Page 1 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Firmware Version 3.07.xx P/N 9033755-22...
Page 3 Enterasys Networks reserves the right to make changes in specifications and other information contained in this document and its web site without prior notice. The reader should in all cases consult Enterasys Networks to determine whether any such changes have been made.
Page 4 CAREFULLY READ THIS LICENSE AGREEMENT. This document is an agreement (“Agreement”) between the end user (“You”) and Enterasys Networks, Inc., on behalf of itself and its Affiliates (as hereinafter defined) (“Enterasys”) that sets forth Your rights and obligations with respect to the Enterasys software program/firmware (including any accompanying documentation, hardware or media) (“Program”) in the package and prevails over any additional, conflicting or inconsistent terms and conditions appearing...
Page 5 APPLICABLE LAW. This Agreement shall be interpreted and governed under the laws and in the state and federal courts of the Commonwealth of Massachusetts without regard to its conflicts of laws provisions. You accept the personal jurisdiction and venue of the Commonwealth of Massachusetts courts. None of the 1980 United Nations Convention on the Limitation Period in the International Sale of Goods, and the Uniform Computer Information Transactions Act shall apply to this Agreement.
Page 6 AUDIT RIGHTS. You hereby acknowledge that the intellectual property rights associated with the Program are of critical value to Enterasys, and, accordingly, You hereby agree to maintain complete books, records and accounts showing (i) license fees due and paid, and (ii) the use, copying and deployment of the Program. You also grant to Enterasys and its authorized representatives, upon reasonable notice, the right to audit and examine during Your normal business hours, Your books, records, accounts and hardware devices upon which the Program may be deployed to verify compliance with this Agreement, including the verification of the license fees due and paid Enterasys and the use, copying and deployment...
Page 7: Table Of Contents
Process Overview: CLI Startup and General Configuration... 3-13 Starting and Navigating the Command Line Interface (CLI) ... 3-14 3.1.6.1 Using a Console Port Connection ... 3-14 3.1.6.2 Logging in with a Default User Account... 3-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Contents...
Page 8 3.1.7 3.1.8 3.1.9 General Configuration Command Set ... 3-21 3.2.1 3.2.2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 3.1.6.3 Logging in With an Administratively Configured User Account ... 3-16 3.1.6.4 Using a Telnet Connection ... 3-16 Getting Help with CLI Syntax ... 3-18 Displaying Scrolling Screens ...
Page 9 3.3.2 Configuring VLANs for IP Routing ... 3-93 3.3.3 Enabling Router Configuration Modes ... 3-96 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Downloading via the Serial Port ... 3-50 Downloading via TFTP ... 3-51 show telnet ... 3-54 set telnet ... 3-55 dir...
Page 10 4.3.3 4.3.4 4.3.5 4.3.6 4.3.7 4.3.8 viii Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Assignment Scheme ... 4-1 Port String Syntax Used in the CLI ... 4-4 Reviewing Port Status... 4-7 4.3.1.1 show port status ... 4-7 4.3.1.2 show port counters ...
Page 11 SNMPv1 and SNMPv2... 5-1 SNMPv3... 5-2 About SNMP Security Models and Levels ... 5-2 Process Overview: SNMP Configuration ... 5-3 Disabling / Enabling and Reviewing SNMP Statistics... 5-5 5.2.1.1 show snmp ... 5-5 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Contents...
Page 12 Contents 5.2.2 5.2.3 5.2.4 5.2.5 5.2.6 5.2.7 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 5.2.1.2 set snmp ... 5-6 5.2.1.3 show snmp engineid... 5-6 5.2.1.4 show snmp counters... 5-7 Configuring SNMP Users, Groups and Communities ... 5-14 5.2.2.1 show snmp user ... 5-15 5.2.2.2...
Page 13 ... 6-23 6.2.1.23 set spantree maxage ... 6-24 6.2.1.24 clear spantree maxage ... 6-25 6.2.1.25 set spantree fwddelay... 6-26 6.2.1.26 clear spantree fwddelay... 6-26 6.2.1.27 show spantree autoedge ... 6-27 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Contents...
Page 14 Contents 6.2.2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6.2.1.28 set spantree autoedge... 6-28 6.2.1.29 clear spantree autoedge... 6-28 6.2.1.30 show spantree legacypathcost ... 6-29 6.2.1.31 set spantree legacypathcost... 6-29 6.2.1.32 clear spantree legacypathcost... 6-30 6.2.1.33 show spantree tctrapsuppress... 6-30 6.2.1.34...
Page 15 Setting the Host VLAN ... 7-38 7.3.6.1 show host vlan... 7-38 7.3.6.2 set port vlan host ... 7-39 7.3.6.3 clear host vlan ... 7-40 Creating a Secure Management VLAN... 7-41 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Contents xiii...
Page 16 Port Priority and Classification Configuration Summary ... 9-1 9.1.1 9.1.2 9.1.3 Process Overview: Priority, Classification, And Rate Limiting Configuration ... 9-4 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enabling/Disabling GVRP (GARP VLAN Registration Protocol)... 7-42 7.3.8.1 show gvrp ... 7-44 7.3.8.2 show garp timer ... 7-45 7.3.8.3...
Page 17 ... 10-3 Setting IGMP Query Interval and Response Time... 10-4 10.2.2.1 show igmp query-interval... 10-4 10.2.2.2 set igmp query-interval ... 10-5 10.2.2.3 show igmp response-time... 10-5 10.2.2.4 set igmp response-time ... 10-6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Contents...
Page 18 Process Overview: Logging and Network Management ... 11-1 11.2 Logging and Network Management Command Set ... 11-2 11.2.1 11.2.2 11.2.3 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Reviewing IGMP Groups ... 10-7 10.2.3.1 show igmp groups ... 10-7 Configuring IGMP VLAN Registration... 10-9 10.2.4.1 show igmp mode ...
Page 19 11.2.5.4 set nodealias maxentries... 11-71 11.2.5.5 clear nodealias ... 11-72 11.2.5.6 clear nodealias config... 11-73 11.2.6 Configuring Convergence End Points (CEP) Phone Detection .. 11-74 11.2.6.1 show cep ... 11-75 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Contents xvii...
Page 20 12.2 IP Configuration Command Set ... 12-2 12.2.1 12.2.2 12.2.3 12.2.4 12.2.5 xviii Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11.2.6.2 set cep ... 11-76 11.2.6.3 set cep port... 11-77 11.2.6.4 set cep policy... 11-77 11.2.6.5 set cep detection ... 11-78 11.2.6.6...
Page 21 ... 13-32 13.1.2.7 ip ospf retransmit-interval ... 13-33 13.1.2.8 ip ospf transmit-delay ... 13-34 13.1.2.9 ip ospf hello-interval... 13-35 13.1.2.10 ip ospf dead-interval ... 13-36 13.1.2.11 ip ospf authentication-key... 13-37 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Contents...
Page 22 Contents 13.1.3 13.1.4 13.1.5 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 13.1.2.12 ip ospf message digest key md5 ... 13-38 13.1.2.13 distance ospf ... 13-39 13.1.2.14 area range ... 13-40 13.1.2.15 area authentication ... 13-41 13.1.2.16 area stub... 13-42 13.1.2.17...
Page 23 14-48 14.3.4.4 set maclock disable ... 14-49 14.3.4.5 set maclock... 14-50 14.3.4.6 set maclock firstarrival ... 14-51 14.3.4.7 set maclock static ... 14-52 14.3.4.8 set maclock move... 14-53 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Contents...
Page 24 Contents 14.3.5 14.3.6 xxii Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 14.3.4.9 clear maclock static ... 14-53 14.3.4.10 show maclock autostatic... 14-54 14.3.4.11 set maclock autostatic ... 14-55 14.3.4.12 set maclock autostatic isl... 14-56 14.3.4.13 set maclock autostatic publicvlan ... 14-57 14.3.4.14...
Page 25 14.3.9 14.4 Working with Security Configurations ... 14-113 14.4.1 14.4.2 14.4.3 14.4.4 14.4.5 INDEX Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Access Lists... 14-89 14.3.7.1 show access-lists... 14-89 14.3.7.2 access-list (standard) ... 14-90 14.3.7.3 access-list (extended)... 14-92 14.3.7.4 ip access-group ...
Page 26 Contents xxiv Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 27: Figures
Port Grouping Designations for the Matrix E1 1H582-25... 4-48 Creating a Basic SNMP Trap Configuration... 5-63 Example of VLAN Propagation via GVRP ... 7-43 Datagram, Layer 2 and Layer 3... 9-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Figures...
Page 28 Figures xxvi Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 29: Tables
Basic SNMP Trap Configuration Command Set... 5-62 show spantree stats Output Details ... 6-7 Valid Values for VLAN Classification... 7-29 Valid Values for VLAN Frame Filtering... 7-29 Classification Precedence ... 7-33 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Tables Page xxvii...
Page 30 Output Details ... 14-46 14-6 show maclock stations Output Details ... 14-48 14-7 show pwa Output Details... 14-65 14-8 show flowlimit Output Details... 14-104 14-9 MAC / 802.1X Precedence States ... 14-116 xxviii Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 31: About This Guide
Welcome to the Enterasys Networks Matrix E1 (1G58x-09 and 1H582-xx) Configuration Guide. This manual explains how to access the devices’ Command Line Interface (CLI) and how to use it to configure the Matrix E1 1G58x-09 and 1H582-xx switch/router devices. Depending on the firmware version used in the Matrix E1 device, some features described in this document may not be supported.
Page 32: Structure Of This Guide
Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuration, provides an overview of the device’s factory...
Page 33: Related Documents
RADIUS, 802.1X, MAC authentication, MAC locking, SSH, Denial of Service (DoS) prevention, Flow Setup Throttling (FST), IP access lists and port web authentication. RELATED DOCUMENTS The following Enterasys Networks documents may help you to set up, control, and manage the Matrix E1 device: •...
Page 34: Document Conventions
When used in general text, italic type indicates complete document titles. When used in CLI command syntax, italic type indicates a user-supplied parameter, either required or optional, to be entered after the command keyword(s). xxxii Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 35 Braces and vertical bars within square brackets indicate a required choice within an optional element. You do not need to select one. If you do, you have some required choices. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Typographical and Keystroke Conventions xxxiii...
Page 36 Typographical and Keystroke Conventions xxxiv Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 37: Introduction
Enterasys Networks for technical support. Depending on the firmware version used in the Matrix E1 1G58x-09 or 1H582-xx device, some features described in this document may not be supported. Refer to the Release Notes shipped with the Matrix E1 device to determine which features are supported.
Page 38 • In-band through a Telnet connection. • Remotely using WebView, Enterasys Networks’ embedded web server, for basic switch management tasks WebView is currently not supported in router mode. NOTE: This guide describes configuring and managing the Matrix E1 device using CLI commands.
Page 39: Getting Help
GETTING HELP For additional support related to this device or document, contact Enterasys Networks using one of the following methods: World Wide Web www.enterasys.com/support/ Phone 1-800-872-8440 (toll-free in U.S. and Canada) or 1-978-684-1000 For the Enterasys Networks Support toll-free number in your country: http://www.enterasys.com/services/support/contact...
Page 40 Getting Help Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 41: Management Terminal And Modem Setup Requirements
NOTE: Illustrations and most of the examples in this guide are based on the Matrix E1 1H582-51. Configuration and CLI output for the Matrix E1 1H582-25, and the 1G58x-09, may be different. Unless noted, procedures and performance features are similar for both models.
Page 42: Connecting To An Ibm Or Compatible Device
Mode Transmit Bits Parity Stop Bit 5. When these parameters are set, the Matrix E1 startup screen will display. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Figure 2-1), proceed as follows: Section 2.1.5 for adapter wiring and signal assignments.
Page 43: Connecting To A Vt Series Terminal
2 RJ45-to-DB9 PC Adapter 2.1.3 Connecting to a VT Series Terminal To connect a VT series terminal to an Enterasys Networks switch console port UTP cable with RJ45 connectors and an optional RJ45-to-DB25 female adapter (PN 9372110), and proceed as follows: 1.
Page 44: Connecting To A Modem
2 RJ45-to-DB25 VT Adapter 2.1.4 Connecting to a Modem To connect a modem to an Enterasys Networks device modem port with RJ45 connectors and an optional RJ45-to-DB25 male adapter (PN 9372112), and proceed as follows: 1. Connect the RJ45 connector at one end of the cable to the modem port on the Enterasys Networks device.
Page 45: Configuring The Modem To Not Send Login Requests
Verbal result codes Suppress result codes Echo offline commands Auto answer ring Carrier detect override Display all result codes Disable AT command set Disconnect with +++ Load $FO settings Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Connecting to a Modem...
Page 46: Connecting To A Modem
You would do this using the set system lockout attempts command as described in Section 3.2.1.8. Figure 2-3 Connecting to a Modem À 1 RJ45 Modem Port 2 Modem Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Â Á 3 RJ45-to-DB25 Modem Adapter 4 UTP Cable with RJ45 Connectors Ä Ã...
Page 47: Adapter Wiring And Signal Assignments
RJ45 Connecting to a Console Port for Local Management Conductor Blue Green Orange Yellow Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Adapter Wiring and Signal Assignments Signal Receive (RX) Transmit (TX) Ground (GRD) Request to Send (RTS) Clear to Send (CTS)
Page 48 VT Series Port Adapter Wiring and Signal Diagram RJ45 Modem Port Adapter Wiring and Signal Diagram RJ45 Conductor Blue Orange Green Yellow Gray Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide DB25 Conductor Blue Yellow Green Orange DB25 Signal Transmit (TX)
Page 49: Startup And General Configuration
Cisco Discovery Protocol Community name Default Setting Disabled. Auto enabled on all ports. Transmit frequency of CDP messages set to 60 seconds. Disabled. Enabled. Public. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 3-1 lists Table 3-2 lists default...
Page 50 Jumbo frame support Link aggregation (LACP) Lockout Logging MAC aging time Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Default Setting Disabled globally and on all ports. Disabled. When enabled, set to auto for all ports. Set to 30 seconds Disabled.
Page 51 All port link traps are enabled. Classification rules are automatically enabled when created. Disabled on all ports. Set to 25% for weighted queues (1 through 4). Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Startup and General Configuration Summary Factory Default Settings...
Page 52 Spanning Tree hello interval Spanning Tree ID (SID) Spanning Tree legacy path cost Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Default Setting Set to 25% for weighted queues (0 through 3). Enabled. Disabled. When the client is enabled, set to Challenge.
Page 53 3. Nagle’s algorithm enabled. Set to 9600 baud. Set to a blank string. Set to a blank string. Set to a blank string. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Startup and General Configuration Summary Factory Default Settings...
Page 54 Area default cost (OSPF) Area NSSA (OSPF) Area range (OSPF) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Default Setting Enabled (outbound and inbound). Listening port is set to 23. Maximum number of inbound, outbound, or SSH sessions allowed is set to 4.
Page 55 450 seconds, holdtime is set to 1800 seconds, and address preference is set to 0. Enabled to send event notification messages to Syslog, buffer, console, and Telnet, with severity level set to high. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Startup and General Configuration Summary Factory Default Settings...
Page 56 RIP timers RIP offset Split horizon Stub area (OSPF) Telnet Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Default Setting Disabled with no password set. Set to 1500 bytes on all interfaces. Disabled. When OSPF is enabled, set to 10 for all OSPF interfaces.
Page 57 Set to port number 23. Set to 0.0.0.0 SPF delay set to 5 seconds. SPF holdtime set to 10 seconds. Set to 1 second. Disabled. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Startup and General Configuration Summary Factory Default Settings...
Page 58: Command Defaults Descriptions
Figure 3-1 provides an example. Figure 3-1 Sample Command Default Description Command Defaults If port-string is not specified, status information for all ports will be displayed. 3-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide show port status [port-string]...
Page 59: Cli Command Modes
Read-Write access will be able to modify all modifiable parameters in set and show commands, as well as view Read-Only commands. Administrators or Super Users will be allowed all Read-Write and Read-Only privileges, and will be able to modify local user accounts. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 3-11...
Page 60: Using Webview
Using WebView NOTE: This guide describes configuring and managing the Matrix E1 device using CLI commands. For details on using WebView (Enterasys Networks’ embedded web server) for switch configuration and management tasks, refer to the Matrix E1 (IG582-09 and 1H582-51) WebView User’s Guide. WebView is not available as a router configuration tool.
Page 61: Process Overview: Cli Startup And General Configuration
10.Preparing the device for router mode Startup and General Configuration Summary Process Overview: CLI Startup and General Configuration (Section 3.2.1) (Section 3.2.2) (Section 3.2.3) 3.2.4) (Section 3.2.5) (Section (Section 3.2.7) 3.2.8) (Section 3.3) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 3.1.6) 3.2.6) 3-13...
Page 62: Starting And Navigating The Command Line Interface (Cli)
“cannot open startup.cfg file” will no longer display. The startup.cfg file stores the running configuration for the device when operating in router mode. This file does not affect switch mode operation. 3-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 3.1.6.2, or 3-3.
Page 63: Console Port Initial Startup Screen Before User Authorization
Generating 1024-bit rsa key pair Key generated. 1024-bit rsa Private key saved to sshdrv:/hostkey Public key saved to sshdrv:/hostkey.pub Initializing router... Can not open startup.cfg file! It may have not been generated yet. Username: Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 3-15...
Page 64: Logging In With An Administratively Configured User Account
• Enter an administratively-configured user name and password. The notice of authorization and the Matrix prompt displays as shown in 3-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 3.2.7) to change their own passwords. Administrators with Super Figure 3-3.
Page 65: Startup Screen After User Authorization
Refer to the instructions included with the Telnet application for information about establishing a Telnet session. Starting and Navigating the Command Line Interface (CLI) Matrix 1G587-09 50 Minuteman Road Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Startup and General Configuration Summary 3.2.2.23. Section 3.2.4.2. 3-17...
Page 66: Getting Help With Cli Syntax
Figure 3-5 Performing a Partial Keyword Lookup Matrix>co? configure copy Matrix-E1>co 3-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide <vlan_num> Use the set vlan classification command to create a classification rule that will assign untagged traffic to a vlan based on Layer 2/3/4 rules.
Page 67: Displaying Scrolling Screens
--More-- Section 3.2.2.14. shows how the show mac command indicates that output continues on Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Startup and General Configuration Summary Displaying Scrolling Screens to indicate continuing screens. --More--...
Page 68: Basic Line Editing Commands
Delete word to the left of cursor. Ctrl+X Delete all characters before the cursor. Ctrl+Y Restore the most recently deleted item. Ctrl+Z Delete all characters before the cursor. 3-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 3-3 lists some commonly used...
Page 69: General Configuration Command Set
Use this command to display user login account information. show system login Syntax Description None. Command Defaults None. 3.2.1.1) 3.2.1.2) 3.2.1.3) (Section 3.2.1.5) (Section 3.2.1.6) (Section 3.2.1.7) (Section 3.2.1.8) 3.2.1.9) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting User Accounts and Passwords 3-21...
Page 70 Table 3-4 show system login Output Details Output Password history size Password aging Password length 3-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Privileges Status enabled enabled enabled What It Displays... Number of user login passwords that will be checked for duplication when the set password command is executed.
Page 71: Set System Login
Applies super-user, Read-Write or Read-Only access privileges to this user. Enables or disables the user account. NOTE: The default admin (su) account cannot be disabled. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting User Accounts and Passwords 3-23...
Page 72: Clear System Login
This example shows how to remove the “netops” user account: Matrix>clear system login netops 3-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the login name of the account to be cleared. NOTE: The default admin (su) account cannot...
Page 73: Set Password
Read-Write access. • admin for Super User access. (This access level allows Read-Write access to all modifiable parameters, including user accounts.) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting User Accounts and Passwords 3.2.1.5). 3-25...
Page 74: Set System Password Length
This example shows how to set the minimum system password length to 8 characters: Matrix>set system password length 8 3-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the minimum number of characters for a user account password. Valid values are 0 to 32.
Page 75: Set System Password Aging
Valid values are 1 to 365. Disables password aging. Specifies the number of passwords checked for duplication. Valid values are 0 to 10. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting User Accounts and Passwords 3-27...
Page 76: Set System Lockout Attempts
Switch command. Command Mode Super User. 3-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 3.2.1.9). Once a user account is locked out, Specifies the number of failed login attempts allowed before a Read-Write or Read-Only user’s account will be disabled.
Page 77: Set System Lockout
Specifies the number of minutes the default admin user account will be locked out after the maximum login attempts.Valid values are 0 to 60. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting User Accounts and Passwords...
