FoxGate S6124 Installation instructions

1
Content
CHAPTER 1 COMMANDS FOR BASIC SWITCH
CONFIGURATION......................................................................22
1.1 COMMANDS FOR BASIC CONFIGURATION ...............................................22
1.1.1 authentication line ...................................................................................22
1.1.2 boot img....................................................................................................23
1.1.3 boot startup-config..................................................................................23
1.1.4 clock set....................................................................................................24
1.1.5 config.........................................................................................................24
1.1.6 debug ssh-server.....................................................................................24
1.1.7 enable........................................................................................................25
1.1.8 enable password......................................................................................25
1.1.9 end.............................................................................................................25
1.1.10 exec-timeout...........................................................................................26
1.1.11 exit ...........................................................................................................26
1.1.12 help..........................................................................................................26
1.1.13 hostname ................................................................................................27
1.1.14 ip host......................................................................................................27
1.1.15 ipv6 host..................................................................................................28
1.1.16 ip http server ..........................................................................................28
1.1.17 language..................................................................................................29
1.1.18 login.........................................................................................................29
1.1.19 password.................................................................................................29
1.1.20 reload.......................................................................................................30
1.1.21 service password-encryption...............................................................30
1.1.22 service terminal-length..........................................................................30
1.1.23 sysContact..............................................................................................31
1.1.24 sysLocation ............................................................................................31
1.1.25 set default ...............................................................................................31
1.1.26 setup........................................................................................................32
1.1.27 show clock..............................................................................................32
1.1.28 show temperature..................................................................................32
1.1.29 show tech-support.................................................................................32

2
1.1.30 show version..........................................................................................33
1.1.31 username ................................................................................................33
1.1.32 web language .........................................................................................34
1.1.33 write.........................................................................................................34
1.2 COMMANDS FOR TELNET ......................................................................35
1.2.1 authentication ip access-class...............................................................35
1.2.2 authentication ipv6 access-class...........................................................35
1.2.3 authentication line login..........................................................................35
1.2.4 authentication securityip ........................................................................36
1.2.5 authentication securityipv6 ....................................................................37
1.2.6 authorization.............................................................................................37
1.2.7 terminal length .........................................................................................38
1.2.8 terminal monitor.......................................................................................38
1.2.9 telnet..........................................................................................................39
1.2.10 telnet server enable ...............................................................................39
1.2.11 telnet-server max-connection...............................................................40
1.2.12 ssh-server authentication-retries.........................................................40
1.2.13 ssh-server enable...................................................................................41
1.2.14 ssh-server host-key create rsa.............................................................41
1.2.15 ssh-server max-connection..................................................................41
1.2.16 ssh-server timeout.................................................................................42
1.2.17 show ssh-server.....................................................................................42
1.2.18 show telnet login....................................................................................42
1.3 COMMANDS FOR CONFIGURING SWITCH IP ............................................43
1.3.1 interface vlan............................................................................................43
1.3.2 interface ethernet 0..................................................................................43
1.3.3 ip address .................................................................................................43
1.3.4 ipv6 address .............................................................................................44
1.3.5 ip bootp-client enable..............................................................................45
1.3.6 ip dhcp-client enable ...............................................................................45
1.4 COMMANDS FOR SNMP .......................................................................46
1.4.1 debug snmp mib ......................................................................................46
1.4.2 debug snmp kernel..................................................................................46
1.4.3 rmon enable..............................................................................................46
1.4.4 show snmp................................................................................................47
1.4.5 show snmp engineid ...............................................................................48
1.4.6 show snmp group....................................................................................48
1.4.7 show snmp mib........................................................................................49

