NetApp CN1610 Installation manual

NetApp® CN1610 Network Switch
CLI Command Reference
NetApp, Inc.
495 East Java Drive
Sunnyvale, CA 94089 U.S.A.
Telephone: [phone]
Fax: [phone]
Support telephone: +1 (888) 4-NETAPP
Documentation comments: [e-mail]
Information Web: www.netapp.com
Part number: 215-06286_B0
July 2013

ii
Copyright and trademark information
Copyright
information Copyright © 1994-2013 NetApp, Inc. All rights reserved. Printed in the U.S.A.
Software derived from copyrighted NetApp material is subject to the following license and
disclaimer:
THIS SOFTWARE IS PROVIDED BY NETAPP “AS IS” AND WITHOUT ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
WHICH ARE HEREBY DISCLAIMED. IN NO EVENT SHALL NETAPP BE LIABLE FOR ANY
DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
NetApp reserves the right to change any products described herein at any time, and without notice.
NetApp assumes no responsibility or liability arising from the use of products described herein,
except as expressly agreed to in writing by NetApp. The use or purchase of this product does not
convey a license under any patent rights, trademark rights, or any other intellectual property rights of
NetApp.
The product described in this manual may be protected by one or more U.S.A. patents, foreign
patents, or pending applications.
RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to
restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer
Software clause at DFARS 252.277-7103 (October 1988) and FAR 52-227-19 (June 1987).
Trademark
information NetApp, the NetApp logo, Network Appliance, the Network Appliance logo, Akorri,
ApplianceWatch, ASUP, AutoSupport, BalancePoint, BalancePoint Predictor, Bycast, Campaign
Express, ComplianceClock, Cryptainer, CryptoShred, Data ONTAP, DataFabric, DataFort, Decru,
Decru DataFort, FAServer, FilerView, FlexCache, FlexClone, FlexScale, FlexShare, FlexSuite,
FlexVol, FPolicy, GetSuccessful, gFiler, Go further, faster, Imagine Virtually Anything, Lifetime Key
Management, LockVault, Manage ONTAP, MetroCluster, MultiStore, NearStore, NetCache, NOW
(NetApp on the Web), ONTAPI, OpenKey, RAID-DP, ReplicatorX, SANscreen, SecureAdmin,
SecureShare, Select, Shadow Tape, Simulate ONTAP, SnapCopy, SnapDirector, SnapDrive,
SnapFilter, SnapLock, SnapManager, SnapMigrator, SnapMirror, SnapMover, SnapRestore,
Snapshot, SnapSuite, SnapValidator, SnapVault, StorageGRID, StoreVault, the StoreVault logo,
SyncMirror, Tech OnTap, The evolution of storage, Topio, vFiler, VFM, Virtual File Manager,
VPolicy, WAFL, and Web Filer are trademarks or registered trademarks of NetApp, Inc. in the United
States, other countries, or both.
IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business
Machines Corporation in the United States, other countries, or both. A complete and current list of
other IBM trademarks is available on the Web at www.ibm.com/legal/copytrade.shtml.

iii
Apple is a registered trademark and QuickTime is a trademark of Apple, Inc. in the U.S.A. and/or
other countries. Microsoft is a registered trademark and Windows Media is a trademark of Microsoft
Corporation in the U.S.A. and/or other countries. RealAudio, RealNetworks, RealPlayer,
RealSystem, RealText, and RealVideo are registered trademarks and RealMedia, RealProxy, and
SureStream are trademarks of RealNetworks, Inc. in the U.S.A. and/or other countries.
Broadcom®, the pulse logo, Connecting everything®, the Connecting everything logo, and
FASTPATH® are among the trademarks of Broadcom Corporation and/or its affiliates in the United
States, certain other countries and/or the EU.
All other brands or products are trademarks or registered trademarks of their respective holders and
should be treated as such.
NetApp, Inc. is a licensee of the CompactFlash and CF Logo trademarks. NetApp, Inc. NetCache is
certified RealSystem compatible.

