh-server host-key create rsa.............................................................41
1.2.15 ssh-server max-connection..................................................................41
1.2.16 ssh-server timeout.................................................................................42
1.2.17 show ssh-server.....................................................................................42
1.2.18 show telnet login....................................................................................42
1.3 COMMANDS FOR CONFIGURING SWITCH IP ............................................43
1.3.1 interface vlan............................................................................................43
1.3.2 interface ethernet 0..................................................................................43
1.3.3 ip address .................................................................................................43
1.3.4 ipv6 address .............................................................................................44
1.3.5 ip bootp-client enable..............................................................................45
1.3.6 ip dhcp-client enable ...............................................................................45
1.4 COMMANDS FOR SNMP .......................................................................46
1.4.1 debug snmp mib ......................................................................................46
1.4.2 debug snmp kernel..................................................................................46
1.4.3 rmon enable..............................................................................................46
1.4.4 show snmp................................................................................................47
1.4.5 show snmp engineid ...............................................................................48
1.4.6 show snmp group....................................................................................48
1.4.7 show snmp mib........................................................................................49

3
1.4.8 show snmp status....................................................................................49
1.4.9 show snmp user.......................................................................................50
1.4.10 show snmp view.....................................................................................50
1.4.11 snmp-server community .......................................................................51
1.4.12 snmp-server enable...............................................................................52
1.4.13 snmp-server enable traps.....................................................................52
1.4.14 snmp-server engineid............................................................................53
1.4.15 snmp-server group ................................................................................53
1.4.16 snmp-server host...................................................................................54
1.4.17 snmp-server securityip .........................................................................55
1.4.18 snmp-server securityip .........................................................................55
1.4.19 snmp-server view...................................................................................56
1.4.20 snmp-server user...................................................................................56
1.5 COMMANDS FOR SWITCH UPGRADE.......................................................57
1.5.1 copy（FTP）.............................................................................................57
1.5.2 copy（TFTP）...........................................................................................59
1.5.3 ftp-dir.........................................................................................................60
1.5.4 ftp-server enable ......................................................................................60
1.5.5 ftp-server timeout.....................................................................................61
1.5.6 ip ftp...........................................................................................................61
1.5.7 show ftp.....................................................................................................61
1.5.8 show tftp....................................................................................................62
1.5.9 tftp-server enable.....................................................................................62
1.5.10 tftp-server retransmission-number......................................................62
1.5.11 tftp-server transmission-timeout..........................................................63
CHAPTER 2 COMMANDS FOR CLUSTER ...............................64
2.1 CLEAR CLUSTER NODES........................................................................64
2.2 CLUSTER AUTO-ADD .............................................................................64
2.3 CLUSTER COMMANDER..........................................................................65
2.4 CLUSTER IP-POOL.................................................................................65
2.5 CLUSTER KEEPALIVE INTERVAL ..............................................................66
2.6 CLUSTER KEEPALIVE LOSS-COUNT .........................................................66
2.7 CLUSTER MEMBER................................................................................67
2.8 CLUSTER MEMBER AUTO-TO-USER .........................................................68
2.9 CLUSTER RESET MEMBER......................................................................68
2.10 CLUSTER RUN ....................................................................................69

4
2.11 CLUSTER UPDATE MEMBER..................................................................69
2.12 DEBUG CLUSTER ................................................................................70
2.13 DEBUG CLUSTER PACKETS ..................................................................70
2.14 SHOW CLUSTER..................................................................................71
2.15 SHOW CLUSTER MEMBERS...................................................................72
2.16 SHOW CLUSTER CANDIDATES...............................................................73
2.17 SHOW CLUSTER TOPOLOGY .................................................................73
2.18 RCOMMAND COMMANDER....................................................................75
2.19 RCOMMAND MEMBER ..........................................................................76
CHAPTER 3 COMMANDS FOR NETWORK PORT
CONFIGURATION......................................................................76
3.1 COMMANDS FOR ETHERNET PORT CONFIGURATION................................76
3.1.1 bandwidth .................................................................................................76
3.1.2 combo-forced-mode ................................................................................77
3.1.3 clear counters interface ..........................................................................78
3.1.4 flow control...............................................................................................78
3.1.5 interface ethernet.....................................................................................79
3.1.6 loopback....................................................................................................79
3.1.7 mdi.............................................................................................................80
3.1.8 name..........................................................................................................80
3.1.9 negotiation................................................................................................81
3.1.10 port-scan-mode......................................................................................81
3.1.11 rate-suppression....................................................................................82
3.1.12 rate-violation...........................................................................................82
3.1.13 show interface........................................................................................83
3.1.14 shutdown ................................................................................................86
3.1.15 speed-duplex..........................................................................................87
3.1.16 virtual-cable-test ....................................................................................88
CHAPTER 4 COMMANDS FOR PORT ISOLATION FUNCTION89
4.1 ISOLATE-PORT GROUP ..........................................................................89
4.2 ISOLATE-PORT GROUP SWITCHPORT INTERFACE......................................89
4.3 SHOW ISOLATE-PORT GROUP.................................................................90
CHAPTER 5 COMMANDS FOR PORT LOOPBACK DETECTION

