SignaMax SC30010 Instruction Manual

C-300 Series Gigabit Managed Switch
CLI Reference Guide
SOFTWARE RELEASE
V1.1.10.171
www.signamax.com

CLI Reference Guide
SC30010
C-300 48 Port Gigabit Managed Switch
E122017-KS-R01

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how
to operate and use the management functions of the switch. To deploy this
switch effectively and ensure trouble-free operation, you should first read the
relevant sections in this guide so that you are familiar with all of its software
features.
Who Should Read
This Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working
knowledge of LANs (Local Area Networks), the Internet Protocol (IP), and
Simple Network Management Protocol (SNMP).
How This Guide is
Organized
This guide describes the switch’s command line interface (CLI). For more
detailed information on the switch’s key features or information about the web
browser management interface refer to the Web Management Guide.
The guide includes these sections:
◆Section I “Getting Started” — Includes information on initial configuration.
◆Section II “Command Line Interface” — Includes all management options
available through the CLI.
◆Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the CLI.
For information on how to manage the switch through the Web management
interface, see the following guide:
Web Management Guide
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following
documents:

How to Use This Guide
– 4 –
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related
features or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
Revision History This section summarizes the changes in each revision of this guide.
Revision Date ChangeDescription
v1.1.10.171 12/2017 Initialrelease

– 5 –
Contents
How to Use This Guide 3
Contents 5
Tables 29
SECTION I GETTING STARTED 34
1 Initial Switch Configuration 35
Connecting to the Switch 35
Configuration Options 35
Connecting to the Console Port 36
Logging Onto the Command Line Interface 37
Setting Passwords 37
Remote Connections 38
Configuring the Switch for Remote Management 39
Using the Network Interface 39
Setting an IP Address 39
Enabling SNMP Management Access 45
Managing System Files 47
Upgrading the Operation Code 48
Saving or Restoring Configuration Settings 48
Automatic Installation of Operation Code and Configuration Settings 50
Downloading Operation Code from a File Server 50
Specifying a DHCP Client Identifier 53
Downloading Configuration Files / Other Parameters from a DHCP Server 54
Setting the System Clock 56
Setting the Time Manually 57
Configuring SNTP 57
Configuring NTP 58

Contents
– 6 –
SECTION II COMMAND LINE INTERFACE 59
2 Using the Command Line Interface 61
Accessing the CLI 61
Console Connection 61
Telnet Connection 62
Entering Commands 63
Keywords and Arguments 63
Minimum Abbreviation 63
Command Completion 64
Getting Help on Commands 64
Partial Keyword Lookup 66
Negating the Effect of Commands 66
Using Command History 66
Understanding Command Modes 66
Exec Commands 67
Configuration Commands 68
Command Line Processing 69
Showing Status Information 70
CLI Command Groups 71
3 General Commands 73
prompt 73
reload (Global Configuration) 74
enable 75
quit 76
show history 76
configure 77
disable 78
reload (Privileged Exec) 78
show reload 79
end 79
exit 79
4 System Management Commands 81

Contents
– 7 –
Device Designation 81
hostname 82
System Status 82
show access-list tcam-utilization 83
show license file 84
show memory 85
show process cpu 85
show process cpu guard 86
show process cpu task 87
show running-config 88
show startup-config 90
show system 90
show tech-support 92
show users 93
show version 93
show watchdog 94
watchdog software 94
Fan Control 95
fan-speed force-full 95
Frame Size 95
jumbo frame 95
File Management 96
General Commands 97
boot system 97
copy 98
delete 102
dir 103
whichboot 104
Automatic Code Upgrade Commands 105
upgrade opcode auto 105
upgrade opcode path 106
upgrade opcode reload 107
show upgrade 108
TFTP Configuration Commands 108
ip tftp retry 108

