NETGEAR ProSAFE M7100-24X User manual

350 East Plumeria Drive
San Jose, CA 95134
USA
October 2013
202-11332-01
ProSAFE M7100 Managed Switches
Command-Line Interface (CLI) Reference
Manual
Software Version 10.1.0
Model M7100-24X

2
ProSAFE M7100 Managed Switches
Support
Thank you for selecting NETGEAR products.
After installing your device, locate the serial number on the label of your product and use it to register your product at
https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR recommends
registering your product through the NETGEAR website. For product updates and web support, visit http://support.netgear.com.
Phone (US & Canada only): 1-888-NETGEAR.
Phone (Other Countries): Check the list of phone numbers at http://support.netgear.com/general/contact/default.aspx.
Compliance
For regulatory compliance information, visit http://www.netgear.com/about/regulatory.
Trademarks
NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of NETGEAR, Inc. and/or
its subsidiaries in the United States and/or other countries. Information is subject to change without notice. © NETGEAR, Inc. All
rights reserved.
Revision History
Publication Part
Number
Version Publish Date Comments
202-11332-01 Not applicable October 2013 Updated the manual to a new format.
Added the following new command sections:
• Special Command-Mode Independent Commands
• Private Group Commands
• Alternative Store and Forward Commands
• Multichassis LAG Commands
• Port Mirroring Commands
• DHCPv6 Snooping Configuration Commands
• MBUF Utilization Commands
• Full Memory Dump Commands
Removed the following command sections:
• Open Shortest Path First (OSPF) Commands
• OSPF Graceful Restart Commands
• Routing Information Protocol (RIP) Commands
• Tunnel Interface Commands
• IPv6 Routing Commands
• OSPFv3 Commands
• OSPFv3 Graceful Restart Commands
• DHCPv6 Commands
• Multicast Commands
• DVMRP Commands
• PIM Commands
• Internet Group Message Protocol (IGMP) Commands
• IGMP Proxy Commands
• IPv6 Multicast Forwarder Commands
• IPv6 PIM Commands
• IPv6 MLD Commands

3
ProSAFE M7100 Managed Switches
(continued) (continued) (continued) (continued)
• IPv6 MLD-Proxy Commands
• PoE Commands
• Priority-Based Flow Control Commands
• Energy Detect Mode Commands
In addition, this revision includes multiple individual command
additions, command changes, and command removals.
202-11166-02 1.0 February 2013 Updated document.
202-11166-01 1.0 October 2012 First publication.

4
Contents
Chapter 1 Use the Command-Line Interface
Command Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Command Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Common Parameter Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Slot/Port Naming Convention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Using a Command’s “No” Form. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Managed Switch Modules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Command Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Special Command-Mode Independent Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Command Completion and Abbreviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
CLI Error Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
CLI Line-Editing Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Using CLI Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Chapter 2 Switching Commands
Port Configuration Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Loopback Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Spanning Tree Protocol (STP) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
Double VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Voice VLAN Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63
Provisioning (IEEE 802.1p) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
GARP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66
GVRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68
GMRP Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70
Alternative Store and Forward Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72
Flow Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73
Port-Channel/LAG (802.3ad) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75
Multichassis LAG Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92
Port Mirroring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
DHCP L2 Relay Agent Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
DHCP Client Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
IGMP Snooping Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
IGMP Snooping Querier Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
MLD Snooping Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
MLD Snooping Querier Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
LLDP (802.1AB) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
LLDP-MED Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

5
ProSAFE M7100 Managed Switches
MAC Database Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
ISDP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
Chapter 3 Multicast VLAN Registration (MVR)
About MVR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
MVR Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Chapter 4 Routing Commands
Address Resolution Protocol (ARP) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172
IP Routing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
Router Discovery Protocol Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Virtual LAN Routing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198
Virtual Router Redundancy Protocol Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199
DHCP and BOOTP Relay Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208
IP Helper Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210
IP Event Dampening Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214
ICMP Throttling Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216
Chapter 5 Quality of Service (QoS) Commands
Class of Service (CoS) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
Differentiated Services (DiffServ) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
DiffServ Class Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
DiffServ Policy Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237
DiffServ Service Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
DiffServ Show Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244
MAC Access Control List (ACL) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
IP Access Control List (ACL) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254
IPv6 Access Control List (ACL) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265
Time Range Commands for Time-Based ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269
AutoVoIP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272
iSCSI Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276
Chapter 6 Security Commands
Private VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283
Protected Ports Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
Private Group Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289
Port-Based Network Access Control Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
802.1X Supplicant Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305
Storm-Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307
Static MAC Filtering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318
Dynamic ARP Inspection Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 322
DHCP Snooping Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329
DHCPv6 Snooping Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 338
Port Security Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348
Denial of Service Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352