5
FUNCTION..................................................................................91
5.1 LOOPBACK-DETECTION CONTROL ..........................................................91
5.2 LOOPBACK-DETECTION SPECIFIED-VLAN ................................................91
5.3 LOOPBACK-DETECTION INTERVAL-TIME ..................................................92
5.4 LOOPBACK-DETECTION CONTROL-RECOVERY TIMEOUT............................93
5.5 SHOW LOOPBACK-DETECTION ...............................................................93
5.6 DEBUG LOOPBACK-DETECTION..............................................................94
CHAPTER 6 COMMANDS FOR ULDP ......................................95
6.1 ULDP ENABLE.......................................................................................95
6.2 ULDP DISABLE......................................................................................95
6.3 ULDP HELLO-INTERVAL..........................................................................95
6.4 ULDP AGGRESSIVE-MODE......................................................................96
6.5 ULDP MANUAL-SHUTDOWN ....................................................................96
6.6 ULDP RESET.........................................................................................97
6.7 ULDP RECOVERY-TIME...........................................................................97
6.8 SHOW ULDP .........................................................................................97
6.9 DEBUG ULDP FSM INTERFACE ETHERNET ................................................98
6.10 DEBUG ULDP ERROR ...........................................................................98
6.11 DEBUG ULDP EVENT ............................................................................99
6.12 DEBUG ULDP PACKET..........................................................................99
6.13 DEBUG ULDP INTERFACE ETHERNET .....................................................99
CHAPTER 7 COMMANDS FOR LLDP FUNCTION..................101
7.1 LLDP ENABLE.....................................................................................101
7.2 LLDP ENABLE (PORT) .........................................................................101
7.3 LLDP MODE ........................................................................................102
7.4 LLDP TX-INTERVAL..............................................................................102
7.5 LLDP MSGTXHOLD..............................................................................103
7.6 LLDP TRANSMIT DELAY........................................................................103
7.7 LLDP NOTIFICATION INTERVAL ..............................................................104
7.8 LLDP TRAP.........................................................................................104
7.9 LLDP TRANSMIT OPTIONAL TLV.............................................................104
7.10 LLDP NEIGHBORS MAX-NUM...............................................................105
7.11 LLDP TOOMANYNEIGHBORS ..............................................................105
7.12 SHOW LLDP......................................................................................106

6
7.13 SHOW LLDP TRAFFIC.........................................................................106
7.14 SHOW LLDP INTERFACE ETHERNET.....................................................107
7.15 SHOW LLDP NEIGHBORS INTERFACE ETHERNET ...................................107
7.16 SHOW DEBUGGING LLDP....................................................................108
7.17 DEBUG LLDP ....................................................................................108
7.18 DEBUG LLDP PACKETS ......................................................................109
7.19 CLEAR LLDP REMOTE-TABLE..............................................................109
CHAPTER 8 COMMANDS FOR PORT CHANNEL.................. 110
8.1 DEBUG LACP......................................................................................110
8.2 INTERFACE PORT-CHANNEL .................................................................110
8.3 PORT-GROUP .....................................................................................111
8.4 PORT-GROUP MODE ............................................................................111
8.5 SHOW PORT-GROUP............................................................................112
CHAPTER 9 COMMANDS FOR JUMBO ................................. 117
9.1 JUMBO ENABLE ..................................................................................117
CHAPTER 10 VLAN CONFIGURATION................................... 117
10.1 COMMANDS FOR VLAN CONFIGURATION...........................................117
10.1.1 debug gvrp............................................................................................117
10.1.2 gvrp........................................................................................................118
10.1.3 garp timer hold.....................................................................................118
10.1.4 garp timer join......................................................................................119
10.1.5 garp timer leave....................................................................................119
10.1.6 garp timer leaveall................................................................................119
10.1.7 name......................................................................................................120
10.1.8 private-vlan...........................................................................................120
10.1.9 private-vlan association......................................................................121
10.1.10 show garp ...........................................................................................122
10.1.11 show gvrp ...........................................................................................122
10.1.12 show vlan............................................................................................122
10.1.13 switchport access vlan......................................................................123
10.1.14 switchport interface...........................................................................124
10.1.15 switchport mode ................................................................................124
10.1.16 switchport trunk allowed vlan ..........................................................125