Page 78: Setting Basic Device Properties
(Section • set console baud (Section • show ip address (Section • set ip address (Section 3.2.2.23) 3-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 3.2.2.1) 3.2.2.6) 3.2.2.7) 3.2.2.8) 3.2.2.10) 3.2.2.11) 3.2.2.12) 3.2.2.13) 3.2.2.15) 3.2.2.21) 3.2.2.22)
Page 79: Show System Resources
MPC8245 300 MHz 64 MB 56015752 Bytes 1024 kB 902144 Bytes 8192 kB 6580072 Bytes 3 days, 7 hours, 23 minutes, 6 seconds Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties 3-31...
Page 80: Show System
System Uptime : 0 days, 1 hours, 15 minutes, 35 seconds System Name ------------------------ ------------------------ ------------------------ sysName Boot Configuration: Boot from Flash 3-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide System Timeout : 60 minutes. System Location sysLocation System Contact sysContact...
Page 81: Show Time
Switch command. (Optional) Specifies the day of the week. (Optional) Specifies the month, day, and year. (Optional) Specifies the current time in 24-hour format. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties 3-33...
Page 82: Set Prompt
Matrix>set prompt “Switch 1” Switch 1> 3-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a text string for the command prompt. A prompt string containing a space in the text must be enclosed in quotes as shown in the example below.
Page 83: Show Banner Motd
(\\n) character. A string containing a space in the text must be enclosed in quotes as shown in the example below. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties...
Page 84: Clear Banner Motd
Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Write. Example This example shows how to clear the message of the day banner: Matrix>clear banner motd 3-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 85: Show Version
Table 3-5 provides an explanation of the command output. Serial Number HW Version ------------- ---------- 03032222210N Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties Section 3.2.3 FW Version ----------- 03.04.04 3-37...
Page 86: Set System Name
Switch command. Command Mode Read-Write. Usage Guidelines None. 3-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Fixed front panel or expansion module slot location designation. For details on how slots are numbered, refer to Section 4.1.2.
Page 87: Set System Location
A location string containing a space in the text must be enclosed in quotes as shown in the example below. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties...
Page 88: Set System Contact
Command Type Switch command. 3-40 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Specifies a text string that contains the name of the person to contact for system administration. A contact string containing a space in the text must be...
Page 89: Set Terminal
(Optional) Specifies that terminal settings will remain as set for all future sessions. will display at the bottom of scrolling --More-- Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties line from displaying on scrolling Section 3.1.8.
Page 90: Set System Timeout
Syntax Description None. 3-42 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of minutes the system will remain idle before timing out. Valid values are 1 to 60. (Optional) Sets the console or remote (Telnet) timeout.
Page 91: Set Summertime
Switch command. Command Mode Read-Write. Enables or disables the daylight savings time function. (Optional) Applies a name to the daylight savings time settings. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties 3-43...
Page 92: Set Summertime Date
Command Defaults If an offset is not specified, none will be applied. 3-44 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the month of the year to start daylight savings time. Specifies the day of the month to start daylight savings time.
Page 93: Set Summertime Recurring
[offset_minutes] Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties 3-45...
Page 94 Matrix>set summertime recurring first Sunday April 02:00 last Sunday October 02:00 60 3-46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the week of the month to start daylight savings time. Valid values are: first, second, third, fourth, and last.
Page 95: Clear Summertime
Command Defaults None. Command Type Switch command. Command Mode Read-Write. Specifies the console baud rate. Valid values are 38400, 19200, 9600, 4800, and 2400. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties 3-47...
Page 96: Show Ip Address
This example shows how to display the system IP address, the system mask and the default gateway: Matrix>show ip address System IP System Mask Default Gateway - 0.0.0.0 3-48 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide - 10.1.10.1 - 255.255.128.0...
Page 97: Set Ip Address
Specifies the IP address to set for the device. (Optional) Specifies the IP mask of the local host. (Optional) Specifies the default gateway of the local host. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Setting Basic Device Properties...
Page 98: Downloading A Firmware Image
3. When the Power On Self Test (POST) begins, press ESC to bypass it. The following message displays: (D)ownload System Image or (S)tart Application: 4. Press D to download system firmware. The following message displays: Select the Firmware Type to Download (1)Runtime (2)POST 3-50 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 3.2.3.2.
Page 99: Downloading Via Tftp
Use this command to download a new firmware image from a TFTP server to the device. dload hostname | ip-address filename [noreboot] Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Downloading a Firmware Image 3-51...
Page 100 Command Mode Read-Write. 3-52 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the host name or IP address of the TFTP server from which the new image file will be downloaded. Specifies the TFTP server path and file name of the new image.
Page 101 Application image loaded to CPU SDRAM. Start Application ... 1H582-51 Switch init start... Switch Budget init... Initializing hardware... Switch clear VLAN table... Initializing databases... Username: Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Downloading a Firmware Image 3-53...
Page 102: Configuring Telnet
Example This example shows how to display Telnet status and information. In this case inbound and outbound service is enabled on the device and maximum number of inbound, outbound and SSH 3-54 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 103: Set Telnet
Telnet to other devices), or SSH (Secure Shell) sessions. Valid values are 0 to 4. For more information on configuring SSH, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Configuring Telnet Section 14.3.6.
Page 104: Command Mode
This example shows how to set the maximum number of outbound Telnet sessions to 3 Matrix>set telnet session outbound 3 This example shows how to reset the Telnet port to 23: Matrix>set telnet port default 3-56 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 105: Managing Switch Configuration Files
If all is not specified, only configuration files stored in the NVDRIVE: file system will be displayed. 3.2.5.4) 3.2.5.6) (Optional) Displays all files in the NVDRIVE: file system. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Managing Switch Configuration Files 3-57...
Page 106: Show Config
• If a facility is not specified, configurations for all known facilities will be displayed. 3-58 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Filesize (Optional) Displays a specific file. The filename extension must be .cfg (Optional) Displays the entire configuration file.
Page 107 30 802.3-SAP 0X0020 enable set port vlan fe.0.4-fe.0.7 30 set port broadcast fe.0.10-fe.0.15 enable set port ingress filter fe.0.3 enable show spantree stats clitxt.cfg Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Managing Switch Configuration Files 3-59...
Page 108: Configure
{[filename [append] [at time] [in time] [reason reason] | show | cancel} 3-60 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 10.2.242.112 mask 255.255.240.0 gateway...
Page 109 24-hour system (hh:mm). (Optional) Specifies a reason (text string) for updating the configuration. Displays information about a scheduled configuration update. Cancels a scheduled configuration update. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Managing Switch Configuration Files 3-61...
Page 110: Summaryconfig
If file is not specified, the configuration will be displayed to the console. 3-62 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Writes the configuration to the scfile.cfg. This file can then be displayed using the show config command,...
Page 111 20 seconds Status ------ Primary Secondary Status ------ Challenge Challenge System Timeout : 5 minutes. System Location sysLocation Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Managing Switch Configuration Files Auth-Port --------- System Contact sysContact 3-63...
Page 112: Copy
3-64 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the source file to copy. Options are device-config, a filename, or the URL of a TFTP server. (See individual descriptions below.) Specifies the destination where the file will be copied.
Page 113 This example shows how to copy (download) a configuration text file from the network server to the Matrix E1 file system. This text file can then be executed using the configure command: Matrix>copy tftp://10.1.129.3/config/clitxt.txt clitxt.txt Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Managing Switch Configuration Files...
Page 114: Set System Bootconfig
This example shows how to set the boot configuration file to flash: Matrix>set system bootconfig flash 3-66 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Loads the flash configuration file. Specifies a network file location from which to load the...
Page 115: Delete
Read-Write. Command Defaults None. Example This example shows how to delete the clitxt1.cfg configuration file: Matrix>delete clitxt1.cfg Specifies the configuration file to remove. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Managing Switch Configuration Files 3-67...
Page 116: Configuring Enterasys And Cisco Discovery Protocols
(Section • set port ciscodp trust-ext • set port ciscodp cos-ext • set port ciscodp vvid (Section 3-68 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 3.2.6.3) 3.2.6.5) 3.2.6.6) 3.2.6.7) (Section 3.2.6.8) (Section 3.2.6.9) (Section 3.2.6.10) 3.2.6.11)
Page 117: Show Cdp
State Port State auto fe.0.4 auto auto fe.0.7 auto auto fe.0.10 auto Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Section 4.1.2. Port State fe.0.5 auto fe.0.8 auto fe.0.11 auto 3-69...
Page 118: Set Cdp
Use this command to enable or disable the Enterasys Discovery Protocol on one or more ports. set cdp {auto | disable | enable} [port-string] 3-70 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Current Enterasys Discovery Protocol version number.
Page 119 Enables the Enterasys Discovery Protocol on the device or on specified port(s). (Optional) Enables or disables Enterasys Discovery Protocol for specific port(s). For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Section 4.1.2. 3-71...
Page 120: Set Cdp Interval
Use this command to display global Cisco Discovery Protocol information. show ciscodp Syntax Description None. Command Defaults None. 3-72 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the transmit frequency of Enterasys Discovery Protocol messages in seconds.Valid values are from 5 to 900.
Page 121 Section 3.2.6.7. Description of the sending device. Sending device’s firmware version. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Section 3.2.6.5. Section 3.2.6.6. 3-73...
Page 122: Set Ciscodp Status
Use this command to set the number of seconds between Cisco Discovery Protocol PDU transmissions. set ciscodp timer time 3-74 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Sending device’s serial number. Whether the populate Enterasys (CDP) discovery protocol function is enabled or disabled.
Page 123: Set Ciscodp Holdtime
Specifies the number of seconds between PDU transmissions. Valid values are 5 - 254. Specifies the time to live for PDUs. Valid values are 10 - 255. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set 3-75...
Page 124: Set Ciscodp Populatecdp
Use this command to display summary information about the Cisco Discovery Protocol on one or more ports. show port ciscodp info [port-string] 3-76 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables or disables the CDP populate function.
Page 125 Port designation. Whether Cisco DP is enabled or disabled on this port. Default state of disabled can be changed using the set port ciscodp status command Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set PDU-TX PDU-RX...
Page 126: Show Port Ciscodp Neighborinfo
Command Type Switch command. 3-78 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Whether a Voice VLAN ID has been set on this port. Default of none can changed using the set port ciscodp vvid command (Section 3.2.6.14).
Page 127: Set Port Ciscodp Status
Sets the port status as: • disabled - will not transmit or detect neighbors • enabled - will transmit and will detect neighbors Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Port ID before operational status can be set 3-79...
Page 128: Set Port Ciscodp Trust-Ext
{trusted | untrusted | undefined} Syntax Description port-string trusted 3-80 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) on which to set trusted status. For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 129: Set Port Ciscodp Cos-Ext
0, by default, or to the value configured with the set port ciscodp cos-ext command (Section 3.2.6.13). No trust state setting is communicated to the Cisco IP phone. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set 3-81...
Page 130: Set Port Ciscodp Vvid
{vlan-id | none | dot1p | untagged} 3-82 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) on which to set a CoS value. For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 131 Instructs an attached Cisco IP phone to transmit 802.1p priority tagged traffic. Instructs an attached Cisco IP phone to transmit untagged traffic. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Chapter 3-83...
Page 132: Pausing, Clearing And Closing The Cli
This example shows how to pause the CLI for 10 seconds: Matrix>wait 10 Wait for 10 seconds . . . 3-84 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of seconds for the CLI to pause before executing the next command...
Page 133: Cls (Clear Screen)
For details on enabling router configuration modes, refer to Syntax Description None. Command Defaults None. Command Type Switch command. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Pausing, Clearing and Closing the CLI Section 3.3.3. 3-85...
Page 134 General Configuration Command Set Pausing, Clearing and Closing the CLI Command Mode Read-Only. Example This example shows how to exit a CLI session: Matrix>exit 3-86 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 135: Resetting The Device
Use this command to display information about scheduled device resets. show reset Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Only. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Resetting the Device 3-87...
Page 136: Reset
This command will reset the device. Do you want to continue (y/n) Resetting device... 3-88 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Resets the system. (Optional) Cancels a reset scheduled using the reset at command as described in command as described in (Optional) Displays information about a scheduled reset.
Page 137: Reset At
(Optional) Specifies a reason for the reset. A string containing a space in the text must be enclosed in quotes as shown in the example below. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Resetting the Device...
Page 138: Reset In
Section 3.1.1. clear config 3-90 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of hours and minutes into the future to perform a reset. (Optional) Specifies a reason for the reset. A string containing a space in the text must be enclosed in quotes.
Page 139: Syntax Description
This command will clear NVRAM. Do you want to continue (y/n) Keep the IP setting (y/n) Keep the SSH host keys (y/n) Clearing NVRAM.. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide General Configuration Command Set Resetting the Device 3-91...
Page 140: Preparing The Device For Router Mode
File management tasks, including uploading or downloading flash or text configuration files, and displaying directory and file contents. • Configuring two or more VLANs that will be dedicated to IP routing. 3-92 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Important Notice Table 3-10 Section 3.1 3.1.6) (Section 3.2.1)
Page 141: Configuring Vlans For Ip Routing
Switch: enable} vlan_id (Matrix>) set port vlan Switch: port-string (Matrix>) vlan_id Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Preparing the Device for Router Mode Configuring VLANs for IP Routing For details, see... Section 6.2.2.2 Section 7.3.2.1 Section 7.3.3.2 3-93...
Page 142 Fast Ethernet front panel port 1 with an IP address of 182.127.63.1, and VLAN 20 is set on Fast Ethernet front panel port 2 with an IP address of 182.127.62.1. The configuration is then saved to NVRAM in file called startup.cfg. 3-94 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Type this command... set gvrp disable...
Page 143: Configuring Two Vlans For Ip Routing
Matrix>Router(config-if(Vlan 20))#ip address 182.127.62.1 255.255.255.0 Matrix>Router(config-if(Vlan 20))#no shutdown Matrix>Router(config-if(Vlan 20))#exit Matrix>Router(config)#exit Matrix>Router#write file filename startup.cfg Saving information to startup.cfg...done Matrix>Router# Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Preparing the Device for Router Mode Configuring VLANs for IP Routing 3-95...
Page 144: Enabling Router Configuration Modes
Configure router Configuration interfaces. Mode Router Set IP protocol Configuration parameters. Mode 3-96 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide describes these modes of operation. Access method... Type router from switch mode. Type configure terminal Privileged EXEC mode. Type interface and the interface’s...
Page 145 Router (RIP) Configuration mode. Type and the key-id from Key Chain Configuration Mode. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Preparing the Device for Router Mode Enabling Router Configuration Modes Prompt... Matrix>Router (config-keychain)# Matrix>Router (config-keychain-key)# 3-97...
Page 146 Preparing the Device for Router Mode Enabling Router Configuration Modes 3-98 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 147: Port Configuration
NOTE: Illustrations and most of the examples in this guide are based on the Matrix E1 1H582-51. Configuration and CLI output for the Matrix E1 1H582-25 and 1G58x-09 may be different. Unless noted, procedures and performance features are similar for both models.
Page 148: 1H582-51 Expansion Module And Fixed Front Panel Port Numbering Scheme
For information on how this device’s port assignment scheme is expressed in CLI syntax, refer to Section 4.1.2. Figure 4-1 1H582-51 Expansion Module and Fixed Front Panel Port Numbering Scheme Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Figure 4-2 shows the Ethernet expansion modules Table 4-1...
Page 149: Optional Ethernet Expansion Modules
Two fixed RJ45 ports 1000BASE-TX | 1 | 2 | Gigabit Two port slots for optional GBICs 1000BASE-SX/LX (GBICs have 1 SC connector) | 1 | 2 | Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Summary Port Assignment Scheme...
Page 150: Port String Syntax Used In The Cli
(management) port Slot location can be: 0, for the fixed front panel slot, 1, for left expansion module slot (in the 1H582-51 and 1G58x-09 devices module slot (in the 1H582-25 device 2, for middle expansion module slot, or...
Page 151 This example shows the port-string syntax for specifying all Fast Ethernet ports in the device. fe.*.* This example shows the port-string syntax for specifying all ports (of any interface type) in the device. *.*.* Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Summary Port String Syntax Used in the CLI...
Page 152: Process Overview: Port Configuration
7. Setting port traps (Section 8. Setting port mirroring (Section 9. Configuring port trunking and link aggregation 10.Configuring port broadcast suppression 11.Configuring unknown destination address suppression Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.1) (Section 4.3.2) (Section 4.3.3) (Section 4.3.4)
Page 153: Port Configuration Command Set
Switch command. Command Mode Read-Only. 4.3.1.1) 4.3.1.2) 4.3.1.3) (Optional) Displays status for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Reviewing Port Status...
Page 154 Table 4-2 provides an explanation of the command output. Table 4-2 show port status Output Details Output Port Oper Status Admin Status Duplex Speed Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Oper Admin Duplex Status Status down half down...
Page 155: Show Port Counters
(Optional) Displays MIB2 or switch statistics. Switch statistics detail performance of the Matrix E1 switch device. MIB2 interface statistics detail performance of all network devices. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Reviewing Port Status...
Page 156 This example shows how to display all port counter statistics related to traffic through the device. Matrix>show port counters fe.0.1 switch Port: fe.0.1 802.1Q Switch Counters: ---------------------- Frames Received: Frames Transmitted: Table 4-3 provides an explanation of the command output. 4-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Bridge Port: 1 Bridge Port: 1...
Page 157: Clear Port Counters
Counts of frames received and transmitted. (Optional) Clears counter statistics for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Reviewing Port Status Section 4.1.2.
Page 158: Disabling / Enabling Ports
Example This example shows how to disable Fast Ethernet front panel port 1: Matrix>set port disable fe.0.1 4-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.2.1) 4.3.2.2) Specifies the port(s) to disable. For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 159: Set Port Enable
(Section Specifies the port(s) to enable. For a detailed description of possible port-string values, refer to 4.3.3.1) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Speed and Duplex Mode Section 4.1.2. 4-13...
Page 160: Show Port Speed
Command Type Switch command. Command Mode Read-Write. 4-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.3.3) 4.3.3.4) (Optional) Specifies the port(s) for which speed will be displayed. For a detailed description of possible port-string values, refer to Section...
Page 161: Set Port Speed
Section 4.1.2. Specifies the port speed. Settings can be 10 Mbps, 100 Mbps, or 1000 Mbps. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Speed and Duplex Mode 4-15...
Page 162: Show Port Duplex
Command Type Switch command. Command Mode Read-Write. 4-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Specifies the port(s) for which duplex setting will be displayed. For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 163: Set Port Duplex
Specifies the port(s) for which duplex type will be set. For a detailed description of possible port-string values, refer to Section 4.1.2. Sets the port to full-duplex or half-duplex operation. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Speed and Duplex Mode 4-17...
Page 164: Enabling / Disabling Jumbo Frame Support
Use this command to display the status of jumbo frame support and maximum transmission units (MTU) on one or more ports. show port jumbo Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Only. 4-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.4.1) 4.3.4.2)
Page 165: Set Port Jumbo
Matrix>set port jumbo enable Enabling / Disabling Jumbo Frame Support Jumbo Oper Status Jumbo Admin Status disabled disabled Disables or enables jumbo frame support. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Jumbo MTU 6144 4-19...
Page 166: Setting Port Auto-Negotiation And Advertised Ability
The commands needed to configure auto-negotiation are listed below and described in the associated section as shown. • show port negotiation (Section • set port negotiation (Section • show port advertised ability • set port advertised ability 4-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.5.1) 4.3.5.2) (Section 4.3.5.3) (Section 4.3.5.4)
Page 167: Show Port Negotiation
Auto negotiation enabled for port fe.3.1. Setting Port Auto-Negotiation and Advertised Ability (Optional) Displays auto-negotiation status for specific port(s). For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set 4.1.2. 4-21...
Page 168: Set Port Negotiation
This example shows how to disable auto-negotiation on Fast Ethernet front panel port 11: Matrix>set port negotiation fe.0.11 disable 4-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) for which to enable or disable auto-negotiation. For a detailed description of possible...
Page 169: Show Port Advertised Ability
10half 10full 100half 100full full duplex flow control 10half 10full 100half 100full full duplex flow control 10half 10full 100half 100full full duplex flow control 10half 10full 100half 100full full duplex flow control Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set 4-23...
Page 170 Table 4-4 VerboseOutput Details Output Capability Advertised Remote 4-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Capability Advertised What It Displays... Whether or not the port is capable of operating in the following modes: •...
Page 171 10half 10full 100half 100full 10half 10full 100half 100full 10half 10full 100half 100full 10half 10full 100half 100full 10half 10full 100half 100full 10half 10full 100half 100full 10half 10full 100half 100full Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set 4-25...