iv

Table of Contents
Table of Contents 1
Chapter 1 About This Document. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Chapter 2 Using the Command-Line Interface . . . . . . . . . . . . . . . . . . . . . . 7
Command Syntax. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Command Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Common Parameter Values. . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Slot/Port Naming Convention . . . . . . . . . . . . . . . . . . . . . . . . . 12
Using the no Form of a Command . . . . . . . . . . . . . . . . . . . . . . . 14
CN1610 Software Modules. . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Command Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Command Completion and Abbreviation . . . . . . . . . . . . . . . . . . . 22
CLI Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
CLI Line-Editing Conventions . . . . . . . . . . . . . . . . . . . . . . . . . 24
Using CLI Help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Chapter 3 Management Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Configuration Scripting Commands . . . . . . . . . . . . . . . . . . . . . . 32
Console Port Access Commands . . . . . . . . . . . . . . . . . . . . . . . . 35
Management Security Commands . . . . . . . . . . . . . . . . . . . . . . . 38
Network Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . 39
Pre-login Banner, System Prompt, and Host Name Commands . . . . . . . . 45
RADIUS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Secure Shell Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
SNMP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
TACACS+ Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Telnet Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

2Table of Contents
User Account Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Chapter 4 Utility Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117
AutoInstall Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118
Cable Test Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122
DNS Client Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . .124
Dual Image Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . .130
Email Alerting and Mail Server Commands . . . . . . . . . . . . . . . . . .132
IP Address Conflict Commands . . . . . . . . . . . . . . . . . . . . . . . .140
Logging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .141
Serviceability Packet Tracing Commands . . . . . . . . . . . . . . . . . . .147
sFlow Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157
Simple Network Time Protocol Commands . . . . . . . . . . . . . . . . . .163
System Information and Statistics Commands . . . . . . . . . . . . . . . . .170
System Utility and Clear Commands. . . . . . . . . . . . . . . . . . . . . .194
Chapter 5 Switching Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .209
Denial of Service Commands. . . . . . . . . . . . . . . . . . . . . . . . . .211
DHCP Client Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . .222
DHCP L2 Relay Agent Commands . . . . . . . . . . . . . . . . . . . . . .224
DHCP Snooping Configuration Commands . . . . . . . . . . . . . . . . . .232
Double VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .243
Dynamic ARP Inspection Commands . . . . . . . . . . . . . . . . . . . . .248
802.1X Supplicant Commands . . . . . . . . . . . . . . . . . . . . . . . . .256
GARP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .261
GMRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .264
GVRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268
IGMP Snooping Configuration Commands . . . . . . . . . . . . . . . . . .271
IGMP Snooping Querier Commands. . . . . . . . . . . . . . . . . . . . . .281
ISDP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .286

Table of Contents 3
LLDP (802.1AB) Commands . . . . . . . . . . . . . . . . . . . . . . . . .292
LLDP-MED Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .303
Link Local Protocol Filtering Commands . . . . . . . . . . . . . . . . . . .311
MAC Database Commands. . . . . . . . . . . . . . . . . . . . . . . . . . .313
MLD Snooping Commands . . . . . . . . . . . . . . . . . . . . . . . . . .316
MLD Snooping Querier Commands . . . . . . . . . . . . . . . . . . . . . .324
Port-Based Network Access Control Commands . . . . . . . . . . . . . . .328
Port Channel/LAG (802.3ad) Commands . . . . . . . . . . . . . . . . . . .349
Port Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . .369
Port Mirroring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .375
Port Security Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .378
Protected Ports Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .382
Provisioning (IEEE 802.1p) Commands . . . . . . . . . . . . . . . . . . . .385
Spanning Tree Protocol Commands . . . . . . . . . . . . . . . . . . . . . .386
Static MAC Filtering Commands. . . . . . . . . . . . . . . . . . . . . . . .409
Storm-Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .414
VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .427
Voice VLAN Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . .444
Chapter 6 IPv6 Management Commands . . . . . . . . . . . . . . . . . . . . . . . .447
IPv6 Management Commands . . . . . . . . . . . . . . . . . . . . . . . . .448
Chapter 7 Quality of Service Commands . . . . . . . . . . . . . . . . . . . . . . . .461
Auto-Voice over IP Commands . . . . . . . . . . . . . . . . . . . . . . . .462
Class of Service Commands . . . . . . . . . . . . . . . . . . . . . . . . . .464
Differentiated Services Commands. . . . . . . . . . . . . . . . . . . . . . .475
DiffServ Class Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .477
DiffServ Policy Commands . . . . . . . . . . . . . . . . . . . . . . . . . .486
DiffServ Service Commands . . . . . . . . . . . . . . . . . . . . . . . . . .494
DiffServ Show Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .496

