NEC N8406-023 Operating manual

N8406-023 1Gb Intelligent L3 Switch
Command Reference Guide (ISCLI)
Part number: 856-126757-304-00
Second edition: Oct 2007
456-01772-000
PN# 456-01772-000

2
Legal notices
© 2007 NEC Corporation
The information contained herein is subject to change without notice. The only warranties for NEC products and services are set forth in the
express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional
warranty. NEC shall not be liable for technical or editorial errors or omissions contained herein.
Microsoft®, Windows®, and Windows NT® are U.S. registered trademarks of Microsoft Corporation.
SunOS™ and Solaris™ are trademarks of Sun Microsystems, Inc. in the U.S. and other countries.
Cisco® is a registered trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries.
Part number: 856-126757-304-00
Second edition: Oct 2007

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 3
Contents
ISCLI Reference
Introduction.............................................................................................................................................................8
Additional references..............................................................................................................................................8
Connecting to the switch ........................................................................................................................................8
Establishing a console connection....................................................................................................................8
Setting an IP address........................................................................................................................................9
Establishing a Telnet connection ......................................................................................................................9
Establishing an SSH connection.......................................................................................................................9
Accessing the switch............................................................................................................................................10
Idle timeout...........................................................................................................................................................11
Typographical conventions...................................................................................................................................11
ISCLI basics
Introduction...........................................................................................................................................................13
Accessing the ISCLI.............................................................................................................................................13
ISCLI Command Modes .......................................................................................................................................13
Global commands.................................................................................................................................................14
Command line interface shortcuts........................................................................................................................15
Command abbreviation...................................................................................................................................15
Tab completion................................................................................................................................................15
Information Commands
Introduction...........................................................................................................................................................16
System Information commands............................................................................................................................17
SNMPv3 Information commands..........................................................................................................................17
SNMPv3 USM User Table information............................................................................................................18
SNMPv3 View Table information ....................................................................................................................18
SNMPv3 Access Table information.................................................................................................................19
SNMPv3 Group Table information..................................................................................................................20
SNMPv3 Community Table information..........................................................................................................20
SNMPv3 Target Address Table information....................................................................................................21
SNMPv3 Target Parameters Table information..............................................................................................21
SNMPv3 Notify Table information...................................................................................................................22
SNMPv3 dump................................................................................................................................................23
System information...............................................................................................................................................24
Show recent syslog messages.............................................................................................................................25
System user information.......................................................................................................................................25
Layer 2 information...............................................................................................................................................26
FDB information commands.................................................................................................................................27
Show all FDB information................................................................................................................................27
Clearing entries from the forwarding database...............................................................................................27
Link Aggregation Control Protocol information.....................................................................................................28
LACP dump.....................................................................................................................................................28
802.1x information................................................................................................................................................29
Spanning Tree information ...................................................................................................................................30
Rapid Spanning Tree and Multiple Spanning Tree information............................................................................32
Common Internal Spanning Tree information.......................................................................................................34
Trunk group information .......................................................................................................................................36
VLAN information .................................................................................................................................................36
Layer 3 information...............................................................................................................................................37
Route information.................................................................................................................................................37
Show all IP Route information.........................................................................................................................38
ARP information ...................................................................................................................................................39
Show all ARP entry information ......................................................................................................................39
ARP address list information...........................................................................................................................39
OSPF information.................................................................................................................................................40
OSPF general information...............................................................................................................................41
OSPF interface information.............................................................................................................................41
OSPF Database information...........................................................................................................................42
OSPF route codes information........................................................................................................................43
Routing Information Protocol information.............................................................................................................43
RIP Routes information...................................................................................................................................43

