NETGEAR ProSAFE M7100-24X User manual

350 East Plumeria Drive
San Jose, CA 95134
USA
October 2012
202-1xxxx-01
1.0
ProSafe Managed Switch
Command Line Interface (CLI)
User Manual
10.0.1
M7100-24X
M4100-D10-POE
M4100-26-POE
M4100-50-POE
M4100-D12G
M4100-26G
M4100-50G
M4100-26G-POE
M4100-48G-POE+

2
ProSafe M4100 Series Managed Switches
Support
Thank you for choosing NETGEAR.
After installing your device, locate the serial number on the label of your product and use it to register your product
at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support.
NETGEAR recommends registering your product through the NETGEAR web site. For product updates and web
support, visit http://support.netgear.com.
Phone (US & Canada only): 1-888-NETGEAR.
Phone (Other Countries): Check the list of phone numbers at
http://support.netgear.com/general/contact/default.aspx.
NETGEAR recommends that you use only the official NETGEAR support resources.
Trademarks
NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of
NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change
without notice. Other brand and product names are registered trademarks or trademarks of their respective
holders. © NETGEAR, Inc. All rights reserved.
Revision History
Publication Part Number Version Publish Date Comments
202-1xxxx-01 1.0 October 2012 First publication

3
Contents
Chapter 1 Using the Command-Line Interface
Licensing and Command Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Command Syntax. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Command Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Common Parameter Values. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Unit/Slot/Port Naming Convention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Using a Command’s “No” Form . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Managed Switch Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Command Modes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Command Completion and Abbreviation . . . . . . . . . . . . . . . . . . . . . . . . . .17
CLI Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
CLI Line-Editing Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Using CLI Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Accessing the CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Chapter 2 Switching Commands
Port Configuration Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Loopback Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Spanning Tree Protocol (STP) Commands . . . . . . . . . . . . . . . . . . . . . . . .29
VLAN Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
Double VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
Voice VLAN Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
Provisioning (IEEE 802.1p) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . .64
Protected Ports Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
Private VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
GARP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70
GVRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72
GMRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74
Port-Based Network Access Control Commands. . . . . . . . . . . . . . . . . . . .76
802.1X Supplicant Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90
Storm-Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92
Flow Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102
Port-Channel/LAG (802.3ad) Commands . . . . . . . . . . . . . . . . . . . . . . . .103
Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119
Static MAC Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121
DHCP L2 Relay Agent Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .125
DHCP Client Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129
DHCP Snooping Configuration Commands . . . . . . . . . . . . . . . . . . . . . . .130
Dynamic ARP Inspection Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .139

4
ProSafe M4100 Series Managed Switches
IGMP Snooping Configuration Commands . . . . . . . . . . . . . . . . . . . . . . .146
IGMP Snooping Querier Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .154
MLD Snooping Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .158
MLD Snooping Querier Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . .164
set mld querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165
set mld querier query_interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165
set mld querier timer expiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .166
set mld querier election participate. . . . . . . . . . . . . . . . . . . . . . . . . . . .166
show mldsnooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .167
Port Security Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .168
LLDP (802.1AB) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .172
LLDP-MED Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .180
Denial of Service Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190
MAC Database Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .200
ISDP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .201
Priority-Based Flow Control Commands . . . . . . . . . . . . . . . . . . . . . . . . .207
Chapter 3 Multicast VLAN Registration (MVR)
About MVR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .209
MVR Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .209
Chapter 4 Routing Commands
Address Resolution Protocol (ARP) Commands . . . . . . . . . . . . . . . . . . .217
IP Routing Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .223
Router Discovery Protocol Commands . . . . . . . . . . . . . . . . . . . . . . . . . .240
Virtual LAN Routing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .243
Virtual Router Redundancy Protocol Commands. . . . . . . . . . . . . . . . . . .244
DHCP and BOOTP Relay Commands. . . . . . . . . . . . . . . . . . . . . . . . . . .253
IP Helper Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .255
Open Shortest Path First (OSPF) Commands . . . . . . . . . . . . . . . . . . . . .259
OSPF Graceful Restart Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . .300
nsf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .301
nsf restart-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .301
nsf helper . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .302
nsf helper disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .303
nsf [ietf] helper strict-lsa-checking . . . . . . . . . . . . . . . . . . . . . . . . . . . .303
OSPF Interface Flap Dampening Commands . . . . . . . . . . . . . . . . . . . . .305
Routing Information Protocol (RIP) Commands. . . . . . . . . . . . . . . . . . . .307
ICMP Throttling Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .314
Chapter 5 IP Multicast Commands
Multicast Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .317
DVMRP Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .322
PIM Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .327
Internet Group Message Protocol (IGMP) Commands . . . . . . . . . . . . . .338
IGMP Proxy Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .345