6
ProSAFE M7100 Managed Switches
Chapter 7 Utility Commands
Auto Install Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364
Dual Image Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367
System Information and Statistics Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 368
Logging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388
Email Alerting and Mail Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394
System Utility and Clear Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 401
Simple Network Time Protocol (SNTP) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . 414
DHCP Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422
DNS Client Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435
Packet Capture Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 440
Serviceability Packet Tracing Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 443
Cable Test Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468
sFlow Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468
Software License Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473
IP Address Conflict Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475
Link Local Protocol Filtering Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475
RMON Stats and History Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477
RFC 2819 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477
RFC 3273 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477
RFC 3434 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478
UDLD Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483
USB commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486
MBUF Utilization Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488
Full Memory Dump Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 490
Chapter 8 Management Commands
Configuring the Switch Management CPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 494
Network Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496
Console Port Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499
Telnet Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 502
Secure Shell (SSH) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 506
Management Security Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 509
Hypertext Transfer Protocol (HTTP) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . 510
Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 516
User Account Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517
SNMP Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 541
RADIUS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 552
TACACS+ Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 565
Configuration Scripting Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 570
Pre-Login Banner and System Prompt Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 572
Switch Database Management (SDM) Templates . . . . . . . . . . . . . . . . . . . . . . . . . . 574
IPv6 Management Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 575
Terminal Display Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 580

7
ProSAFE M7100 Managed Switches
Chapter 9 Green Ethernet Commands
Energy Efficient Ethernet (EEE) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 583
Chapter 10 Log Messages
Core . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 591
Utilities. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592
Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 595
Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 599
QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 605
Routing and IPv6 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 606
Multicast. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 609
Stacking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 611
Technologies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 612
O/S Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 614
Command List

8
1
1. Use the Command-Line Interface
The command-line interface (CLI) is a text-based way to manage and monitor the system. You can
access the CLI by using a direct serial connection or by using a remote logical connection with telnet
or SSH.
This chapter describes the CLI syntax, conventions, and modes. It contains the following sections:
• Command Syntax
• Command Conventions
• Common Parameter Values
• Slot/Port Naming Convention
• Using a Command’s “No” Form
• Managed Switch Modules
• Command Modes
• Special Command-Mode Independent Commands
• Command Completion and Abbreviation
• CLI Error Messages
• CLI Line-Editing Conventions
• Using CLI Help
• Accessing the CLI

Use the Command-Line Interface
9
ProSAFE M7100 Managed Switches
Command Syntax
A command is one or more words that might be followed by one or more parameters. Parameters
can be required or optional values.
Some commands, such as show network and clear vlan, do not require parameters. Other
commands, such as network parms, require that you supply a value after the command. You
must type the parameter values in a specific order, and optional parameters follow required
parameters. The following example describes the network parms command syntax:
• network parms is the command name.
• <ipaddr>and <netmask>are parameters and represent required values that you must
enter after you type the command keywords.
• [gateway]is an optional keyword, so you are not required to enter a value in place of the
keyword.
The Command Line Reference lists each command by the command name and provides a brief
description of the command. Each command reference also contains the following information:
• Format shows the command keywords and the required and optional parameters.
• Mode identifies the command mode you must be in to access the command.
• Default shows the default value, if any, of a configurable setting on the device.
The show commands also contain a description of the information that the command shows.
Command Conventions
In this document, the command name and keywords are noted in the following ways:
• In descriptive text:
Command names in bold font. Keywords are in bold font. Parameters (which are also
referred to as arguments) are in italic font and placed between angle brackets (<>). You
must replace the parameter name with an appropriate value, which might be a name or
number. Parameters are order-dependent.
• In tables describing the command format, mode, and, if applicable, default:
Command names in regular font. Keywords are in regular font. Parameters are in italic
font and placed between angle brackets (<>). You must replace the parameter name with an
appropriate value, which might be a name or number. Parameters are order-dependent.
The parameters for a command might include mandatory values, optional values, or keyword
choices. Table 1 describes the conventions this document uses to distinguish between value
types.
Format network parms <ipaddr> <netmask> [gateway]