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 4
RIP user configuration.....................................................................................................................................44
IP information .......................................................................................................................................................44
IGMP multicast group information........................................................................................................................45
IGMP multicast router port information.................................................................................................................45
VRRP information.................................................................................................................................................46
802.1p information................................................................................................................................................47
ACL information....................................................................................................................................................48
RMON Information................................................................................................................................................48
RMON history information...............................................................................................................................48
RMON alarm information ................................................................................................................................49
RMON event information.................................................................................................................................50
Link status information..........................................................................................................................................51
Port information....................................................................................................................................................52
Logical Port to GEA Port mapping........................................................................................................................53
SFP information....................................................................................................................................................53
Uplink Failure Detection information.....................................................................................................................54
Information dump..................................................................................................................................................54
Statistics commands
Introduction...........................................................................................................................................................55
Port Statistics........................................................................................................................................................55
802.1x statistics...............................................................................................................................................56
Bridging statistics............................................................................................................................................58
Ethernet statistics............................................................................................................................................58
Interface statistics ...........................................................................................................................................60
Internet Protocol (IP) statistics........................................................................................................................61
Link statistics...................................................................................................................................................62
Port RMON statistics.......................................................................................................................................62
Layer 2 statistics...................................................................................................................................................64
FDB statistics..................................................................................................................................................64
LACP statistics................................................................................................................................................64
Layer 3 statistics...................................................................................................................................................65
IP statistics......................................................................................................................................................66
Route statistics................................................................................................................................................67
ARP statistics..................................................................................................................................................67
DNS statistics..................................................................................................................................................67
ICMP statistics ................................................................................................................................................68
TCP statistics..................................................................................................................................................69
UDP statistics..................................................................................................................................................70
IGMP Multicast Group statistics......................................................................................................................70
OSPF statistics.....................................................................................................................................................71
OSPF global statistics.....................................................................................................................................71
VRRP statistics.....................................................................................................................................................74
RIP statistics.........................................................................................................................................................75
GEA Layer 3 statistics ..........................................................................................................................................76
GEA Layer 3 statistics.....................................................................................................................................76
Management Processor statistics.........................................................................................................................77
Packet statistics ..............................................................................................................................................77
TCP statistics..................................................................................................................................................78
UDP statistics..................................................................................................................................................78
CPU statistics..................................................................................................................................................78
ACL statistics........................................................................................................................................................79
SNMP statistics ....................................................................................................................................................79
NTP statistics........................................................................................................................................................81
Uplink Failure Detection statistics.........................................................................................................................82
Statistics dump.....................................................................................................................................................82
Configuration Commands
Introduction...........................................................................................................................................................83
Viewing and saving changes................................................................................................................................83
Saving the configuration.......................................................................................................................................83
System configuration............................................................................................................................................84
System host log configuration.........................................................................................................................85
Secure Shell Server configuration...................................................................................................................86
RADIUS server configuration..........................................................................................................................87
TACACS+ server configuration.......................................................................................................................88