7
10.1.17 switchport trunk native vlan.............................................................126
10.1.18 vlan......................................................................................................126
10.1.19 vlan ingress enable............................................................................127
CHAPTER 11 COMMANDS FOR MAC ADDRESS TABLE
CONFIGURATION....................................................................128
11.1 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION ...................128
11.1.1 mac-address-table aging-time............................................................128
11.1.2 mac-address-table static|blackhole ...................................................128
11.1.3 show mac-address-table.....................................................................129
11.2 COMMANDS FOR MAC ADDRESS BINDING CONFIGURATION ..................130
11.2.1 clear port-security dynamic................................................................130
11.2.2 mac-address-table periodic-monitor-time.........................................130
11.2.3 mac-address-table synchronizing enable .........................................130
11.2.4 show port-security...............................................................................131
11.2.5 show port-security address................................................................132
11.2.6 show port-security interface...............................................................132
11.2.7 switchport port-security......................................................................133
11.2.8 switchport port-security convert........................................................134
11.2.9 switchport port-security lock..............................................................134
11.2.10 switchport port-security mac-address ............................................134
11.2.11 switchport port-security maximum..................................................135
11.2.12 switchport port-security timeout......................................................135
11.2.13 switchport port-security violation....................................................136
CHAPTER 12 COMMANDS FOR MSTP ..................................137
12.1 COMMANDS FOR MSTP....................................................................137
12.1.1 abort ......................................................................................................137
12.1.2 exit.........................................................................................................137
12.1.3 instance vlan.........................................................................................137
12.1.4 name......................................................................................................138
12.1.5 revision-level........................................................................................138
12.1.6 spanning-tree........................................................................................139
12.1.7 spanning-tree forward-time ................................................................139
12.1.8 spanning-tree hello-time .....................................................................140
12.1.9 spanning-tree link-type p2p................................................................140

8
12.1.10 spanning-tree maxage.......................................................................141
12.1.11 spanning-tree max-hop .....................................................................141
12.1.12 spanning-tree mcheck.......................................................................141
12.1.13 spanning-tree mode...........................................................................142
12.1.14 spanning-tree mst configuration......................................................142
12.1.15 spanning-tree mst cost .....................................................................143
12.1.16 spanning-tree mst port-priority........................................................144
12.1.17 spanning-tree mst priority ................................................................144
12.1.18 spanning-tree mst rootguard............................................................144
12.1.19 spanning-tree portfast.......................................................................145
12.1.20 spanning-tree priority........................................................................146
12.1.21 spanning-tree format.........................................................................146
12.1.22 spanning-tree digest-snooping........................................................147
12.1.23 spanning-tree tcflush (Global mode)...............................................148
12.1.24 spanning-tree tcflush (Port mode)...................................................148
12.2 COMMANDS FOR MONITOR AND DEBUG .............................................149
12.2.1 show spanning-tree.............................................................................149
12.2.2 show spanning-tree mst config..........................................................151
12.2.3 show mst-pending ...............................................................................152
12.2.4 debug spanning-tree............................................................................152
CHAPTER 13 COMMANDS FOR QOS ....................................153
13.1 CLASS .............................................................................................153
13.2 CLASS-MAP......................................................................................154
13.3 MATCH.............................................................................................154
13.4 MLS QOS..........................................................................................155
13.5 MLS QOS COS...................................................................................155
13.6 MLS QOS TRUST ...............................................................................156
13.7 MLS QOS DSCP-MUTATION .................................................................157
13.8 MLS QOS MAP...................................................................................157
13.9 POLICY ............................................................................................158
13.10 POLICY AGGREGATE........................................................................159
13.11 POLICY-MAP ...................................................................................160
13.12 PRIORITY-QUEUE OUT......................................................................160
13.13 QUEUE BANDWIDTH ........................................................................161
13.14 SET ...............................................................................................161
13.15 SERVICE-POLICY.............................................................................161

9
13.16 SHOW CLASS-MAP ..........................................................................162
13.17 SHOW POLICY-MAP .........................................................................162
13.18 SHOW MLS QOS INTERFACE .............................................................163
13.19 SHOW MLS QOS MAPS .....................................................................165
13.20 SHOW MLS-QOS..............................................................................166
13.21 WRR-QUEUE BANDWIDTH.................................................................167
13.22 WRR-QUEUE COS-MAP ....................................................................167
CHAPTER 14 COMMANDS FOR FLOW-BASED REDIRECTION
..................................................................................................168
14.1 ACCESS-GROUP REDIRECT TO INTERFACE ETHERNET...........................168
14.2 SHOW FLOW-BASED-REDIRECT ..........................................................168
CHAPTER 15 COMMANDS FOR LAYER 3 MANAGEMENT...169
15.1 COMMANDS FOR LAYER 3INTERFACE ................................................169
15.1.1 interface vlan........................................................................................169
15.1.2 ip address .............................................................................................169
15.1.3 ip default-gateway................................................................................170
15.1.4 debug ip packet....................................................................................170
15.1.5 show ip traffic.......................................................................................171
15.1.6 show ip route........................................................................................173
15.2 COMMANDS FOR IPV6CONFIGURATION ..............................................174
15.2.1 clear ipv6 neighbor..............................................................................174
15.2.2 debug ipv6 packet................................................................................175
15.2.3 debug ipv6 icmp...................................................................................175
15.2.4 debug ipv6 nd.......................................................................................176
15.2.5 ipv6 default-gateway............................................................................176
15.2.6 ipv6 address.........................................................................................177
15.2.7 ipv6 nd dad attempts...........................................................................177
15.2.8 ipv6 nd ns-interval ...............................................................................178
15.2.9 ipv6 neighbor........................................................................................178
15.2.10 show ipv6 interface............................................................................179
15.2.11 show ipv6 route..................................................................................180
15.2.12 show ipv6 neighbors.........................................................................181
15.2.13 show ipv6 traffic.................................................................................183
15.2.14 show ipv6 enable ...............................................................................184