3
1.4.8 show snmp status....................................................................................49
1.4.9 show snmp user.......................................................................................50
1.4.10 show snmp view.....................................................................................50
1.4.11 snmp-server community .......................................................................51
1.4.12 snmp-server enable...............................................................................52
1.4.13 snmp-server enable traps.....................................................................52
1.4.14 snmp-server engineid............................................................................53
1.4.15 snmp-server group ................................................................................53
1.4.16 snmp-server host...................................................................................54
1.4.17 snmp-server securityip .........................................................................55
1.4.18 snmp-server securityip .........................................................................55
1.4.19 snmp-server view...................................................................................56
1.4.20 snmp-server user...................................................................................56
1.5 COMMANDS FOR SWITCH UPGRADE.......................................................57
1.5.1 copy（FTP）.............................................................................................57
1.5.2 copy（TFTP）...........................................................................................59
1.5.3 ftp-dir.........................................................................................................60
1.5.4 ftp-server enable ......................................................................................60
1.5.5 ftp-server timeout.....................................................................................61
1.5.6 ip ftp...........................................................................................................61
1.5.7 show ftp.....................................................................................................61
1.5.8 show tftp....................................................................................................62
1.5.9 tftp-server enable.....................................................................................62
1.5.10 tftp-server retransmission-number......................................................62
1.5.11 tftp-server transmission-timeout..........................................................63
CHAPTER 2 COMMANDS FOR CLUSTER ...............................64
2.1 CLEAR CLUSTER NODES........................................................................64
2.2 CLUSTER AUTO-ADD .............................................................................64
2.3 CLUSTER COMMANDER..........................................................................65
2.4 CLUSTER IP-POOL.................................................................................65
2.5 CLUSTER KEEPALIVE INTERVAL ..............................................................66
2.6 CLUSTER KEEPALIVE LOSS-COUNT .........................................................66
2.7 CLUSTER MEMBER................................................................................67
2.8 CLUSTER MEMBER AUTO-TO-USER .........................................................68
2.9 CLUSTER RESET MEMBER......................................................................68
2.10 CLUSTER RUN ....................................................................................69

4
2.11 CLUSTER UPDATE MEMBER..................................................................69
2.12 DEBUG CLUSTER ................................................................................70
2.13 DEBUG CLUSTER PACKETS ..................................................................70
2.14 SHOW CLUSTER..................................................................................71
2.15 SHOW CLUSTER MEMBERS...................................................................72
2.16 SHOW CLUSTER CANDIDATES...............................................................73
2.17 SHOW CLUSTER TOPOLOGY .................................................................73
2.18 RCOMMAND COMMANDER....................................................................75
2.19 RCOMMAND MEMBER ..........................................................................76
CHAPTER 3 COMMANDS FOR NETWORK PORT
CONFIGURATION......................................................................76
3.1 COMMANDS FOR ETHERNET PORT CONFIGURATION................................76
3.1.1 bandwidth .................................................................................................76
3.1.2 combo-forced-mode ................................................................................77
3.1.3 clear counters interface ..........................................................................78
3.1.4 flow control...............................................................................................78
3.1.5 interface ethernet.....................................................................................79
3.1.6 loopback....................................................................................................79
3.1.7 mdi.............................................................................................................80
3.1.8 name..........................................................................................................80
3.1.9 negotiation................................................................................................81
3.1.10 port-scan-mode......................................................................................81
3.1.11 rate-suppression....................................................................................82
3.1.12 rate-violation...........................................................................................82
3.1.13 show interface........................................................................................83
3.1.14 shutdown ................................................................................................86
3.1.15 speed-duplex..........................................................................................87
3.1.16 virtual-cable-test ....................................................................................88
CHAPTER 4 COMMANDS FOR PORT ISOLATION FUNCTION89
4.1 ISOLATE-PORT GROUP ..........................................................................89
4.2 ISOLATE-PORT GROUP SWITCHPORT INTERFACE......................................89
4.3 SHOW ISOLATE-PORT GROUP.................................................................90
CHAPTER 5 COMMANDS FOR PORT LOOPBACK DETECTION