Page 172: Set Port Advertised Ability
Matrix>set port advertised ability fe.0.1 all disable 4-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) for which to enable, disable or configure advertised ability. For a detailed description of possible port-string values, refer to...
Page 173: Setting Flow Control And Thesholds
(Section • set port flowcontrol (Section • show port buffer threshold • set port buffer threshold 4.3.6.1) 4.3.6.2) (Section 4.3.6.3) (Section 4.3.6.4) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Flow Control and Thesholds 4-27...
Page 174: Show Port Flowcontrol
Port fe.0.15 flow control state is auto negotiate. Port fe.0.16 flow control state is disabled. Port fe.0.17 flow control state is enabled. Port fe.0.18 flow control state is auto negotiate. 4-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.6.5) 4.3.6.6) 4.3.6.7) 4.3.6.8) (Optional) Displays flow control state for specific port(s).
Page 175: Set Port Flowcontrol
Specifies the port(s) for which to enable or disable flow control. For a detailed description of possible port-string values, refer to Section Disables or enables flow control. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Flow Control and Thesholds 4.1.2. 4-29...
Page 176: Show Port Buffer Threshold
100.0 100.0 100.0 100.0 : 100.0 100.0 100.0 100.0 EgressHOL 12.5 EgressSoftHOL 12.5 EgressGeneral 25.0 Port IngressRx 18.0 4-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.6.4: Fast Ethernet Priority Queue 50.0 50.0 50.0 : 25.0 25.0 25.0 : 25.0...
Page 177: Set Port Buffer Threshold
EgressSoftHOL - drops frames marked as discardable after the set percentage of buffers for the given priority queue are awaiting transmission to other port. destinations. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Flow Control and Thesholds 4-31...
Page 178 - queue3 receive-buffer 4-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide • EgressGeneral - controls the buffer allocations for unicast frames destined to a single egress port, for multicast frames queued for egress per device, and for frames destined for routing ports.
Page 179 Valid values are 1 to 100, rounded to the nearest 0.1%, and must be entered in decimal format: 00.0. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Flow Control and Thesholds...
Page 180: Show Flow Agetime
Syntax Description None. Command Type Switch command. Command Mode Read-Only. Command Defaults None. Example This example shows how to display the flow age time setting: Matrix>show flow agetime Flow age time: 30 4-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 181: Set Flow Agetime
Switch command. Command Mode Read-Write. Specifies the number of seconds before flow limiting entries will age out. Valid values are 1 - 600. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Flow Control and Thesholds 4-35...
Page 182: Show Port Holbp
Threshold types and 4-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) for which to display HOL Blocking Prevention settings. For a detailed description of possible...
Page 183: Set Port Holbp
HOL Blocking Prevention without enabling flow control will result in frames being dropped at the ingress port (in addition to causing potentially unnecessary congestion inside the switch). Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Flow Control and Thesholds enabled...
Page 184 Setting Flow Control and Thesholds Command Mode Read-Write. Example This example shows how to enable egress HOL Blocking Prevention on Fast Ethernet front panel port 2: Matrix>set port holbp fe.0.2 egress enable 4-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 185: Setting Port Traps
Switch command. Command Mode Read-Write. 4.3.7.1) (Optional) Displays trap status for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Port Traps 4-39...
Page 186 4-40 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide State enabled enabled enabled State Port --------- --------- enabled fe.0.2 enabled enabled fe.0.5 enabled enabled fe.0.8...
Page 187: Set Port Trap
Specifies the port(s) for which to enable or disable a trap. For a detailed description of possible port-string values, refer to Section 4.1.2. Enables or disables a trap on the specified port. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Port Traps 4-41...
Page 188: Overview: Port Mirroring
LACP ports in the same group will be removed from the trunk. For more information about link aggregation, refer to For details on how to specify port designation in the CLI syntax, refer to 4-42 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 4.3.10.2. Section 4.3.10.
Page 189: Setting Port Mirroring
This example shows how to display port mirroring information. In this case, two mirroring configurations have been set. Fast Ethernet front panel port 11 is mirroring traffic from Fast 4.3.9.1) 4.3.9.2) 4.3.9.3) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Port Mirroring 4-43...
Page 190: Set Port Mirroring
None. Command Type Switch command. 4-44 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Disables or enables port mirroring. Specifies the port designation for the source on which the traffic will be monitored. For a detailed description of possible port-string values, refer to Specifies the port designation for the target that will duplicate or “mirror”...
Page 191: Clear Port Mirroring
Matrix>clear port mirroring fe.0.4 Specifies the source port for the mirroring association to be cleared. For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Setting Port Mirroring Section 4.1.2.
Page 192: Configuring Link Aggregation
LAG ports. • The ports at both ends of a trunk or LAG must be configured in an identical manner, including speed, duplex mode, and VLAN assignments. 4-46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 4.3.11. Section 4.3.10.2.
Page 193: Port Grouping Considerations
16 RJ45 ports which belong to two port groups, as shown in Important Notice Figure 4-3 Figure 4-4. When the 1H-16TX expansion module is Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Link Aggregation Figure 4-3 Figure 4-4 Table 4-6.
Page 194: Port Grouping Designations For The Matrix E1 1H582-51
1H582-51 Group IDs 1 thru 8 Ports 1H582-25 Group IDs 1 thru 8 Ports 4-48 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 9 thru 16 17 thru 24 9 thru 16 17 thru 24 25 thru 32 33 thru 40...
Page 195 For details on how to specify port designation in the CLI syntax, refer to 1H-16TX Group IDs 1 thru 8 Ports 1H-8FX Group IDs 1 thru 8 Ports Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Link Aggregation 1, 2 or 3 9 thru 16 Section 4.1.2.
Page 196: Configuring Static Port Trunking
(Section • set trunk (Section 4.3.11.3) • clear trunk (Section 4.3.11.4) • set trunk port (Section 4.3.11.5) • clear trunk port (Section • set trunk algorithm (Section 4-50 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.11.2) 4.3.11.6) 4.3.11.7)
Page 197: Show Trunk
(Optional, portTrunking mode only) Displays trunking information for a specific trunk. OKey ports fe.0.1 fe.0.2 fe.0.3 fe.0.4 None None None None None Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Static Port Trunking 4-51...
Page 198 Trunking algorithm is... trunkName LACP Rx/Tx System Identifier 4-52 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Trunking mode of the device. Default of 802.3ad can be changed using the set trunkmode command (Section 4.3.11.2). Whether the trunking algorithm is round robin (default) or MAC hashing.
Page 199 For more details, refer to ports (Displayed in 802.3ad mode only.) Physical ports belonging to the LAG. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Static Port Trunking Section 4.3.13.2.
Page 200: Set Trunkmode
| disable | enable Command Defaults None. 4-54 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables 802.3ad link aggregation mode. Enables manual port trunking mode. Specifies the name of the trunk port to be created, disabled or enabled.
Page 201: Clear Trunk
This example shows how to delete the “green” trunk from the device Matrix>clear trunk green Specifies the name of the trunk to be deleted. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Static Port Trunking...
Page 202: Set Trunk Port
Use this command to remove a port from a trunk when the device is set to port trunking mode. clear trunk port trunk_name port-string 4-56 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the name of the trunk to which the trunk port will be added.
Page 203: Set Trunk Algorithm
For a detailed description of possible port-string values, refer to Applies the MAC hashing algorithm. Applies round robin distribution of MAC addresses. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Static Port Trunking Section 4.1.2.
Page 204 Port Configuration Command Set Configuring Static Port Trunking Command Mode Read-Write. Example This example shows how to set the device’s trunk algorithm to MAC hashing: Matrix>set trunk algorithm machashing 4-58 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 205: Link Aggregation Control Protocol (Lacp)
Uses information from the partner device’s link aggregation control entity to decide whether to aggregate ports. The operation of LACP involves the following activities: • Checking that candidate links can actually be aggregated. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Link Aggregation Control Protocol (LACP) 4-59...
Page 206: Lacp Terminology
Term Aggregator LACPDU 4-60 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Definition A virtual port that controls link aggregation for underlying physical ports. Depending on the model and expansion modules installed, each Matrix E1 device can provide up to 12 aggregator ports, which are designated in the CLI as lag.x.y, where x is the slot location and y...
Page 207: Matrix E1 Lag Usage Considerations
LACP compares the LAG IDs for each grouping of ports. The LAG with the lower LAG ID is given precedence and will be allowed to use the aggregator. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Link Aggregation Control Protocol (LACP)
Page 208 MAC locking is enabled on the ports as described in NOTE: To aggregate, underlying physical ports must be running in full duplex mode and must be of the same operating speed. 4-62 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 4.3.10.1, only one (Section 14.3.2.8) and ports that...
Page 209: Configuring Link Aggregation
{disable | enable} Syntax Description disable | enable Command Defaults None. Command Type Switch command. 4.3.11.2. 4.3.13.3) 4.3.13.4) Disables or enables LACP. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Link Aggregation 4-63...
Page 210: Set Lacp Static
Command Defaults None. Command Type Switch command. 4-64 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 4.3.10.1 apply to statically created LAGs. Specifies the LAG aggregator port to which new ports will be assigned. Specifies the member port(s) to add to the LAG. For a...
Page 211: Clear Lacp Static
Specifies the LAG aggregator port from which ports will be removed. Specifies the port(s) to remove from the LAG. For a detailed description of possible port-string values, refer Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Link Aggregation 4-65...
Page 212: Show Port Lacp
-F--SAlA ge.0.5 -F--SAlA ge.0.6 -FDCSAlA 4-66 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Displays LACP information for specific port(s). For a detailed description of possible port-string values, refer Section 4.1.2. ports. Displays detailed LACP status information for one or more ports.
Page 213 MuxReason: SELECTED & PSync & PColl LACPRx TLastRx MrkTx 22.84s 1 AttachedAggID: 5 ActorOperState: 1 PartnerOperState: 1 PartnerOperSystemID: Current MuxState: Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Link Aggregation (Section 4.3.13.5) and MrkRx LACPErr lag.0.1 0x3d --DCSAlA 0x3d --DCSAlA...
Page 214: Set Port Lacp
Command Defaults None. Command Type Switch command. 4-68 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Sets one or more port’s active/passive, timeout, and aggregable status. Valid entries and their corresponding actions are: • active - Enables active LACP operation.
Page 215 Matrix>set port lacp padminkey ge.0.* default This example shows how to disable LACP processing on all Gigabit Ethernet front panel ports: Matrix>set port lacp disable ge.0.* Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Link Aggregation...
Page 216: Configuring Port Broadcast Suppression
If port-string is not specified, broadcast status of all ports will be displayed. Command Type Switch command. Command Mode Read-Only. 4-70 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.3.14.1) 4.3.14.2) (Optional) Displays broadcast status for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 217: Set Port Broadcast
Specifies the packets per second threshold on broadcast traffic. Maximum value is 1488100 for Gigabit and 148810 for Fast Ethernet. (Optional) Disables or enables broadcast suppression. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set Configuring Port Broadcast Suppression Section 4.1.2.
Page 218 Configuring Port Broadcast Suppression This example shows how to set broadcast suppression to 2000 packets per second on Fast Ethernet front panel ports 10 through 13: Matrix>set port broadcast fe.0.10-13 2000 4-72 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 219: Configuring Unknown Destination Address Suppression
Configuring Unknown Destination Address Suppression (Section 4.3.15.1) (Section 4.3.15.2) (Section 4.3.15.3) (Optional) Displays status for specific port(s). For a detailed description of possible port-string values, refer Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set 4-73...
Page 220: Set Port Unknowndestsuppress
This example shows how to enable unknown destintation address suppression on Fast Ethernet front panel port 1: Matrix>set port unknowndestsuppress fe.0.1 4-74 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Status: Disabled Specifies port(s) on which to enable or disable suppression.
Page 221: Clear Port Unknowndestsuppress
1 to disabled: Matrix>clear port unknowndestsuppress fe.0.1 Configuring Unknown Destination Address Suppression (Optional) Resets status for specific port(s).For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Configuration Command Set 4-75...
Page 222 Port Configuration Command Set Configuring Unknown Destination Address Suppression 4-76 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 223: Snmp Configuration
SNMP agents and MIBs, including SNMP traps, community strings, and Remote Monitoring (RMON) MIBs, which run on managed devices. • SNMP network management applications, such as Enterasys Networks’ NetSight Atlas, which communicate with agents to get statistics and alerts from the managed devices. SNMP Configuration...
Page 224: Snmpv3
SNMP frame. identifies the levels of SNMP security available on Matrix E1 Series devices and authentication required within each model. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 5-1...
Page 225: Process Overview: Snmp Configuration
(Section (Section (Section 5.2.3) (Section 5.2.4) (Section 5.2.5) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Configuration Summary Process Overview: SNMP Configuration How It Works Uses a community string match for authentication. Uses a community string match for authentication.
Page 226 SNMP Configuration Summary Process Overview: SNMP Configuration 6. Configuring SNMP target addresses 7. Configuring SNMP notification parameters 8. Configuring a basic SNMP trap notification Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 5.2.6) (Section 5.2.7) (Section 5.2.8)
Page 227: Snmp Command Set
Use this command to display the status of SNMP management on the device. By default, it is enabled at device startup. show snmp Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Only. Disabling / Enabling and Reviewing SNMP Statistics 5.2.1.3) 5.2.1.4) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set...
Page 228: Set Snmp
Use this command to display the SNMP local engine ID. This is the SNMP v3 engine’s administratively unique identifier. show snmp engineid Syntax Description None. Command Defaults None. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables or disables SNMP management.
Page 229: Show Snmp Counters
String identifying the SNMP agent on the device. Number of times the SNMP engine has been started or reinitialized. Time in seconds since last reboot. Maximum accepted length, in bytes, of SNMP frame. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set...
Page 230 SNMP Command Set Disabling / Enabling and Reviewing SNMP Statistics Command Type Switch command. Command Mode Read-Only. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 231 Disabling / Enabling and Reviewing SNMP Statistics = 396601 = 396601 = 403661 = 534 = 290 = 396279 = 32 = 11 = 396601 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set...
Page 232 5-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Number of messages delivered to the SNMP entity from the transport service. Number of SNMP messages passed from the SNMP protocol entity to the transport service.
Page 233 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Disabling / Enabling and Reviewing SNMP Statistics What It Displays... Number of MIB objects retrieved successfully by the SNMP protocol entity as the result of receiving valid SNMP Get-Request and Get-Next PDUs.
Page 234 Number of packets received by the SNMP engine usmStatsUnknownEngineIDs Number of packets received by the SNMP engine 5-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Number of SNMP Get-Next PDUs generated by the SNMP protocol entity.
Page 235 Table 5-3 show snmp counters Output Details (Continued) Output usmStatsWrongDigests usmStatsDecriptionErrors Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Disabling / Enabling and Reviewing SNMP Statistics What It Displays... Number of packets received by the SNMP engine that were dropped because they did not contain the expected digest value.
Page 236: Configuring Snmp Users, Groups And Communities
(Section • clear community (Section • show snmp community • set snmp community (Section • clear snmp community 5-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 5.2.2.1) 5.2.2.3) 5.2.2.4) 5.2.2.5) 5.2.2.6) 5.2.2.7) 5.2.2.8) 5.2.2.9) (Section 5.2.2.10) 5.2.2.11) (Section...
Page 237: Show Snmp User
(Optional) Displays information about a specific user. (Optional) Displays information about users on a specific remote SNMP engine. 00:00:00:63:00:00:00:a1:00:00:00:00 = Guest = usmNoAuthProtocol = usmNoPrivProtocol = nonVolatile = active Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-15...
Page 238: Set Snmp User
If authentication is not specified, no authentication will be applied. • If privacy is not specified, no encryption will be applied. 5-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... SNMP local engine identifier. SNMPv1 or v2 community name or SNMPv3 user name.
Page 239: Clear Snmp User
Command Type Switch command. Command Mode Read-Write. Configuring SNMP Users, Groups and Communities Specifies an SNMPv3 user to remove. (Optional) Removes the user from a specific remote SNMP engine. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-17...
Page 240: Show Snmp Group
Command Type Switch command. Command Mode Read-Only. 5-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays information for a specific SNMP group. (Optional) Displays information about users within the specified group. (Optional) Displays information about groups assigned to...
Page 241 Users belonging to the SNMP group. Name of SNMP group. Whether access entries for this group are stored in volatile, nonvolatile or read-only memory. Status of this entry: active, notInService, or notReady. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-19...
Page 242: Set Snmp Group
SNMPv3 security to the group: Matrix E7(rw)->set snmp group anyone user public security-model v3 5-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies an SNMP group name to create. Specifies an SNMPv3 user name to assign to the group.
Page 243: Clear Snmp Group
Configuring SNMP Users, Groups and Communities Specifies the SNMP group to be cleared. Specifies the SNMP user to be cleared. (Optional) Clears the settings associated with a specific security model. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-21...
Page 244: Show Community
Table 5-6 show community Output Details Output Community Name Name through which a user will access SNMP management. Permissions 5-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Permissions ----------- Read-Write Read-Write What It Displays...
Page 245: Set Community
Read-Only access to the device MIB objects, and excludes access to security-protected fields of Read-Write authorization. • Read-Write (rw): This community name gives the user Read-Write access to the device MIB objects. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-23...
Page 246: Clear Community
If name is not specified, information will be displayed for all SNMP communities. Command Type Switch command. 5-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the SNMP management user access name to be deleted. (Optional) Displays SNMP information for a specific...
Page 247: Set Snmp Community
Specifies the SNMPv3 user name to which this community name will be mapped. For details on creating an SNMP v3 user, refer to (Optional) Specifies the storage type for these entries. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Section 5.2.2.2.
Page 248: Clear Snmp Community
This example shows how to remove the “green” community’s access to the “netops” user security policy: Matrix>clear snmp community green 5-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the SNMPv1 or v2 community name for which the SNMPv3 relationship will be cleared.
Page 249: Configuring Snmp Access Rights
SNMPv3 group. (Optional) Displays access information for SNMP security model version 1, 2c or 3. (Optional) Displays access information for a specific security level. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Access Rights 5-27...
Page 250 Table 5-7 show snmp access Output Details Output Group Name Security Model 5-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide No Privacy. No Privacy. What It Displays... SNMPv3 group name. Security model applied to this group. Valid types...
Page 251: Set Snmp Access
Name of the view that allows this group to send an SNMP notification. This can be configured with the set snmp notify command as described in Section 5.2.7.7. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Access Rights 5-29...
Page 252 “hello” notification configuration: Matrix>set snmp access mis-group security-model v3 authpriv notify hello 5-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a name for an SNMP group. Applies SNMP version 1, 2c or 3. Applies an SNMPv3 security level as no authentication, authentication without privacy or authentication with privacy.
Page 253: Clear Snmp Access
Specifies the name of the SNMP group for which to clear access. Specifies the security model to be cleared for the SNMP access group. Clears a specific security level for the SNMPv3 access group. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Access Rights 5-31...
Page 254: Set Snmp Authentication Trap
Switch command. Command Mode Read-Write. Example This example shows how to enable the SNMP authentication trap function: Matrix>set snmp authenticatontrap enable 5-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables or disables the sending of SNMP authentication failure traps.
Page 255: Configuring Snmp Mib Views
If no parameters are specified, all SNMP MIB view configuration information will be displayed. Command Type Switch command. Command Mode Read-Only. 5.2.4.1) 5.2.4.2) 5.2.4.3) (Optional) Displays information for a specific MIB view and subtree. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP MIB Views 5-33...
Page 256 Subtree OID View Type Row Status Storage Type 5-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Name assigned to a MIB view. Subtree object identifier. Whether or not subtree use must be included or excluded for this view.
Page 257: Set Snmp View
Specifies a name for a MIB view Specifies a MIB subtree name. use. (Optional) Specifies the use of temporary (default) or nonvolatile storage. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP MIB Views 5-35...
Page 258 This example shows how to delete SNMP MIB view “public”: Matrix>clear snmp view public subtree 1.3.6.1 5-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the MIB view name to be deleted. Specifies the subtree name of the MIB view to be deleted.
Page 259: Configuring Snmp Target Parameters
If targetParams is not specified, entries associated with all target parameters will be displayed. Command Type Switch command. Command Mode Read-Only. (Section 5.2.5.1) 5.2.5.2) (Section 5.2.5.3) (Optional) Displays entries for a specific target parameter. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Target Parameters 5-37...
Page 260 Table 5-9 show snmp targetparams Output Details Output Target Parameter Name Security Name Message Proc. Model 5-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide = v1ExampleParams = public = SNMPv1 = noAuthNoPriv = nonVolatile = active...
