Hirschmann RS20 series User manual

Technical Support
[email protected]
CLI L2P
Release 7.0 05/2011
Reference Manual
Command Line Interface
Industrial ETHERNET Gigabit Switch
RS2 /RS3 /RS4 , RSB2 , MS2 /MS3 , RSR2 /RSR3 ,
MACH1 , MACH 1 , PowerMICE, MACH 4 , OCTOPUS

The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.
© 2011 Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use. For devices with embedded software, the end-user license agreement on the enc-
losed CD applies
The performance features described here are binding only if they have been expressly
guaranteed in the contract. This publication has been created by Hirschmann Automation and
Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change
the contents of this manual without prior notice. Hirschmann can give no guarantee in respect
of the correctness or accuracy of the details in this publication.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
Printed in Germany 5/17/11
Hirschmann Automation and Control GmbH
Stuttgarter Str. 45-51
72654 Neckartenzlingen
Germany
Tel.: [phone]-0511

Content
CLI L2P
Release 7.0 05/2011 3
Content
1 Command Structure 21
1.1 Format 22
1.1.1 Command 22
1.1.2 Parameters 23
1.1.3 Values 23
1.1.4 Conventions 25
1.1.5 Annotations 26
1.1.6 Special keys 27
1.1.7 Special characters in scripts 28
1.1.8 Secrets in scripts 30
2 Quick Start up 33
2.1 Quick Starting the Switch 34
2.2 System Info and System Setup 35
3 Mode-based CLI 41
3.1 Mode-based Topology 42
3.2 Mode-based Command Hierarchy 43
3.3 Flow of Operation 45
3.4 “No” Form of a Command 47
3.4.1 Support for “No” Form 47
3.4.2 Behavior of Command Help ("?") 47
4 CLI Commands: Base 49
4.1 System Information and Statistics Commands 50
4.1.1 show address-conflict 50
4.1.2 show arp switch 50
4.1.3 show bridge address-learning 51
4.1.4 show bridge address-relearn-detect 51
4.1.5 show bridge aging-time 52
4.1.6 show bridge duplex-mismatch-detect 52
4.1.7 show bridge fast-link-detection 52
4.1.8 show bridge framesize 53

Content
4CLI L2P
Release 7.0 05/2011
4.1.9 show bridge vlan-learning 53
4.1.10bridge framesize 54
4.1.11show config-watchdog 54
4.1.12show device-status 55
4.1.13show authentication 56
4.1.14show eventlog 57
4.1.15show interface 58
4.1.16show interface ethernet 60
4.1.17show interface switchport 68
4.1.18show logging 68
4.1.19show mac-addr-table 69
4.1.20show signal-contact 70
4.1.21show slot 71
4.1.22show running-config 72
4.1.23show sysinfo 73
4.1.24show temperature 76
4.2 Debug Commands 77
4.2.1 debug tcpdump help 77
4.2.2 debug tcpdump start cpu 77
4.2.3 debug tcpdump start cpu filter 78
4.2.4 debug tcpdump stop 78
4.2.5 debug tcpdump filter show 79
4.2.6 debug tcpdump filter list 79
4.2.7 debug tcpdump filter delete 80
4.3 Management VLAN Commands 81
4.3.1 network mgmt_vlan 81
4.4 Class of Service (CoS) Commands 82
4.4.1 classofservice dot1p-mapping 83
4.4.2 classofservice ip-dscp-mapping 84
4.4.3 classofservice trust 85
4.4.4 show classofservice dot1p-mapping 86
4.4.5 show classofservice ip-dscp-mapping 87
4.4.6 show classofservice trust 88
4.4.7 vlan port priority all 89
4.4.8 vlan priority 89
4.4.9 dvlan-tunnel ethertype 90
4.4.10mode dvlan-tunnel 91
4.4.11show dvlan-tunnel 92
4.5 Link Aggregation(802.3ad) Commands 93