5
ProSafe M4100 Series Managed Switches
Chapter 6 IPv6 Commands
Tunnel Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .351
IPv6 Routing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .353
OSPFv3 Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .376
OSPFv3 Graceful Restart Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .407
DHCPv6 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .409
Chapter 7 IPv6 Multicast Commands
IPv6 Multicast Forwarder Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .417
IPv6 PIM Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .420
IPv6 MLD Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .427
IPv6 MLD-Proxy Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .433
Chapter 8 Quality of Service (QoS) Commands
Class of Service (CoS) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .439
Differentiated Services (DiffServ) Commands . . . . . . . . . . . . . . . . . . . . .447
DiffServ Class Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .448
DiffServ Policy Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .457
DiffServ Service Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .462
DiffServ Show Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .463
MAC Access Control List (ACL) Commands . . . . . . . . . . . . . . . . . . . . . .469
IP Access Control List (ACL) Commands. . . . . . . . . . . . . . . . . . . . . . . . .473
IPv6 Access Control List (ACL) Commands. . . . . . . . . . . . . . . . . . . . . . .480
Time Range Commands for Time-Based ACLs. . . . . . . . . . . . . . . . . . . .484
AutoVOIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486
iSCSI Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .490
Chapter 9 Power over Ethernet (PoE) Commands
About PoE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496
PoE Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .497
Chapter 10 Utility Commands
Auto Install Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .508
Dual Image Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .510
System Information and Statistics Commands. . . . . . . . . . . . . . . . . . . . .512
Logging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .528
Email Alerting and Mail Server Commands . . . . . . . . . . . . . . . . . . . . . . .534
System Utility and Clear Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .540
Simple Network Time Protocol (SNTP) Commands. . . . . . . . . . . . . . . . .550
DHCP Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .557
DNS Client Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .569
Packet Capture Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .573
Serviceability Packet Tracing Commands . . . . . . . . . . . . . . . . . . . . . . . .576
Cable Test Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .595
sFlow Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .595

6
ProSafe M4100 Series Managed Switches
Software License Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .600
IP Address Conflict Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .601
Link Local Protocol Filtering Commands . . . . . . . . . . . . . . . . . . . . . . . . .602
RMON Stats and History Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . .603
UDLD Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .609
Chapter 11 Management Commands
Configuring the Switch Management CPU. . . . . . . . . . . . . . . . . . . . . . . .614
Network Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .616
Console Port Access Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .619
Telnet Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621
Secure Shell (SSH) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .626
Management Security Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .629
Hypertext Transfer Protocol (HTTP) Commands . . . . . . . . . . . . . . . . . . .630
Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .637
User Account Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .637
SNMP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .661
RADIUS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .672
TACACS+ Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .684
Configuration Scripting Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .689
Pre-Login Banner and System Prompt Commands. . . . . . . . . . . . . . . . .691
Switch Database Management (SDM) Templates. . . . . . . . . . . . . . . . . .692
IPv6 Management Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .694
Chapter 12 Log Messages
Core . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .700
Utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .702
Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .704
Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .708
QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .714
Routing/IPv6 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .715
Multicast. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .718
Stacking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .720
Technologies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .721
O/S Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .723
Chapter 13 Captive Portal Commands
Captive Portal Global Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .725
Captive Portal Configuration Commands. . . . . . . . . . . . . . . . . . . . . . . . .729
Captive Portal Status Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .735
Captive Portal Client Connection Commands . . . . . . . . . . . . . . . . . . . . .739
Captive Portal Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .743
Captive Portal Local User Commands. . . . . . . . . . . . . . . . . . . . . . . . . . .744
Captive Portal User Group Commands . . . . . . . . . . . . . . . . . . . . . . . . . .750
Chapter 14 Command List