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 5
NTP server configuration ................................................................................................................................89
System SNMP configuration...........................................................................................................................90
SNMPv3 configuration ....................................................................................................................................91
SNMPv3 User Security Model configuration...................................................................................................92
SNMPv3 View configuration............................................................................................................................92
SNMPv3 View-based Access Control Model configuration.............................................................................93
SNMPv3 Group configuration .........................................................................................................................93
SNMPv3 Community Table configuration.......................................................................................................94
SNMPv3 Target Address Table configuration.................................................................................................94
SNMPv3 Target Parameters Table configuration ...........................................................................................95
SNMPv3 Notify Table configuration................................................................................................................95
System Access configuration..........................................................................................................................96
Management Networks configuration..............................................................................................................96
User Access Control configuration..................................................................................................................97
User ID configuration ......................................................................................................................................97
HTTPS Access configuration..........................................................................................................................98
Port configuration .................................................................................................................................................99
Temporarily disabling a port..........................................................................................................................100
Port link configuration....................................................................................................................................100
ACL Port configuration..................................................................................................................................100
Layer 2 configuration..........................................................................................................................................101
802.1x configuration...........................................................................................................................................101
802.1x Global configuration ..........................................................................................................................102
802.1x Port configuration..............................................................................................................................103
Rapid Spanning Tree Protocol / Multiple Spanning Tree Protocol configuration................................................104
Common Internal Spanning Tree configuration ............................................................................................105
CIST bridge configuration .............................................................................................................................105
CIST port configuration.................................................................................................................................106
Spanning Tree configuration ..............................................................................................................................107
Bridge Spanning Tree configuration..............................................................................................................108
Spanning Tree port configuration..................................................................................................................109
Forwarding Database configuration....................................................................................................................110
Static FDB configuration ...............................................................................................................................110
Trunk configuration.............................................................................................................................................110
Layer 2 IP Trunk Hash configuration.............................................................................................................111
Link Aggregation Control Protocol configuration ................................................................................................111
LACP Port configuration................................................................................................................................112
VLAN configuration.............................................................................................................................................112
Layer 3 configuration..........................................................................................................................................113
IP interface configuration ..............................................................................................................................113
Default Gateway configuration......................................................................................................................114
IP Static Route configuration..............................................................................................................................114
Address Resolution Protocol configuration.........................................................................................................115
Static ARP configuration...............................................................................................................................115
IP Forwarding configuration................................................................................................................................115
Network Filter configuration................................................................................................................................116
Route Map configuration ....................................................................................................................................117
IP Access List configuration..........................................................................................................................118
Routing Information Protocol configuration ........................................................................................................119
RIP Interface configuration............................................................................................................................119
RIP Route Redistribution configuration.........................................................................................................120
Open Shortest Path First configuration ..............................................................................................................121
OSFP Area Index configuration ....................................................................................................................122
OSPF Summary Range configuration...........................................................................................................123
OSPF Interface configuration........................................................................................................................123
OSPF Virtual Link configuration....................................................................................................................124
OSPF Host Entry configuration.....................................................................................................................124
OSPF Route Redistribution configuration.....................................................................................................125
OSPF MD5 Key configuration.......................................................................................................................125
IGMP configuration.............................................................................................................................................126
IGMP snooping configuration........................................................................................................................126
IGMP static multicast router configuration ....................................................................................................127
IGMP filtering configuration...........................................................................................................................127
IGMP filter definition......................................................................................................................................127
IGMP filtering port configuration....................................................................................................................128

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 6
Domain Name System configuration..................................................................................................................128
Bootstrap Protocol Relay configuration..............................................................................................................128
Virtual Router Redundancy Protocol configuration.............................................................................................129
VRRP Virtual Router configuration................................................................................................................129
VRRP Virtual Router Priority Tracking configuration.....................................................................................131
VRRP Virtual Router Group configuration.....................................................................................................131
VRRP Virtual Router Group Priority Tracking configuration..........................................................................132
VRRP Interface configuration........................................................................................................................133
VRRP Tracking configuration........................................................................................................................133
Quality of Service configuration..........................................................................................................................134
QoS 802.1p configuration .............................................................................................................................134
Access Control configuration..............................................................................................................................135
Access Control List configuration..................................................................................................................135
ACL Ethernet Filter configuration..................................................................................................................135
ACL IP Version 4 Filter configuration............................................................................................................136
ACL TCP/UDP Filter configuration................................................................................................................137
ACL Packet Format configuration.................................................................................................................137
ACL Metering configuration...........................................................................................................................138
ACL Re-mark configuration...........................................................................................................................138
ACL Re-mark In-Profile configuration ...........................................................................................................138
ACL Re-Mark Update User Priority configuration .........................................................................................139
ACL Re-mark Out-of-Profile configuration ....................................................................................................139
ACL Group configuration...............................................................................................................................139
Remote Monitoring configuration........................................................................................................................140
RMON history configuration..........................................................................................................................140
RMON event configuration............................................................................................................................140
RMON alarm configuration............................................................................................................................141
Port mirroring......................................................................................................................................................142
Port-based port mirroring..............................................................................................................................142
Uplink Failure Detection configuration................................................................................................................143
Failure Detection Pair configuration..............................................................................................................143
Link to Monitor configuration.........................................................................................................................143
Link to Disable configuration.........................................................................................................................144
Configuration Dump............................................................................................................................................145
Saving the active switch configuration................................................................................................................145
Restoring the active switch configuration...........................................................................................................145
Operations Commands
Introduction.........................................................................................................................................................146
Operations-level port options........................................................................................................................146
Operations-level port 802.1x options ............................................................................................................146
Operations-level VRRP options ....................................................................................................................147
Boot Options
Introduction.........................................................................................................................................................148
Updating the switch software image...................................................................................................................148
Downloading new software to the switch......................................................................................................148
Selecting a software image to run ......................................................................................................................149
Uploading a software image from the switch......................................................................................................149
Selecting a configuration block...........................................................................................................................150
Resetting the switch ...........................................................................................................................................150
Accessing the AOS CLI.................................................................................................................................151
Maintenance Commands
Introduction.........................................................................................................................................................152
System maintenance.....................................................................................................................................152
Forwarding Database maintenance ..............................................................................................................152
Debugging options........................................................................................................................................153
ARP cache maintenance...............................................................................................................................153
IGMP Snooping maintenance.......................................................................................................................154
IGMP Mrouter maintenance..........................................................................................................................154
Technical support dump................................................................................................................................154
TFTP/FTP technical support dump put.........................................................................................................154
Uuencode flash dump...................................................................................................................................155
TFTP/FTP system dump put.........................................................................................................................155
Clearing dump information............................................................................................................................155