Content
CLI L2P
Release 7.0 05/2011 5
4.5.1 link-aggregation staticcapability 93
4.5.2 show link-aggregation brief 94
4.6 Management Commands 95
4.6.1 telnet 95
4.6.2 transport input telnet 96
4.6.3 transport output telnet 97
4.6.4 session-limit 98
4.6.5 session-timeout 99
4.6.6 bridge address-learning 99
4.6.7 bridge address-relearn detect operation 100
4.6.8 bridge address-relearn detect threshold 100
4.6.9 bridge aging-time 101
4.6.10bridge fast-link-detection 102
4.6.11bridge duplex-mismatch-detect operation 102
4.6.12bridge vlan-learning 103
4.6.13digital-input 103
4.6.14digital-output 105
4.6.15show digital-input 108
4.6.16show digital-input config 109
4.6.17show digital-input all 110
4.6.18show digital-input <slot/input> 111
4.6.19show digital-output 112
4.6.20show digital-output config 113
4.6.21show digital-output all 114
4.6.22show digital-output <slot/output> 115
4.6.23ethernet-ip 116
4.6.24network javascriptmode 116
4.6.25network mgmt-access add 118
4.6.26network mgmt-access delete 118
4.6.27network mgmt-access modify 119
4.6.28network mgmt-access operation 120
4.6.29network mgmt-access status 120
4.6.30network parms 121
4.6.31network protocol 121
4.6.32network priority 122
4.6.33profinetio 123
4.6.34serial timeout 124
4.6.35set prompt 125
4.6.36show ethernet-ip 125
4.6.37show network 126

Content
6CLI L2P
Release 7.0 05/2011
4.6.38show network mgmt-access 127
4.6.39show profinetio 128
4.6.40show serial 129
4.6.41show snmp-access 129
4.6.42show snmpcommunity 130
4.6.43show snmptrap 131
4.6.44show telnet 132
4.6.45show telnetcon 133
4.6.46show trapflags 134
4.6.47snmp-access global 135
4.6.48snmp-access version 136
4.6.49snmp-access version v3-encryption 136
4.6.50snmp-server 137
4.6.51snmp-server community 138
4.6.52snmp-server contact 139
4.6.53snmp-server community ipaddr 140
4.6.54snmp-server community ipmask 141
4.6.55snmp-server community mode 142
4.6.56snmp-server community ro 143
4.6.57snmp-server community rw 143
4.6.58snmp-server location 143
4.6.59snmp-server sysname 144
4.6.60snmp-server enable traps 145
4.6.61snmp-server enable traps chassis 146
4.6.62snmp-server enable traps l2redundancy 147
4.6.63snmp-server enable traps linkmode 148
4.6.64snmp-server enable traps multiusers 149
4.6.65snmp-server enable traps port-sec 150
4.6.66snmp-server enable traps stpmode 151
4.6.67snmptrap 152
4.6.68snmptrap ipaddr 153
4.6.69snmptrap mode 154
4.6.70snmptrap snmpversion 155
4.6.71telnetcon maxsessions 156
4.6.72telnetcon timeout 157
4.7 Syslog Commands 158
4.7.1 logging buffered 158
4.7.2 logging buffered wrap 159
4.7.3 logging cli-command 160
4.7.4 logging console 161

Content
CLI L2P
Release 7.0 05/2011 7
4.7.5 logging host 162
4.7.6 logging host reconfigure 163
4.7.7 logging host remove 163
4.7.8 logging snmp-requests get operation 163
4.7.9 logging snmp-requests set operation 164
4.7.10logging snmp-requests get severity 164
4.7.11logging snmp-requests set severity 165
4.7.12logging syslog 166
4.7.13logging syslog port 166
4.8 Scripting Commands 167
4.8.1 script apply 167
4.8.2 script delete 168
4.8.3 script list 168
4.8.4 script show 169
4.8.5 script validate 169
4.9 Device Configuration Commands 171
4.9.1 addport 171
4.9.2 adminmode 172
4.9.3 auto-negotiate 173
4.9.4 cable-crossing 174
4.9.5 auto-negotiate all 175
4.9.6 media-module remove 175
4.9.7 deleteport 176
4.9.8 deleteport all 176
4.9.9 macfilter 177
4.9.10macfilter adddest 178
4.9.11macfilter adddest all 179
4.9.12monitor session <session-id> 180
4.9.13monitor session <session-id> mode 181
4.9.14monitor session <session-id> source/destination 182
4.9.15link-aggregation 183
4.9.16link-aggregation adminmode 184
4.9.17link-aggregation linktrap 185
4.9.18link-aggregation name 186
4.9.19rmon-alarm add 187
4.9.20rmon-alarm delete 187
4.9.21rmon-alarm enable 188
4.9.22rmon-alarm disable 188
4.9.23rmon-alarm modify mib-variable 189
4.9.24rmon-alarm modify thresholds 189