10
15.3 COMMANDS FOR ARP CONFIGURATION .............................................184
15.3.1 arp..........................................................................................................184
15.3.2 clear arp-cache.....................................................................................185
15.3.3 debug arp..............................................................................................185
15.3.4 show arp................................................................................................186
15.3.5 show arp traffic ....................................................................................187
CHAPTER 16 COMMANDS FOR ARP SCANNING PREVENTION
..................................................................................................188
16.1 ANTI-ARPSCAN ENABLE.....................................................................188
16.2 ANTI-ARPSCAN PORT-BASED THRESHOLD ...........................................188
16.3 ANTI-ARPSCAN IP-BASED THRESHOLD ................................................189
16.4 ANTI-ARPSCAN TRUST.......................................................................189
16.5 ANTI-ARPSCAN TRUST IP ...................................................................190
16.6 ANTI-ARPSCAN RECOVERY ENABLE ....................................................190
16.7 ANTI-ARPSCAN RECOVERY TIME .........................................................191
16.8 ANTI-ARPSCAN LOG ENABLE..............................................................191
16.9 ANTI-ARPSCAN TRAP ENABLE ............................................................191
16.10 SHOW ANTI-ARPSCAN .....................................................................192
16.11 DEBUG ANTI-ARPSCAN ....................................................................194
CHAPTER 17 COMMANDS FOR PREVENTING ARP SPOOFING
..................................................................................................195
17.1 IP ARP-SECURITY UPDATEPROTECT ....................................................195
17.2 IP ARP-SECURITY LEARNPROTECT......................................................195
17.3 IP ARP-SECURITY CONVERT ...............................................................196
17.4 CLEAR IP ARP DYNAMIC.....................................................................196
CHAPTER 18 COMMAND FOR ARP GUARD .........................197
18.1 ARP-GUARD IP..................................................................................197
CHAPTER 19 COMMANDS FOR GRATUITOUS ARP
CONFIGURATION....................................................................198
19.1 IP GRATUITOUS-ARP..........................................................................198

11
19.2 SHOW IP GRATUITOUS-ARP ................................................................198
CHAPTER 20 COMMANDS FOR DHCP..................................199
20.1 COMMANDS FOR DHCP SERVER CONFIGURATION..............................199
20.1.1 bootfile ..................................................................................................199
20.1.2 clear ip dhcp binding...........................................................................200
20.1.3 clear ip dhcp conflict...........................................................................200
20.1.4 clear ip dhcp server statistics ............................................................201
20.1.5 client-identifier .....................................................................................201
20.1.6 debug ip dhcp server...........................................................................202
20.1.7 default-router........................................................................................202
20.1.8 dns-server.............................................................................................202
20.1.9 domain-name........................................................................................203
20.1.10 hardware-address..............................................................................203
20.1.11 host......................................................................................................204
20.1.12 ip dhcp conflict logging ....................................................................204
20.1.13 ip dhcp excluded-address.................................................................205
20.1.14 ip dhcp pool........................................................................................205
20.1.15 ip dhcp conflict ping-detection enable............................................205
20.1.16 ip dhcp ping packets .........................................................................206
20.1.17 ip dhcp ping timeout..........................................................................206
20.1.18 lease ....................................................................................................207
20.1.19 netbios-name-server..........................................................................207
20.1.20 netbios-node-type..............................................................................208
20.1.21 network-address ................................................................................208
20.1.22 next-server..........................................................................................209
20.1.23 option ..................................................................................................209
20.1.24 service dhcp.......................................................................................210
20.1.25 show ip dhcp binding........................................................................210
20.1.26 show ip dhcp conflict........................................................................211
20.1.27 show ip dhcp server statistics..........................................................211
CHAPTER 21 COMMANDS FOR DHCPV6..............................213
21.1 CLEAR IPV6DHCP BINDING ................................................................213
21.2 CLEAR IPV6DHCP SERVER STATISTICS................................................213
21.3 DEBUG IPV6DHCP CLIENT PACKET .....................................................214
21.4 DEBUG IPV6DHCP DETAIL..................................................................214