Contents
– 8 –
ip tftp timeout 109
show ip tftp 109
Line 110
line 111
databits 111
exec-timeout 112
login 113
parity 114
password 114
password-thresh 115
silent-time 116
speed 117
stopbits 117
timeout login response 118
disconnect 118
terminal 119
show line 120
Event Logging 121
logging command 121
logging facility 122
logging history 122
logging host 123
logging on 124
logging trap 125
clear log 125
show log 126
show logging 127
SMTP Alerts 128
logging sendmail 129
logging sendmail destination-email 129
logging sendmail host 129
logging sendmail level 130
logging sendmail source-email 131
show logging sendmail 131
Time 132

Contents
– 9 –
SNTP Commands 133
sntp client 133
sntp poll 134
sntp server 134
show sntp 135
NTP Commands 135
ntp authenticate 135
ntp authentication-key 136
ntp client 137
ntp server 138
show ntp 139
Manual Configuration Commands 139
clock summer-time (date) 139
clock summer-time (predefined) 141
clock summer-time (recurring) 142
clock timezone 143
calendar set 144
show calendar 145
Time Range 145
time-range 146
absolute 146
periodic 147
show time-range 148
Switch Clustering 149
cluster 150
cluster commander 150
cluster ip-pool 151
cluster member 152
rcommand 152
show cluster 153
show cluster members 153
show cluster candidates 154
5 SNMP Commands 155

Contents
– 10 –
General SNMP Commands 157
snmp-server 157
snmp-server community 157
snmp-server contact 158
snmp-server location 158
show snmp 159
SNMP Target Host Commands 160
snmp-server enable traps 160
snmp-server host 161
snmp-server enable port-traps link-up-down 163
snmp-server enable port-traps mac-notification 164
show snmp-server enable port-traps 164
SNMPv3 Commands 165
snmp-server engine-id 165
snmp-server group 166
snmp-server user 167
snmp-server view 169
show snmp engine-id 170
show snmp group 170
show snmp user 171
show snmp view 172
Notification Log Commands 173
nlm 173
snmp-server notify-filter 174
show nlm oper-status 175
show snmp notify-filter 175
Additional Trap Commands 176
memory 176
process cpu 177
process cpu guard 177
6 Remote Monitoring Commands 179
rmon alarm 180
rmon event 181
rmon collection history 182

Contents
– 11 –
rmon collection rmon1 183
show rmon alarms 184
show rmon events 184
show rmon history 185
show rmon statistics 185
7 Flow Sampling Commands 186
sflow owner 186
sflow polling instance 188
sflow sampling instance 189
show sflow 190
8 Authentication Commands 191
User Accounts and Privilege Levels 192
enable password 192
username 193
privilege 195
show privilege 195
Authentication Sequence 196
authentication enable 196
authentication login 197
RADIUS Client 198
radius-server acct-port 199
radius-server auth-port 199
radius-server host 199
radius-server key 200
radius-server retransmit 201
radius-server timeout 201
show radius-server 202
TACACS+ Client 202
tacacs-server host 203
tacacs-server key 204
tacacs-server port 204
tacacs-server retransmit 205
tacacs-server timeout 205
show tacacs-server 206

Contents
– 12 –
AAA 206
aaa accounting commands 207
aaa accounting dot1x 208
aaa accounting exec 209
aaa accounting update 210
aaa authorization commands 210
aaa authorization exec 211
aaa group server 212
server 213
accounting dot1x 213
accounting commands 214
accounting exec 214
authorization commands 215
authorization exec 216
show accounting 216
show authorization 217
Web Server 218
ip http authentication 219
ip http port 219
ip http server 220
ip http secure-port 220
ip http secure-server 221
Telnet Server 222
ip telnet max-sessions 223
ip telnet port 223
ip telnet server 224
telnet (client) 224
show ip telnet 225
Secure Shell 225
ip ssh authentication-retries 228
ip ssh server 228
ip ssh server-key size 229
ip ssh timeout 230
delete public-key 230
ip ssh crypto host-key generate 231

