Motorola EX-3524 Instruction Manual

www.edge-core.com
Motorola Solutions
EX-3524/EX-3548
Layer 2 Gigabit Ethernet PoE/PoE+ Switch
CLI Reference Guide

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should
Read this Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How this Guide
is Organized
This guide describes the switch’s command line interface (CLI). For more detailed
information on the switch’s key features refer to the System Reference Guide.
The guide includes these sections:
◆Section I “Getting Started” — Includes information on initial configuration.
◆Section II “Command Line Interface” — Includes all management options
available through the CLI.
◆Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the CLI.
For information on how to manage the switch through the Web management
interface, see the following guide:
System Reference Guide
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information

How to Use This Guide
– 4 –
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.

– 5 –
Contents
How to Use This Guide 3
Contents 5
Figures 27
Tables 29
Section I Getting Started 33
1 Initial Switch Configuration 35
Connecting to the Switch 35
Configuration Options 35
Connecting to the Console Port 36
Logging Onto the Command Line Interface 37
Setting Passwords 37
Remote Connections 38
Configuring the Switch for Remote Management 39
Setting an IP Address 39
Enabling SNMP Management Access 44
Managing System Files 47
Upgrading the Operation Code 48
Saving or Restoring Configuration Settings 48
Configuring Automatic Installation of Operation Code and
Configuration Settings 50
Downloading Operation Code from a File Server 50
Specifying a DHCP Client Identifier 52
Downloading a Configuration File Referenced by a DHCP Server 53
Setting the System Clock 55
Setting the Time Manually 55
Configuring SNTP 56

Contents
– 6 –
Configuring NTP 56
Section II Command Line Interface 59
2 Using the Command Line Interface 61
Accessing the CLI 61
Console Connection 61
Telnet Connection 62
Entering Commands 63
Keywords and Arguments 63
Minimum Abbreviation 63
Command Completion 63
Getting Help on Commands 64
Partial Keyword Lookup 65
Negating the Effect of Commands 66
Using Command History 66
Understanding Command Modes 66
Exec Commands 66
Configuration Commands 67
Command Line Processing 69
Output Modifiers 69
CLI Command Groups 70
3 General Commands 73
prompt 73
reload (Global Configuration) 74
enable 75
quit 76
show history 76
configure 77
disable 78
reload (Privileged Exec) 78
show reload 79
end 79
exit 79

Contents
– 7 –
4 System Management Commands 81
Device Designation 81
hostname 82
System Status 82
show access-list tcam-utilization 83
show memory 83
show process cpu 84
show running-config 84
show startup-config 85
show system 86
show users 87
show version 88
Frame Size 89
jumbo frame 89
File Management 90
General Commands 91
boot system 91
copy 92
delete 95
dir 96
whichboot 97
Automatic Code Upgrade Commands 97
upgrade opcode auto 97
upgrade opcode path 98
show upgrade 99
Line 100
line 101
databits 101
exec-timeout 102
login 103
parity 104
password 104
password-thresh 105
silent-time 106
speed 107

Contents
– 8 –
stopbits 107
timeout login response 108
disconnect 109
show line 109
Event Logging 110
logging facility 110
logging history 111
logging host 112
logging on 112
logging trap 113
clear log 114
show log 114
show logging 115
SMTP Alerts 116
logging sendmail 117
logging sendmail host 117
logging sendmail level 118
logging sendmail destination-email 119
logging sendmail source-email 119
show logging sendmail 120
Time 120
SNTP Commands 121
sntp client 121
sntp poll 122
sntp server 122
show sntp 123
Manual Configuration Commands 124
clock summer-time 124
clock timezone 125
clock timezone-predefined 126
calendar set 126
show calendar 127
Time Range 128
time-range 128
absolute 129