12
21.5 DEBUG IPV6DHCP RELAY PACKET ......................................................214
21.6 DEBUG IPV6DHCP SERVER ................................................................214
21.7 DNS-SERVER....................................................................................215
21.8 DOMAIN-NAME..................................................................................215
21.9 EXCLUDED-ADDRESS ........................................................................215
21.10 IPV6ADDRESS................................................................................216
21.11 IPV6DHCP CLIENT PD......................................................................216
21.12 IPV6DHCP CLIENT PD HINT ..............................................................217
21.13 IPV6DHCP POOL.............................................................................218
21.14 IPV6DHCP RELAY DESTINATION........................................................218
21.15 IPV6DHCP SERVER .........................................................................218
21.16 IPV6GENERAL-PREFIX ....................................................................219
21.17 IPV6LOCAL POOL...........................................................................220
21.18 LIFETIME........................................................................................220
21.19 NETWORK-ADDRESS .......................................................................221
21.20 PREFIX-DELEGATION .......................................................................221
21.21 PREFIX-DELEGATION POOL ..............................................................222
21.22 SERVICE DHCPV6............................................................................223
21.23 SHOW IPV6DHCP............................................................................223
21.24 SHOW IPV6DHCP BINDING ...............................................................224
21.25 SHOW IPV6DHCP INTERFACE ...........................................................224
21.26 SHOW IPV6DHCP LOCAL POOL.........................................................225
21.27 SHOW IPV6DHCP POOL ...................................................................225
21.28 SHOW IPV6DHCP STATISTICS...........................................................225
21.29 SHOW IPV6GENERAL-PREFIX...........................................................227
CHAPTER 22 COMMANDS FOR DHCP SNOOPING..............229
22.1 DEBUG IP DHCP SNOOPING PACKET INTERFACE ...................................229
22.2 DEBUG IP DHCP SNOOPING PACKET ....................................................229
22.3 DEBUG IP DHCP SNOOPING UPDATE ....................................................229
22.4 DEBUG IP DHCP SNOOPING EVENT ......................................................230
22.5 DEBUG IP DHCP SNOOPING BINDING....................................................230
22.6 IP DHCP SNOOPING ...........................................................................230
22.7 IP DHCP SNOOPING BINDING...............................................................231
22.8 IP DHCP SNOOPING BINDING USER ......................................................231
22.9 IP DHCP SNOOPING BINDING ARP........................................................232
22.10 IP DHCP SNOOPING BINDING DOT1X..................................................232

13
22.11 IP DHCP SNOOPING BINDING USER-CONTROL.....................................233
22.12 IP DHCP SNOOPING BINDING USER-CONTROL MAX-USER.....................233
22.13 IP DHCP SNOOPING TRUST ...............................................................234
22.14 IP DHCP SNOOPING ACTION..............................................................234
22.15 IP DHCP SNOOPING ACTION MAXNUM ...............................................235
22.16 IP DHCP SNOOPING LIMIT-RATE.........................................................235
22.17 IP DHCP SNOOPING INFORMATION ENABLE ........................................236
22.18 IP DHCP SNOOPING OPTION82 ENABLE .............................................237
22.19 ENABLE TRUSTVIEW KEY .................................................................237
22.20 IP USER PRIVATE PACKET VERSION TWO............................................238
22.21 IP USER HELPER-ADDRESS ..............................................................238
22.22 SHOW TRUSTVIEW STATUS...............................................................239
22.23 SHOW IP DHCP SNOOPING................................................................240
22.24 SHOW IP DHCP SNOOPING BINDING ALL.............................................243
CHAPTER 23 COMMANDS FOR DHCP SNOOPING OPTION 82
..................................................................................................245
23.1 IP DHCP SNOOPING INFORMATION ENABLE ..........................................245
CHAPTER 24 IPV4 MULTICAST PROTOCOL.........................245
24.1 COMMANDS FOR DCSCM.................................................................245
24.1.1 access-list (Multicast Destination Control).......................................245
24.1.2 access-list (Multicast Source Control)..............................................246
24.1.3 ip multicast destination-control access-group.................................247
24.1.4 ip multicast destination-control access-group (sip)........................248
24.1.5 ip multicast destination-control access-group (vmac)....................249
24.1.6 ip multicast policy................................................................................249
24.1.7 ip multicast source-control.................................................................250
24.1.8 ip multicast source-control access-group........................................250
24.1.9 multicast destination-control .............................................................251
24.1.10 show ip multicast destination-control.............................................251
24.1.11 show ip multicast destination-control access-list .........................252
24.1.12 show ip multicast policy ...................................................................252
24.1.13 show ip multicast source-control ....................................................252
24.1.14 show ip multicast source-control access-list.................................253
24.2 COMMANDS FOR IGMP SNOOPING ....................................................253