4Table of Contents
IP Access Control List Commands . . . . . . . . . . . . . . . . . . . . . . .505
IPv6 Access Control List Commands . . . . . . . . . . . . . . . . . . . . .515
MAC Access Control List Commands . . . . . . . . . . . . . . . . . . . . .520
Time Range Commands for Time-Based ACLs . . . . . . . . . . . . . . . .526
Command Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .531

5
1
About This Document
Introduction This document describes command-line interface (CLI) commands you use to
view and configure the CN1610 software. You can access the CLI by using a
direct connection to the serial port or by using Telnet or SSH over a remote
network connection.
Note
This document contains standalone commands. Stacking commands are not
supported on the CN1610 switch.
Note
Some commands in this document may not be available with your version of the
FASTPATH software. Enter a question mark (?) after typing one or more
characters of a word to list the available commands or parameters that begin with
the letters. See “Using CLI Help” on page 26 for more information.
Audience This document is for system administrators who configure and operate systems
using FASTPATH®software. It provides an understanding of the configuration
options of the FASTPATH software.
Software engineers who integrate FASTPATH software into their hardware
platform can also benefit from a description of the configuration options.
This document assumes that you have an understanding of the FASTPATH
software base and have read the appropriate specification for the relevant
networking device platform. It also assumes that you have a basic knowledge of
Ethernet and networking concepts.
Refer to the release notes for the FASTPATH application-level code. The release
notes detail the platform-specific functionality of the Switching, SNMP,
Configuration, Management, and other packages. The suite of features the
FASTPATH packages support is not available on all the platforms to which
FASTPATH software has been ported.
About FASTPATH
Software FASTPATH software has two purposes:
◆Assist attached hardware in switching frames, based on Layer 2, 3, or 4
information contained in the frames.

6
About This Document
◆Provide a complete device management portfolio to the network
administrator.
Scope FASTPATH software encompasses both hardware and software support. The
software is partitioned to run in the following processors:
◆CPU
This code runs the networking device management portfolio and controls the
overall networking device hardware. It also assists in frame forwarding, as
needed and specified. This code is designed to run on multiple platforms
with minimal changes from platform to platform.
◆Networking device processor
This code does the majority of the packet switching, usually at wire speed.
This code is platform-dependent, and substantial changes might exist across
products.
Product Concept Fast Ethernet and Gigabit Ethernet switching continues to evolve from high-end
backbone applications to desktop switching applications. The price of the
technology continues to decline, while performance and feature sets continue to
improve. Devices that are capable of switching Layers 2, 3, and 4 are
increasingly in demand. FASTPATH software provides a flexible solution to
these ever-increasing needs.
The exact functionality provided by each networking device on which the
FASTPATH software base runs varies depending upon the platform and
requirements of the FASTPATH software.
FASTPATH software includes a set of comprehensive management functions for
managing both FASTPATH software and the network. You can manage the
FASTPATH software by using one of the following two methods:
◆Command-Line Interface (CLI)
◆Simple Network Management Protocol (SNMP)
Each of the FASTPATH management methods enables you to configure, manage,
and control the software locally or remotely using in-band or out-of-band
mechanisms. Management is standards-based, with configuration parameters and
a private Management Information Base (MIB) providing control for functions
not completely specified in the MIBs.