Contents
– 9 –
periodic 130
show time-range 131
Switch Clustering 131
cluster 132
cluster commander 133
cluster ip-pool 134
cluster member 134
rcommand 135
show cluster 136
show cluster members 136
show cluster candidates 136
5 SNMP Commands 137
General SNMP Commands 138
snmp-server 138
snmp-server community 139
snmp-server contact 139
snmp-server location 140
show snmp 140
SNMP Target Host Commands 141
snmp-server enable traps 141
snmp-server host 142
SNMPv3 Commands 145
snmp-server engine-id 145
snmp-server group 146
snmp-server user 147
snmp-server view 148
show snmp engine-id 149
show snmp group 150
show snmp user 151
show snmp view 152
Notification Log Commands 153
nlm 153
snmp-server notify-filter 153
show nlm oper-status 155

Contents
– 10 –
show snmp notify-filter 155
6 Remote Monitoring Commands 157
rmon alarm 158
rmon event 159
rmon collection history 160
rmon collection rmon1 161
show rmon alarms 162
show rmon events 162
show rmon history 162
show rmon statistics 163
7 Authentication Commands 165
User Accounts 165
enable password 166
username 167
Authentication Sequence 168
authentication enable 168
authentication login 169
RADIUS Client 170
radius-server acct-port 170
radius-server auth-port 171
radius-server host 171
radius-server key 172
radius-server retransmit 173
radius-server timeout 173
show radius-server 174
TACACS+ Client 174
tacacs-server host 175
tacacs-server key 175
tacacs-server port 176
show tacacs-server 176
AAA 177
aaa accounting dot1x 177
aaa accounting exec 178
aaa accounting update 179

Contents
– 11 –
aaa authorization exec 180
aaa group server 181
server 181
accounting dot1x 182
accounting exec 182
authorization exec 183
show accounting 183
Web Server 184
ip http port 185
ip http server 185
ip http secure-port 186
ip http secure-server 186
Telnet Server 188
ip telnet max-sessions 188
ip telnet port 189
ip telnet server 189
show ip telnet 190
Secure Shell 190
ip ssh authentication-retries 193
ip ssh server 193
ip ssh server-key size 194
ip ssh timeout 195
delete public-key 195
ip ssh crypto host-key generate 196
ip ssh crypto zeroize 197
ip ssh save host-key 197
show ip ssh 198
show public-key 198
show ssh 199
802.1X Port Authentication 200
General Commands 201
dot1x default 201
dot1x eapol-pass-through 202
dot1x system-auth-control 202

Contents
– 12 –
Authenticator Commands 203
dot1x intrusion-action 203
dot1x max-req 203
dot1x operation-mode 204
dot1x port-control 205
dot1x re-authentication 205
dot1x timeout quiet-period 206
dot1x timeout re-authperiod 206
dot1x timeout supp-timeout 207
dot1x timeout tx-period 208
dot1x re-authenticate 208
Supplicant Commands 209
dot1x identity profile 209
dot1x max-start 209
dot1x pae supplicant 210
dot1x timeout auth-period 211
dot1x timeout held-period 211
dot1x timeout start-period 212
Information Display Commands 212
show dot1x 212
Management IP Filter 215
management 215
show management 216
8 General Security Measures 219
Port Security 220
port security 220
Network Access (MAC Address Authentication) 222
network-access aging 223
network-access mac-filter 224
mac-authentication reauth-time 224
network-access dynamic-qos 225
network-access dynamic-vlan 226
network-access guest-vlan 227
network-access link-detection 228

Contents
– 13 –
network-access link-detection link-down 228
network-access link-detection link-up 229
network-access link-detection link-up-down 229
network-access max-mac-count 230
network-access mode mac-authentication 230
network-access port-mac-filter 231
mac-authentication intrusion-action 232
mac-authentication max-mac-count 232
clear network-access 233
show network-access 233
show network-access mac-address-table 234
show network-access mac-filter 235
Web Authentication 236
web-auth login-attempts 237
web-auth quiet-period 237
web-auth session-timeout 238
web-auth system-auth-control 238
web-auth 239
web-auth re-authenticate (Port) 239
web-auth re-authenticate (IP) 240
show web-auth 240
show web-auth interface 241
show web-auth summary 241
DHCP Snooping 242
ip dhcp snooping 242
ip dhcp snooping information option 244
ip dhcp snooping information policy 245
ip dhcp snooping verify mac-address 246
ip dhcp snooping vlan 246
ip dhcp snooping trust 247
clear ip dhcp snooping database flash 248
ip dhcp snooping database flash 248
show ip dhcp snooping 249
show ip dhcp snooping binding 249