Page 261: Set Snmp Targetparams
— Authentication and privacy protocol required. Whether entry is stored in volatile, nonvolatile or read-only memory. Status of this entry: active, notInService, or notReady. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Target Parameters 5-39...
Page 262 Matrix>set snmp targetparams v1ExampleParams user fred security-model v3 authentication 5-40 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a name identifying parameters used to generate SNMP messages to a particular target. Specifies an SNMPv1 or v2 community name or an SNMPv3 user name.
Page 263: Clear Snmp Targetparams
This example shows how to clear SNMP target parameters named “v1ExampleParams”: Matrix>clear snmp targetparams v1ExampleParams Specifies the name of the parameter in the SNMP target parameters table to be cleared. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Target Parameters 5-41...
Page 264: Configuring Snmp Target Addresses
If targetAddr is not specified, entries for all target address names will be displayed. Command Type Switch command. Command Mode Read-Only. 5-42 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 5.2.6.1) 5.2.6.2) 5.2.6.3) (Optional) Displays information for a specific target address name.
Page 265 Number of the UDP port of the target host to use. Target IP address mask. Timeout setting for the target address. Retry setting for the target address. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Target Addresses 5-43...
Page 266: Set Snmp Targetaddr
[port udpport] [timeout timeout] [retries retries] [volatile | nonvolatile] [taglist tagname] 5-44 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Entry in the snmpTargetParamsTable. Whether entry is stored in volatile, nonvolatile or read-only memory.
Page 267 This tags a location to the target address as a place to send notifications. List must be enclosed in quotes and tag values must be separated by a space (ie: “tag 1 tag 2”) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Target Addresses...
Page 268: Clear Snmp Targetaddr
None. Command Type Switch command. Command Mode Read-Write. Example This example shows how to clear SNMP target address entry “1”: Matrix>clear snmp targetaddr 1 5-46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the target address entry to delete.
Page 269: Configuring Snmp Notification Parameters
• set snmp notifyprofile (Section • clear snmp notifyprofile Section 5.2.8. 5.2.7.4) 5.2.7.5) 5.2.7.6) 5.2.7.7) 5.2.7.8) 5.2.7.9) 5.2.7.10) 5.2.7.11) (Section 5.2.7.12) 5.2.7.13) (Section 5.2.7.14) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Notification Parameters 5-47...
Page 270: Show Trap
Table 5-11 show trap Output Details Output Community Name Community name of the trap. IP Address Status 5-48 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Address --------------- 1.2.3.4 100.54.5.112 0.0.0.0 0.0.0.0 0.0.0.0...
Page 271: Set Trap
Specifies the community name of the trap to be set. Enables or disables the trap. Specifies the IP address of the trap to be cleared. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-49...
Page 272: Show Newaddrtrap
Command Mode Read-Only. 5-50 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays the status of the new MAC addresses trap function on specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 273: Set Newaddrtrap
SNMP trap message will be sent to the management station. Globally enables or disables the MAC address trap function on all device ports. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Notification Parameters 5-51...
Page 274: Show Snmp Notify
Command Defaults If a notify name is not specified, all entries will be displayed. Command Type Switch command. Command Mode Read-Only. 5-52 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays notify entries for a specific notify name.
Page 275 Type of notification: SNMPv1 or v2 trap or SNMPv3 InformRequest message. Whether access entry is stored in volatile, nonvolatile or read-only memory. Status of this entry: active, notInService, or notReady. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Configuring SNMP Notification Parameters 5-53...
Page 276: Set Snmp Notify
“world”. Notifications will be sent as trap messages and storage type will automatically default to nonvolatile: Matrix>set snmp notify hello tag world trap 5-54 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 5.2.6.2). Specifies an SNMP notify name. (Optional) Specifies an SNMP notify tag. This binds the notify name to the SNMP target address table.
Page 277: Clear Snmp Notify
Example This example shows how to clear the SNMP notify configuration for “hello”: Matrix>clear snmp notify hello Configuring SNMP Notification Parameters Specifies an SNMP notify name to clear. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-55...
Page 278: Show Snmp Notifyfilter
Command Defaults If no parameters are specified, all notify filter information will be displayed. Command Type Switch command. Command Mode Read-Only. 5-56 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays a notify filter within a specific subtree.
Page 279: Set Snmp Notifyfilter
= nonVolatile = active Specifies an SNMP filter notify name. Specifies a MIB subtree target for the filter. (Optional) Applies a subtree mask. (Optional) Specifies a storage type. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-57...
Page 280: Clear Snmp Notifyfilter
Syntax Description profile subtree oid Command Defaults None. Command Type Switch command. 5-58 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies an SNMP filter notify name to delete. Specifies a MIB subtree containing the filter to be deleted.
Page 281: Show Snmp Notifyprofile
Row status Configuring SNMP Notification Parameters (Optional) Displays a specific notify profile. (Optional) Displays entries for a specific target parameter. = area51 = v3ExampleParams = nonVolatile = active Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-59...
Page 282: Set Snmp Notifyprofile
Use this command to delete an SNMP notify profile configuration. clear snmp notifyprofile profile targetparam targetparam 5-60 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies an SNMP filter notify name. Specifies an associated entry in the SNMP Target Params Table.
Page 283 This example shows how to delete SNMP notify profile “area51”: Matrix>clear snmp notifyprofile area51 targetparam v3ExampleParams Configuring SNMP Notification Parameters Specifies an SNMP filter notify name to delete. Specifies an associated entry in the snmpTargetParamsTable. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set 5-61...
Page 284: Basic Snmp Trap Configuration
To do this... Create a community name. Create an SNMP target parameters entry. Verify if any applicable SNMP notification entries exist, or 5-62 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Use these commands... set community (Section 5.2.2.8) set snmp targetparams...
Page 285: Creating A Basic Snmp Trap Configuration
Matrix>set snmp notifyfilter noauthentication subtree 1 included nonvolatile Use these commands... set snmp notify set snmp targetaddr set snmp notifyfilter shows how to: Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide SNMP Command Set Basic SNMP Trap Configuration (Section 5.2.7.7) (Section 5.2.6.2)
Page 286 SNMP Command Set Basic SNMP Trap Configuration 5-64 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 287: Spanning Tree Configuration
STP, one link is forwarding while the others are blocking for all traffic flowing between the two switches. The blocking links are effectively used Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 288: Spanning Tree Features
Reconfiguring the active topology in a manner that is transparent to stations transmitting and receiving data packets. • Managing the topology in a consistent and reproducible manner through the use of Spanning Tree Protocol parameters. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 6.2.1.7. Section 6.2.1.10.
Page 289: Process Overview: Spanning Tree Configuration
2. Reviewing and setting Spanning Tree port parameters NOTE: The term “bridge” is used as an equivalent to the term “switch” or “device” in this document. Process Overview: Spanning Tree Configuration (Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Spanning Tree Configuration Summary (Section 6.2.1) 6.2.2)
Page 290: Spanning Tree Configuration Command Set
(Section • clear spantree mstcfgid • set spantree priority (Section • clear spantree priority (Section • show spantree bridgehellomode Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6.2.1.1) 6.2.1.3) 6.2.1.4) 6.2.1.5) 6.2.1.6) 6.2.1.7) 6.2.1.8) 6.2.1.9) 6.2.1.10) 6.2.1.11) 6.2.1.12) (Section 6.2.1.13)
Page 291 6.2.1.26) (Section 6.2.1.27) 6.2.1.28) (Section 6.2.1.29) (Section 6.2.1.30) (Section 6.2.1.31) (Section 6.2.1.32) (Section 6.2.1.33) (Section 6.2.1.34) (Section 6.2.1.35) (Section 6.2.1.36) (Section 6.2.1.37) (Section 6.2.1.38) 6.2.1.39) (Section 6.2.1.40) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Spanning Tree Configuration Command Set...
Page 292: Show Spantree Stats
Command Type Switch command. Command Mode Read-Only. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays Spanning Tree information for a specific Spanning Tree. (Optional) Displays Spanning Tree information for specific port(s). For a detailed description of possible port-string...
Page 293 (Section 6.2.1.2). Spanning Tree ID. Set using the set spantree msti command (Section MAC address of the designated Spanning Tree root bridge. Priority of the designated root bridge. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Cost Priority 6.2.1.7).
Page 294 Bridge Max Age Bridge Hello Time Bridge Forward Delay Topology Change Count Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Total path cost to reach the root. Port through which the root bridge can be reached. Amount of time (in seconds) a BPDU packet should be considered valid.
Page 295: Set Spantree
Whether the port’s Spanning Tree role is root, designated, backup, alternate, disabled or master. Cost value assigned to the port. Port’s Spanning Tree priority. Globally disables or enables Spanning Tree. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 6.2.1.39.
Page 296: Show Spantree Version
Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Only. Example This example shows how to display Spanning Tree version information: Matrix>show spantree version Spanning Tree Version = MSTP 6-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 297: Set Spantree Version
Syntax Description None. Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Bridge Parameters Specifies Spanning Tree version 802.1s (MSTP). Specifies Spanning Tree version 802.1w (RSTP). Specifies STP 802.1D-compatible. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-11...
Page 298: Show Spantree Mstilist
Command Mode Read-Only. Example This example shows how to display a list of MST instances. In this case, SID 2 has been configured: Matrix>show spantree mstilist Configured Multiple Spanning Tree instances: 6-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 299: Set Spantree Msti
Sets the Multiple Spanning Tree ID. Valid values are 1 - 4094. NOTE: Matrix E1 devices will support up to 16 MST instances. Creates or deletes an MST instance. (Optional) Deletes a specific multiple Spanning Tree ID. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-13...
Page 300: Show Spantree Mstmap
Command Mode Read-Only. 6-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the first in a range or FIDs for which MSTP mapping will be displayed. Valid values are 1 - 4094, and must correspond to a VLAN ID created using the set vlan command as described in Section 7.3.2.1.
Page 301: Set Spantree Mstmap
Specifies a Multiple Spanning Tree ID. Valid values are 1 - 4094, and must correspond to a SID created using the set msti command as described in Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Spanning Tree Configuration Command Set Section 7.3.2.1.
Page 302: Clear Spantree Mstmap
Use this command to display the VLAN(s) mapped to a Spanning Tree ID. show spantree vlanlist sid 6-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Resets the mapping of a specific FID. Valid values are 1 - 4094, and must correspond to a VLAN ID created using the set vlan command as described in Section 7.3.2.1.
Page 303: Show Spantree Mstcfgid
Specifies a Multiple Spanning Tree ID. Valid values are 1 - 4094, and must correspond to a SID created using the set spantree msti command as described in Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 6.2.1.7. 6.2.1.7, and the FIDs must be mapped Section 6.2.1.10:...
Page 304: Set Spantree Mstcfgid
Example This example shows how to set the MST configuration name to mstconfig: Matrix>set spantree mstconfigid cfgname mstconfig 6-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 6.2.1.14: Specifies an MST configuration name. Specifies an MST revision level. Valid values are 1 -...
Page 305: Clear Spantree Mstcfgid
Specifies the priority of the bridge. Valid values are from 0 to 61440 (in increments of 4096), with 0 indicating high priority and 61440 low priority. (Optional) Sets a priority for a specific Spanning Tree. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-19...
Page 306: Clear Spantree Priority
Switch command. Command Mode Read-Write. Example This example shows how to reset the bridge priority for SID 6: Matrix>clear spantree priority 6 6-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Resets the bridge priority for a specific Spanning Tree.
Page 307: Show Spantree Bridgehellomode
Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Bridge Parameters Enables single Spanning Tree bridge hello mode. Disables single Spanning Tree bridge hello mode, allowing for the configuration of per-port hello times. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-21...
Page 308: Clear Spantree Bridgehellomode
Use this command to set the hello time for the bridge or for one or more ports. This is the time interval (in seconds) the device will transmit BPDUs indicating it is active. set spantree hello interval [port-string] 6-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 309: Clear Spantree Hello
(Optional) Sets the hello time for specific port(s). NOTE: Port-string cannot be specified if bridge hello mode is enabled. For information on using the set spantree bridgehellomode command, refer to Section 6.2.1.19. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-23...
Page 310: Set Spantree Maxage
6-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Resets the hello time for specific port(s). NOTE: Port-string cannot be specified if bridge hello mode is enabled. For information on using the...
Page 311: Clear Spantree Maxage
Reviewing and Setting Spanning Tree Bridge Parameters Specifies the maximum number of seconds that the system retains the information received from other bridges through STP. Valid values are 6 - 40. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-25...
Page 312: Set Spantree Fwddelay
Use this command to reset the bridge forward delay to the default setting of 15 seconds. clear spantree fwddelay Syntax Description None. 6-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of seconds for the bridge forward delay. Valid values are 4 - 30.
Page 313: Show Spantree Autoedge
This example shows how to display the status of the automatic edge port detection function: Matrix>show spantree autoedge autoEdge is currently enabled. Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Bridge Parameters Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-27...
Page 314: Set Spantree Autoedge
Use this command to reset automatic edge port detection to the default state of enabled. clear spantree autoedge Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Write. 6-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Disables or enables automatic edge port detection.
Page 315: Show Spantree Legacypathcost
{disable | enable} Syntax Description disable | enable Command Defaults None. Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Bridge Parameters Disables or enables legacy (802.1D) path cost values. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-29...
Page 316: Clear Spantree Legacypathcost
This example shows how to reset legacy path cost: Matrix>clear spantree legacypathcost 6.2.1.33 show spantree tctrapsuppress Use this command to display the status of topology change trap suppression on Rapid Spanning Tree edge ports. show spantree tctrapsuppress 6-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 317: Set Spantree Tctrapsuppress
Syntax Description disable | enable Command Defaults None. Command Type Switch command. Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Bridge Parameters Disables or enables topology change trap suppression. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-31...
Page 318: Clear Spantree Tctrapsuppress
This example shows how to clear topology change trap suppression settings: Matrix>clear spantree tctrapsuppress 6.2.1.36 show spantree txholdcount Use this command to display the maximum BPDU transmission rate. show spantree txholdcount Syntax Description None. Command Defaults None. 6-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 319: Set Spantree Txholdcount
Reviewing and Setting Spanning Tree Bridge Parameters Specifies the maximum number of BPDUs to be transmitted before transmissions are subject to a one-second timer. Valid values are 1 to 10. Default value is 3. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-33...
Page 320: Clear Spantree Txholdcount
Syntax Description max_hop_count Command Defaults None. Command Type Switch command. 6-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the maximum number of hops allowed. Valid values are 0 to 255. Default value is 20.
Page 321: Clear Spantree Maxhops
Command Mode Read-Write. Example This example shows how to reset the maximum hop count to 20: Matrix>clear spantree maxhops Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Bridge Parameters Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-35...
Page 322: Reviewing And Setting Spanning Tree Port Parameters
• set spantree spanguard (Section • clear spantree spanguard • show spantree spanguardtimeout • set spantree spanguardtimeout 6-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 6.2.2.1) 6.2.2.2) (Section 6.2.2.3) (Section 6.2.2.4) 6.2.2.5) 6.2.2.6) 6.2.2.7) (Section 6.2.2.8)
Page 323: Show Spantree Portadmin
(Section 6.2.2.24) (Section 6.2.2.25) (Section 6.2.2.26) (Section 6.2.2.27) Specifies port(s) for which to display status. For a detailed description of possible port-string values, refer Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Spanning Tree Configuration Command Set 6-37...
Page 324: Set Spantree Portadmin
Example This example shows how to disable Spanning Tree on Fast Ethernet front panel port 12: Matrix>set spantree portadmin fe.0.12 disable 6-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section Section 3.3.2. Specifies the port(s) for which to enable or disable Spanning Tree.
Page 325: Clear Spantree Portadmin
Reviewing and Setting Spanning Tree Port Parameters (Optional) Resets status to enable on specific port(s). For a detailed description of possible port-string values, refer Section 4.1.2. (Optional) Displays status for specific SID(s). Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-39...
Page 326: Show Spantree Portpri
If sid is not specified, port priority for SID 0 will be displayed. Command Type Switch command. Command Mode Read-Only. 6-40 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) for which to display Spanning Tree priority. For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 327: Set Spantree Portpri
Spanning Tree bridge. Valid values are from 0 to 240 (in increments of 16) with 0 indicating high priority and 240, low priority. (Optional) Sets port priority for specific a SID. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.1.2. 6-41...
Page 328: Clear Spantree Portpri
This example shows how to reset the priority of Fast Ethernet front panel port 3 to 128: Matrix>clear spantree portpri fe.0.3 6-42 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Resets the priority for specific port(s). For a detailed description of possible port-string values, refer Section 4.1.2.
Page 329: Show Spantree Portcost
Reviewing and Setting Spanning Tree Port Parameters Specifies the port(s) for which to display cost values. For a detailed description of possible port-string values, refer to Section 4.1.2 (Optional) Displays cost values for a specific SID. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-43...
Page 330 This example shows how to set port cost to 25 on Fast Ethernet front panel port 11: Matrix>set spantree portcost fe.0.11 25 6-44 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) to which to assign a cost value. For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 331: Clear Spantree Portcost
Reviewing and Setting Spanning Tree Port Parameters (Optional) Resets the path cost for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. (Optional) Resets the cost value for a specific SID. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-45...
Page 332: Set Spantree Adminedge
Command Defaults None. Command Type Switch command. 6-46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) for which to display edge port administrative status. For a detailed description of possible port-string values, refer to Section 4.1.2 Specifies the edge port. For a detailed description of...
Page 333: Clear Spantree Adminedge
Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Port Parameters (Optional) Resets edge port status for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-47...
Page 334: Set Spantree Spanguard
| disable Command Defaults None. Command Type Switch command. Command Mode Read-Write. 6-48 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 6.2.2.18) has passed since the last seen BPDU or Section 6.2.2.21). Enables or disables the span guard function.
Page 335: Clear Spantree Spanguard
Use this command to display the Spanning Tree span guard timeout setting. show spantree spanguardtimeout Syntax Description None. Command Defaults None. Command Type Switch command. Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Port Parameters Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-49...
Page 336: Set Spantree Spanguardtimeout
Use this command to reset the Spanning Tree span guard timeout to the default value of 300 seconds. clear spantree spanguardtimeout 6-50 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a timeout value in seconds. Valid values are 0 (forever) to 65535.
Page 337: Show Spantree Spanguardlock
Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Port Parameters Specifies the port(s) for which to show span guard lock status. For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.1.2. 6-51...
Page 338: Clear Spantree Spanguardlock
6.2.2.22 show spantree spanguardtrapenable Use this command to display the state of the Spanning Tree span guard trap function. show spantree spanguardtrapenable 6-52 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 6.2.2.12). (Optional) Unlocks specific port(s). For a detailed...
Page 339: Set Spantree Spanguardtrapenable
This example shows how to enable the span guard trap function: Matrix>set spantree spanguardtrapenable enable Spanning Tree Configuration Command Set Reviewing and Setting Spanning Tree Port Parameters Disables or enables the span guard trap function. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 6-53...
Page 340: Clear Spantree Spanguardtrapenable
Syntax Description port-string Command Defaults None. Command Type Switch command. 6-54 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) for which to display point-to-point status. For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 341: Set Spantree Adminpoint
• false forces the port to be considered non point-to-point. • auto (the default setting) allows the firmware to determine the port’s point-to-point status. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 4.1.2. 6-55...
Page 342: Clear Spantree Adminpoint
This example shows how to reset the point-to-point status of the LAN segment attached to Fast Ethernet front panel port 3 to auto: Matrix>clear spantree adminpoint fe.0.3 6-56 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Resets point-to-point status on specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 343: Q Vlan Configuration
For information on this device’s port assignment scheme, refer to 7.1.2 Port String Syntax Used in the CLI For information on how to designate port numbers in the CLI syntax, refer to 802.1Q VLAN Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 4.1.1. Section 4.1.2.
Page 344: Process Overview: 802.1Q Vlan Configuration
• Create new VLANs from these dedicated ports, as described in this chapter. • In router mode, assign IP addresses to the new VLANs, as described in Configuration. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 7.3.1) (Section 7.3.2)
Page 345: Vlan Configuration Command Set
Use this command to display all information related to a specific VLAN or all VLANs known to the device (static and dynamic). show vlan [detail] [vlan-list | vlan-name] 7.3.1.2) 7.3.1.3) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Reviewing Existing VLANs...
Page 346 This example shows how to display the information for VLAN 7 only. In this case, VLAN 7 has a VLAN name of green and it is enabled. Fast Ethernet front panel ports 5 through 10, 12, and 30 are Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays detailed attributes of one or more VLANs.
Page 347 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Reviewing Existing VLANs Status: enabled Section 7.3.8. VLANs can also be Section 7.3.4.6: 7.3.2.1.