Contents
– 13 –
ip ssh crypto zeroize 232
ip ssh save host-key 232
show ip ssh 233
show public-key 233
show ssh 234
802.1X Port Authentication 235
General Commands 236
dot1x default 236
dot1x system-auth-control 236
Authenticator Commands 237
dot1x intrusion-action 237
dot1x max-reauth-req 238
dot1x max-req 238
dot1x operation-mode 239
dot1x port-control 240
dot1x re-authentication 240
dot1x timeout quiet-period 241
dot1x timeout re-authperiod 241
dot1x timeout supp-timeout 242
dot1x timeout tx-period 242
dot1x re-authenticate 243
Supplicant Commands 243
dot1x timeout auth-period 243
dot1x timeout held-period 244
Information Display Commands 244
show dot1x 244
Management IP Filter 247
management 247
show management 248
9 General Security Measures 250
Port Security 251
mac-learning 251
port security 252
show port security 254

Contents
– 14 –
Network Access (MAC Address Authentication) 256
network-access aging 257
network-access mac-filter 257
mac-authentication reauth-time 258
network-access dynamic-qos 259
network-access dynamic-vlan 260
network-access guest-vlan 261
network-access max-mac-count 261
network-access mode mac-authentication 262
network-access port-mac-filter 263
mac-authentication intrusion-action 264
mac-authentication max-mac-count 264
clear network-access 265
show network-access 265
show network-access mac-address-table 266
show network-access mac-filter 267
Web Authentication 267
web-auth login-attempts 268
web-auth quiet-period 269
web-auth session-timeout 269
web-auth system-auth-control 270
web-auth 270
web-auth re-authenticate (Port) 271
web-auth re-authenticate (IP) 271
show web-auth 272
show web-auth interface 272
show web-auth summary 273
DHCPv4 Snooping 273
ip dhcp snooping 274
ip dhcp snooping information option 276
ip dhcp snooping information option encode no-subtype 278
ip dhcp snooping information option remote-id 279
ip dhcp snooping information option tr101 board-id 280
ip dhcp snooping information policy 280
ip dhcp snooping verify mac-address 281

Contents
– 15 –
ip dhcp snooping vlan 282
ip dhcp snooping information option circuit-id 283
ip dhcp snooping trust 284
ip dhcp snooping max-number 285
ip dhcp snooping trust 286
clear ip dhcp snooping binding 287
clear ip dhcp snooping database flash 287
ip dhcp snooping database flash 288
show ip dhcp snooping 288
show ip dhcp snooping binding 289
IPv4 Source Guard 289
ip source-guard binding 290
ip source-guard 292
ip source-guard max-binding 293
ip source-guard mode 294
clear ip source-guard binding blocked 295
show ip source-guard 296
show ip source-guard binding 296
ARP Inspection 297
ip arp inspection 298
ip arp inspection filter 299
ip arp inspection log-buffer logs 300
ip arp inspection validate 301
ip arp inspection vlan 301
ip arp inspection limit 302
ip arp inspection trust 303
show ip arp inspection configuration 304
show ip arp inspection interface 304
show ip arp inspection log 305
show ip arp inspection statistics 305
show ip arp inspection vlan 305
Denial of Service Protection 306
dos-protection echo-chargen 307
dos-protection smurf 307
dos-protection tcp-flooding 308

Contents
– 16 –
dos-protection tcp-null-scan 308
dos-protection tcp-syn-fin-scan 309
dos-protection tcp-xmas-scan 309
dos-protection udp-flooding 310
dos-protection win-nuke 310
show dos-protection 311
Port-based Traffic Segmentation 311
traffic-segmentation 312
traffic-segmentation session 313
traffic-segmentation uplink/downlink 314
traffic-segmentation uplink-to-uplink 315
show traffic-segmentation 315
10 Access Control Lists 317
IPv4 ACLs 317
access-list ip 318
permit, deny (Standard IP ACL) 319
permit, deny (Extended IPv4 ACL) 320
ip access-group 322
show ip access-group 323
show ip access-list 323
IPv6 ACLs 324
access-list ipv6 324
permit, deny (Standard IPv6 ACL) 325
permit, deny (Extended IPv6 ACL) 326
ipv6 access-group 329
show ipv6 access-group 330
show ipv6 access-list 330
MAC ACLs 331
access-list mac 331
permit, deny (MAC ACL) 332
mac access-group 334
show mac access-group 335
show mac access-list 335
ARP ACLs 336