14
24.2.1 clear ip igmp snooping vlan ...............................................................253
24.2.2 clear ip igmp snooping vlan <1-4094> mrouter-port........................254
24.2.3 debug igmp snooping all/packet/event/timer/mfc............................254
24.2.4 ip igmp snooping.................................................................................254
24.2.5 ip igmp snooping vlan.........................................................................255
24.2.6 ip igmp snooping vlan immediate-leave ...........................................255
24.2.7 ip igmp snooping vlan l2-general-querier.........................................256
24.2.8 ip igmp snooping vlan l2-general-querier-source............................256
24.2.9 ip igmp snooping vlan l2-general-querier-version...........................257
24.2.10 ip igmp snooping vlan limit ..............................................................257
24.2.11 ip igmp snooping vlan mrouter-port interface................................258
24.2.12 ip igmp snooping vlan mrpt..............................................................258
24.2.13 ip igmp snooping vlan query-interval..............................................259
24.2.14 ip igmp snooping vlan query-mrsp..................................................259
24.2.15 ip igmp snooping vlan query-robustness.......................................259
24.2.16 ip igmp snooping vlan report source-address...............................260
24.2.17 ip igmp snooping vlan static-group.................................................260
24.2.18 ip igmp snooping vlan suppression-query-time ............................261
24.2.19 show ip igmp snooping.....................................................................261
CHAPTER 25 IPV6 MULTICAST PROTOCOL.........................264
25.1 COMMANDS FOR MLD SNOOPING CONFIGURATION ............................264
25.1.1 clear ipv6 mld snooping vlan .............................................................264
25.1.2 clear ipv6 mld snooping vlan <1-4094> mrouter-port......................264
25.1.3 debug mld snooping all/packet/event/timer/mfc..............................264
25.1.4 ipv6 mld snooping ...............................................................................265
25.1.5 ipv6 mld snooping vlan.......................................................................265
25.1.6 ipv6 mld snooping vlan immediate-leave..........................................265
25.1.7 ipv6 mld snooping vlan l2-general-querier.......................................266
25.1.8 ipv6 mld snooping vlan limit...............................................................266
25.1.9 ipv6 mld snooping vlan mrouter-port interface................................267
25.1.10 ipv6 mld snooping vlan mrpt............................................................267
25.1.11 ipv6 mld snooping vlan query-interval............................................268
25.1.12 ipv6 mld snooping vlan query-mrsp................................................268
25.1.13 ipv6 mld snooping vlan query-robustness.....................................269
25.1.14 ipv6 mld snooping vlan static-group...............................................269
25.1.15 ipv6 mld snooping vlan suppression-query-time ..........................270

15
25.1.16 show ipv6 mld snooping...................................................................270
CHAPTER 26 COMMANDS FOR MULTICAST VLAN .............273
26.1 MULTICAST-VLAN..............................................................................273
26.2 MULTICAST-VLAN ASSOCIATION..........................................................273
CHAPTER 27 COMMANDS FOR ACL.....................................274
27.1 ABSOLUTE-PERIODIC/PERIODIC..........................................................274
27.2 ABSOLUTE START .............................................................................275
27.3 ACCESS-LIST (IP EXTENDED)..............................................................276
27.4 ACCESS-LIST (IP STANDARD)..............................................................277
27.5 ACCESS-LIST(MAC EXTENDED)...........................................................278
27.6 ACCESS-LIST(MAC-IP EXTENDED).......................................................279
27.7 ACCESS-LIST(MAC STANDARD) ..........................................................281
27.8 CLEAR ACCESS-GROUP STATISTIC ......................................................282
27.9 FIREWALL ........................................................................................282
27.10 FIREWALL DEFAULT.........................................................................282
27.11 IP ACCESS EXTENDED......................................................................283
27.12 IP ACCESS STANDARD .....................................................................283
27.13 IPV6ACCESS-LIST ..........................................................................284
27.14 IPV6ACCESS STANDARD .................................................................284
27.15 {IP|IPV6|MAC|MAC-IP}ACCESS-GROUP.............................................285
27.16 MAC ACCESS EXTENDED..................................................................286
27.17 MAC-IP ACCESS EXTENDED..............................................................286
27.18 PERMIT |DENY (IP EXTENDED)..........................................................287
27.19 PERMIT |DENY(IP STANDARD) ..........................................................288
27.20 PERMIT |DENY(IPV6STANDARD) ......................................................288
27.21 PERMIT |DENY(MAC EXTENDED).......................................................289
27.22 PERMIT |DENY(MAC-IP EXTENDED)...................................................290
27.23 SHOW ACCESS-LISTS ......................................................................293
27.24 SHOW ACCESS-GROUP....................................................................294
27.25 SHOW FIREWALL.............................................................................294
27.26 SHOW IPV6ACCESS-LISTS...............................................................295
27.27 SHOW TIME-RANGE.........................................................................295
27.28 TIME-RANGE...................................................................................296
CHAPTER 28 COMMANDS FOR 802.1X.................................297