Contents
– 14 –
IP Source Guard 250
ip source-guard binding 250
ip source-guard 252
ip source-guard max-binding 253
show ip source-guard 254
show ip source-guard binding 254
ARP Inspection 255
ip arp inspection 256
ip arp inspection filter 257
ip arp inspection log-buffer logs 258
ip arp inspection validate 259
ip arp inspection vlan 259
ip arp inspection limit 260
ip arp inspection trust 261
show ip arp inspection configuration 262
show ip arp inspection interface 262
show ip arp inspection log 263
show ip arp inspection statistics 263
show ip arp inspection vlan 263
Denial of Service Protection 264
flow tcp-udp-port-zero 264
show flow 265
Port-based Traffic Segmentation 265
traffic-segmentation 266
show traffic-segmentation 267
9 Access Control Lists 269
IPv4 ACLs 269
access-list ip 270
permit, deny, redirect-to (Standard IP ACL) 271
permit, deny, redirect-to (Extended IPv4 ACL) 272
ip access-group 274
show ip access-group 275
show ip access-list 275

Contents
– 15 –
IPv6 ACLs 277
access-list ipv6 277
permit, deny, redirect-to (Standard IPv6 ACL) 278
permit, deny, redirect-to (Extended IPv6 ACL) 279
show ipv6 access-list 281
ipv6 access-group 282
show ipv6 access-group 282
MAC ACLs 283
access-list mac 283
permit, deny, redirect-to
(MAC ACL) 284
mac access-group 286
show mac access-group 287
show mac access-list 287
ARP ACLs 288
access-list arp 288
permit, deny (ARP ACL) 289
show arp access-list 290
ACL Information 290
show access-group 290
show access-list 291
10 Interface Commands 293
Interface Configuration 294
interface 294
alias 295
capabilities 295
description 296
flowcontrol 297
giga-phy-mode 298
negotiation 299
shutdown 300
speed-duplex 300
clear counters 301
show interfaces brief 302

Contents
– 16 –
show interfaces counters 302
show interfaces status 304
show interfaces switchport 305
show interfaces transceiver 307
Cable Diagnostics 308
test cable-diagnostics 308
show cable-diagnostics 309
Power Savings 310
power-save 310
show power-save 311
11 Link Aggregation Commands 313
Manual Configuration Commands 314
channel-group 314
Dynamic Configuration Commands 315
lacp 315
lacp admin-key (Ethernet Interface) 316
lacp port-priority 317
lacp system-priority 318
lacp admin-key (Port Channel) 319
Trunk Status Display Commands 320
show lacp 320
12 Power over Ethernet Commands 325
power inline compatible 325
power inline 326
power inline maximum allocation 327
power inline priority 328
power inline time-range 329
show power inline status 330
show power inline time-range 331
show power poe 331
13 Port Mirroring Commands 333
Local Port Mirroring Commands 333
port monitor 333

Contents
– 17 –
show port monitor 335
RSPAN Mirroring Commands 336
rspan source 338
rspan destination 339
rspan remote vlan 340
no rspan session 341
show rspan 341
14 Congestion Control Commands 343
Rate Limit Commands 343
rate-limit 344
Storm Control Commands 345
switchport packet-rate 345
Automatic Traffic Control Commands 346
Threshold Commands 349
auto-traffic-control apply-timer 349
auto-traffic-control release-timer 350
auto-traffic-control 351
auto-traffic-control action 351
auto-traffic-control alarm-clear-threshold 352
auto-traffic-control alarm-fire-threshold 353
auto-traffic-control auto-control-release 354
auto-traffic-control control-release 355
SNMP Trap Commands 355
snmp-server enable port-traps atc broadcast-alarm-clear 355
snmp-server enable port-traps atc broadcast-alarm-fire 356
snmp-server enable port-traps atc broadcast-control-apply 356
snmp-server enable port-traps atc broadcast-control-release 357
snmp-server enable port-traps atc multicast-alarm-clear 357
snmp-server enable port-traps atc multicast-alarm-fire 358
snmp-server enable port-traps atc multicast-control-apply 358
snmp-server enable port-traps atc multicast-control-release 359
ATC Display Commands 359
show auto-traffic-control 359
show auto-traffic-control interface 360