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 7
Panic command ............................................................................................................................................156
Unscheduled system dumps ..............................................................................................................................156

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 8
ISCLI Reference
Introduction
The 1Gb Intelligent L3 Switch is ready to perform basic switching functions right out of the box. Some of the more
advanced features, however, require some administrative configuration before they can be used effectively.
The extensive switching software included in the switch provides a variety of options for accessing and configuring
the switch:
Text-based command line interfaces (AOS CLI and ISCLI) for access via a local terminal or remote
Telnet/Secure Shell (SSH) session
Simple Network Management Protocol (SNMP) support for access through network management software
such as NEC WebSAM NetvisorPro
A browser-based management interface for interactive network access through a Web browser
The ISCLI provides a direct method for collecting switch information and performing switch configuration. Use a
basic terminal to view information and statistics about the switch, and to perform any necessary configuration.
This chapter explains how to access the ISCLI to the switch.
Additional references
Additional information about installing and configuring the switch is available in the following guides, which are
attached in this product.
N8406-023 1Gb Intelligent L3 Switch User’s Guide
N8406-023 1Gb Intelligent L3 Switch Application Guide
N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (AOS)
N8406-023 1Gb Intelligent L3 Switch Browser-based Interface Reference Guide
Connecting to the switch
You can access the command line interface in one of the following ways:
Using a console connection via the console port
Using a Telnet connection over the network
Using a Secure Shell (SSH) connection to securely log in over a network
Establishing a console connection
To establish a console connection with the switch, you need:
A null modem cable with a female DB-9 connector (See the N8406-023 1Gb Intelligent L3 Switch User’s
Guide for more information.)
An ASCII terminal or a computer running terminal emulation software set to the parameters shown in the table
below
Table 1 Console configuration parameters
Parameter
Value
Baud Rate
9600
Data Bits
8
Parity
None
Stop Bits
1
Flow Control
None