Content
8CLI L2P
Release 7.0 05/2011
4.9.25rmon-alarm modify interval 190
4.9.26rmon-alarm modify sample-type 190
4.9.27rmon-alarm modify startup-alarm 191
4.9.28rmon-alarm modify rising-event 192
4.9.29rmon-alarm modify falling-event 192
4.9.30set garp timer join 193
4.9.31set garp timer leave 194
4.9.32set garp timer leaveall 195
4.9.33set gmrp adminmode 196
4.9.34set gmrp interfacemode 197
4.9.35set gmrp interfacemode 198
4.9.36set gmrp forward-all-groups 199
4.9.37set igmp 200
4.9.38set igmp 201
4.9.39set igmp aging-time-unknown 202
4.9.40set igmp automatic-mode 202
4.9.41set igmp forward-all 203
4.9.42set igmp forward-unknown 204
4.9.43set igmp static-query-port 205
4.9.44set igmp groupmembershipinterval 206
4.9.45set igmp interfacemode 207
4.9.46set igmp lookup-interval-unknown 208
4.9.47set igmp lookup-resp-time-unknown 208
4.9.48set igmp maxresponse 209
4.9.49set igmp querier max-response-time 210
4.9.50set igmp querier protocol-version 210
4.9.51set igmp querier status 211
4.9.52set igmp querier tx-interval 211
4.9.53set igmp query-ports-to-filter 212
4.9.54selftest ramtest 213
4.9.55selftest reboot-on-error 213
4.9.56show garp 214
4.9.57show gmrp configuration 215
4.9.58show igmpsnooping 217
4.9.59show mac-filter-table gmrp 219
4.9.60show mac-filter-table igmpsnooping 220
4.9.61show mac-filter-table multicast 221
4.9.62show mac-filter-table static 222
4.9.63show mac-filter-table staticfiltering 223
4.9.64show mac-filter-table stats 224
4.9.65show monitor session 225

Content
CLI L2P
Release 7.0 05/2011 9
4.9.66show port 226
4.9.67show link-aggregation 227
4.9.68show rmon-alarm 229
4.9.69show selftest 229
4.9.70show storm-control 230
4.9.71show storm-control limiters port 231
4.9.72show vlan 231
4.9.73show vlan brief 233
4.9.74show vlan port 234
4.9.75show voice vlan 235
4.9.76show voice vlan interface 236
4.9.77shutdown 237
4.9.78shutdown all 238
4.9.79snmp trap link-status 239
4.9.80snmp trap link-status all 240
4.9.81spanning-tree bpdumigrationcheck 241
4.9.82speed 242
4.9.83storm-control broadcast 243
4.9.84storm-control egress-limiting 244
4.9.85storm-control ingress-limiting 244
4.9.86storm-control ingress-mode 244
4.9.87storm-control broadcast (port-related) 245
4.9.88storm-control egress-limit 245
4.9.89storm-control ingress-limit 245
4.9.90storm-control ingress-mode 246
4.9.91storm-control flowcontrol 247
4.9.92storm-control flowcontrol per port 248
4.9.93vlan 249
4.9.94vlan0-transparent-mode 250
4.9.95vlan acceptframe 251
4.9.96vlan database 252
4.9.97vlan ingressfilter 253
4.9.98vlan name 254
4.9.99vlan participation 255
4.9.100vlan participation all 256
4.9.101vlan port acceptframe all 257
4.9.102vlan port ingressfilter all 258
4.9.103vlan port pvid all 259
4.9.104vlan port tagging all 260
4.9.105vlan pvid 261
4.9.106vlan tagging 262