Chapter 2: Using the Command-Line Interface 7
2
Using the Command-Line Interface
About this chapter The command-line interface (CLI) is a text-based way to manage and monitor the
system. You can access the CLI by using a direct serial connection or by using a
remote logical connection with Telnet or SSH.
Topics in this
chapter This chapter describes the CLI syntax, conventions, and modes. It contains the following sections:
◆“Command Syntax” on page 8
◆“Command Conventions” on page 9
◆“Common Parameter Values” on page 10
◆“Slot/Port Naming Convention” on page 12
◆“Using the no Form of a Command” on page 14
◆“CN1610 Software Modules” on page 15
◆“Command Modes” on page 16
◆“Command Completion and Abbreviation” on page 22
◆“CLI Error Messages” on page 23
◆“CLI Line-Editing Conventions” on page 24
◆“Using CLI Help” on page 26
◆“Accessing the CLI” on page 28

8Command Syntax
Command Syntax
A command is one or more words that might be followed by one or more
parameters. Parameters can be required or optional values.
Some commands, such as
show network or clear vlan , do not require
parameters. Other commands, such as
network parms , require that you supply a
value after the command. You must type the parameter values in a specific order,
and optional parameters follow required parameters. The following example
describes the
network parms command syntax:
network parms ipaddr netmask [gateway]
◆ network parms is the command name.
◆ ipaddr and netmask are parameters and represent required values that you
must enter after you type the command keywords.
◆[ gateway ]is an optional parameter, so you are not required to enter a value
in place of the parameter.
The NetApp CN1610 Network Switch CLI Command Reference lists each
command by the command name and provides a brief description of the
command. Each command reference also contains the following information:
◆Format shows the command keywords and the required and optional
parameters.
◆Mode identifies the command mode you must be in to access the command.
◆Default shows the default value, if any, of a configurable setting on the
device.
The
show commands also contain a description of the information that the
command shows.

Chapter 2: Using the Command-Line Interface 9
Command Conventions
The parameters for a command might include mandatory values, optional values,
or keyword choices. Parameters are order-dependent. The following Parameter
Conventions table describes the conventions this document uses to distinguish
between value types:
Symbol Example Description
[] square brackets
[value]
Indicates an optional
parameter.
italic
font in a
parameter.
value or [value] Indicates a variable
value. You must replace
the italicized text and
brackets with an
appropriate value,
which might be a name
or number.
{} curly braces
{choice1 | choice2}
Indicates that you must
select a parameter from
the list of choices.
| Vertical bars
choice1 | choice2
Separates the mutually
exclusive choices.
[{}] Braces within
square brackets
[{choice1|choice2}]
Indicates a choice
within an optional
element.

10 Common Parameter Values
Common Parameter Values
Parameter values might be names (strings) or numbers. To use spaces as part of a
name parameter, enclose the name value in double quotes. For example, the
expression “System Name with Spaces” forces the system to accept the spaces.
Empty strings (““) are not valid user-defined strings. The following Parameter
Descriptions table describes common parameter values and value formatting:
Parameter Description
ipaddr This parameter is a valid IP address. You can
enter the IP address in the following formats:
a (32 bits)
a.b (8.24 bits)
a.b.c (8.8.16 bits)
a.b.c.d (8.8.8.8)
In addition to these formats, the CLI accepts
decimal, hexadecimal, and octal formats through
the following input formats (where nis any valid
hexadecimal, octal or decimal number):
0xn (CLI assumes hexadecimal format.)
0n (CLI assumes octal format with leading
zeros.)
n (CLI assumes decimal format.)
ipv6-address
FE80:0000:0000:0000:020F:24FF:FEBF:DBCB,
or
FE80:0:0:0:20F:24FF:FEBF:DBCB, or
FE80::20F24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:128:141:49:32
For additional information, refer to RFC 3513.
Interface or
slot/port Valid slot and port number separated by a forward slash. For example, 0/1 represents slot
number 0 and port number 1.
Logical Interface Represents a logical slot and port number. This is
applicable in the case of a port-channel (LAG).
You can use the logical slot/port to configure the
port-channel.