Page 348: Show Vlan Static
Forbidden Egress Ports None Untagged Ports None Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays specific VLAN(s). For VLAN name to display, it must first be set using the set vlan name command. For details, refer to Section 7.3.2.2.
Page 349: Show Vlan Portinfo
For details, refer to (Optional) Displays the VLAN list for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Reviewing Existing VLANs Section 7.3.2.2.
Page 350 VLANs 510, 520, 530, 4000 and 4094: Matrix>show vlan portinfo ge*.* Port ----------------------------------------------------------------- ge.0.1 ge.0.2 ge.0.3 ge.0.4 ge.0.5 ge.0.6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Ingress Egress Vlan Filter Vlan untagged: 1 untagged: 1 untagged: 1 untagged: 1 untagged: 1...
Page 351: Creating And Naming Static Vlans
Command Defaults None. 7.3.2.4) Creates, enables or disables a VLAN. Specifies the number of the VLAN(s) to be created, enabled or disabled. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Creating and Naming Static VLANs...
Page 352: Set Vlan Name
Command Defaults None. Command Type Switch command. Command Mode Read-Write. 7-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the VLAN to be named. Specifies the string used as the name of the VLAN (1 to 32 characters).
Page 353: Clear Vlan
This example shows how to remove a static VLAN 9 from the device’s VLAN list: Matrix>clear vlan 9 Specifies the VLAN(s) to be removed. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Creating and Naming Static VLANs...
Page 354: Clear Vlan Name
Read-Write. Example This example shows how to clear the name for VLAN 9: Matrix>clear vlan name 9 7-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the VLAN associated with the VLAN name to be cleared.
Page 355: Assigning Port Vlan Ids (Pvids) And Ingress Filtering
Assigning Port VLAN IDs (PVIDs) and Ingress Filtering 7.3.3.1) 7.3.3.3) 7.3.3.4) 7.3.3.5) (Optional) Displays the VLAN list for specific port(s). For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 4.1.2. 7-13...
Page 356: Set Port Vlan
None. Command Type Switch command. Command Mode Read-Write. 7-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) for which to configure a VLAN identifier. For a detailed description of possible port-string values, refer to Section 4.1.2. Specifies the VLAN to which port(s) will be added.
Page 357: Clear Port Vlan
Assigning Port VLAN IDs (PVIDs) and Ingress Filtering Specifies the port(s) to reset to the host VLAN ID 1. For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 7-15...
Page 358: Show Port Ingress Filter
Port -------- fe.0.10 fe.0.11 fe.0.12 fe.0.13 fe.0.14 fe.0.15 7-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays ingress filtering status for specific port(s). For a detailed description of possible port-string values, refer to Section State --------- disabled disabled...
Page 359: Set Port Ingress Filter
Specifies the port(s) to add to the device’s port ingress list. For a detailed description of possible port-string values, refer to Section 4.1.2. Enables or disables the port ingress filter function on the specified port(s). Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 7-17...
Page 360: Configuring The Vlan Egress List
Use this command to prevent one or more ports from participating in a VLAN. This setting instructs the device to ignore dynamic requests (either through GVRP or dynamic egress) for the port to join the VLAN. set vlan forbidden vlan-id port-string 7-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 7.3.4.1) 7.3.4.2) 7.3.4.3) 7.3.4.4) (Section 7.3.4.5)
Page 361: Show Port Egress
Section (Optional) Displays VLAN membership for specific port(s). For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Configuring the VLAN Egress List 4.1.2. 4.1.2. 7-19...
Page 362: Set Vlan Egress
If untagged is not specified, the port will be added to the VLAN egress list as able to transmit 802.1Q tagged frames. Command Type Switch command. 7-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Vlan Egress Status tagged untagged...
Page 363: Clear Vlan Egress
Specifies port(s) to remove from the VLAN egress list of the specified vlan-id. For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Configuring the VLAN Egress List Section 4.1.2.
Page 364: Show Vlan Dynamic Egress
10, 100, and 3072: Matrix>show vlan dynamicegress Dynamic Vlan Egress Status: Vlan Id ------- 3072 7-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays dynamic egress status for a specific VLAN ID or VLAN name. Status -------- enabled enabled...
Page 365: Set Vlan Dynamicegress
Matrix>set vlan dynamicegress 7 enable Specifies the number of the VLAN on which to enable or disable dynamic egress. Enables or disables dynamic egress. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Configuring the VLAN Egress List 7-23...
Page 366: Assigning Vlans According To Classification Rules
7.3.5 Assigning VLANs According to Classification Rules In addition to the commands described in this section, Matrix E1 (1G58x-09 and 1H582-xx) devices with firmware versions 2.05.xx and higher also support policy profile-based classification to a VLAN or Class of Service. Policy classification commands that can be used alternatively to VLAN classification commands are noted in the appropriate sections under the heading “Command Alternative (v2.05.xx and higher)”.
Page 367: Set Vlan Classification
VLAN based on Layer 2/3/4 classification rules, and • enable or disable a classification rule associated with a VLAN. Assigning VLANs According to Classification Rules (Section 8.3.2.1) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 7-25...
Page 368 7-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the VLAN on which to apply the classification rule. Valid values and associated actions are: • 4095: permits these frames to forward on all VLANs.
Page 369 VLAN classification rules may not be implemented. If a classification rule is entered in this command, this entry disables that VLAN classification rule for the designated VLAN. Table 7-2. (Section 8.3.2.2) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 7-27...
Page 370: Valid Values For Vlan Classification And Frame Filtering
NOTES: Classification data_meanings and data_values are NOT case sensitive. Hyphens in parameters must be entered as shown. 7-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 7-2 to disable a VLAN 5 classification rule for filtering out...
Page 371 Netbios (F0F0) • SNA (0000, 0404, 0808 and 0C0C) data_value(s) Integer (0 - 255) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set data_ mask Not applicable. 7-2. IP and DECNET rules also Not applicable. data_ mask...
Page 372 Additional entries will fail. IPX Network Group: Src-IPX-Network Dest-IPX-Network Bil-IPX-Network 7-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide • Integer (0 - 255) • ICMP • IGMP •...
Page 373 Same selection as for UDP Port Group • Integer (0 - 65535) • Diagnostics • IPX-WAN • • Netbios • NLSP • • Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Not applicable. data_ mask Not applicable. Not applicable. 7-31...
Page 374: Classification Precedence Rules
Exact Match indicates a match of an explicitly defined address. Best Match indicates a match of an entire subnet, or range of addresses within a subnet. 7-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide MAC Address: 00-00-00-00-00-00 Lower boundary of port...
Page 375 Destination MAC Address Best Match Source IPX Network Number Destination IPX Network Number IPX Source Socket IPX Destination Socket Assigning VLANs According to Classification Rules Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Default Precedence Level Default Precedence Level...
Page 376: Clear Vlan Classification
Command Type Switch command. Command Mode Read-Write. 7-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the VLAN associated with the classification to be cleared. Specifies the data_meaning of the classification to be cleared. Refer to...
Page 377: Set Vlan Classification Ingress
(Not required for most data values.) This entry is dependent on the data_value entered. For details, refer to Table 7-2. Table 7-2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Table 7-1 Table 7-2 for the limitations. 7-35...
Page 378: Clear Vlan Classification Ingress
Matrix>set vlan classification ingress 5 fe.0.5-10 src-udp-range 45 53 7.3.5.7 clear vlan classification ingress Use this command to remove ports from a VLAN classification rule. clear vlan classification ingress vlan-id port-string data_meaning data_value [data_mask} 7-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 8.3.3.2)
Page 379 (Not required for most data values.) This entry is dependent on the data_value entered. For details, refer to Table 7-2. Table 7-2. (Section 8.3.3.3) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 4.1.2. Table 7-1 Table 7-2 for the limitations. 7-37...
Page 380: Setting The Host Vlan
Use this command to display the current host VLAN. show host vlan Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Only. 7-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 7.3.6.1) 7.3.6.2) 7.3.6.3)
Page 381: Set Port Vlan Host
Command Alternative (v2.05.xx and previous) set host vlan vlan-id Section 7.3.2. Specifies the number of the VLAN to set as the host VLAN. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Setting the Host VLAN 7-39...
Page 382: Clear Host Vlan
Syntax Description None. Command Defaults None. Command Type Switch Command. Command Mode Read-Write. Example This example shows how to set the host VLAN to the default setting: Matrix>clear host vlan 7-40 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 383: Creating A Secure Management Vlan
(Section (Optional) show vlan set port vlan host (Optional) show host vlan set community (Optional) show community Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set Creating a Secure Management VLAN 5.2.2.8). Table 7-4 and described 7.3.2.1) 7.3.2.2)
Page 384: Enabling/Disabling Gvrp (Garp Vlan Registration Protocol)
Device 2, which is connected to Device 3 and Device 5 declares the same information to those two devices and the port egress list of each port is updated with the new information, accordingly. 7-42 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Figure 7-1 shows an example of...
Page 385: Example Of Vlan Propagation Via Gvrp
The commands used to configure GVRP are listed below and described in the associated section as shown. • show gvrp (Section 7.3.8.1) • show garp timer (Section Enabling/Disabling GVRP (GARP VLAN Registration Protocol) 7.3.8.2) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 7-43...
Page 386: Show Gvrp
7-44 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays GVRP configuration information for specific port(s). For a detailed description of possible port-string values, refer to GVRP Status --------- enabled enabled...
Page 387: Show Garp Timer
IEEE 802.1Q documentation, which is not supplied with this device. Enabling/Disabling GVRP (GARP VLAN Registration Protocol) (Optional) Displays GARP timer information for specific port(s). For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 4.1.2. 7-45...
Page 388 Table 7-5 show gvrp configuration Output Details Output Port Number Join Leave Leaveall 7-46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Join Leave ---------- ---------- What It Displays... Port designation. For a detailed description of possible port-string values, refer to Join timer setting.
Page 389: Set Gvrp
Matrix>set gvrp enable fe.0.1 Enabling/Disabling GVRP (GARP VLAN Registration Protocol) (Optional) Disables or enables GVRP on specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 7-47...
Page 390: Set Garp Timer
This example shows how to set the GARP join timer value to 100 centiseconds for all the ports on all the VLANs: Matrix>set garp timer join 100 7-48 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Sets the GARP join timer in centiseconds (Refer to 802.1Q standard.) 802.1Q standard.) Sets the GARP leaveall timer in centiseconds (Refer to 802.1Q standard.)
Page 391 This example shows how to set the leaveall timer value to 20000 centiseconds for all the ports on all the VLANs: Matrix>set garp timer leaveall 20000 Enabling/Disabling GVRP (GARP VLAN Registration Protocol) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide VLAN Configuration Command Set 7-49...
Page 392 VLAN Configuration Command Set Enabling/Disabling GVRP (GARP VLAN Registration Protocol) 7-50 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 393: Policy Classification Configuration
This chapter describes the Policy Classification set of commands and how to use them. NOTE: It is recommended that you use Enterasys Networks NetSight Atlas Policy Manager as an alternative to CLI for configuring policy classification on Matrix E1 Series devices.
Page 394: Policy Classification Configuration Command Set
[profile-index] Syntax Description profile-index Command Defaults If profile-index is not specified, all policy profile information will be displayed. Command Type Switch command. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 8.3.1.1) 8.3.1.2) 8.3.1.3) (Section 8.3.1.4) (Section 8.3.1.5) (Section 8.3.1.6)
Page 395 Whether or not Class of Service override is enabled or disabled for this profile. Class of Service value enabled or disabled for override. Ports currently operating with this policy profile. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Policy Profiles...
Page 396: Set Policy Profile
Command Type Switch command. Command Mode Read-Write. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies an index number for the profile entry. Valid values are 1 to 65535. Enables or disables the profile entry. Specifies a name for the entry.
Page 397: Clear Policy Profile
Syntax Description None. Policy Classification Configuration Command Set Specifies the index number of the profile entry to be deleted. Valid values are 1 to 65535. Deletes all policy profile entries. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Policy Profiles...
Page 398: Set Policy Invalid Action
Command Type Switch command. Command Mode Read-Write. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Instructs the device to ignore this result and search for the next policy assignment rule. Instructs the device to block traffic. Instructs the device to forward traffic as if no policy has...
Page 399: Clear Policy Invalid Action
Command Defaults None. Command Type Switch command. Command Mode Read-Write. Example This example shows how to reset the invalid policy action: Matrix>clear policy invalid action Policy Classification Configuration Command Set Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Policy Profiles...
Page 400: Assigning Classification Rules To Policy Profiles
Use this command to display policy classification information. show policy class [profile-index] Syntax Description profile-index Command Defaults If profile-index is not specified, information will be displayed for all profiles. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 8.3.2.1) 8.3.2.2) 8.3.2.4) 8.3.2.5) (Section 8.3.2.6)
Page 401: Set Policy Classify
| udpportbil | udpportdest | udpportsource | udpsrcrange} data_value [data_mask] NOTE: Classification rules are automatically enabled when created. Policy Classification Configuration Command Set Assigning Classification Rules to Policy Profiles AdminID OperID ------- ------ Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 402 8-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a profile index number. Assigned to this classification rule with the set policy profile command (Section 8.3.1.2). Valid values are 1 to 65535. Specifies a number of the classification rule. Valid values are 1 to 65535.
Page 403 (Not required for most data values.) Specifies a value dependent on the data-value entered. Refer to for valid values for each classification type and data value. Table 8-2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 8-2 8-11...
Page 404 Table 8-2 Valid Values for Policy Classification Classification Parameter ether 8-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 8-2 to create (and enable) classification rule number 1. This Table 8-2 to create (and enable) classification rule number 5. This will be dropped and not forwarded.
Page 405 0 - 255 IPX packet type field (0 - 255) IPX Address: 0 - 0xffffffff IPX Socket Number: 0 - 65535 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide data_mask Data mask bits Not applicable. Not applicable Not applicable. Not applicable.
Page 406 UDP Range (Bilateral, Source or Destination): udpbilrange udpdsrcrange udpdestrange 8-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide data_value MAC Address: 00-00-00-00-00-00 TCP Port Number: 0 - 65535 Lower boundary of port range: 0 - 65535 UDP Port Number:...
Page 407: Classification Precedence Rules
IP Protocol Type / IPX Packet Type Policy Classification Configuration Command Set Assigning Classification Rules to Policy Profiles as these rules can have a significant impact on the following applies: Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Precedence Level 8-15...
Page 408: Clear Policy Class
This example shows how to delete all policy classification entries: Matrix>clear policy class all 8-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the profile index number of the policy classification to be deleted. Valid values are 1 to 65535.
Page 409: Show Policy Maptable
Policy map response: Policy Mappings --------------- Policy map last changed at sysUpTime: VLAN Id ------- Policy Classification Configuration Command Set Assigning Classification Rules to Policy Profiles policyProfile Policy Profile Index -------------------- Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide days 00:07:34 8-17...
Page 410: Show Vlanauthorization
--More-- 8-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Status VLAN Id -------- --------- enabled enabled enabled enabled enabled enabled enabled enabled enabled enabled enabled...
Page 411: Set Vlanauthorization
(Optional) Specifies the port(s) on which VLAN tunnel attribute processing will be enabled or disabled. VLAN authorization must be globally enabled, and enabled on all authentication ports, for policy authentication using a VLAN tunnel attribute to take effect. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 8-19...
Page 412: Set Policy Maptable Response
Use this command to clear the policy map table response configuration. clear policy maptable response Syntax Description None. Command Defaults None. 8-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 8.3.2.7). If a port is authenticated Configures policy authentication to use the profile filter ID or VLAN tunnel attributes.
Page 413: Set Policy Maptable
Specifies the VLAN(s) for which policy authentication via a VLAN-to-policy mapping will be allowed. Specifies the profile index number of the policy classification to be authenticated. Valid values are 1 to 65535. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 8.3.2.7), 8-21...
Page 414: Clear Policy Maptable
Example This example shows how to clear the policy profile mapping for VLAN 10: Matrix>clear policy maptable 6 8-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Specifies the VLAN(s) for which policy to VLAN mapping will be cleared.
Page 415: Assigning Ports To Policy Profiles
Policy Classification Configuration Command Set 8.3.3.1) 8.3.3.2) 8.3.3.3) (Optional) Displays policy classification information for a specific port. For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Assigning Ports to Policy Profiles Section 4.1.2. 8-23...
Page 416: Set Policy Port
This example shows how to allow Fast Ethernet front panel ports 5 through 15 to classify frames according to policy profile 5: Matrix>set port policy fe.0.5-15 5 8-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide AdminId OperId Specifies the port(s) to add to the policy profile. For a...
Page 417: Clear Policy Port
Policy Classification Configuration Command Set Specifies the port(s) to remove from a policy profile. For a detailed description of possible port-string values, refer Section 4.1.2. Deletes all policy port entries. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Assigning Ports to Policy Profiles 8-25...
Page 418 Policy Classification Configuration Command Set Assigning Ports to Policy Profiles 8-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 419: Port Priority And Classification Configuration
9.1.1 Priority In addition to the commands described in this section, Matrix E1 (1G58x-09 and 1H582-xx) devices with firmware versions 2.05.xx and higher also support policy profile-based classification to a Class of Service or VLAN. Policy classification commands that can be used alternatively to priority classification commands are noted in the appropriate sections under the heading “Command Alternative (v2.05.xx and higher)”.
Page 420: Priority Queueing Modes (Algorithms)
Therefore, when combined with the appropriate admission control, it can have a guaranteed delay for the frames it holds while the other 3 queues run in WRR for “assured bandwidth” traffic. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 421: Port Classification
802.1Q tagged frame, and • overwrite an existing ToS value. Port Priority and Classification Configuration Summary Section 9.3.4.8. For details on how this feature changes Table Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Port Classification For details on 9-2.
Page 422: Process Overview: Priority, Classification, And Rate Limiting Configuration
The commands to configure port priority are listed below and described in the associated section. • show port priority (Section • set port priority (Section • clear port priority (Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 9.3.1) (Section 9.3.2) (Section 9.3.3) (Section 9.3.4) (Section 9.3.6)
Page 423: Show Port Priority
Port Priority and Classification Configuration Commands (Optional) Displays priority information for specific port(s). For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Port Priority 4.1.2.
Page 424: Clear Port Priority
Syntax Description port-string Command Defaults None. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port for which to set priority. For a detailed description of possible port-string values, refer to Section 4.1.2. Specifies an 802.1D port priority. Valid values are 0 - 7, with 0 as the lowest priority.
Page 425: Configuring Priority To Transmit Queue Mapping
[priority] Port Priority and Classification Configuration Commands Configuring Priority to Transmit Queue Mapping 9.3.2.2). 9.3.2.1) 9.3.2.2) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 9.3.1.2), or according to a Section 9.3.2.2.
Page 426 This example shows how to display the transmit queue associated with priority 5. Matrix>show priority queue 5 Priority ---------- Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays mapping of transmit queues for a specific priority (0 - 7). TxQueue...
Page 427: Set Priority Queue
(0 - 3) entered in this command. Specifies a value of 0 - 3 (0 is the lowest level) that determines when to transmit the frames with the port priority entered in this command. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 428 This example shows how to use the set priority queue command to program the device so the priority 5 frames received are transmitted at the lowest transmit priority queue of 0: Matrix>set priority queue 5 0 9-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 429: Configuring Quality Of Service (Qos)
Port Priority and Classification Configuration Commands 9.3.3.2) 9.3.3.3) 9.3.3.4) (Optional) Display QoS settings for specific port(s). For a detailed description of possible port-string values, refer Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Quality of Service (QoS) 9-11...
Page 430: Set Port Qos Sp
This example shows how to set strict queues on the front panel Fast Ethernet port 13. With this configuration, all frames in the next higher queue must always be processed first: Matrix>set port qos sp fe.0.13 9-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Queue Queue 0 Queue 1...
Page 431: Set Port Qos Wrr
Specifies a percentage of weight (0 through 100, with 25 as the default) for queue 2. Specifies a percentage of weight (0 through 100, with 25 as the default) for queue 3. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Quality of Service (QoS) 4.1.2. 9-13...
Page 432: Set Port Qos Hybrid
Switch command. Command Mode Read-Write. 9-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies an integer (1 or 2) to select the hybrid mode of operation. Specifies port(s) on which to set QoS weighted queues. For a detailed description of possible port-string values,...
Page 433 2, frames in Queues 1 and 0 will be serviced using the WRR algorithm: Matrix>set port qos hybrid 2 fe.0.1-3 20 80 Port Priority and Classification Configuration Commands Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Quality of Service (QoS) 9-15...