7
ProSafe M4100 Series Managed Switches
Index

8
1
1. Using the Command-Line Interface
The command-line interface (CLI) is a text-based way to manage and monitor the system.
You can access the CLI by using a direct serial connection or by using a remote logical
connection with telnet or SSH.
This chapter describes the CLI syntax, conventions, and modes. It contains the following
sections:
• Licensing and Command Support
• Command Syntax
• Command Conventions
• Common Parameter Values
• Unit/Slot/Port Naming Convention
• Using a Command’s “No” Form
• Managed Switch Modules
• Command Modes
• Command Completion and Abbreviation
• CLI Error Messages
• CLI Line-Editing Conventions
• Using CLI Help
• Accessing the CLI
Licensing and Command Support
As shown in the following table, some command groups or commands require a license and
some are supported on particular switch models. For those requiring a license, license keys
are available from your VAR or NETGEAR authorized e-commerce portal. License activation
is described in the Software Setup Manual.

Using the Command-Line Interface
9
ProSafe M4100 Series Managed Switches
Command Group or Command M4100 M7100
Non-Stop Forwarding Commands Supported Supported
Router Discovery Protocol Commands Not supported Not supported
Virtual Router Redundancy Protocol Commands Not supported Not supported
Open Shortest Path First (OSPF) Commands Not supported Not supported
OSPF Graceful Restart Commands Not supported Not supported
Routing Information Protocol (RIP) Commands Not supported Not supported
Tunnel Interface Commands Not supported Not supported
IPv6 Routing Commands Not supported Not supported
OSPFv3 Commands Not supported Not supported
OSPFv3 Graceful Restart Commands Not supported Not supported
DHCPv6 Commands Not supported Not supported
Multicast Commands Not supported Not supported
DVMRP Commands Not supported Not supported
PIM Commands Not supported Not supported
Internet Group Message Protocol (IGMP) Commands Not supported Not supported
IGMP Proxy Commands Not supported Not supported
IPv6 Multicast Forwarder Commands Not supported Not supported
IPv6 PIM Commands Not supported Not supported
IPv6 MLD Commands Not supported Not supported
IPv6 MLD-Proxy Commands Not supported Not supported
PoE Commands Supported on PoE
models only Supported on PoE models only
MVR Commands Supported Supported
Link Local Protocol Filtering Commands Not supported Supported
Priority-Based Flow Control Commands Not Supported Not Supported
Captive Portal Commands Supported Supported
cos-queue random-detect Supported Supported
no cos-queue random-detect Supported Supported
random-detect exponential weighting-constant Supported Supported
no random-detect exponential weighting-constant Supported Supported
random-detect queue-parms Supported Supported
no random-detect queue-parms Supported Supported

Using the Command-Line Interface
10
ProSafe M4100 Series Managed Switches
Command Syntax
A command is one or more words that might be followed by one or more parameters.
Parameters can be required or optional values.
Some commands, such as show network or clear vlan, do not require parameters.
Other commands, such as network parms, require that you supply a value after the
command. You must type the parameter values in a specific order, and optional parameters
follow required parameters. The following example describes the network parms
command syntax:
• network parms is the command name.
• <ipaddr> and <netmask> are parameters and represent required values that you must
enter after you type the command keywords.
• [gateway] is an optional parameter, so you are not required to enter a value in place of
the parameter.
The New Template User Manual lists each command by the command name and provides a
brief description of the command. Each command reference also contains the following
information:
• Format shows the command keywords and the required and optional parameters.
• Mode identifies the command mode you must be in to access the command.
• Default shows the default value, if any, of a configurable setting on the device.
The show commands also contain a description of the information that the command shows.
Command Conventions
In this document, the command name is in bold font. Parameters are in italic font. You
must replace the parameter name with an appropriate value, which might be a name or
number. Parameters are order dependent.
The parameters for a command might include mandatory values, optional values, or keyword
choices. Table 1 describes the conventions this document uses to distinguish between value
types.
Format network parms <ipaddr> <netmask> [gateway]
Table 1. Parameter Conventions
Symbol Example Description
<> angle brackets <value> Indicates that you must enter a value in place of the
brackets and text inside them.
[] square brackets [value] Indicates an optional parameter that you can enter in
place of the brackets and text inside them.