16
28.1 DEBUG DOT1X DETAIL .......................................................................297
28.2 DEBUG DOT1X ERROR.......................................................................297
28.3 DEBUG DOT1X FSM ...........................................................................298
28.4 DEBUG DOT1X PACKET......................................................................298
28.5 DOT1X ACCEPT-MAC .........................................................................299
28.6 DOT1X EAPOR ENABLE......................................................................299
28.7 DOT1X ENABLE ................................................................................300
28.8 DOT1X IPV6PASSTHROUGH...............................................................300
28.9 DOT1X GUEST-VLAN..........................................................................301
28.10 DOT1X MACFILTER ENABLE..............................................................302
28.11 DOT1X MAX-REQ.............................................................................302
28.12 DOT1X USER FREE-RESOURCE.........................................................303
28.13 DOT1X MAX-USER MACBASED..........................................................303
28.14 DOT1X MAX-USER USERBASED ........................................................304
28.15 DOT1X PORT-CONTROL ...................................................................304
28.16 DOT1X PORT-METHOD.....................................................................305
28.17 DOT1X PRIVATECLIENT ENABLE........................................................305
28.18 DOT1X RE-AUTHENTICATE ...............................................................306
28.19 DOT1X RE-AUTHENTICATION ............................................................306
28.20 DOT1X TIMEOUT QUIET-PERIOD ........................................................307
28.21 DOT1X TIMEOUT RE-AUTHPERIOD.....................................................307
28.22 DOT1X TIMEOUT TX-PERIOD.............................................................307
28.23 DOT1X UNICAST ENABLE .................................................................308
28.24 DOT1X WEB AUTHENTICATION ENABLE..............................................308
28.25 DOT1X WEB AUTHENTICATION IPV6PASSTHROUGH ............................308
28.26 DOT1X WEB REDIRECT ....................................................................309
28.27 DOT1X WEB REDIRECT ENABLE........................................................309
28.28 SHOW DOT1X.................................................................................309
CHAPTER 29 COMMANDS FOR THE NUMBER LIMITATION
FUNCTION OF PORT MAC......................................................312
29.1 SWITCHPORT MAC-ADDRESS DYNAMIC MAXIMUM.................................312
29.2 SHOW MAC-ADDRESS DYNAMIC COUNT...............................................312
29.3 DEBUG SWITCHPORT MAC COUNT.......................................................313
CHAPTER 30 COMMANDS FOR AM CONFIGURATION ........315

17
30.1 AM ENABLE ......................................................................................315
30.2 AM PORT..........................................................................................315
30.3 AM IP-POOL......................................................................................315
30.4 AM MAC-IP-POOL ..............................................................................316
30.5 NO AM ALL .......................................................................................316
30.6 SHOW AM.........................................................................................317
CHAPTER 31 COMMANDS FOR SECURITY FEATURE.........319
31.1 DOSATTACK-CHECK SRCIP-EQUAL-DSTIP ENABLE................................319
31.2 DOSATTACK-CHECK TCP-FLAGS ENABLE.............................................319
31.3 DOSATTACK-CHECK SRCPORT-EQUAL-DSTPORT ENABLE......................320
31.4 DOSATTACK-CHECK ICMP-ATTACKING ENABLE ....................................320
31.5 DOSATTACK-CHECK ICMPV4-SIZE.......................................................321
CHAPTER 32 COMMANDS FOR TACACS+............................322
32.1 TACACS-SERVER AUTHENTICATION HOST ............................................322
32.2 TACACS-SERVER KEY........................................................................322
32.3 TACACS-SERVER NAS-IPV4................................................................323
32.4 TACACS-SERVER TIMEOUT.................................................................323
32.5 DEBUG TACACS-SERVER ...................................................................324
CHAPTER 33 COMMANDS FOR RADIUS...............................325
33.1 AAA ENABLE ....................................................................................325
33.2 AAA-ACCOUNTING ENABLE................................................................325
33.3 AAA-ACCOUNTING UPDATE ................................................................326
33.4 DEBUG AAA PACKET..........................................................................326
33.5 DEBUG AAA DETAIL ATTRIBUTE...........................................................326
33.6 DEBUG AAA DETAIL CONNECTION .......................................................327
33.7 DEBUG AAA DETAIL EVENT.................................................................327
33.8 DEBUG AAA ERROR...........................................................................328
33.9 RADIUS NAS-IPV4 .............................................................................328
33.10 RADIUS NAS-IPV6 ...........................................................................329
33.11 RADIUS-SERVER ACCOUNTING HOST.................................................329
33.12 RADIUS-SERVER AUTHENTICATION HOST...........................................330
33.13 RADIUS-SERVER DEAD-TIME ............................................................331
33.14 RADIUS-SERVER KEY.......................................................................331