Page 434: Configuring Priority Classification
• set priority classification tosvalue • clear priority classification tosvalue • show priority classification qtagoverride • set priority classification qtagoverride 9-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 9.3.4.1) (Section 9.3.4.2) (Section 9.3.4.4) (Section 9.3.5.1) (Section 9.3.5.2)
Page 435: Show Priority Classification
Priority: 5, Src UDP Range: 44-46, Status: enabled, Tos Value: 0, Port List: None Port Priority and Classification Configuration Commands (Section 8.3.2.1) Tos Status: disabled, Tos Status: disabled, Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Priority Classification Section 9.3.5.1. 9-17...
Page 436: Set Priority Classification
Command Alternative (v2.05.xx and higher) set policy classify 9-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a port priority number (0 through 7) to which the frame classification is applied. Specifies the parameters used to classify frames. Refer to...
Page 437: Valid Values For Priority Classification
NOTES: Classification data_meanings and data_values are NOT case sensitive. Hyphens in parameters must be entered as shown. Port Priority and Classification Configuration Commands Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Priority Classification 9-19...
Page 438 Table 9-1 Valid Values for Priority Classification data_meaning keywords Ethernet-II-Type 802.3-SAP IP-TOS (Type of Service) IP-Protocol-Type IPX-COS (Class of Service) IPX-Packet-Type 9-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide data_value keywords • 05F6 - FFFF (valid range) • AppleTalk (809B) • Banyan-Vines (0BAD) •...
Page 439 • Netbios-Name-Server • Netbios-Sess-Server • POP3 • • Smart-Voice-Gateway • SMTP • Telnet • TFTP Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Priority Classification data_ mask Data mask in dotted decimal format: 000.000.000.000 Not applicable. Not applicable. 9-21...
Page 440 Bil-MAC-Address UDP Range Group: Src-UDP-Range Dest-UDP-Range Bil-UDP-Range TCP Range Group: Src-TCP-Range Dest-TCP-Range Bil-TCP-Range 9-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide data_value keywords Same selection as for UDP Port Group • Integer (0 - 65535) • Diagnostics • IPX-WAN •...
Page 441: Clear Priority Classification
(Optional for most data values) Specifies a value dependent on the data_value entered. For details, refer to Table 9-1. Table 9-1. (Section 8.3.2.4) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Priority Classification for the list of data_meaning Table 9-1 for the limitations. 9-23...
Page 442: Set Priority Classification Tosvalue
IP-based network those packets which should have preferential treatment on a Class of Service (CoS) basis. set priority classification tosvalue tos_value priority_value data_meaning data_value [data_mask] 9-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 9-1). Together with the 802.1p priotity and IP, ToS fields enable...
Page 443 (Not required for most data values) Specifies a value dependent on the data_value entered. For details, refer to Table 9-1. Table 9-1. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Priority Classification Table 9-1 for the list of the 9-25...
Page 444: Set Priority Classification Tosstatus
Matrix>set priority classification tosstatus 7 ethernet-II-type IP enable 9-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a port priority (0 through 7) associated with the classification to be enabled or disabled. Specifies the data_meaning for the parameter used to classify frames.
Page 445: Show Priority Classification Qtagoverride
9.3.4.8, this feature lowers the precedence level of 802.1Q (Optional) Displays status of the 802.1p priority tag override feature on specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Priority Classification 9-27...
Page 446: Classification Precedence Rules
ISO layer, associated classification, default precedence levels, and precedence levels with priority tag override enabled. 9-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) for which to enable or disable priority tag override. For a detailed description of possible port-string values, refer to Enables or disables priority tag override.
Page 447 Port Priority and Classification Configuration Commands the following applies: Precedence Level (Default) Precedence Level (Default) Precedence Level (Default) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Classification Precedence Rules With 802.1Q Priority Tag Override With 802.1Q Priority Tag Override With 802.1Q...
Page 448 Destination MAC Address Best Match Source IPX Network Number Destination IPX Network Number IPX Source Socket IPX Destination Socket IPX Class of Service IPX Type Protocol Type (Ether Type or DSAP/SSAP) Receive Port 9-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 449: Set Priority Classification Ingress
(Not required for most data values) Specifies a value dependent on the data_value entered. For details, refer to Table 9-1. Table 9-1. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Classification Precedence Rules Section 4.1.2. Table 9-1 for the list of the...
Page 450: Clear Priority Classification Ingress
Command Type Switch command. 9-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the port priority (0 through 7) being removed from the priority ingress classification list. Specifies the port(s) being removed from the port priority ingress classification list.
Page 451 This example shows how to clear Fast Ethernet front panel ports 5 to 7 from the Src UDP Range 44 46 classification rule: Matrix>clear priority classification ingress 5 fe.0.5-7 src-udp-range 44 46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 9-33...
Page 452: Configuring Port Traffic Rate Limiting
Command Defaults If port-string is not specified, rate limiting information will be displayed for all ports. 9-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 9.3.6.1) 9.3.6.2) 9.3.6.3) (Optional) Displays rate limiting parameters for specific port(s). For a detailed description of possible port-string...
Page 453 195000 195000 195000 195000 195000 195000 195000 195000 195000 195000 195000 195000 195000 195000 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Port Traffic Rate Limiting Type Status -------- discard disabled discard disabled discard disabled discard disabled discard disabled...
Page 454: Set Port Ratelimit
Switch command. Command Mode Read-Write. 9-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Disables or enables rate limiting globally on the device. Specifies port(s) on which to set the rate limiting threshold and other parameters. For a detailed description of possible port-string values, refer to Section 4.1.2.
Page 455: Clear Port Ratelimit
0 - 7, with 0 specifying the lowest priority, and • all to reset the rate limiting threshold and other parameters on all port priority levels associated with the port-string. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Port Traffic Rate Limiting 9-37...
Page 456 Configuring Port Traffic Rate Limiting Example This example shows how to reset rate limiting on port priority 5 for Fast Ethernet front panel ports 3 through 7: Matrix>clear port ratelimit fe.0.3-7 5 9-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 457: Igmp Configuration
Use the following steps as a guide in the IGMP configuration process: 1. Enabling / disabling IGMP (Section 10.2.1) 2. Setting IGMP query interval and response time (Section 10.2.2) 3. Reviewing IGMP groups (Section 10.2.3) 4. Configuring IGMP VLAN registration (Section 10.2.4) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 10-1...
Page 458: Igmp Configuration Command Set
Command Type Switch command. Command Mode Read-Only. 10-2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays a list of IGMP streams and client connection ports. (Optional) Displays (in seconds) the frequency of host-query frame transmissions. (Optional) Displays (in tenths of a second) the maximum...
Page 459: Set Igmp
Matrix>set igmp enable This example shows how to disable IGMP snooping on the device: Matrix>set igmp disable Enables or disables IGMP snooping on the device. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IGMP Configuration Command Set Enabling / Disabling IGMP 10-3...
Page 460: Setting Igmp Query Interval And Response Time
Switch command. Command Mode Read-Only. Example This example shows how to display IGMP query count status: Matrix>show igmp query-interval IGMP query interval is 125 seconds. 10-4 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 10.2.2.1) (Section 10.2.2.2) (Section 10.2.2.3) (Section...
Page 461: Set Igmp Query-Interval
Switch command. Command Mode Read-Only. Setting IGMP Query Interval and Response Time Specifies the frequency of host-query frame transmissions. Valid values are from 30 to 600 seconds. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IGMP Configuration Command Set 10-5...
Page 462: Set Igmp Response-Time
This example shows how to set the IGMP response time to 200 tenths of a second: Matrix>set igmp response-time 200 10-6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the maximum query response time. Valid values are 10 to 255 tenths of a second.
Page 463: Reviewing Igmp Groups
Vlan Id = 1 IGMP Port List = ----------------------------------------------------------------- Multicast group list processed. 10.2.3.1) MultiCast IP = 224.47.239.73 fe.0.25, fe.0.31, fe.0.43, fe.0.47 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IGMP Configuration Command Set Reviewing IGMP Groups Type = IGMP 10-7...
Page 464 This example shows the display when no IGMP groups have been configured on the device: Matrix>show igmp groups Multicast group list processed. 10-8 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide provides details of the command output. What It Displays... VLAN segment configured for IGMP.
Page 465: Configuring Igmp Vlan Registration
10.2.4.3) 10.2.4.4) (Optional) Displays IVR information for specific port(s). For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IGMP Configuration Command Set Configuring IGMP VLAN Registration Section 10.3.1. 4.1.2. 10-9...
Page 466: Set Igmp Mode Vlan
10.2.4.2 set igmp mode vlan Use this command to set the VLAN registered to forward multicast traffic to all subscribing, or “open” ports. set igmp mode vlan vlan_id 10-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Mode Port open fe.0.2 provides details of the command output.
Page 467: Set Igmp Mode Ipaddress
Specifies the IGMP registered VLAN. Specifies the virtual IP address associated with the vlan_id used in the set igmp mode vlan command (Section 10.2.4.2). Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IGMP Configuration Command Set Configuring IGMP VLAN Registration 10-11...
Page 468: Set Igmp Mode
This example shows how to set the IGMP mode to open for front panel Fast Ethernet ports 1 through Matrix>set igmp mode fe.0.1-3 open 10-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies port(s) for which to set IGMP mode. For a detailed description of possible port-string values, refer Section 4.1.2.
Page 469: About Igmp
IVR allows a user on a port to subscribe and unsubscribe to a multicast stream on the network-wide multicast VLAN, using IGMP open mode. It allows the single Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide About IGMP...
Page 470 IP address, as long as that IP address is valid for the IGMP VLAN. If GVRP is enabled, the IGMP VLAN will be propagated dynamically through the network using the GVRP protocol. For more information on GVRP, refer to 10-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 7.3.8.
Page 471: Logging And Switch Network Management
• Managing Switch Network Addresses • Configuring Simple Network Time Protocol (SNTP) • Configuring Node Aliases • Configuring Convergence End Points (CEP) phone detection Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 11.2.1) (Section (Section 11.2.3) (Section (Section 11.2.5) 11.2.2)
Page 472: Logging And Network Management Command Set
• set logging application (Section • clear logging application • show logging audit-trail • copy audit-trail (Section 11-2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11.2.1.2) 11.2.1.3) 11.2.1.4) 11.2.1.5) 11.2.1.6) 11.2.1.7) 11.2.1.8) 11.2.1.9) 11.2.1.10) (Section 11.2.1.11) 11.2.1.12)
Page 473: Set Logging
6 or higher. Syntax Description None. Command Defaults None. Logging and Network Management Command Set Enables or disables Syslog. Section 11.2.1.12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging to set the logging level for 11-3...
Page 474 Logging and Network Management Command Set Configuring System Logging Command Type Switch command. Command Mode Read-Only. 11-4 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 475 Envoy RtrDvmrp RtrOspf Eapol Radius Trunking CiscoDP MacAuth Alias SNMP sntp Telnet SysDownload PortMirroring Webview -- More -- Logging and Network Management Command Set Current Severity Level Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging 11-5...
Page 476 Table 11-1 show logging all Output Details Output Global Logging State Application Current Severity Level Defaults IP Address 11-6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Continued from previous page) alerts(2) warnings(5) debugging(8) Severity emergencies(1) Severity notifications(6) provides an explanation of the command output.
Page 477: Show Logging Console
Text string description of this facility/server. UDP port the client uses to send to the server. Whether or not this Syslog configuration is currently enabled or disabled. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging Table 11-1.
Page 478: Set Logging Console
11.2.1.5 show logging server Use this command to display the Syslog configuration for a particular server. 11-8 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the severity level at which log messages will display to the console. Valid values and corresponding...
Page 479 Logging and Network Management Command Set (Optional) Displays Syslog information pertaining to a specific server table entry. Valid values are 1-8. Table 11-1. Severity warnings(5) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging Port Status active 11-9...
Page 480: Set Logging Server
None. Command Type Switch command. 11-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the server table index number for this server. Valid values are 1 - 8. Specifies the Syslog message server’s IP address. Specifies the server’s facility name. Valid values are: local0 to local7.
Page 481: Clear Logging Server
Use this command to display the Syslog server default values. show logging default Logging and Network Management Command Set Specifies the server table index number for the server to be removed. Valid values are 1 - 8. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging 11-11...
Page 482: Set Logging Default
6 or higher. 11.2.1.9 set logging default Use this command to set logging default values. set logging default {facility facility | severity severity | port port} 11-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 11-1. Severity Port warnings(5) Section 11.2.1.12...
Page 483 5 - warning conditions 6 - notifications (significant conditions) 7 - informational messages 8 - debugging messages Specifies the default UDP port the client uses to send to the server. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging 11-13...
Page 484: Clear Logging Default
None. Command Type Switch command. 11-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Resets the default facility name to local7. (Optional) Resets the default logging severity level to 5 (warning conditions). (Optional) Resets the default UDP port the client uses to...
Page 485 RtrCfg etsVlan rtrDvmrp rtrOspf -- More -- Table 11-2 Logging and Network Management Command Set Current Severity Level provides an explanation of the command output. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging Table 11-3. 11-15...
Page 486: Set Logging Application
Use this command to set the severity level of log messages for an application. set logging application {mnemonic | all} level 11-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Mnemonic values for applications being logged. For details...
Page 487 2 - alerts (immediate action required) 3 - critical conditions 4 - error conditions 5 - warning conditions 6 - notifications (significant conditions) 7 - informational messages 8 - debugging messages Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging Table 11-3. 11-17...
Page 488 RtrCfg etsVlan rtrACL rtrDvmrp rtrOspf Eapol 11-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Application Applications not explicitly included in Matrix E1 device. 802.1D Generic Attribute Resolution Protocol (GVR/GMRP) 802.1D Spanning Tree (802.1w/802.1s) IETF Bridge MIB component Internet Group Management Protocol 802.1D/Q compliant filter database...
Page 489 MAC authentication Node and alias Simple Network Management Protocol Simple Network Time Protocol Command Line Interface Telnet server and client System download Port mirroring (redirect) Enterasys’ WebView management application Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging 11-19...
Page 490: Clear Logging Application
The device can store up to 200 messages. show logging audit-trail [file] Syntax Description file 11-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Resets the severity level for a specific application. Valid mnemonic values and their corresponding applications are listed in Table 11-3.
Page 491: Copy Audit-Trail
Specifies the target file where the Syslog audit trail will be copied. This can be a local file in NVRAM or a file on a TFTP server. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring System Logging (host)Bad Source Address...
Page 492: Monitoring Switch Network Events And Status
(Section 11.2.2.9) • disconnect (Section 11.2.2.10) 11.2.2.1 show eventlog Use this command to display system events for the switch. show eventlog Syntax Description None. 11-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11.2.2.1) 11.2.2.2) 11.2.2.8) file on the Syslog...
Page 493: Clear Eventlog
This example shows how to clear the event log: Matrix>clear eventlog Logging and Network Management Command Set Monitoring Switch Network Events and Status ) system started ) system started ) system started Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-23...
Page 494: History
1 show arp 2 history 3 show ip 4 show cdp fe.0.1 5 history 11.2.2.4 repeat Use this command to repeat a command shown in the command history buffer. repeat [cmd_num] [iterations] 11-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11.2.2.6).
Page 495 (Optional) Specifies the number of times to re-execute the command. Valid values are 0 to 2147483647. Entering 0 causes the specified cmd_num to be repeated endlessly until the user enters Ctrl+C. flags Refcnt Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Interface host0 11338 host0 11-25...
Page 496: Show History
Syntax Description size Command Defaults None. Command Type Switch command. Command Mode Read-Write. 11-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the size of the history buffer in lines. Valid values are from 1 to 32.
Page 497: Show Netstat
(Optional) Displays Internet Protocol (IP) statistics. (Optional) Displays the IP routing table. (Optional) Displays all statistics for TCP, UDP, IP, and ICMP. (Optional) Displays Transmission Control Protocol (TCP) statistics. (Optional) Displays User Datagram Protocol (UDP) statistics. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-27...
Page 498: Show Rmon Stats
Foreign Address (state) 11.2.2.8 show rmon stats Use this command to display RMON statistics for one or more ports. show rmon stats [port-string] 11-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Local Address ------------------ ------------------ ------- 0.0.0.0.80 0.0.0.0.23 0.0.0.0.162 0.0.0.0.161...
Page 499 = 230 = 12164 = 1894 = 732 = 35 = 80 provides an explanation of the command output. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Monitoring Switch Network Events and Status Jabbers Octets 64 Octets 127 Octets 255 Octets...
Page 500 CRC Errors Undersize Pkts Oversize Pkts 11-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Current Ethernet interface for which statistics are being shown. The device has an embedded RMON agent that gathers statistics for each interface.
Page 501: Show Users
FCS bytes). were between 512 and 1023 bytes in length (excluding framing bits, but including FCS bytes). were between 1024 and 1518 bytes in length (excluding framing bits, but including FCS bytes). Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-31...
Page 502 This example shows how to use the show users command. In this output, there is one Telnet user at IP address 10.1.10.10: Matrix>show users Console Port ------------ Active Number of telnet users: 1 Telnet Session Users -------------------- 10.1.10.10 11-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 503: Disconnect
Specifies the IP address of the Telnet session to be disconnected. This address is displayed in the output shown in Section 11.2.2.9. Closes an active console port. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 11-33...
Page 504 11.2.3.21) • ping (Section 11.2.3.22) • traceroute (Section 11.2.3.23) • set mac multicast (Section • show mac multicast (Section 11-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11.2.3.9) 11.2.3.10) 11.2.3.11) 11.2.3.12) 11.2.3.13) 11.2.3.14) 11.2.3.15) 11.2.3.17) 11.2.3.18) 11.2.3.20) 11.2.3.24) 11.2.3.25)
Page 505: Show Arp
Use this command to add mapping entries to the switch’s ARP table. set arp ip_address mac_address [temp] [pub] [trail] Logging and Network Management Command Set flags Refcnt Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses Interface host0 11338...
Page 506: Clear Arp
Use this command to delete a specific entry or all entries from the switch’s ARP table. clear arp [hostname | ip_address] 11-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the IP address to map to the MAC address and add to the ARP table.
Page 507: Show Rad
(Optional) Specifies the IP address in the ARP table to be cleared. An IP alias or host name that can be resolved through the DNS can be specified instead of an IP address. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 11-37...
Page 508: Set Rad
Use this command to display MAC addresses information in the switch’s routing table. show mac [address mac address] [fid vlan_id] [port port-string] [type {learned | self | mgmt}] 11-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables or disables RAD.
Page 509 - Shows MAC addresses connected to the management (host) ports. Static Address Counts : 0 Port host.0.1 fe.0.43 ge.2.1 fe.0.14 fe.0.46 ge.2.1 host.0.1 host.0.1 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 4.1.2. Type self learned learned learned learned learned mgmt mgmt...
Page 510 Counts MAC Address Port Type 11-40 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide provides an explanation of the command output. What It Displays... Default MAC algorithm mode. Current MAC algorithm mode, which is set with the set mac algorithm command Time in seconds to age out inactive MAC address entries.
Page 511: Set Mac
Adds a temporary entry to the MAC address table. Adds a dynamic entry to the MAC address table. Adds a permanent entry to the MAC address table. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 11-41...
Page 512: Clear Mac
This example shows how to clear all dynamic MAC address information: Matrix>clear mac 11-42 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Removes all dynamic MAC address entries attached to the specified VLAN. If you enter a multicast MAC address and ingress VLAN...
Page 513: Show Mac Agingtime
MAC Address ---------------------------------------------------------- No Mac address entries available. Logging and Network Management Command Set Ingress VLAN Static Address Counts : 0 Port Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses Egress VLAN Counts : Type 11-43...
Page 514: Set Mac Agingtime
Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Write. 11-44 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of seconds for MAC aging time. Valid values are 10 to 630.
Page 515: Show Port Stopaging
Logging and Network Management Command Set (Optional) Displays status for specified port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Status: Aging Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 11-45...
Page 516: Set Port Stopaging
This example shows how to enable the stop aging function on Fast Ethernet front panel ports 1 through 8: Matrix>set port stopaging fe.0.1-8 11-46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) on which to enable or disable the stop aging function. For a detailed description of possible port-string values, refer to Section (Optional) Enables or disables the stop aging function.
Page 517: Clear Port Stopaging
Logging and Network Management Command Set (Optional) Resets the stop aging function on specific port(s). For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 4.1.2. 11-47...
Page 518 Command Mode Read-Write. 11-48 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Sets the mode to MAC random algorithm, which is best used by networks having a single MAC per VLAN that do not need the VLAN ID to be used in Layer 2 lookups.
Page 519: Show Dns
DNS Servers ------------------ 131.141.92.38 131.141.92.39 131.141.92.30 11.2.3.17set dns domain Use this command to set the DNS domain name. set dns domain domain-name Logging and Network Management Command Set Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 11-49...