5
FUNCTION..................................................................................91
5.1 LOOPBACK-DETECTION CONTROL ..........................................................91
5.2 LOOPBACK-DETECTION SPECIFIED-VLAN ................................................91
5.3 LOOPBACK-DETECTION INTERVAL-TIME ..................................................92
5.4 LOOPBACK-DETECTION CONTROL-RECOVERY TIMEOUT............................93
5.5 SHOW LOOPBACK-DETECTION ...............................................................93
5.6 DEBUG LOOPBACK-DETECTION..............................................................94
CHAPTER 6 COMMANDS FOR ULDP ......................................95
6.1 ULDP ENABLE.......................................................................................95
6.2 ULDP DISABLE......................................................................................95
6.3 ULDP HELLO-INTERVAL..........................................................................95
6.4 ULDP AGGRESSIVE-MODE......................................................................96
6.5 ULDP MANUAL-SHUTDOWN ....................................................................96
6.6 ULDP RESET.........................................................................................97
6.7 ULDP RECOVERY-TIME...........................................................................97
6.8 SHOW ULDP .........................................................................................97
6.9 DEBUG ULDP FSM INTERFACE ETHERNET ................................................98
6.10 DEBUG ULDP ERROR ...........................................................................98
6.11 DEBUG ULDP EVENT ............................................................................99
6.12 DEBUG ULDP PACKET..........................................................................99
6.13 DEBUG ULDP INTERFACE ETHERNET .....................................................99
CHAPTER 7 COMMANDS FOR LLDP FUNCTION..................101
7.1 LLDP ENABLE.....................................................................................101
7.2 LLDP ENABLE (PORT) .........................................................................101
7.3 LLDP MODE ........................................................................................102
7.4 LLDP TX-INTERVAL..............................................................................102
7.5 LLDP MSGTXHOLD..............................................................................103
7.6 LLDP TRANSMIT DELAY........................................................................103
7.7 LLDP NOTIFICATION INTERVAL ..............................................................104
7.8 LLDP TRAP.........................................................................................104
7.9 LLDP TRANSMIT OPTIONAL TLV.............................................................104
7.10 LLDP NEIGHBORS MAX-NUM...............................................................105
7.11 LLDP TOOMANYNEIGHBORS ..............................................................105
7.12 SHOW LLDP......................................................................................106

6
7.13 SHOW LLDP TRAFFIC.........................................................................106
7.14 SHOW LLDP INTERFACE ETHERNET.....................................................107
7.15 SHOW LLDP NEIGHBORS INTERFACE ETHERNET ...................................107
7.16 SHOW DEBUGGING LLDP....................................................................108
7.17 DEBUG LLDP ....................................................................................108
7.18 DEBUG LLDP PACKETS ......................................................................109
7.19 CLEAR LLDP REMOTE-TABLE..............................................................109
CHAPTER 8 COMMANDS FOR PORT CHANNEL.................. 110
8.1 DEBUG LACP......................................................................................110
8.2 INTERFACE PORT-CHANNEL .................................................................110
8.3 PORT-GROUP .....................................................................................111
8.4 PORT-GROUP MODE ............................................................................111
8.5 SHOW PORT-GROUP............................................................................112
CHAPTER 9 COMMANDS FOR JUMBO ................................. 117
9.1 JUMBO ENABLE ..................................................................................117
CHAPTER 10 VLAN CONFIGURATION................................... 117
10.1 COMMANDS FOR VLAN CONFIGURATION...........................................117
10.1.1 debug gvrp............................................................................................117
10.1.2 gvrp........................................................................................................118
10.1.3 garp timer hold.....................................................................................118
10.1.4 garp timer join......................................................................................119
10.1.5 garp timer leave....................................................................................119
10.1.6 garp timer leaveall................................................................................119
10.1.7 name......................................................................................................120
10.1.8 private-vlan...........................................................................................120
10.1.9 private-vlan association......................................................................121
10.1.10 show garp ...........................................................................................122
10.1.11 show gvrp ...........................................................................................122
10.1.12 show vlan............................................................................................122
10.1.13 switchport access vlan......................................................................123
10.1.14 switchport interface...........................................................................124
10.1.15 switchport mode ................................................................................124
10.1.16 switchport trunk allowed vlan ..........................................................125