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 9
To establish a console connection with the switch:
1. Connect the terminal to the console port using the null modem cable.
2. Power on the terminal.
3. Press the Enter key a few times on the terminal to establish the connection.
4. You will be required to enter a password for access to the switch.
Setting an IP address
To access the switch via a Telnet or an SSH connection, you need to have an Internet Protocol (IP) address set for
the switch. The switch can get its IP address in one of the following ways:
Management port access:
Using a Dynamic Host Control Protocol (DHCP) server—When the dhcp client is enabled, the
management interface (interface 256) requests its IP address from a DHCP server. The default value for
the dhcp client is enabled.
Configuring manually—If the network does not support DHCP, you must configure the management
interface (interface 256) with an IP address. If you want to access the switch from a remote network, you
also must configure the management gateway (gateway 4).
Uplink port access:
Using a Bootstrap Protocol (BOOTP) server—By default, the management interface is set up to request
its IP address from a BOOTP server. If you have a BOOTP server on the network, add the Media Access
Control (MAC) address of the switch to the BOOTP configuration file located on the BOOTP server. The
MAC address can be found in the System Information menu (See the ―System Information commands‖
section in the ―Information Commands‖ chapter.) If you are using a DHCP server that also does BOOTP,
you do not have to configure the MAC address.
Configuring manually—If the network does not support BOOTP, you must configure the management port
with an IP address.
Establishing a Telnet connection
A Telnet connection offers the convenience of accessing the switch from any workstation connected to the network.
Telnet provides the same options for user, operator, and administrator access as those available through the
console port. By default, Telnet is enabled on the switch. The switch supports four concurrent Telnet connections.
Once the IP parameters are configured, you can access the ISCLI using a Telnet connection. To establish a Telnet
connection with the switch, run the Telnet program on the workstation and enter the telnet command, followed by
the switch IP address:
telnet <1Gb Intelligent L3 Switch IP address>
You will then be prompted to enter a password. The password determines the access level: administrator, operator,
or user. See the ―Accessing the switch‖ section later in this chapter for description of default passwords.
Establishing an SSH connection
Although a remote network administrator can manage the configuration of a switch via Telnet, this method does not
provide a secure connection. The Secure Shell (SSH) protocol enables you to securely log into this switch over the
network.
As a secure alternative to using Telnet to manage switch configuration, SSH ensures that all data sent over the
network is encrypted and secure. In order to use SSH, you must first configure it on the switch. See the ―Secure
Shell Server configuration‖ section in the ―Configuration Commands‖ chapter for information on how to configure
SSH.
The switch can perform only one session of key/cipher generation at a time. Therefore, an SSH/Secure Copy
(SCP) client will not be able to log in if the switch is performing key generation at that time or if another client has
just logged in before this client. Similarly, the system will fail to perform the key generation if an SSH/SCP client is
logging in at that time.

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 10
The supported SSH encryption and authentication methods are listed below.
Server Host Authentication—Client RSA authenticates the switch in the beginning of every connection
Key Exchange—RSA
Encryption:
AES256-CBC
AES192-CBC
AES128-CBC
3DES-CBC
3DES
ARCFOUR
User Authentication—Local password authentication; Remote Authentication Dial-in User Service (RADIUS)
The following SSH clients are supported:
SSH 3.0.1 for Linux (freeware)
SecureCRT® 4.1.8 (VanDyke Technologies, Inc.)
OpenSSH_3.9 for Linux (FC 3)
FedoraCore 3 for SCP commands
PuTTY Release 0.58 (Simon Tatham) for Windows
NOTE: This switch implementation of SSH is based on versions 1.5 and 2.0, and supports SSH clients from
version 1.0 through version 2.0. SSH clients of other versions are not supported. You may configure the client
software to use protocol SSH version 1 or version 2.
By default, SSH service is not enabled on the switch. Once the IP parameters are configured, you can access the
ISCLI to enable SSH.
To establish an SSH connection with the switch, run the SSH program on the workstation by issuing the ssh
command, followed by the user account name and the switch IP address:
>> # ssh <user>@<1Gb Intelligent L3 Switch IP address>
You will then be prompted to enter your password.
NOTE: The first time you run SSH from the workstation, a warning message might appear. At the prompt,
enter yes to continue.
Accessing the switch
To enable better switch management and user accountability, this switch provides different levels or classes of user
access. Levels of access to the CLI and Web management functions and screens increase as needed to perform
various switch management tasks. The three levels of access are:
User—Interaction with the switch is completely passive—nothing can be changed on this switch. Users may
display information that has no security or privacy implications, such as switch statistics and current
operational state information.
Operator—Interaction with the switch is completely passive—nothing can be changed on this switch. Users
may display information that has no security or privacy implications, such as switch statistics and current
operational state information.
Administrator—Administrators are the only ones that may make permanent changes to the switch
configuration—changes that are persistent across a reload/reset of the switch. Administrators can access
switch functions to configure and troubleshoot problems on this switch. Because administrators can also
make temporary (operator-level) changes as well, they must be aware of the interactions between temporary
and permanent changes.
Access to switch functions is controlled through the use of unique usernames and passwords. Once you are
connected to the switch via the local console, Telnet, or SSH, you are prompted to enter a password. The
password entered determines the access level. The default user names/password for each access level is listed in
the following table.
NOTE: It is recommended that you change default switch passwords after initial configuration and as
regularly as required under your network security policies. For more information, see the ―Setting passwords‖
section in the ―First-time configuration‖ chapter.