Content
10 CLI L2P
Release 7.0 05/2011
4.9.107voice vlan (Global Config Mode) 263
4.9.108voice vlan <id> 264
4.9.109voice vlan dot1p 265
4.9.110voice vlan none 265
4.9.111voice vlan untagged 266
4.9.112voice vlan auth 266
4.10 User Account Management Commands 267
4.10.1disconnect 267
4.10.2show loginsession 268
4.10.3show users 269
4.10.4users defaultlogin 270
4.10.5users login <user> 271
4.10.6users access 272
4.10.7users name 273
4.10.8users passwd 274
4.10.9users snmpv3 accessmode 275
4.10.10users snmpv3 authentication 276
4.10.11 users snmpv3 encryption 277
4.11 System Utilities 279
4.11.1address-conflict 279
4.11.2cablestatus 280
4.11.3clear eventlog 280
4.11.4traceroute 280
4.11.5clear arp-table-switch 281
4.11.6clear config 282
4.11.7clear config factory 282
4.11.8clear counters 282
4.11.9clear hiper-ring 283
4.11.10clear igmpsnooping 283
4.11.11clear mac-addr-table 284
4.11.12clear pass 284
4.11.13clear link-aggregation 285
4.11.14clear signal-contact 285
4.11.15clear traplog 286
4.11.16clear ring-coupling 286
4.11.17clear vlan 287
4.11.18config-watchdog 287
4.11.19copy 288
4.11.20device-status connection-error 296
4.11.21device-status monitor 296

Content
CLI L2P
Release 7.0 05/2011 11
4.11.22logout 297
4.11.23ping 298
4.11.24signal-contact connection-error 298
4.11.25signal-contact 299
4.11.26temperature 300
4.11.27reboot 301
4.11.28show reboot 301
4.11.29reload 302
4.11.30show reload 303
4.12 LLDP - Link Layer Discovery Protocol 305
4.12.1show lldp 305
4.12.2show lldp config 305
4.12.3show lldp config chassis 306
4.12.4show lldp config chassis admin-state 306
4.12.5show lldp config chassis notification-interval 307
4.12.6show lldp config chassis re-init-delay 307
4.12.7show lldp config chassis tx-delay 308
4.12.8show lldp config chassis tx-hold-mult 308
4.12.9show lldp config chassis tx-interval 308
4.12.10show lldp config port 309
4.12.11show lldp config port tlv 310
4.12.12show lldp med 311
4.12.13show lldp med interface 312
4.12.14show lldp med local-device detail 313
4.12.15show lldp med remote-device 313
4.12.16show lldp med remote-device detail 314
4.12.17show lldp remote-data 314
4.12.18lldp 316
4.12.19lldp config chassis admin-state 317
4.12.20lldp config chassis notification-interval 318
4.12.21lldp config chassis re-init-delay 318
4.12.22lldp config chassis tx-delay 319
4.12.23lldp config chassis tx-hold-mult 319
4.12.24lldp chassis tx-interval 320
4.12.25clear lldp config all 320
4.12.26lldp admin-state 321
4.12.27lldp fdb-mode 321
4.12.28lldp hm-mode 322
4.12.29lldp max-neighbors 322
4.12.30lldp med 322