Contents
– 17 –
access-list arp 336
permit, deny (ARP ACL) 337
show access-list arp 338
ACL Information 339
clear access-list hardware counters 339
show access-group 340
show access-list 340
11 Interface Commands 342
Interface Configuration 343
interface 343
capabilities 344
description 345
flowcontrol 346
history 347
media-type 347
negotiation 348
shutdown 349
speed-duplex 349
clear counters 350
show interfaces brief 351
show interfaces counters 352
show interfaces history 355
show interfaces status 357
show interfaces switchport 358
Transceiver Threshold Configuration 359
transceiver-monitor 359
transceiver-threshold-auto 360
transceiver-threshold current 360
transceiver-threshold rx-power 361
transceiver-threshold temperature 362
transceiver-threshold tx-power 363
transceiver-threshold voltage 364
show interfaces transceiver 365
show interfaces transceiver-threshold 366

Contents
– 18 –
Cable Diagnostics 367
test cable-diagnostics 367
show cable-diagnostics 368
Power Savings 369
power-save 369
show power-save 370
12 Link Aggregation Commands 372
Manual Configuration Commands 373
port channel load-balance 373
channel-group 375
Dynamic Configuration Commands 375
lacp 375
lacp admin-key (Ethernet Interface) 377
lacp port-priority 378
lacp system-priority 379
lacp admin-key (Port Channel) 380
lacp timeout 380
Trunk Status Display Commands 381
show lacp 381
show port-channel load-balance 385
13 Port Mirroring Commands 386
Local Port Mirroring Commands 386
port monitor 386
show port monitor 387
RSPAN Mirroring Commands 388
rspan source 390
rspan destination 391
rspan remote vlan 392
no rspan session 393
show rspan 394
14 Congestion Control Commands 395
Rate Limit Commands 395
rate-limit 395

Contents
– 19 –
Storm Control Commands 396
switchport packet-rate 397
15 Loopback Detection Commands 398
loopback-detection 399
loopback-detection action 399
loopback-detection recover-time 400
loopback-detection transmit-interval 401
loopback detection trap 401
loopback-detection release 402
show loopback-detection 402
16 Address Table Commands 404
mac-address-table aging-time 404
mac-address-table static 405
clear collision-mac-address-table 406
clear mac-address-table dynamic 406
show collision-mac-address-table 406
show mac-address-table 407
show mac-address-table aging-time 408
show mac-address-table count 408
17 Spanning Tree Commands 410
spanning-tree 411
spanning-tree cisco-prestandard 412
spanning-tree forward-time 413
spanning-tree hello-time 413
spanning-tree max-age 414
spanning-tree mode 415
spanning-tree mst configuration 416
spanning-tree pathcost method 416
spanning-tree priority 417
spanning-tree system-bpdu-flooding 418
spanning-tree tc-prop 418
spanning-tree transmission-limit 419
max-hops 420

Contents
– 20 –
mst priority 420
mst vlan 421
name 422
revision 422
spanning-tree bpdu-filter 423
spanning-tree bpdu-guard 424
spanning-tree cost 425
spanning-tree edge-port 426
spanning-tree link-type 427
spanning-tree loopback-detection 428
spanning-tree loopback-detection action 428
spanning-tree loopback-detection release-mode 429
spanning-tree loopback-detection trap 430
spanning-tree mst cost 430
spanning-tree mst port-priority 431
spanning-tree port-bpdu-flooding 432
spanning-tree port-priority 433
spanning-tree root-guard 433
spanning-tree spanning-disabled 434
spanning-tree tc-prop-stop 435
spanning-tree loopback-detection release 435
spanning-tree protocol-migration 436
show spanning-tree 437
show spanning-tree mst configuration 439
show spanning-tree tc-prop 439
18 VLAN Commands 441
Editing VLAN Groups 441
vlan database 442
vlan 442
Configuring VLAN Interfaces 443
interface vlan 444
switchport acceptable-frame-types 445
switchport allowed vlan 445
switchport ingress-filtering 446