Chapter 2: Using the Command-Line Interface 11
Character strings Use double quotation marks to identify character
strings, for example, “System Name with
Spaces”. An empty string (“”) is not valid.
Parameter Description

12 Slot/Port Naming Convention
Slot/Port Naming Convention
FASTPATH software references physical entities such as cards and ports by using
a slot/port naming convention. The FASTPATH software also uses this
convention to identify certain logical entities, such as Port-Channel interfaces.
The slot number has two uses. In the case of physical ports, it identifies the card
containing the ports. In the case of logical and CPU ports it also identifies the
type of interface or port.
The port identifies the specific physical port or logical interface being managed
on a given slot.
Slot Type Description
Physical slot numbers Physical slot numbers begin with zero, and are
allocated up to the maximum number of physical
slots.
Logical slot numbers Logical slots immediately follow physical slots
and identify port-channel (LAG) or router
interfaces.
CPU slot numbers The CPU slots immediately follow the logical
slots.
Port Type Description
Physical ports The physical ports for each slot are numbered
sequentially starting from zero.
Logical interfaces There are four types of logical interfaces:
◆Port-channel or Link Aggregation Group
(LAG) interfaces are logical interfaces that
are only used for bridging functions.
◆VLAN routing interfaces are only used for
routing functions.
◆Loopback interfaces are logical interfaces
that are always up.
◆Tunnel interfaces are logical point-to-point
links that carry encapsulated packets.

Chapter 2: Using the Command-Line Interface 13
Note
In the CLI, loopback and tunnel interfaces do not use the slot/port format. To
specify a loopback interface, use the loopback ID. To specify a tunnel interface,
use the tunnel ID.
CPU ports CPU ports are handled by the driver as one or
more physical entities located on physical slots.
Port Type Description

14 Using the no Form of a Command
Using the no Form of a Command
The no keyword is a specific form of an existing command and does not represent
a new or distinct command. Almost every configuration command has a
no form.
In general, use the
no form to reverse the action of a command or reset a value
back to the default. For example, the
no shutdown configuration command
reverses the shutdown of an interface. Use the command without the keyword
no
to re-enable a disabled feature or to enable a feature that is disabled by default.
Only the configuration commands are available in the
no form.

Chapter 2: Using the Command-Line Interface 15
CN1610 Software Modules
The CN1610 software consists of flexible modules that can be applied in various
combinations to develop advanced Layer 2/3/4+ products. The commands and
command modes available on your switch depend on the installed modules.
Additionally, for some
show commands, the output fields might change based on
the modules included in the CN1610 software.
The CN1610 software suite includes the following modules:
◆Switching (Layer 2)
◆Quality of Service
◆Management (CLI and SNMP)
◆IPv6 Management—Allows management of the CN1610 switch through an
IPv6 address without requiring the IPv6 Routing package in the system. The
management address can be associated with the network port (front-panel
switch ports), a routine interface (port or VLAN), and the Service port.
◆Security

16 Command Modes
Command Modes
The CLI groups commands into modes according to the command function. Each
of the command modes supports specific CN1610 software commands. The
commands in one mode are not available until you switch to that particular mode,
with the exception of the User EXEC mode commands. You can execute the User
EXEC mode commands in the Privileged EXEC mode.
The command changes in each command mode to help you identify the current
mode. The following CLI Command Modes table describes the command modes
and the prompts visible in that mode:
Command Mode Prompt Mode Description
User EXEC
(CN1610)>
Contains a limited set
of commands to view
basic system
information.
Privileged EXEC
(CN1610)#
Allows you to enter any
EXEC command, enter
the VLAN mode, or
enter the Global
Configuration mode.
Global Config
(CN1610) (Config)#
Groups general setup
commands and permits
you to make
modifications to the
running configuration.
VLAN Config
(CN1610)(Vlan)#
Groups all the VLAN
commands.