Content
12 CLI L2P
Release 7.0 05/2011
4.12.31lldp med all 323
4.12.32lldp med confignotification 324
4.12.33lldp med confignotification all 324
4.12.34lldp med faststartrepeatcount 325
4.12.35lldp med transmit-tlv 326
4.12.36lldp med transmit-tlv all 327
4.12.37lldp notification 328
4.12.38lldp tlv link-aggregation 328
4.12.39lldp tlv mac-phy-config-state 328
4.12.40lldp tlv max-frame-size 329
4.12.41lldp tlv mgmt-addr 329
4.12.42lldp tlv pnio 329
4.12.43lldp tlv pnio-alias 330
4.12.44lldp tlv pnio-mrp 330
4.12.45lldp tlv port-desc 330
4.12.46lldp tlv port-vlan 331
4.12.47lldp tlv gmrp 331
4.12.48lldp tlv igmp 331
4.12.49lldp tlv portsec 332
4.12.50lldp tlv ptp 332
4.12.51lldp tlv protocol 332
4.12.52lldp tlv sys-cap 333
4.12.53lldp tlv sys-desc 333
4.12.54lldp tlv sys-name 333
4.12.55lldp tlv vlan-name 334
4.12.56name 334
4.13 SNTP - Simple Network Time Protocol 335
4.13.1show sntp 335
4.13.2show sntp anycast 336
4.13.3show sntp client 337
4.13.4show sntp operation 338
4.13.5show sntp server 338
4.13.6show sntp status 339
4.13.7show sntp time 340
4.13.8no sntp 340
4.13.9sntp anycast address 341
4.13.10sntp anycast transmit-interval 341
4.13.11sntp anycast vlan 342
4.13.12sntp client accept-broadcast 342
4.13.13sntp client disable-after-sync 343

Content
CLI L2P
Release 7.0 05/2011 13
4.13.14sntp client offset 343
4.13.15sntp client request-interval 344
4.13.16no sntp client server 344
4.13.17sntp client server primary 344
4.13.18sntp client server secondary 346
4.13.19sntp client threshold 347
4.13.20sntp operation 348
4.13.21sntp server disable-if-local 349
4.13.22sntp time system 349
4.14 PTP - Precision Time Protocol 351
4.14.1show ptp 351
4.14.2show ptp configuration 352
4.14.3show ptp operation 352
4.14.4show ptp port 353
4.14.5show ptp status 354
4.14.6ptp clock-mode 355
4.14.7ptp operation 356
4.14.8ptp sync-lower-bound 357
4.14.9ptp sync-upper-bound 357
4.14.10ptp v1 preferred-master 358
4.14.11ptp v1 re-initialize 358
4.14.12ptp v1 subdomain-name 359
4.14.13ptp v1 sync-interval 360
4.14.14ptp v2bc priority1 361
4.14.15ptp v2bc priority2 361
4.14.16ptp v2bc domain 362
4.14.17ptp v2bc utc-offset 362
4.14.18ptp v2bc utc-offset-valid 362
4.14.19ptp v2bc vlan 363
4.14.20ptp v2bc vlan-priority 363
4.14.21ptp v1 burst 363
4.14.22ptp v1 operation 364
4.14.23ptp v2bc operation 365
4.14.24ptp v2bc announce-interval 365
4.14.25ptp v2bc announce-timeout 366
4.14.26ptp v2bc sync-interval 366
4.14.27ptp v2bc delay-mechanism 366
4.14.28ptp v2bc pdelay-interval 367
4.14.29ptp v2bc network-protocol 367
4.14.30ptp v2bc v1-compatibility-mode 367