Contents
– 18 –
15 Address Table Commands 361
mac-address-table aging-time 361
mac-address-table static 362
clear mac-address-table dynamic 363
show mac-address-table 363
show mac-address-table aging-time 364
show mac-address-table count 365
16 Spanning Tree Commands 367
spanning-tree 368
spanning-tree cisco-prestandard 369
spanning-tree forward-time 369
spanning-tree hello-time 370
spanning-tree max-age 371
spanning-tree mode 371
spanning-tree pathcost method 373
spanning-tree priority 373
spanning-tree mst configuration 374
spanning-tree transmission-limit 374
max-hops 375
mst priority 376
mst vlan 376
name 377
revision 378
spanning-tree bpdu-filter 378
spanning-tree bpdu-guard 379
spanning-tree cost 380
spanning-tree edge-port 381
spanning-tree link-type 382
spanning-tree loopback-detection 382
spanning-tree loopback-detection action 383
spanning-tree loopback-detection release-mode 384
spanning-tree loopback-detection trap 385
spanning-tree mst cost 385
spanning-tree mst port-priority 386

Contents
– 19 –
spanning-tree port-priority 387
spanning-tree root-guard 388
spanning-tree spanning-disabled 389
spanning-tree loopback-detection release 389
spanning-tree protocol-migration 390
show spanning-tree 390
show spanning-tree mst configuration 392
17 VLAN Commands 393
GVRP and Bridge Extension Commands 394
bridge-ext gvrp 394
garp timer 395
switchport forbidden vlan 396
switchport gvrp 397
show bridge-ext 397
show garp timer 398
show gvrp configuration 399
Editing VLAN Groups 399
vlan database 400
vlan 400
Configuring VLAN Interfaces 401
interface vlan 402
switchport acceptable-frame-types 403
switchport allowed vlan 403
switchport ingress-filtering 404
switchport mode 405
switchport native vlan 406
vlan-trunking 407
Displaying VLAN Information 408
show vlan 408
Configuring IEEE 802.1Q Tunneling 409
dot1q-tunnel system-tunnel-control 410
dot1q-tunnel tpid 411
switchport dot1q-tunnel mode 412
show dot1q-tunnel 413

Contents
– 20 –
Configuring Protocol-based VLANs 413
protocol-vlan protocol-group (Configuring Groups) 414
protocol-vlan protocol-group (Configuring Interfaces) 415
show protocol-vlan protocol-group 416
show interfaces protocol-vlan protocol-group 416
Configuring IP Subnet VLANs 417
subnet-vlan 417
show subnet-vlan 418
Configuring MAC Based VLANs 419
mac-vlan 419
show mac-vlan 420
Configuring Voice VLANs 421
voice vlan 421
voice vlan aging 422
voice vlan mac-address 423
switchport voice vlan 424
switchport voice vlan priority 424
switchport voice vlan rule 425
switchport voice vlan security 426
show voice vlan 426
18 Class of Service Commands 429
Priority Commands (Layer 2) 429
queue mode 430
queue weight 431
switchport priority default 432
show queue mode 433
show queue weight 433
Priority Commands (Layer 3 and 4) 434
qos map cos-dscp 434
qos map dscp-mutation 436
qos map phb-queue 437
qos map trust-mode 438
show qos map cos-dscp 439
show qos map dscp-mutation 439