Page 520: Clear Dns Domain
Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Write. Example This example shows how to clear the DNS domain name: Matrix>clear dns domain 11-50 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a DNS domain name.
Page 521: Set Dns Server
Switch command. Command Mode Read-Write. Logging and Network Management Command Set Specifies an IP address of a DNS server. Specifies an IP address of a DNS server. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 11-51...
Page 522: Clear Dns
Use this command to clear all DNS information. clear dns Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Write. Example This example shows how to clear all DNS information: Matrix>clear dns 11-52 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 523: Ping
Specifies a host name or an IP address of the device to which the ping will be sent. (Optional) Specifies the number of packets to send. Valid values are from 1 to 2147483647. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 11-53...
Page 524 Reply from 10.1.10.1 Reply from 10.1.10.1 Reply from 10.1.10.1 Reply from 10.1.10.1 Reply from 10.1.10.1 Reply from 10.1.10.1 Reply from 10.1.10.1 PING 10.1.10.1: Statistics 9 packets transmitted, 9 packets received, 0% packet loss 11-54 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 525: Traceroute
(Optional) Specifies the use of ICMP echo requests rather than UDP datagrams. (Optional) Displays hop addresses numerically. (Supported in a future release.) (Optional) Displays verbose output, including the size and destination of each response. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 11-55...
Page 526 Command Type Switch command. Command Mode Read-Only. 11-56 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Prevents traceroute from calculating checksums. Specifies the host to which the route of an IP packet will be traced. (Optional) Specifies the length of the probe packet.
Page 527: Set Mac Multicast
Specifies the number identifying the ingress VLAN of the MAC address – VLAN pair to scope to the specified egress VLAN. Specifies the number identifying the egress VLAN. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses 20.000 ms 20.000 ms 20.000 ms...
Page 528 This example scopes the multicast MAC address 01:00:00:11:11:11 that is associated with VLAN 2 to egress the ports that have VLAN 3 egress enabled. This example assumes that VLAN 3 has already been configured. Matrix> set mac multicast 01-00-00-11-11-11 2 3 11-58 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 11.2.3.8).
Page 529: Show Mac Multicast
This example shows the output of this command: Matrix> show mac multicast --------------------------------------------------------------- MAC Address --------------------------------------------------------------- 01-00-00-11-11-11 01-00-00-11-11-11 Logging and Network Management Command Set Ingress VLAN Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Managing Switch Network Addresses Egress VLAN Counts : 11-59...
Page 530: Configuring Simple Network Time Protocol (Sntp)
11.2.4.1 show sntp Use this command to display SNTP settings. show sntp Syntax Description None. Command Defaults None. Command Mode Read-Only. 11-60 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section (Section 11.2.4.3) 11.2.4.4) 11.2.4.5) 11.2.4.6) 11.2.4.8) 3.2.2, “Setting Basic Device...
Page 531: Set Sntp Client
Enables SNTP in broadcast client mode. Enables SNTP in unicast (point-to-point) client mode. In this mode, the client must supply the IP address from which to retrieve the current time. Disables SNTP. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-61...
Page 532: Set Sntp Broadcastdelay
Use this command to set the SNTP poll interval in seconds. This is the time between SNTP requests when operation in broadcast or unicast mode. set sntp poll-interval interval 11-62 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies broadcast delay time in milliseconds. Valid values are 1 to 999999. Default value is 3000.
Page 533: Set Sntp Server
Logging and Network Management Command Set Configuring Simple Network Time Protocol (SNTP) Specifies the poll interval in seconds. Valid values are 16 to 16284. Specifies the SNTP server’s IP address or host name. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-63...
Page 534: Clear Sntp Server
This example shows how to remove the server at IP address 10.21.1.100 from SNTP server Matrix>clear sntp server 10.21.1.100 11-64 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Removes all servers from the SNTP server list. Specifies the IP address or host name of a server to remove from the SNTP server list.
Page 535: Set Timezone
UTC. Valid values are minus 13 (-13) to 14. (Optional) Specifies the number of minutes this timezone will be offset from UTC. Valid values are 0 to 59. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-65...
Page 536 Logging and Network Management Command Set Configuring Simple Network Time Protocol (SNTP) Command Type Switch command. Command Mode Read-Write. Example This example shows how to remove SNTP time zone adjustment values Matrix>clear timezone 11-66 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 537: Configuring Node Aliases
Logging and Network Management Command Set 11.2.5.1) 11.2.5.2) (Section 11.2.5.4) 11.2.5.5) 11.2.5.6) (Optional) Displays node alias properties for specific port(s). For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Node Aliases 4.1.2. 11-67...
Page 538 Interface Time Vlan ID MAC Address Protocol Address / Address Text 11-68 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide = 24117248 = ge.0.6 = bootpc(8) = 17301504 = ge.0.6 = ip(1) provides an explanation of the command output. What It Displays...
Page 539: Show Nodealias Config
Active Entries days 00:00:00 State = 4092 Available Entries = 4 Used Entries ------------ provides an explanation of the command output. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Node Aliases Section 4.1.2. = 11 = Ready Status --------...
Page 540: Set Nodealias
{enable | disable} port-string 11-70 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Total aliases learned. Number of Total Control Entries that are active (not marked for deletion).
Page 541: Set Nodealias Maxentries
1 - 4096. Specifies the port(s) on which to set the maximum entry value. For a detailed description of possible port-string values, refer to Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Node Aliases Section 4.1.2. 4.1.2.
Page 542: Clear Nodealias
This example shows how to clear all node alias entries on Fast Ethernet front panel port 3 Matrix>clear nodealias port fe.0.3 11-72 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port(s) on which to remove all node alias entries. For a detailed description of possible port-string...
Page 543: Clear Nodealias Config
None. Command Type Switch command. Command Mode Read-Write. Example This example shows how to reset the node alias configuration Matrix>clear nodealias config Logging and Network Management Command Set Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring Node Aliases 11-73...
Page 544: Configuring Convergence End Points (Cep) Phone Detection
To review, set the status and configure CEP phone detection. Commands Commands to configure CEP phone detection are listed below and described in the associated section as shown. • show cep (Section 11.2.6.1) 11-74 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 3.2.6.
Page 545: Show Cep
CEP detection. (Optional) Displays the global CEP policy per protocol. (Optional) Displays CEP status for one or more ports. For a detailed description of possible port-string values, refer to Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-75...
Page 546: Set Cep
Syntax Description enable | disable Command Defaults None. Command Type Switch command. Command Mode Read-Write. 11-76 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide - disabled H323 phone - disabled Siemens phone - disabled Cisco phone - disabled Policy Index...
Page 547: Set Cep Port
Section 4.1.2. Specifies the CEP detection that will be applied as Cisco, H.323 or Siemens phone detection. Enables or disables CEP detection as specified. Chapter Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-77...
Page 548: Set Cep Detection
NOTE: This command applies only to Siemens and H.323 phone detection. Cisco detection uses CiscoDP as its discovery method. 11-78 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the default policy as Cisco, H.323 or Siemens phone detection. Specifies an ID for this CEP policy profile. This must be...
Page 549: Set Cep Detection Type
Specifies a CEP discovery group ID. Valid values are 1 - 2147483647. Creates a new convergence end points detection configuration group, or removes, disables or enables an existing group. A group must first be created then enabled to become operational. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-79...
Page 550: Set Cep Detection Address
NOTE: This command applies only to Siemens and H.323 phone detection. Cisco detection uses CiscoDP as its discovery method. 11-80 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a CEP discovery group ID. This group must be created and enabled using the set cep detection command...
Page 551: Set Cep Detection Protocol
Sets an address mask for the CEP discovery group. Specifies an IPv4 address mask or an address mask of an unknown IP protocol type. Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11.2.6.5. Valid values are 1 - Section 11.2.6.7, 11.2.6.9.
Page 552: Set Cep Detection Porthigh
NOTE: This command applies only to Siemens and H.323 phone detection. Cisco detection uses CiscoDP as its discovery method. 11-82 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a CEP discovery group ID. This group must be created and enabled using the set cep detection command...
Page 553: Set Cep Initialize
Section 2147483647. Specifies a maximum or minimum UDP or TCP port to be used for convergence end points detection.Valid values are 1 - 65535. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11.2.6.5. Valid values are 1 - 11-83...
Page 554: Clear Cep
| h323 | siemens Command Defaults None. 11-84 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the CEP-enabled port(s) to re-initialize. This must be a port-string enabled for CEP using the set cep port command as described in Section...
Page 555 Switch command. Command Mode Read-Write. Example This example shows how to clear all CEP policy parameters Matrix>clear cep policy Logging and Network Management Command Set Configuring Convergence End Points (CEP) Phone Detection Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 11-85...
Page 556 Logging and Network Management Command Set Configuring Convergence End Points (CEP) Phone Detection 11-86 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 557: Ip Configuration
2. Reviewing and saving the routing configuration 3. Reviewing and configuring the ARP table 4. Reviewing and configuring broadcast settings 5. Reviewing IP traffic and configuring routes Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration (Section 12.2.3) (Section 12.2.2)
Page 558: Ip Configuration Command Set
Routing interface configuration commands in this guide will configure either a VLAN or loopback interface, depending on your choice of parameters, as shown in 12-2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Table 12-1.
Page 559: Show Interface
Use this command to display information about all interfaces (VLANs or loopbacks) configured on the router. show interface [vlan vlan-id | loopback loopback-id] Resulting Prompt... Matrix>Router(config-if(Vlan 1))# Matrix>Router(config-if (Lpbk 1))# Chapter 12.2.1.3) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Configuring Routing Interface Settings Table 3-10. 12-3...
Page 560 Command Defaults If not specified, information for all interfaces will be displayed. 12-4 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays interface information for a specific VLAN or loopback. This interface must be configured for IP routing as described in Section 3.3.2.
Page 561 Mask is 255.0.0.0 Secondary Mask is 255.0.0.0 Secondary Mask is 255.0.0.0 Secondary Mask is 255.0.0.0 Secondary Mask is 255.0.0.0 Secondary Vlan Mask is 255.0.0.0 Vlan Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Configuring Routing Interface Settings 12-5...
Page 562: Interface
This example shows how to enter configuration mode for VLAN 1: Matrix>Router#configure terminal Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(Vlan 1))# 12-6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Figure 3-7 Section 3.3.2. Specifies the VLAN or loopback interface to be configured for routing.
Page 563: Show Ip Interface
VLAN or loopback. This interface must be configured for IP routing as described in Admin UP Vlan Admin UP is 182.127.62.1, Subnet Vlan Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Configuring Routing Interface Settings Section 3.3.2. Mask is 255.255.255.0 Mask is 255.255.255.0...
Page 564: Ip Address
Use this command to enable an interface for IP routing and to allow the interface to automatically be enabled at device startup. no shutdown 12-8 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the IP address of the interface to be added or removed. Specifies the mask for the associated IP subnet.
Page 565: Reviewing And Saving The Routing Configuration
• show running-config (Section • write (Section 12.2.2.2) • no ip routing (Section 12.2.2.3) Reviewing and Saving the Routing Configuration 12.2.2.1) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set 12-9...
Page 566: Show Running-Config
Router id 182.127.62.1 interface vlan IP Address 182.127.63.1 255.255.255.0 no shutdown interface vlan IP Address 182.127.62.1 255.255.255.0 no shutdown router rip network 182.127.0.0 Table 12-2 12-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide provides an explanation of the command output.
Page 567: Write
IP address of a directly connected network that RIP will advertise to its neighboring routers. For details on adding or removing a RIP network, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Section 13.1.2.3, this will default 3.3.2.
Page 568 182.127.0.0 exit disable exit 12-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Deletes the router-specific file. (Optional) Saves the router-specific configuration to NVRAM. (Optional) Saves the router-specific configuration to a file. (Optional) Displays the current router-specific...
Page 569: No Ip Routing
Global configuration: Matrix>Router(config)# Command Defaults None. Example This example shows how to disable IP routing on the device: Matrix>Router(config)#no ip routing Reviewing and Saving the Routing Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Section 12.2.1. 12-13...
Page 570: Reviewing And Configuring The Arp Table
Use this command to display entries in the ARP (Address Resolution Protocol) table. ARP converts an IP address into a physical address. show ip arp [ip_address] [vlan vlan_id] [output-modifier] 12-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 12.2.3.3) 12.2.3.5)
Page 571 | exclude ip_address — Excludes ARP entries matching the specified IP address. • | include ip_address — Includes ARP entries matching the specified IP address. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Reviewing and Configuring the ARP Table Section 3.3.2.
Page 572 Table 12-3 show ip arp Output Details Output Protocol Address Age (min) Hardware Addr Type Interface 12-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Age (min) Hardware Addr 0003.4712.7a99 0002.1664.a5b3 00d0.cf00.4b74 Age (min) Hardware Addr Type 0002.1664.a5b3 Age (min) Hardware Addr Type 0003.4712.7a99 ARPA...
Page 573: Arp
Specifies the 48-bit hardware address corresponding to the ip_address expressed in hexadecimal notation. Specifies ARPA as the type of ARP mapping. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Reviewing and Configuring the ARP Table 12-17...
Page 574: Ip Proxy-Arp
Command Syntax of the “no” Form The “no” form of this command disables proxy ARP: no ip proxy-arp 12-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Allows learning from gratuitous ARP reply, ARP request, or both reply and request.
Page 575: Ip Mac-Address
Command Type Router command. Command Mode Interface configuration: Matrix>Router(config-if (Vlan <vlan_id>))# Command Defaults None. Specifies a 48-bit MAC address in hexadecimal format. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Reviewing and Configuring the ARP Table 12-19...
Page 576: Arp Timeout
Use this command to delete all nonstatic (dynamic) entries from the ARP table. clear arp-cache 12-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the time in seconds that an entry remains in the ARP cache. Valid values are 15 - 65535.
Page 577 Privileged EXEC: Matrix>Router# Command Defaults None. Example This example shows how to delete all dynamic entries from the ARP table: Matrix>Router#clear arp-cache Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Reviewing and Configuring the ARP Table 12-21...
Page 578: Configuring Broadcast Settings
Command Syntax of the “no” Form The “no” form of this command disables IP directed broadcast globally: no ip directed-broadcast Command Type Router command. Command Mode Interface configuration: Matrix>Router(config-if(Vlan <vlan_id>))# Command Defaults None. 12-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 12.2.4.1) 12.2.4.3) 12.2.4.2)
Page 579: Ip Forward-Protocol
This command works in conjunction with the ip helper-address command to configure UDP broadcast forwarding. For information on specifying a new destination for UDP broadcasts, refer to Section 12.2.4.3. ip forward-protocol {udp [port]} Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Configuring Broadcast Settings 12-23...
Page 580 If port is not specified, default forwarding services will be performed as listed above and will act as a BOOTP/DHCP relay agent. 12-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies UDP as the IP forwarding protocol. (Optional) Specifies a destination port number or name that controls which UDP services are forwarded.
Page 581: Ip Helper-Address
(Section 12.2.4.3), which defines the forward protocol and port Specifies a destination broadcast of host address used when forwarding. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Configuring Broadcast Settings Section 12.2.4.2, and Section 12.2.4.3.
Page 582 This example shows how to permit UDP broadcasts from hosts on networks 191.168.1.255 and 192.24.1.255 to reach servers on those networks: Matrix>Router(config)#ip forward-protocol udp Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(Vlan 1))#ip helper-address 192.168.1.255 Matrix>Router(config)#interface vlan 2 Matrix>Router(config-if(Vlan 2))#ip helper-address 192.24.1.255 12-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 583: Reviewing Ip Traffic And Configuring Routes
Use this command to display information about IP protocols running on the device. show ip protocols Syntax Description None. Command Type Router command. Command Mode Privileged EXEC: Matrix>Router# Command Defaults None. 12.2.5.1) 12.2.5.3) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Reviewing IP Traffic and Configuring Routes 12-27...
Page 584: Show Limits
Use this command to display memory usage information about IP protocols running on the device. show limits Syntax Description None. Command Type Router command. Command Mode Global configuration: Matrix>Router(config)# Command Defaults None. 12-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Send Recv Distance Key-chain Last Update...
Page 585: Show Ip Traffic
Rip Routes | 3000 Total: | (Optional) Displays IP protocol softpath statistics. This option is used for debugging. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Reviewing IP Traffic and Configuring Routes Memory (bytes) 8192 |...
Page 586 IGMP Statistics: Rcvd: Messages 1 Reports 1 Queries 0 Leaves 0 Unknowntype 0 Sent: OutMessages 2 ARP Statistics: Rcvd: 1 requests, 0 replies, 0 others Sent: 0 requests, 1 replies 12-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Errors 0...
Page 587: Clear Ip Stats
Use this command to display information about IP routes. show ip route [destination prefix destination prefix mask longer-prefixes | connected | ospf | rip | static | summary] Reviewing IP Traffic and Configuring Routes Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set 12-31...
Page 588 Gateway of last resort is not set 182.127.63.0/24 182.127.62.0/24 12-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Converts the specified address and mask into a prefix and displays any routes that match the prefix. (Optional) Displays connected routes.
Page 589: Ip Route
(Optional) Specifies a distance metric for this route. Valid values are 1 to 255. (Optional) Specifies a permanent route. (Optional) Specifies a tag for this route. Valid values are 1 to 4294967295. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set 12-33...
Page 590: Ip Icmp
Command Syntax of the “no” Form The “no” form of this command disables ICMP: no ip icmp {echo-reply | mask-reply} Command Type Router command. 12-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables ICMP in echo-reply mode. Enables ICMP in mask-reply mode.
Page 591: Ping
Ctrl+C. Specifies a host name or an IP address of the system to ping. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set 12-35...
Page 592: Traceroute
Syntax Description host Command Type Router command. Command Mode Privileged EXEC: Matrix>Router# Command Defaults None. 12-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a host to which the route of an IP packet will be traced.
Page 593 240.00 ms <1 ms TraceRoute Complete 20.00 ms 192.167.201.2 20.00 ms 192.4.9.10 enatel-rtr10.enatel.com 480.00 ms 192.167.208.43 20.00 ms 192.167.225.46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide IP Configuration Command Set Reviewing IP Traffic and Configuring Routes enatel-rtr43.enatel.com enatel-rtr46.enatel.com 12-37...
Page 594 IP Configuration Command Set Reviewing IP Traffic and Configuring Routes 12-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 595: Routing Protocol Configuration
VLAN 1 has been configured for routing. The prompt changes depending on your current configuration mode, and the interface types and numbers configured for routing on your system. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Routing Protocol Configuration 13.1.1) 13.1.2)
Page 596: Configuring Rip
Allow unicast updates by defining a neighboring router. Configure an administrative distance. Apply offsets to RIP routing metrics. Adjust timers. Specify a RIP version. 13-2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Use these commands... router rip (Section 13.1.1.1) network (RIP) (Section 13.1.1.2)
Page 597: Router Rip
(Section redistribute (Section Section 3.3.3. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13.1.1.9) 13.1.1.11) (Section 13.1.1.12) 13.1.1.13) (Section 13.1.1.14) (Section 13.1.1.15) (Section 13.1.1.16)
Page 598: Network
The “no” form of this command removes the network from the RIP routing process: no network ip_address 13-4 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the IP address of a directly connected network that RIP will advertise to its neighboring routers.
Page 599: Neighbor
Command Type Router command. Command Mode Router configuration: Matrix>Router(config-router)# Command Defaults None. Process Overview: Routing Protocol Configuration Specifies the IP address of a directly connected network. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-5...
Page 600: Distance
The “no” form of this command resets RIP administrative distance to the default value of 120: no distance [weight] Command Type Router command. 13-6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Default Distance Specifies an adminstrative distance for RIP routes. Valid values are 1 - 255.
Page 601: Ip Rip Offset
Applies the offset to outgoing metrics. Specifies a positive offset to be applied to routes learned via RIP. Valid values are from 0 to 16. If the value is 0, no action is taken. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-7...
Page 602: Timers
Command Type Router command. 13-8 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a basic configuration for RIP routing timers. Specifies the rate (seconds between updates) at which routing updates are sent. Valid values are 0 to 4294967295.
Page 603: Ip Rip Send Version
Specifies that packets be sent as version 2 packets, but transmits these as broadcast packets rather than multicast packets so that systems which only understand RIP version 1 can receive them. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-9...
Page 604: Ip Rip Receive Version
Interface configuration: Matrix>Router(config-if(Vlan <vlan_id>))# Command Defaults None. 13-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies RIP version 1. Specifies RIP version 2. Specifies both versions 1 and 2. Specifies that no RIP routes will be processed on this...