Content
14 CLI L2P
Release 7.0 05/2011
4.14.31ptp v2bc asymmetry 368
4.14.32ptp v2tc asymmetry 368
4.14.33ptp v2tc delay-mechanism 368
4.14.34ptp v2tc management 369
4.14.35ptp v2tc multi-domain-mode 369
4.14.36ptp v2tc network-protocol 370
4.14.37ptp v2tc operation 370
4.14.38ptp v2tc pdelay-interval 371
4.14.39ptp v2tc primary-domain 371
4.14.40ptp v2tc syntonization 371
4.14.41ptp v2tc vlan 372
4.14.42ptp v2tc vlan-priority 372
4.14.43ptp v2tc sync-local-clock 373
4.15 PoE - Power over Ethernet 375
4.15.1show inlinepower 375
4.15.2show inlinepower port 375
4.15.3inlinepower (Global Config) 376
4.15.4inlinepower (Interface Config) 377
4.15.5clear inlinepower 377
4.16 PoE+ - Power over Ethernet Plus 379
4.16.1show inlinepower slot 379
4.16.2inlinepower budget slot 380
4.16.3inlinepower threshold slot 381
4.16.4inlinepower trap slot 381
4.17 Port monitor 383
4.17.1show port-monitor 384
4.17.2show port-monitor <slot/port> 385
4.17.3show port-monitor brief 386
4.17.4show port-monitor crc-fragment 387
4.17.5show port-monitor link-flap 387
4.17.6port-monitor (Global Config) 388
4.17.7port-monitor (Interface Config) 388
4.17.8port-monitor condition link-flap (Global Config) 389
4.17.9port-monitor condition link-flap (Interface Config) 389
4.17.10port-monitor condition crc-fragment (Global Config) 390
4.17.11port-monitor condition crc-fragment (Interface Config) 391
4.17.12port-monitor action 391

Content
CLI L2P
Release 7.0 05/2011 15
5 CLI Commands: Switc ing 393
5.1 Spanning Tree Commands 395
5.1.1 show spanning-tree 395
5.1.2 show spanning-tree interface 397
5.1.3 show spanning-tree mst detailed 398
5.1.4 show spanning-tree mst port detailed 400
5.1.5 show spanning-tree mst port summary 403
5.1.6 show spanning-tree mst summary 404
5.1.7 show spanning-tree summary 405
5.1.8 show spanning-tree vlan 406
5.1.9 spanning-tree 407
5.1.10spanning-tree auto-edgeport 408
5.1.11spanning-tree bpduguard 409
5.1.12spanning-tree configuration name 410
5.1.13spanning-tree configuration revision 411
5.1.14spanning-tree edgeport 412
5.1.15spanning-tree forceversion 413
5.1.16spanning-tree forward-time 414
5.1.17spanning-tree guard loop 415
5.1.18spanning-tree guard none 416
5.1.19spanning-tree guard root 417
5.1.20spanning-tree hello-time 418
5.1.21spanning-tree hold-count 419
5.1.22spanning-tree max-age 420
5.1.23spanning-tree max-hops 421
5.1.24spanning-tree mst 422
5.1.25spanning-tree mst priority 424
5.1.26spanning-tree mst vlan 425
5.1.27spanning-tree mst instance 426
5.1.28spanning-tree port mode 427
5.1.29spanning-tree port mode all 428
5.1.30spanning-tree stp-mrp-mode 429
5.1.31spanning-tree tcnguard 430
5.2 MRP 431
5.2.1 show mrp 431
5.2.2 show mrp current-domain 432
5.2.3 mrp current-domain 434
5.2.4 mrp delete-domain 435
5.2.5 mrp new-domain 436
5.2.6 arc 437

Content
16 CLI L2P
Release 7.0 05/2011
5.2.7 show arc 438
5.3 HIPER-Ring 441
5.3.1 show hiper-ring 442
5.3.2 hiper-ring 443
5.3.3 hiper-ring mode 444
5.3.4 hiper-ring port primary 444
5.3.5 hiper-ring port secondary 445
5.3.6 hiper-ring recovery-delay 445
5.4 Fast-HIPER-Ring 447
5.4.1 show fast-hiper-ring (MACH 1000, RSR20/RSR30) 448
5.4.2 show fast-hiper-ring current-id (MACH 1000, RSR20/RSR30)
449
5.4.3 fast-hiper-ring 450
5.5 Redundant Coupling 453
5.5.1 show ring-coupling 454
5.5.2 ring-coupling 456
5.5.3 ring-coupling config 457
5.5.4 ring-coupling net-coupling 458
5.5.5 ring-coupling operation 458
5.5.6 ring-coupling port 459
5.5.7 ring-coupling redundancy-mode 459
5.6 Port Security 461
5.6.1 show port-sec mode 461
5.6.2 show port-sec port 461
5.6.3 port-sec mode 462
5.6.4 port-sec action 462
5.6.5 port-sec allowed-ip 463
5.6.6 port-sec allowed-ip add 463
5.6.7 port-sec allowed-ip remove 464
5.6.8 port-sec allowed-mac 464
5.6.9 port-sec allowed-mac add 465
5.6.10port-sec allowed-mac remove 465
5.6.11clear port-sec 466
5.7 DHCP Relay Commands 467
5.7.1 show dhcp-relay 467
5.7.2 dhcp-relay 468
5.7.3 dhcp-relay 469
5.8 DHCP Server Commands 471