Use the Command-Line Interface
10
ProSAFE M7100 Managed Switches
Common Parameter Values
Parameter values might be names (strings) or numbers. To use spaces as part of a name
parameter, enclose the name value in double quotes. For example, the expression “System Name
with Spaces” forces the system to accept the spaces. Empty strings (““) are not valid
user-defined strings. Table 2 describes common parameter values and value formatting.
Table 1. Parameter Conventions
Symbol Example Description
<> angle brackets
<value>
Indicates that you must enter a value in place of the brackets
and text inside them.
[] square brackets [<value>] Indicates an optional parameter that you can enter in place
of the brackets and text inside them.
{} curly braces {choice1 |
choice2} Indicates that you must select a keyword from the list of choices.
| Vertical bars choice1 | choice2 Separates the mutually exclusive choices.
[{}] Braces within
square brackets
[{choice1 |
choice2}] Indicates a choice within an optional element.
Table 2. Parameter Descriptions
Parameter Description
ipaddr This parameter is a valid IP address. You can enter the IP address in the following formats:
a(32 bits)
a.b (8.24 bits)
a.b.c (8.8.16 bits)
a.b.c.d (8.8.8.8)
In addition to these formats, the CLI accepts decimal, hexadecimal, and octal formats through
the following input formats (where n is any valid hexadecimal, octal, or decimal number):
0xn (CLI assumes hexadecimal format)
0n (CLI assumes octal format with leading zeros)
n(CLI assumes decimal format)
ipv6-address FE80:0000:0000:0000:020F:24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:FEBF:DBCB, or
FE80::20F24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:128:141:49:32
For more information, refer to RFC 3513.
Interface or
slot/port
Valid slot and port number separated by forward slashes. For example, 0/1 represents slot
number 0 and port numb er1.

Use the Command-Line Interface
11
ProSAFE M7100 Managed Switches
Slot/Port Naming Convention
Managed switch software references physical entities such as cards and ports by using a
slot/port naming convention. The software also uses this convention to identify certain logical
entities, such as Port-Channel interfaces.
The slot number has two uses. In the case of physical ports, it identifies the card containing the
ports. In the case of logical and CPU ports it also identifies the type of interface or port.
The port identifies the specific physical port or logical interface being managed on a given slot.
Note: In the CLI, loopback and tunnel interfaces do not use the slot/port
format. To specify a loopback interface, you use the loopback ID. To
specify a tunnel interface, you use the tunnel ID.
Logical Interface Represents a logical slot and port number. This is applicable in the case of a port-channel (LAG).
You can use the logical slot/port to configure the port-channel.
Character strings Use double quotation marks to identify character strings, for example, “System Name with
Spaces”. An empty string (“”) is not valid.
Table 3. Type of Slots
Slot Type Description
Physical slot numbers Physical slot numbers begin with zero, and are allocated up to the maximum number
of physical slots.
Logical slot numbers Logical slots immediately follow physical slots and identify port-channel (LAG) or
router interfaces.
CPU slot numbers The CPU slots immediately follow the logical slots.
Table 4. Type of Ports
Port Type Description
Physical Ports The physical ports for each slot are numbered sequentially starting from zero.
Logical Interfaces Port-channel or link aggregation group (LAG) interfaces are logical interfaces that
are only used for bridging functions.
VLAN routing interfaces are only used for routing functions.
Loopback interfaces are logical interfaces that are always up.
Tunnel interfaces are logical point-to-point links that carry encapsulated packets.
CPU ports CPU ports are handled by the driver as one or more physical entities located on
physical slots.
Table 2. Parameter Descriptions (continued)
Parameter Description