Using the Command-Line Interface
11
ProSafe M4100 Series Managed Switches
Common Parameter Values
Parameter values might be names (strings) or numbers. To use spaces as part of a name
parameter, enclose the name value in double quotes. For example, the expression “System
Name with Spaces” forces the system to accept the spaces. Empty strings (““) are not valid
user-defined strings. Table 2 describes common parameter values and value formatting.
Table 2. Parameter Descriptions
a (32 bits)
a.b (8.24 bits)
a.b.c (8.8.16 bits)
0xn (CLI assumes hexadecimal format)
0n (CLI assumes octal format with leading zeros)
{} curly braces {choice1 |
choice2} Indicates that you must select a parameter from the list of
choices.
| Vertical bars choice1 | choice2 Separates the mutually exclusive choices.
[{}] Braces within
square brackets
[{choice1 |
choice2}] Indicates a choice within an optional element.
Parameter Description
ipaddr This parameter is a valid IP address. You can enter the IP address in the following formats:
a.b.c.d (8.8.8.8)
In addition to these formats, the CLI accepts decimal, hexadecimal and octal formats
through the following input formats (where nis any valid hexadecimal, octal or decimal
number):
n (CLI assumes decimal format)
ipv6-address FE80:0000:0000:0000:020F:24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:FEBF:DBCB, or
FE80::20F24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:128:141:49:32
For additional information, refer to RFC 3513.
Interface or
unit/slot/port Valid slot and port number separated by forward slashes. For example, 0/1 represents slot number 0 and port number 1.
Logical Interface Represents a logical slot and port number. This is applicable in the case of a port-channel
(LAG). You can use the logical unit/slot/port to configure the port-channel.
Character strings Use double quotation marks to identify character strings, for example, “System Name with
Spaces”. An empty string (“”) is not valid.
Table 1. Parameter Conventions
Symbol Example Description

Using the Command-Line Interface
12
ProSafe M4100 Series Managed Switches
Unit/Slot/Port Naming Convention
Managed switch software references physical entities such as cards and ports by using a
unit/slot/port naming convention. The software also uses this convention to identify certain
logical entities, such as Port-Channel interfaces.
The slot number has two uses. In the case of physical ports, it identifies the card containing
the ports. In the case of logical and CPU ports it also identifies the type of interface or port.
Table 3. Type of Slots
The port identifies the specific physical port or logical interface being managed on a given
slot.
Table 4. Type of Ports
Note: In the CLI, loopback and tunnel interfaces do not use the
unit/slot/port format. To specify a loopback interface, you use the
loopback ID. To specify a tunnel interface, you use the tunnel ID.
Using a Command’s “No” Form
The no keyword is a specific form of an existing command and does not represent a new or
distinct command. Almost every configuration command has a no form. In general, use the
no form to reverse the action of a command or reset a value back to the default. For example,
Slot Type Description
Physical slot numbers Physical slot numbers begin with zero, and are allocated up to the maximum
number of physical slots.
Logical slot numbers Logical slots immediately follow physical slots and identify port-channel (LAG) or
router interfaces.
CPU slot numbers The CPU slots immediately follow the logical slots.
Port Type Description
Physical Ports The physical ports for each slot are numbered sequentially starting from zero.
Logical Interfaces Port-channel or Link Aggregation Group (LAG) interfaces are logical interfaces
that are only used for bridging functions.
VLAN routing interfaces are only used for routing functions.
Loopback interfaces are logical interfaces that are always up.
Tunnel interfaces are logical point-to-point links that carry encapsulated packets.
CPU ports CPU ports are handled by the driver as one or more physical entities located on
physical slots.