7
10.1.17 switchport trunk native vlan.............................................................126
10.1.18 vlan......................................................................................................126
10.1.19 vlan ingress enable............................................................................127
CHAPTER 11 COMMANDS FOR MAC ADDRESS TABLE
CONFIGURATION....................................................................128
11.1 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION ...................128
11.1.1 mac-address-table aging-time............................................................128
11.1.2 mac-address-table static|blackhole ...................................................128
11.1.3 show mac-address-table.....................................................................129
11.2 COMMANDS FOR MAC ADDRESS BINDING CONFIGURATION ..................130
11.2.1 clear port-security dynamic................................................................130
11.2.2 mac-address-table periodic-monitor-time.........................................130
11.2.3 mac-address-table synchronizing enable .........................................130
11.2.4 show port-security...............................................................................131
11.2.5 show port-security address................................................................132
11.2.6 show port-security interface...............................................................132
11.2.7 switchport port-security......................................................................133
11.2.8 switchport port-security convert........................................................134
11.2.9 switchport port-security lock..............................................................134
11.2.10 switchport port-security mac-address ............................................134
11.2.11 switchport port-security maximum..................................................135
11.2.12 switchport port-security timeout......................................................135
11.2.13 switchport port-security violation....................................................136
CHAPTER 12 COMMANDS FOR MSTP ..................................137
12.1 COMMANDS FOR MSTP....................................................................137
12.1.1 abort ......................................................................................................137
12.1.2 exit.........................................................................................................137
12.1.3 instance vlan.........................................................................................137
12.1.4 name......................................................................................................138
12.1.5 revision-level........................................................................................138
12.1.6 spanning-tree........................................................................................139
12.1.7 spanning-tree forward-time ................................................................139
12.1.8 spanning-tree hello-time .....................................................................140
12.1.9 spanning-tree link-type p2p................................................................140

8
12.1.10 spanning-tree maxage.......................................................................141
12.1.11 spanning-tree max-hop .....................................................................141
12.1.12 spanning-tree mcheck.......................................................................141
12.1.13 spanning-tree mode...........................................................................142
12.1.14 spanning-tree mst configuration......................................................142
12.1.15 spanning-tree mst cost .....................................................................143
12.1.16 spanning-tree mst port-priority........................................................144
12.1.17 spanning-tree mst priority ................................................................144
12.1.18 spanning-tree mst rootguard............................................................144
12.1.19 spanning-tree portfast.......................................................................145
12.1.20 spanning-tree priority........................................................................146
12.1.21 spanning-tree format.........................................................................146
12.1.22 spanning-tree digest-snooping........................................................147
12.1.23 spanning-tree tcflush (Global mode)...............................................148
12.1.24 spanning-tree tcflush (Port mode)...................................................148
12.2 COMMANDS FOR MONITOR AND DEBUG .............................................149
12.2.1 show spanning-tree.............................................................................149
12.2.2 show spanning-tree mst config..........................................................151
12.2.3 show mst-pending ...............................................................................152
12.2.4 debug spanning-tree............................................................................152
CHAPTER 13 COMMANDS FOR QOS ....................................153
13.1 CLASS .............................................................................................153
13.2 CLASS-MAP......................................................................................154
13.3 MATCH.............................................................................................154
13.4 MLS QOS..........................................................................................155
13.5 MLS QOS COS...................................................................................155
13.6 MLS QOS TRUST ...............................................................................156
13.7 MLS QOS DSCP-MUTATION .................................................................157
13.8 MLS QOS MAP...................................................................................157
13.9 POLICY ............................................................................................158
13.10 POLICY AGGREGATE........................................................................159
13.11 POLICY-MAP ...................................................................................160
13.12 PRIORITY-QUEUE OUT......................................................................160
13.13 QUEUE BANDWIDTH ........................................................................161
13.14 SET ...............................................................................................161
13.15 SERVICE-POLICY.............................................................................161