Use the Command-Line Interface
12
ProSAFE M7100 Managed Switches
Using a Command’s “No” Form
The no keyword is a specific form of an existing command and does not represent a new or
distinct command. Almost every configuration command has a no form. In general, use the no
form to reverse the action of a command or reset a value back to the default. For example, the no
shutdown configuration command reverses the shutdown of an interface. Use the command
without the keyword no to reenable a disabled feature or to enable a feature that is disabled by
default. Only the configuration commands are available in the no form.
Managed Switch Modules
Managed switch software consists of flexible modules that can be applied in various combinations
to develop advanced Layer 2/3/4+ products. The commands and command modes available on
your switch depend on the installed modules. Additionally, for some show commands, the output
fields might change based on the modules included in the software.
The software suite includes the following modules:
• Switching (Layer 2)
• Routing (Layer 3)
• IPv6—IPv6 routing
• Multicast
• Quality of Service
• Management (CLI, web UI, and SNMP)
• IPv6 Management—Allows management of the device through an IPv6 through an IPv6
address without requiring the IPv6 Routing package in the system. The management address
can be associated with the network port (front-panel switch ports) and a routine interface
(port or VLAN).
• Stacking
Not all modules are available for all platforms or software releases.
Command Modes
The CLI groups commands into modes according to the command function. Each of the command
modes supports specific software commands. The commands in one mode are not available until
you switch to that particular mode, except for the User EXEC mode commands. You can execute
the User EXEC mode commands in the Privileged EXEC mode.
The command prompt changes in each command mode to help you identify the current mode.
Table 5 describes the command modes and the prompts visible in that mode.

Use the Command-Line Interface
13
ProSAFE M7100 Managed Switches
Note: The command modes available on your switch depend on the software
modules that are installed. For example, a switch that does not support
BGPv4 does not have the Router BGPv4 Command Mode.
Table 5. CLI Command Modes
Command Mode Prompt Mode Description
User EXEC Switch> Contains a limited set of commands to view
basic system information.
Privileged EXEC Switch# Allows you to issue any EXEC command, enter
the VLAN mode, or enter the Global
Configuration mode.
Global Config Switch (Config)# Groups general setup commands and permits
you to make modifications to the running
configuration.
VLAN Config Switch (Vlan)# Groups all the VLAN commands.
Interface Config Switch (Interface <slot/port>)#
Switch (Interface Loopback <id>)#
Switch (Interface Tunnel <id>)#
Manages the operation of an interface and
provides access to the router interface
configuration commands.
Use this mode to set up a physical port for a
specific logical connection operation.
Line Config Switch (line)# Contains commands to configure outbound
telnet settings and console interface settings.
Policy Map Config Switch (Config-policy-map)# Contains the QoS Policy-Map configuration
commands.
Policy Class Config Switch (Config-policy-class-map)# Consists of class creation, deletion, and
matching commands. The class match
commands specify Layer 2, Layer 3, and
general match criteria.
Class-Map Config Switch (Config-class-map)# Contains the QoS class map configuration
commands for IPv4.
Ipv6_Class-Map
Config
Switch (Config-class-map)# Contains the QoS class map configuration
commands for IPv6.
MAC Access-list
Config
Switch (Config-mac-access-list)# Allows you to create a MAC Access-List and to
enter the mode containing MAC Access-List
configuration commands.
TACACS Config Switch (Tacacs)# Contains commands to configure properties
for the TACACS servers.
DHCP Pool Config Switch (Config dhcp-pool)# Contains the DHCP server IP address pool
configuration commands.
Stack Global Config
Mode
Switch (Config stack)# Allows you to access the Stack Global Config
Mode.