Using the Command-Line Interface
13
ProSafe M4100 Series Managed Switches
the no shutdown configuration command reverses the shutdown of an interface. Use the
command without the keyword no to re-enable a disabled feature or to enable a feature that
is disabled by default. Only the configuration commands are available in the no form.
Managed Switch Modules
Managed switch software consists of flexible modules that can be applied in various
combinations to develop advanced Layer 2/3/4+ products. The commands and command
modes available on your switch depend on the installed modules. Additionally, for some
show commands, the output fields might change based on the modules included in the
software.
The software suite includes the following modules:
• Switching (Layer 2)
• Routing (Layer 3)
• IPv6—IPv6 routing
• Multicast
• Quality of Service
• Management (CLI, Web UI, and SNMP)
• IPv6 Management—Allows management of the device through an IPv6 through an IPv6
address without requiring the IPv6 Routing package in the system. The management
address can be associated with the network port (front-panel switch ports) and a routine
interface (port or VLAN).
• Stacking
Not all modules are available for all platforms or software releases.
Command Modes
The CLI groups commands into modes according to the command function. Each of the
command modes supports specific software commands. The commands in one mode are not
available until you switch to that particular mode, with the exception of the User EXEC mode
commands. You can execute the User EXEC mode commands in the Privileged EXEC mode.
The command prompt changes in each command mode to help you identify the current
mode. Table 5 describes the command modes and the prompts visible in that mode.
Note: The command modes available on your switch depend on the
software modules that are installed. For example, a switch that does
not support BGPv4 does not have the Router BGPv4 Command
Mode.

Using the Command-Line Interface
14
ProSafe M4100 Series Managed Switches
Table 5. CLI Command Modes
Command Mode Prompt Mode Description
User EXEC Switch> Contains a limited set of commands to view
basic system information.
Privileged EXEC Switch# Allows you to issue any EXEC command, enter
the VLAN mode, or enter the Global
Configuration mode.
Global Config Switch (Config)# Groups general setup commands and permits
you to make modifications to the running
configuration.
VLAN Config Switch (Vlan)# Groups all the VLAN commands.
Interface Config Switch (Interface <unit/slot/port>)#
Switch (Interface Loopback <id>)#
Switch (Interface Tunnel <id>)#
Manages the operation of an interface and
provides access to the router interface
configuration commands.
Use this mode to set up a physical port for a
specific logical connection operation.
Line Config Switch (line)# Contains commands to configure outbound
telnet settings and console interface settings.
Policy Map
Config Switch (Config-policy-map)# Contains the QoS Policy-Map configuration commands.
Policy Class
Config Switch (Config-policy-class-map)# Consists of class creation, deletion, and matching commands. The class match
commands specify Layer 2, Layer 3, and
general match criteria.
Class Map Config Switch (Config-class-map)# Contains the QoS class map configuration
commands for IPv4.
Ipv6_Class-Map
Config Switch (Config-class-map)# Contains the QoS class map configuration commands for IPv6.
Router OSPF
Config Switch (Config-router)# Contains the OSPF configuration commands.
Router OSPFv3
Config Switch (Config rtr)# Contains the OSPFv3 configuration commands.
Router RIP Config Switch (Config-router)# Contains the RIP configuration commands.
MAC Access-list
Config Switch (Config-mac-access-list)# Allows you to create a MAC Access-List and to enter the mode containing MAC Access-List
configuration commands.
TACACS Config Switch (Tacacs)# Contains commands to configure properties for
the TACACS servers.
DHCP Pool
Config Switch (Config dhcp-pool)# Contains the DHCP server IP address pool configuration commands.