Content
CLI L2P
Release 7.0 05/2011 17
5.8.1 DHCP server configuration example 472
5.8.2 show dhcp-server 473
5.8.3 show dhcp-server operation 473
5.8.4 show dhcp-server port 474
5.8.5 show dhcp-server pool 474
5.8.6 dhcp-server operation 475
5.8.7 dhcp-server pool add <id> 476
5.8.8 dhcp-server pool modify <id> mode 477
5.8.9 dhcp-server pool modify <id> option 479
5.8.10dhcp-server pool modify leasetime 480
5.8.11dhcp-server pool modify <id> hirschmann-device 480
5.8.12dhcp-server pool enable 481
5.8.13dhcp-server pool disable 481
5.8.14dhcp-server pool delete 481
5.9 Sub-Ring Commands 483
5.9.1 show sub-ring 483
5.9.2 sub-ring <id> mode 485
5.9.3 sub-ring <id> operation 486
5.9.4 sub-ring <id> protocol 486
5.9.5 sub-ring <id> port 487
5.9.6 sub-ring <id> ring-name 487
5.9.7 sub-ring <id> vlan 488
5.9.8 sub-ring <id> mrp-domainID 489
5.9.9 sub-ring delete-ring 490
5.9.10sub-ring new-ring 490
6 CLI Commands: Security 491
6.1 Security Commands 493
6.1.1 authentication login 493
6.1.2 authorization network radius 495
6.1.3 clear dot1x statistics 495
6.1.4 clear radius statistics 496
6.1.5 dot1x defaultlogin 496
6.1.6 dot1x dynamic-vlan enable 497
6.1.7 dot1x guest-vlan 498
6.1.8 dot1x initialize 499
6.1.9 dot1x login 499
6.1.10dot1x mac-auth-bypass 500
6.1.11dot1x max-req 501
6.1.12dot1x max-users 502

Content
18 CLI L2P
Release 7.0 05/2011
6.1.13dot1x port-control 503
6.1.14dot1x port-control all 504
6.1.15dot1x re-authenticate 505
6.1.16dot1x re-authentication 505
6.1.17dot1x safe-vlan 506
6.1.18dot1x system-auth-control 507
6.1.19dot1x timeout 508
6.1.20dot1x timeout guest-vlan-period 510
6.1.21dot1x unauthenticated-vlan 511
6.1.22dot1x user 512
6.1.23radius accounting mode 513
6.1.24radius server host 514
6.1.25radius server key 515
6.1.26radius server msgauth 515
6.1.27radius server primary 516
6.1.28radius server retransmit 517
6.1.29radius server timeout 518
6.1.30show radius accounting 519
6.1.31show authentication 521
6.1.32show authentication users 522
6.1.33show dot1x 523
6.1.34show dot1x users 528
6.1.35show dot1x clients 529
6.1.36show radius 530
6.1.37show radius statistics 531
6.1.38show users authentication 533
6.1.39users login 534
6.2 HTTP Commands 535
6.2.1 ip http secure-port 535
6.2.2 ip http secure-protocol 536
6.2.3 ip http server 537
6.2.4 show ip http 538
7 Appendix- VLAN Example 539
7.1 SOLUTION 1 541
7.2 SOLUTION 2 543

Content
CLI L2P
Release 7.0 05/2011 19
8 Glossary 545
9 Index 563
10 Furt er support 573

Content
20 CLI L2P
Release 7.0 05/2011