Use the Command-Line Interface
14
ProSAFE M7100 Managed Switches
Table 6 explains how to enter or exit each mode.
ARP Access-List
Config Mode
Switch (Config-arp-access-list)# Contains commands to add ARP ACL rules in an
ARP Access List.
VPC Domain Config
Mode
Switch (Config-VPC 1)# Contains the VPC domain configuration
commands.
Table 6. CLI Mode Access and Exit
Command Mode Access Method Exit or Access Previous Mode
User EXEC This is the first level of access. To exit, enter logout.
Privileged EXEC From the User EXEC mode, enter
enable.
To exit to the User EXEC mode, enter exit or press
Ctrl-Z.
Global Config From the Privileged EXEC mode,
enter configure.
To exit to the Privileged EXEC mode, enter exit, or
press Ctrl-Z.
VLAN Config From the Privileged EXEC mode,
enter vlan database.
To exit to the Privileged EXEC mode, enter exit or
press Ctrl-Z.
Interface Config From the Global Config mode, enter
interface <slot/port>or
interface loopback <id>or
interface tunnel <id>
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
Line Config From the Global Config mode, enter
lineconfig.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-ZZ.
Policy-Map
Config
From the Global Config mode, enter
policy-map <name>.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
Policy-Class-Map
Config
From the Policy Map mode enter
class.
To exit to the Policy Map mode, enter exit. To return
to the Privileged EXEC mode, enter Ctrl-Z.
Class-Map
Config
From the Global Config mode, enter
class-map, and specify the
optional keyword ipv4 to specify
the Layer 3 protocol for this class.
See class-map on page 228 for more
information.
To exit to the Global Config mode, enter exitt. To
return to the Privileged EXEC mode, enter Ctrl-ZZ.
Ipv6-Class-Map
Config
From the Global Config mode, enter
class-map and specify the
optional keyword ipv6 to specify
the Layer 3 protocol for this class.
See class-map on page 228 for more
information.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
MAC Access-list
Config
From the Global Config mode, enter
mac access-list extended
<name>.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
Table 5. CLI Command Modes (continued)
Command Mode Prompt Mode Description

Use the Command-Line Interface
15
ProSAFE M7100 Managed Switches
Special Command-Mode Independent Commands
The following commands are special commands that do not belong to a particular command
mode and that do not let you configure a specific feature.
interface
Use this command to switch from one interface to another interface while you can remain in
Interface Config mode and do not need to go to Global Config mode.
For single interfaces, valid interfaces you can switch to are physical interfaces, port-channel
interfaces, VLAN routing interfaces, loopback interfaces, and tunnel interfaces.
For ranges of interfaces, valid interfaces you can switch to are physical interfaces, port-channel
interfaces, and VLAN routing interfaces.
do
For all the commands that are supported in Privileged Exec mode, the do command lets you
execute any of these commands in Global Config mode, Interface Config mode, Interface Config
mode, VLAN Config mode, or Routing Config mode.
TACACS Config From the Global Config mode, enter
tacacs-server host
<ip-addr>, in which <ip-addr>
is the IP address of the TACACS
server on your network.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
DHCP Pool
Config
From the Global Config mode, enter
ip dhcp pool <pool-name>.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
Stack Global Config
Mode
From the Global Config mode, enter
the stack command.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
ARP Access-List
Config Mode
From the Global Config mode, enter
the arp access-list command.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
VPC Domain Config
Mode
From the Global Config mode, enter
the vpc domain command.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
Format interface {<interface-range> | lag {<lag-intf-num>} |loopback
{<loopback-id>} |tunnel {<tunnel-id>} | vlan {<vlan-id>}}
Mode Interface Config
Global Config
Table 6. CLI Mode Access and Exit (continued)
Command Mode Access Method Exit or Access Previous Mode

Use the Command-Line Interface
16
ProSAFE M7100 Managed Switches
In other words, to execute a command that is normally supported only in Privileged EXEC mode,
you do not need to switch to Privileged EXEC mode as long as you place the do command before
the command that is normally supported only in Privileged EXEC mode.
show
This command lets you execute a show command that is normally supported only in Privileged
EXEC mode, Global Config mode, Interface Config mode, VLAN config mode, or Routing Config
mode, in any other of these five modes.
For example, to execute a show command that is normally supported only in Interface Config
mode, you do not need to switch to Interface Config mode as long as you place the show
command before the show command that is normally supported only in Interface Config mode.
Command Completion and Abbreviation
Command completion finishes spelling the command when you type enough letters of a
command to uniquely identify the command keyword. Once you have entered enough letters,
press the SPACEBAR or TAB key to complete the word.
Command abbreviation allows you to execute a command when you have entered there are
enough letters to uniquely identify the command. You must enter all of the required keywords
and parameters before you enter the command.
Format do <command in Privileged EXEC mode>
Mode Privileged EXEC
Global Config
Interface Config
VLAN Config
Routing Config
Format show <show command from any other config mode>
Mode Privileged EXEC
Global Config
Interface Config
VLAN Config
Routing Config