Using the Command-Line Interface
15
ProSafe M4100 Series Managed Switches
Table 6 explains how to enter or exit each mode.
DHCPv6 Pool
Config Switch (Config dhcp6-pool)# Contains the DHCPv6 server IPv6 address pool configuration commands.
Stack Global
Config Mode Switch (Config stack)# Allows you to access the Stack Global Config Mode.
ARP Access-List
Config Mode Switch (Config-arp-access-list)# Contains commands to add ARP ACL rules in an ARP Access List.
Table 6. CLI Mode Access and Exit
Command Mode Access Method Exit or Access Previous Mode
User EXEC This is the first level of access. To exit, enter logout.
Privileged EXEC From the User EXEC mode, enter
enable.To exit to the User EXEC mode, enter exit or press Ctrl-Z.
Global Config From the Privileged EXEC mode,
enter configure. To exit to the Privileged EXEC mode, enter exit, or press Ctrl-Z.
VLAN Config From the Privileged EXEC mode,
enter vlan database. To exit to the Privileged EXEC mode, enter exit, or press Ctrl-Z.
Interface Config From the Global Config mode,
enter
interface <unit/slot/port>
or interface loopback <id>
or interface tunnel <id>
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
Line Config From the Global Config mode,
enter
lineconfig.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
Policy-Map
Config From the Global Config mode, enter
policy-map <name> in.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
Policy-Class-Map
Config From the Policy Map mode enter class.To exit to the Policy Map mode, enter exit. To return to the Privileged EXEC mode, enter
Ctrl-Z.
Class-Map
Config From the Global Config mode, enter
class-map, and specify the
optional keyword ipv4 to specify
the Layer 3 protocol for this class.
See class-map on page 466 for
more information.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
Table 5. CLI Command Modes (Continued)
Command Mode Prompt Mode Description

Using the Command-Line Interface
16
ProSafe M4100 Series Managed Switches
Command Completion and Abbreviation
Command completion finishes spelling the command when you type enough letters of a
command to uniquely identify the command keyword. Once you have entered enough letters,
press the SPACEBAR or TAB key to complete the word.
Ipv6-Class-Map
Config From the Global Config mode, enter
class-map and specify the
optional keyword ipv6 to specify
the Layer 3 protocol for this class.
See class-map on page 466 for
more information.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
Router OSPF
Config From the Global Config mode, enter
router ospf.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
Router OSPFv3
Config From the Global Config mode, enter
ipv6 router ospf.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
Router RIP
Config From the Global Config mode, enter
router rip.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
MAC Access-list
Config From the Global Config mode, enter
mac access-list extended
<name>.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
TACACS Config From the Global Config mode,
enter tacacs-server host
<ip-addr>, where <ip-addr> is
the IP address of the TACACS
server on your network.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
DHCP Pool
Config From the Global Config mode, enter
ip dhcp pool <pool-name>.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
DHCPv6 Pool
Config From the Global Config mode, enter
ip dhcpv6 pool <pool-name>.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter
Ctrl-Z.
Stack Global
Config Mode From the Global Config mode, enter the stack command. To exit to the Global Config mode, enter the exit
command. To return to the Privileged EXEC
mode, enter Ctrl-Z.
ARP Access-List
Config Mode From the Global Config mode, enter the arp access-list
command.
To exit to the Global Config mode, enter the
exit command. To return to the Privileged
EXEC mode, enter Ctrl-Z.
Table 6. CLI Mode Access and Exit (Continued)
Command Mode Access Method Exit or Access Previous Mode