9
13.16 SHOW CLASS-MAP ..........................................................................162
13.17 SHOW POLICY-MAP .........................................................................162
13.18 SHOW MLS QOS INTERFACE .............................................................163
13.19 SHOW MLS QOS MAPS .....................................................................165
13.20 SHOW MLS-QOS..............................................................................166
13.21 WRR-QUEUE BANDWIDTH.................................................................167
13.22 WRR-QUEUE COS-MAP ....................................................................167
CHAPTER 14 COMMANDS FOR FLOW-BASED REDIRECTION
..................................................................................................168
14.1 ACCESS-GROUP REDIRECT TO INTERFACE ETHERNET...........................168
14.2 SHOW FLOW-BASED-REDIRECT ..........................................................168
CHAPTER 15 COMMANDS FOR LAYER 3 MANAGEMENT...169
15.1 COMMANDS FOR LAYER 3INTERFACE ................................................169
15.1.1 interface vlan........................................................................................169
15.1.2 ip address .............................................................................................169
15.1.3 ip default-gateway................................................................................170
15.1.4 debug ip packet....................................................................................170
15.1.5 show ip traffic.......................................................................................171
15.1.6 show ip route........................................................................................173
15.2 COMMANDS FOR IPV6CONFIGURATION ..............................................174
15.2.1 clear ipv6 neighbor..............................................................................174
15.2.2 debug ipv6 packet................................................................................175
15.2.3 debug ipv6 icmp...................................................................................175
15.2.4 debug ipv6 nd.......................................................................................176
15.2.5 ipv6 default-gateway............................................................................176
15.2.6 ipv6 address.........................................................................................177
15.2.7 ipv6 nd dad attempts...........................................................................177
15.2.8 ipv6 nd ns-interval ...............................................................................178
15.2.9 ipv6 neighbor........................................................................................178
15.2.10 show ipv6 interface............................................................................179
15.2.11 show ipv6 route..................................................................................180
15.2.12 show ipv6 neighbors.........................................................................181
15.2.13 show ipv6 traffic.................................................................................183
15.2.14 show ipv6 enable ...............................................................................184

10
15.3 COMMANDS FOR ARP CONFIGURATION .............................................184
15.3.1 arp..........................................................................................................184
15.3.2 clear arp-cache.....................................................................................185
15.3.3 debug arp..............................................................................................185
15.3.4 show arp................................................................................................186
15.3.5 show arp traffic ....................................................................................187
CHAPTER 16 COMMANDS FOR ARP SCANNING PREVENTION
..................................................................................................188
16.1 ANTI-ARPSCAN ENABLE.....................................................................188
16.2 ANTI-ARPSCAN PORT-BASED THRESHOLD ...........................................188
16.3 ANTI-ARPSCAN IP-BASED THRESHOLD ................................................189
16.4 ANTI-ARPSCAN TRUST.......................................................................189
16.5 ANTI-ARPSCAN TRUST IP ...................................................................190
16.6 ANTI-ARPSCAN RECOVERY ENABLE ....................................................190
16.7 ANTI-ARPSCAN RECOVERY TIME .........................................................191
16.8 ANTI-ARPSCAN LOG ENABLE..............................................................191
16.9 ANTI-ARPSCAN TRAP ENABLE ............................................................191
16.10 SHOW ANTI-ARPSCAN .....................................................................192
16.11 DEBUG ANTI-ARPSCAN ....................................................................194
CHAPTER 17 COMMANDS FOR PREVENTING ARP SPOOFING
..................................................................................................195
17.1 IP ARP-SECURITY UPDATEPROTECT ....................................................195
17.2 IP ARP-SECURITY LEARNPROTECT......................................................195
17.3 IP ARP-SECURITY CONVERT ...............................................................196
17.4 CLEAR IP ARP DYNAMIC.....................................................................196
CHAPTER 18 COMMAND FOR ARP GUARD .........................197
18.1 ARP-GUARD IP..................................................................................197
CHAPTER 19 COMMANDS FOR GRATUITOUS ARP
CONFIGURATION....................................................................198
19.1 IP GRATUITOUS-ARP..........................................................................198