Use the Command-Line Interface
17
ProSAFE M7100 Managed Switches
CLI Error Messages
If you enter a command and the system is unable to execute it, an error message appears. Table 7
describes the most common CLI error messages.
CLI Line-Editing Conventions
Table 8 describes the key combinations you can use to edit commands or increase the speed of
command entry. You can access this list from the CLI by entering help from the User or
Privileged EXEC modes.
Table 7. CLI Error Messages
Message Text Description
% Invalid input detected at '^' marker. Indicates that you entered an incorrect or unavailable command. The
carat (^) shows where the invalid text is detected. This message also
appears if any of the parameters or values are not recognized.
Command not found / Incomplete
command. Use a question mark (?) to list
commands.
Indicates that you did not enter the required keywords or values.
Ambiguous command Indicates that you did not enter enough letters to uniquely identify
the command.
Table 8. CLI Editing Conventions
Key Sequence Description
DEL or Backspace Delete previous character
Ctrl-A Go to beginning of line
Ctrl-E Go to end of line
Ctrl-F Go forward one character
Ctrl-B Go backward one character
Ctrl-D Delete current character
Ctrl-U, X Delete to beginning of line
Ctrl-K Delete to end of line
Ctrl-W Delete previous word
Ctrl-T Transpose previous character
Ctrl-P Go to previous line in history buffer
Ctrl-R Rewrites or pastes the line
Ctrl-N Go to next line in history buffer

Use the Command-Line Interface
18
ProSAFE M7100 Managed Switches
Using CLI Help
Enter a question mark (?) at the command prompt to display the commands available in the
current mode.
(switch) >?
enable Enter into user privilege mode.
help Display help for various special keys.
logout Exit this session. Any unsaved changes are lost.
ping Send ICMP echo packets to a specified IP address.
quit Exit this session. Any unsaved changes are lost.
show Display Switch Options and Settings.
telnet Telnet to a remote host.
Enter a question mark (?) after each word you enter to display available command keywords or
parameters.
(switch) #network ?
javamode Enable/Disable.
mgmt_vlan Configure the Management VLAN ID of the switch.
parms Configure Network Parameters of the router.
protocol Select DHCP, BootP, or None as the network config
protocol.
If the help output shows a parameter in angle brackets, you must replace the parameter with a
value.
(switch) #network parms ?
<ipaddr> Enter the IP address.
Ctrl-Y Prints last deleted character
Ctrl-Q Enables serial flow
Ctrl-S Disables serial flow
Ctrl-Z Return to root command prompt
Tab, <SPACE> Command-line completion
Exit Go to next lower command prompt
? List available commands, keywords, or parameters
Table 8. CLI Editing Conventions (continued)
Key Sequence Description

Use the Command-Line Interface
19
ProSAFE M7100 Managed Switches
If there are no additional command keywords or parameters, or if more parameters are optional,
the following message appears in the output:
<cr> Press Enter to execute the command
You can also enter a question mark (?) after typing one or more characters of a word to list the
available command or parameters that begin with the letters, as shown in the following example:
(switch) #show m?
mac-addr-table mac-address-table monitor
Accessing the CLI
You can access the CLI by using a direct console connection or by using a telnet or SSH
connection from a remote management host.
For the initial connection, you must use a direct connection to the console port. You cannot
access the system remotely until the system has an IP address, subnet mask, and default
gateway. You can set the network configuration information manually, or you can configure the
system to accept these settings from a BOOTP or DHCP server on your network. For more
information, see Network Interface Commands on page 496.

20
2
2. Switching Commands
This chapter describes the switching commands available in the managed switch CLI.
This chapter contains the following sections:
• Port Configuration Commands
• Loopback Interface Commands
• Spanning Tree Protocol (STP) Commands
• VLAN Commands
• Double VLAN Commands
• Voice VLAN Commands
• Provisioning (IEEE 802.1p) Commands
• GARP Commands
• GVRP Commands
• GMRP Commands
• Alternative Store and Forward Commands
• Flow Control Commands
• Port-Channel/LAG (802.3ad) Commands
• Multichassis LAG Commands
• Port Mirroring Commands
• DHCP L2 Relay Agent Commands
• DHCP Client Commands
• IGMP Snooping Configuration Commands
• IGMP Snooping Querier Commands
• MLD Snooping Commands
• MLD Snooping Querier Commands
• LLDP (802.1AB) Commands
• LLDP-MED Commands
• MAC Database Commands
• ISDP Commands