18
33.15 RADIUS-SERVER RETRANSMIT..........................................................332
33.16 RADIUS-SERVER TIMEOUT................................................................332
33.17 RADIUS-SERVER ACCOUNTING-INTERIM-UPDATE TIMEOUT ..................333
33.18 SHOW AAA AUTHENTICATED-USER....................................................334
33.19 SHOW AAA AUTHENTICATING-USER...................................................334
33.20 SHOW AAA CONFIG .........................................................................335
33.21 SHOW RADIUS COUNT .....................................................................336
CHAPTER 34 COMMANDS FOR SSL CONFIGURATION.......337
34.1 IP HTTP SECURE-SERVER...................................................................337
34.2 IP HTTP SECURE-PORT ......................................................................337
34.3 IP HTTP SECURE-CIPHERSUITE ..........................................................338
34.4 SHOW IP HTTP SECURE-SERVER STATUS .............................................338
34.5 DEBUG SSL ......................................................................................338
CHAPTER 35 COMMANDS FOR IPV6 SECURITY RA............340
35.1 IPV6SECURITY-RA ENABLE................................................................340
35.2 IPV6SECURITY-RA ENABLE................................................................340
35.3 SHOW IPV6SECURITY-RA ..................................................................341
35.4 DEBUG IPV6SECURITY-RA.................................................................341
CHAPTER 36 COMMANDS FOR MRPP..................................342
36.1 CONTROL-VLAN................................................................................342
36.2 CLEAR MRPP STATISTICS ...................................................................342
36.3 DEBUG MRPP....................................................................................343
36.4 ENABLE ...........................................................................................343
36.5 FAIL-TIMER.......................................................................................344
36.6 HELLO-TIMER ...................................................................................344
36.7 MRPP ENABLE ..................................................................................345
36.8 MRPP RING.......................................................................................345
36.9 MRPP RING PRIMARY-PORT ................................................................345
36.10 MRPP RING SECONDARY-PORT .........................................................346
36.11 NODE-MODE ...................................................................................346
36.12 SHOW MRPP...................................................................................347
36.13 SHOW MRPP STATISTICS ..................................................................347
CHAPTER 37 COMMANDS FOR MIRRORING CONFIGURATION

19
..................................................................................................348
37.1 MONITOR SESSION SOURCE INTERFACE ..............................................348
37.2 MONITOR SESSION SOURCE INTERFACE ACCESS-LIST...........................348
37.3 MONITOR SESSION DESTINATION INTERFACE........................................349
37.4 SHOW MONITOR................................................................................350
CHAPTER 38 COMMANDS FOR SFLOW ...............................351
38.1 SFLOW DESTINATION.........................................................................351
38.2 SFLOW AGENT-ADDRESS ...................................................................351
38.3 SFLOW PRIORITY ..............................................................................352
38.4 SFLOW HEADER-LEN.........................................................................352
38.5 SFLOW DATA-LEN .............................................................................353
38.6 SFLOW COUNTER-INTERVAL...............................................................353
38.7 SFLOW RATE ....................................................................................353
38.8 SHOW SFLOW...................................................................................354
CHAPTER 39 COMMANDS FOR SNTP...................................355
39.1 DEBUG SNTP ....................................................................................355
39.2 SNTP SERVER...................................................................................356
39.3 SNTP POLLTIME ................................................................................356
39.4 SNTP TIMEZONE................................................................................357
39.5 SHOW SNTP......................................................................................357
CHAPTER 40 COMMANDS FOR NTP.....................................358
40.1 NTP ENABLE.....................................................................................358
40.2 NTP SERVER.....................................................................................358
40.3 NTP BROADCAST SERVER COUNT .......................................................359
40.4 NTP TIMEZONE..................................................................................359
40.5 NTP ACCESS-GROUP .........................................................................359
40.6 NTP AUTHENTICATE...........................................................................360
40.7 NTP AUTHENTICATION-KEY.................................................................360
40.8 NTP TRUSTED-KEY............................................................................361
40.9 NTP DISABLE....................................................................................361
40.10 DEBUG NTP AUTHENTICATION...........................................................361
40.11 DEBUG NTP PACKET ........................................................................362

20
40.12 DEBUG NTP ADJUST ........................................................................362
40.13 DEBUG NTP SYNC............................................................................363
40.14 DEBUG NTP EVENTS ........................................................................363
40.15 SHOW NTP STATUS..........................................................................363
40.16 SHOW NTP SESSION ........................................................................364
CHAPTER 41 COMMANDS FOR SHOW.................................365
41.1 CLEAR LOGGING...............................................................................365
41.2 LOGGING .........................................................................................365
41.3 LOGGING LOGHOST SEQUENCE-NUMBER ............................................366
41.4 PING................................................................................................366
41.5 PING6..............................................................................................368
41.6 SHOW BOOT-FILES............................................................................370
41.7 SHOW DEBUGGING............................................................................371
41.8 SHOW FLASH....................................................................................371
41.9 SHOW HISTORY.................................................................................371
41.10 SHOW LOGGING BUFFERED..............................................................372
41.11 SHOW MEMORY...............................................................................372
41.12 SHOW RUNNING-CONFIG..................................................................373
41.13 SHOW STARTUP-CONFIG..................................................................373
41.14 SHOW SWITCHPORT INTERFACE .......................................................374
41.15 SHOW TCP......................................................................................375
41.16 SHOW TELNET LOGIN ......................................................................375
41.17 SHOW TEMPERATURE......................................................................375
41.18 SHOW TECH-SUPPORT.....................................................................376
41.19 SHOW UDP .....................................................................................376
41.20 SHOW VERSION ..............................................................................376
41.21 TRACEROUTE .................................................................................377
41.22 TRACEROUTE6...............................................................................377
CHAPTER 42 COMMANDS FOR RELOAD SWITCH AFTER
SPECIFIED TIME......................................................................379
42.1 RELOAD AFTER.................................................................................379
42.2 RELOAD CANCEL ..............................................................................379
42.3 SHOW RELOAD .................................................................................380