Using the Command-Line Interface
17
ProSafe M4100 Series Managed Switches
Command abbreviation allows you to execute a command when you have entered there are
enough letters to uniquely identify the command. You must enter all of the required keywords
and parameters before you enter the command.
CLI Error Messages
If you enter a command and the system is unable to execute it, an error message appears.
Table 7 describes the most common CLI error messages.
Table 7. CLI Error Messages
CLI Line-Editing Conventions
Table 8 describes the key combinations you can use to edit commands or increase the speed
of command entry. You can access this list from the CLI by entering help from the User or
Privileged EXEC modes.
Message Text Description
% Invalid input detected at '^' marker. Indicates that you entered an incorrect or unavailable command.
The carat (^) shows where the invalid text is detected. This
message also appears if any of the parameters or values are not
recognized.
Command not found / Incomplete
command. Use ? to list commands. Indicates that you did not enter the required keywords or values.
Ambiguous command Indicates that you did not enter enough letters to uniquely identify
the command.
Table 8. CLI Editing Conventions
Key Sequence Description
DEL or Backspace Delete previous character
Ctrl-A Go to beginning of line
Ctrl-E Go to end of line
Ctrl-F Go forward one character
Ctrl-B Go backward one character
Ctrl-D Delete current character
Ctrl-U, X Delete to beginning of line
Ctrl-K Delete to end of line
Ctrl-W Delete previous word
Ctrl-T Transpose previous character

Using the Command-Line Interface
18
ProSafe M4100 Series Managed Switches
Using CLI Help
Enter a question mark (?) at the command prompt to display the commands available in the
current mode.
(switch) >?
enable Enter into user privilege mode.
help Display help for various special keys.
logout Exit this session. Any unsaved changes are lost.
ping Send ICMP echo packets to a specified IP address.
quit Exit this session. Any unsaved changes are lost.
show Display Switch Options and Settings.
telnet Telnet to a remote host.
Enter a question mark (?) after each word you enter to display available command keywords
or parameters.
(switch) #network ?
javamode Enable/Disable.
mgmt_vlan Configure the Management VLAN ID of the switch.
parms Configure Network Parameters of the router.
protocol Select DHCP, BootP, or None as the network config
protocol.
If the help output shows a parameter in angle brackets, you must replace the parameter with
a value.
(switch) #network parms ?
<ipaddr> Enter the IP address.
Ctrl-P Go to previous line in history buffer
Ctrl-R Rewrites or pastes the line
Ctrl-N Go to next line in history buffer
Ctrl-Y Prints last deleted character
Ctrl-Q Enables serial flow
Ctrl-S Disables serial flow
Ctrl-Z Return to root command prompt
Tab, <SPACE> Command-line completion
Exit Go to next lower command prompt
? List available commands, keywords, or parameters
Table 8. CLI Editing Conventions (Continued)
Key Sequence Description

Using the Command-Line Interface
19
ProSafe M4100 Series Managed Switches
If there are no additional command keywords or parameters, or if additional parameters are
optional, the following message appears in the output:
<cr> Press Enter to execute the command
You can also enter a question mark (?) after typing one or more characters of a word to list
the available command or parameters that begin with the letters, as shown in the following
example:
(switch) #show m?
mac-addr-table mac-address-table monitor
Accessing the CLI
You can access the CLI by using a direct console connection or by using a telnet or SSH
connection from a remote management host.
For the initial connection, you must use a direct connection to the console port. You cannot
access the system remotely until the system has an IP address, subnet mask, and default
gateway. You can set the network configuration information manually, or you can configure
the system to accept these settings from a BOOTP or DHCP server on your network. For
more information, see Network Interface Commands on page 616.

20
2
2. Switching Commands
This chapter describes the switching commands available in the managed switch CLI.
This chapter contains the following sections:
• Port Configuration Commands
• Loopback Interface Commands
• Spanning Tree Protocol (STP) Commands
• VLAN Commands
• Double VLAN Commands
• Voice VLAN Commands
• Provisioning (IEEE 802.1p) Commands
• Protected Ports Commands
• Private VLAN
• GARP Commands
• GVRP Commands
• GMRP Commands
• Port-Based Network Access Control Commands
• 802.1X Supplicant Commands
• Storm-Control Commands
• Flow Control Commands
• Port Mirroring
• Static MAC Filtering
• DHCP L2 Relay Agent Commands
• DHCP Client Commands
• DHCP Snooping Configuration Commands
• Dynamic ARP Inspection Commands
• IGMP Snooping Configuration Commands
• IGMP Snooping Querier Commands
• MLD Snooping Commands
• MLD Snooping Querier Commands