Page 605: Key Chain
Router command. Command Mode Global configuration: Matrix>Router(config)# Process Overview: Routing Protocol Configuration Section 13.1.1.9. Section 13.1.1.10. 13.1.1.13. Section Specifies a name for the key chain. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP Section 13.1.1.11. Section 13.1.1.14. 13.1.1.15. 13-11...
Page 606 Key chain configuration: Matrix>Router(config-keychain)# Command Defaults None. 13-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies an authentication number for a key. Valid number are from 0 to 4294967295. Only one key is supported per key chain in this Matrix E1 release.
Page 607: Key-String
Specifies the authentication string that must be sent and received in RIP packets. The string can contain from 1 to 16 uppercase and lowercase alphanumeric characters, except that the first character cannot be a number. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-13...
Page 608: Accept-Lifetime
Command Type Router command. 13-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the time of day the authentication key will begin to be valid to be received. Valid input is hours:minutes:seconds (hh:mm:ss) Specifies the month the authentication key will begin to be valid to be received.
Page 609: Send-Lifetime
Use this command to specify the time period during which an authentication key on a key chain is valid to be sent. send-lifetime start-time month date year {duration seconds | end-time | infinite} Process Overview: Routing Protocol Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-15...
Page 610 Key chain key configuration: Matrix>Router(config-keychain-key)# Command Defaults None. 13-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the time of day the authentication key will begin to be valid to be sent. Valid input is hours:minutes:seconds (hh:mm:ss) Specifies the month the authentication key will begin to be valid to be sent.
Page 611: Ip Rip Authentication Keychain
Interface configuration: Matrix>Router(config-if(Vlan <vlan_id>))# Command Defaults None. Process Overview: Routing Protocol Configuration (Section 13.1.1.15) can be configured. Specifies the key chain name to enable or disable for RIP authentication. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-17...
Page 612: Ip Rip Authentication Mode
This example shows how to set the authentication mode for VLAN 1 as “text”: Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(Vlan 1))#ip rip authentication mode text 13-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide before RIP authentication mode can be configured. Initiates text-only authentication. Initiates MD5 authentication.
Page 613: No Auto-Summary
Router command. Command Mode Router configuration: Matrix>Router(config-router)# Command Defaults None. Example This example shows how to disable RIP automatic route summarization: Matrix>Router(config)#router rip Matrix>Router(config-router)#no auto-summary Process Overview: Routing Protocol Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-19...
Page 614: Ip Rip Disable-Triggered-Updates
Use this command to enable or disable split horizon mode for RIP packets. Split horizon prevents packets from exiting through the same interface on which they were received. ip split-horizon [poison] 13-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 615: Passive-Interface
(Optional) Specifies that split horizon be performed with poison-reverse. This explicitly indicates that a network is unreachable, rather than implying it by not including the network in routing updates. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-21...
Page 616: Receive-Interface
The no use of this command denies the reception of RIP updates: 13-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the VLAN to make a passive interface. This VLAN must be configured for IP routing as...
Page 617: Distribute-List
Applies the access list to incoming or outgoing routing updates on the specified VLAN. This VLAN must be configured for IP routing as described in Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP Section 14.3.7.
Page 618: Redistribute
Matrix>Router(config-router)#distribute-list 1 out vlan 13.1.1.22redistribute Use this command to allow routing information discovered through non-RIP protocols to be distributed in RIP update messages. redistribute {connected | ospf process_id | static} [metric metric value] [subnets] 13-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 619 (Optional) Specifies a metric for the connected, OSPF or static redistribution route. This value should be consistent with the designation protocol. (Optional) Specifies that connected, OSPF or static routes that are subnetted will be redistributed. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring RIP 13-25...
Page 620: Configuring Ospf
• Set priority to help determine the OSPF designated router for the network. • Adjust timers and message intervals. 13-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Use these commands... router ospf (Section 13.1.2.1) network (Section 13.1.2.2) router id (Section 13.1.2.3)
Page 621 (Section area authentication area stub (Section area default cost area nssa (Section area virtual-link passive-ospf (Section redistribute (Section database-overflow Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF (Section 13.1.2.11) (Section (Section 13.1.2.13) 13.1.2.14) (Section 13.1.2.15) 13.1.2.16) (Section 13.1.2.17) 13.1.2.18)
Page 622: Router Ospf
Command Type Router command. Command Mode Global configuration: Matrix>Router(config)# 13-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Use these commands... show ip ospf (Section show ip ospf database show ip ospf border-routers show ip ospf interface...
Page 623: Network
Specifies the area-id to be associated with the OSPF address range. Valid values are decimal values or IP addresses. A subnet address can be specified as the area-id to associate areas with IP subnets. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-29...
Page 624: Router Id
None. Example This example shows how to set the OSPF router ID to IP address 182.127.62.1: Matrix>Router(config-router)#router id 182.127.62.1 13-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the IP address that OSPF will use as the router ID.
Page 625: Ip Ospf Cost
Process Overview: Routing Protocol Configuration Specifies the cost of sending a packet. Valid values range from 1 to 65535. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-31...
Page 626: Timers Spf
13.1.2.6 timers spf Use this command to change OSPF timer values to fine-tune the OSPF network. timers spf spf-delay spf-hold 13-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the router’s OSPF priority in a range from 0 to 255.
Page 627: Ip Ospf Retransmit-Interval
Specifies the minimum amount of time, in seconds, between two consecutive OSPF calculations. Valid values are 0 to 4294967295. A value of 0 means that two consecutive OSPF calculations are performed one immediately after the other. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-33...
Page 628: Ip Ospf Transmit-Delay
The “no” form of this command resets the retransmit interval value to the default, 1 second: 13-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the retransmit time in seconds. Valid values are 1 to 3600. Specifies the transmit delay in seconds. Valid values are...
Page 629: Ip Ospf Hello-Interval
Specifies the hello interval in seconds. Hello interval must be the same on neighboring routers (on a specific subnet), but can vary between subnets. This parameter is an unsigned integer with valid values between 1 and 65535. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-35...
Page 630: Ip Ospf Dead-Interval
Command Defaults None. 13-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of seconds that a router must wait to receive a hello packet. Dead interval must be the same on neighboring routers (on a specific subnet), but can vary between subnets.
Page 631: Ip Ospf Authentication-Key
If password is not specified, the password will be set to a blank string. Process Overview: Routing Protocol Configuration 13.1.2.15. Specifies an OSPF authentication password. Valid values are alphanumeric strings up to 8 bytes in length. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-37...
Page 632: Ip Ospf Message Digest Key Md5
Interface configuration: Matrix>Router(config-if(Vlan <vlan_id>))# Command Defaults None. 13-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the key identifier on the interface where MD5 authentication is enabled. Valid values are integers from 1 to 255. Specifies a password for MD5 authentication to be used with the keyid.
Page 633: Distance Ospf
OSPF’s route preference in relation to other routes as shown in the table below. Route Source Connected Static OSPF distance ospf {external | inter-area | intra-area}weight Process Overview: Routing Protocol Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF Default Distance 13-39...
Page 634: Area Range
13-40 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Applies the distance value to external (type 5 and type 7), to inter-area, or to intra-area routes. NOTE: The value for intra-area distance must be less than the value for inter-area distance, which must be less than the value for external distance.
Page 635: Area Authentication
Process Overview: Routing Protocol Configuration Specifies the area at the boundary of which routes are to be summarized. Specifies the common prefix of the summarized networks. Specifies the length of the common prefix. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-41...
Page 636: Area Stub
Use this command to define an OSPF area as a stub area. This is an area that carries no external routes. area area-id stub [no-summary] 13-42 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the OSPF area in which to enable authentication. Valid values are decimal values or IP addresses. Enables simple text authentication. Simple password authentication allows a password (key) to be configured per area.
Page 637: Area Default Cost
Link State Advertisements (LSAs) into the stub area. When this parameter is used, it means that all destinations outside of the stub area are represented by means of a default route. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-43...
Page 638: Area Nssa
OSPF internetwork is connected to multiple non-OSPF routing domains. area area-id nssa [default-information-originate] 13-44 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the stub area. Valid values are decimal values or IP addresses. Specifies a cost value for the summary route that is sent into a stub area by default.
Page 639: Area Virtual-Link
Specifies the NSSA area. Valid values are decimal values or IP addresses. (Optional) Generates a default of Type 7 into the NSSA. This is used when the router is an NSSA ABR. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-45...
Page 640 The “no” form of this command removes the virtual link: no area area_id virtual-link ip_address authentication-key key 13-46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the transit area for the virtual link. Valid values are decimal values or IP addresses. A transit area is an area through which a virtual link is established.
Page 641: Passive-Ospf
The “no” form of this command disables passive OSPF mode: no passive-ospf vlan vlan-id Process Overview: Routing Protocol Configuration Specifies the interface on which to enable passive OSPF mode. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-47...
Page 642: Redistribute
Matrix>Router(config-router)#passive-ospf vlan 102 13.1.2.21redistribute Use this command to allow routing information discovered through non-OSPF protocols to be distributed in OSPF update messages. redistribute {connected | rip | static}[metric metric value] [metric-type type-value] [subnets] 13-48 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 643 OSPF routing domain. Valid values are 1 for type 1 external route, and 2 for type 2 external route. (Optional) Specifies that connected, RIP or static routes that are subnetted routes will be redistributed. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13.1.2.2. Section 12.2.5.6.
Page 644: Database-Overflow
13-50 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the LSA type as external (Type 5.) Specifies an interval (in seconds) the OSPF link state database will be checked to determine if the overflow limit has been reached.
Page 645: Show Ip Ospf
13.1.2.23show ip ospf Use this command to display OSPF information. show ip ospf Syntax Description None. Command Type Router command. Command Mode Privileged EXEC: Matrix>Router# Process Overview: Routing Protocol Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-51...
Page 646 Area has no authentication SPF algorithm executed 61 times Area ranges are Link State Update Interval is 00:30:00 and due in 00:03:07. Link State Age Interval is 00:00:00 and due in 00:00:00. 13-52 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 140.20.0.0/255.255.0.0...
Page 647: Show Ip Ospf Database
Displays external (Type 5) link state records. Type 5 link state records in their detailed format. Displays nssa-external (Type 7) link state records in their detailed format. Type 7 records are originated by ASBRs. state database. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-53...
Page 648 182.127.64.1 182.127.62.1 182.127.62.1 Displaying Summary Net Link States(Area 0.0.0.0) LinkID ADV Router 182.127.63.1 182.127.62.1 Table 13-3 13-54 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Seq# 0x80000001 Seq# 0x8000000f 0x8000001b Seq# 0x80000001 provides an explanation of the command output. Checksum...
Page 649: Show Ip Ospf Border-Routers
Link count of router link state records. This number is equal to, or greater than, the number of active OSPF interfaces on the originating router. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-55...
Page 650: Show Ip Ospf Interface
Command Defaults If vlan_id is not specified, OSPF statistics will be displayed for all VLANs. 13-56 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide via 192.168.11.1, VLAN2, ABR, Area 0, SPF 10 via 192.168.11.1, VLAN2, ABR, Area 4, SPF 10 via 192.168.33.1, VLAN1, ABR, Area 0, SPF 10...
Page 651 For details, refer to Section 13.1.2.5. The router ID of the designated router on this subnet, if one exists. IP address of the designated router on this interface. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-57...
Page 652: Show Ip Ospf Neighbor
Use this command to display the state of communication between an OSPF router and its neighbor routers. show ip ospf neighbor [detail] [ip_address] [vlan vlan_id] 13-58 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... IP address of the backup designated router on this interface, if one exists.
Page 653 (Optional) Displays OSPF neighbors for a specific VLAN. This VLAN must be configured for IP routing as described Section 3.3.2. State FULL provides an explanation of the command output. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF Dead-Int Address 182.127.63.1 Interface vlan1...
Page 654: Show Ip Ospf Virtual-Links
Command Mode Privileged EXEC: Matrix>Router# Command Defaults None. 13-60 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Neighbor’s router ID of the OSPF neighbor. Neighbor’s priority over this interface. Neighbor’s OSPF communication state. Interval (in seconds) this router will wait without receiving a Hello packet from a neighbor before declaring the neighbor is down.
Page 655: Clear Ip Ospf Process
Timer intervals configured for the virtual link, including Hello, Dead, Wait, and Retransmit intervals. State of adjacency between this router and the virtual link neighbor of this router. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring OSPF 13-61...
Page 656 This example shows how to reset OSPF process 1: Matrix>Router#clear ip ospf process 1 13-62 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the process ID, an internally used identification number for each instance of the OSPF routing process run...
Page 657: Configuring Dvmrp
Command Syntax of the “no” Form The “no” form of this command disables DVMRP: no ip dvmrp Command Type Router command. Process Overview: Routing Protocol Configuration 13.1.3.2) 13.1.3.3) 13.1.3.4) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring DVMRP 13-63...
Page 658: Ip Dvmrp Metric
Command Defaults None. 13-64 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a metric associated with a set of destinations for DVMRP reports. Valid values are from 0 to 31. Entering a 0 value will reset the metric back to the default value of...
Page 659: Show Ip Dvmrp Route
Use this command to display DVMRP routing information. show ip dvmrp route Syntax Description None. Command Type Router command. Command Mode Privileged EXEC: Router# Command Defaults None. Process Overview: Routing Protocol Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring DVMRP 13-65...
Page 660: Show Ip Mroute
(source, group) pair. Basically it is the source’s RPM (Reverse-Path Multicast) for that group. show ip mroute 13-66 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide uptime: 1:24:2, expires: 0:2:3 uptime: 1:24:18, expires: 0:1:25 uptime: 1:24:2, expires: 0:2:3...
Page 661 Process Overview: Routing Protocol Configuration Source Mask: 255.255.255.0 Uptime: 10:49:20 Upstream Vlan: 20 Downstream Vlans: Pruned Vlan Expires 1:10:40 0:18:46 Source Mask: 255.255.255.0 Uptime: 19:58:1 Upstream Vlan: 20 Downstream Vlans: Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring DVMRP 22,122 22,36,51,70 13-67...
Page 662: Configuring Irdp
None. Command Syntax of the “no” Form The “no” form of this command disables IRDP on an interface: no ip irdp Command Type Router command. 13-68 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 13.1.4.2) (Section 13.1.4.3) 13.1.4.4) 13.1.4.5) 13.1.4.6)
Page 663: Ip Irdp Maxadvertinterval
Router command. Command Mode Interface configuration: Matrix>Router(config-if(Vlan <vlan_id>))# Command Defaults None. Process Overview: Routing Protocol Configuration Specifies a maximum advertisement interval in seconds. Valid values are 4 to 1800. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring IRDP 13-69...
Page 664: Ip Irdp Minadvertinterval
This example shows how to set the minimum IRDP advertisement interval to 500 seconds on VLAN 1: Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(Vlan 1))#ip irdp minadvertinterval 500 13-70 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a minimum advertisement interval in seconds. Valid values are 3 to 1800.
Page 665: Ip Irdp Holdtime
Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(Vlan 1))#ip irdp holdtime 4000 Process Overview: Routing Protocol Configuration Specifies the hold time in seconds. Valid values are 0 to 9000. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring IRDP Section 13.1.4.2 and the Section 13.1.4.3.
Page 666: Ip Irdp Preference
Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(Vlan 1))#ip irdp preference 80000000 13-72 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the value to indicate the interface’s use as a default router address. Valid values are -2147483648 to 2147483647. The value of 80000000 indicates that the address, even though it may be advertised, is not to be used by neighboring hosts as a default router address.
Page 667: Ip Irdp Address
Valid values are -2147483648 to 2147483647. The value of 80000000 indicates that the address, even though it may be advertised, is not to be used by neighboring hosts as a default router address. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring IRDP 13-73...
Page 668: Show Ip Irdp
If vlan vlan_id is not specified, IRDP information for all interfaces will be displayed. 13-74 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays IRDP information for a specific VLAN. This VLAN must be configured for IP routing as...
Page 669 This example shows how to display IRDP information for VLAN 1: Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(vlan 1))#show ip irdp vlan 1 Interface 1 is not enabled Process Overview: Routing Protocol Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring IRDP 13-75...
Page 670: Configuring Vrrp
NOTE: You must execute the router vrrp command to enable the protocol before completing other VRRP-specific configuration tasks. For details on enabling configuration modes, refer to 13-76 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 13.1.5.5) (Section 13.1.5.9) (Section 13.1.5.10)
Page 671: Create
NOTE: This command must be executed to create an instance of VRRP on a routing interface (VLAN) before any other VRRP settings can be configured. Process Overview: Routing Protocol Configuration Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring VRRP 13-77...
Page 672: Address
13-78 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the VLAN on which to create a VRRP session. This VLAN must be configured for IP routing as described in Specifies a unique Virtual Router ID (VRID) to associate with the routing interface.
Page 673: Priority
Valid values are: • 1 to indicate the router owns the address. • 0 to indicate the router does not own the address. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring VRRP Section 3.3.2. 13-79...
Page 674 This example shows how set a VRRP priority of 200 on VLAN 1, VRID 1: Matrix>Router(config)#router vrrp Matrix>Router(config-router)#priority vlan 1 1 200 13-80 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the VLAN on which to configure VRRP priority. This VLAN must be configured for IP routing as described in...
Page 675: Advertise-Interval
Valid values are from 1 to 255. Specifies a VRRP advertisement interval to associate with the vrid. Valid values are from 1 to 255 seconds. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring VRRP Section 3.3.2.
Page 676: Critical-Ip
Router configuration: Matrix>Router(config-router)# Command Defaults None. 13-82 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the VLAN on which to set the critical IP address. This VLAN must be configured for IP routing as described in...
Page 677: Preempt
This VLAN must be configured for IP routing as described in Section 3.3.2. Specifies a unique Virtual Router ID (VRID) associated with the routing interface. Valid values are from 1 to 255. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring VRRP 13-83...
Page 678: Enable
Command Mode Router configuration: Matrix>Router(config-router)# Command Defaults None. 13-84 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the VLAN on which to enable VRRP. This VLAN must be configured for IP routing as described in Section 3.3.2.
Page 679: Ip Vrrp Authentication-Key
Use this command to set a VRRP MD5 authentication password on an interface. ip vrrp message-digest-key md5 password Process Overview: Routing Protocol Configuration Specifies an authentication password. Text string can be 1 to 8 characters in length. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring VRRP 13-85...
Page 680: Show Ip Vrrp
None. Command Type Router command. Command Mode Global configuration: Matrix>Router(config)# 13-86 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the authentication type as MD5. Specifies an MD5 authentication password. Text string can be 1 to 16 characters in length.
Page 681 Command Defaults None. Example This example shows how to display VRRP information: Matrix>Router(config)#show ip vrrp -----------VRRP CONFIGURATION----------- Vlan Vrid Process Overview: Routing Protocol Configuration State Master Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Configuring VRRP Owner AssocIpAddr 182.127.63.1 13-87...
Page 682 Process Overview: Routing Protocol Configuration Configuring VRRP 13-88 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 683: Security Configuration
CLI commands to configure MAC authentication, refer to • MAC Locking – locks a port to one or more MAC addresses, preventing connection of unauthorized devices via the port. For details, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Section 3.2.1.
Page 684: Process Overview: Security Configuration
5. Configuring Port Web Authentication 6. Configuring Secure Shell (SSH) 7. Configuring Access Lists (ACLs) 8. Configuring Denial of Service (DoS) Prevention 9. Configuring Flow Setup Throttling (FST) 14-2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 14.3.6. 14.3.8. 14.3.1) 14.3.2) (Section 14.3.3)
Page 685: Security Configuration Command Set
(Section • clear radius accounting (Section For an overview on working with Host Access Control Authentication (HACA), refer to Section 14.4.1. (Section 14.3.1.4) 14.3.1.5) 14.3.1.6) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring RADIUS 14-3...
Page 686: Show Radius
If no parameters are specified, all RADIUS configuration information will be displayed. 14-4 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide action to be taken if the RADIUS server times out during local or remote login. (Optional) Displays the maximum number of attempts a user can contact the RADIUS server before timing out.
Page 687 Index assigned to the RADIUS server. The Matrix E1 Series device allows for up to 10 RADIUS servers to be configured, with up to 2 active at any given time. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring RADIUS...
Page 688: Set Radius
14-6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... IP address of the RADIUS server. RADIUS server’s UDP authentication port. Whether the server is the primary or secondary RADIUS server. Last resort action to be taken if the RADIUS server times out during local or remote login.
Page 689 Telnet using their pre-configured Read-Write (rw) passwords. NOTE: RADIUS client must be enabled in order for management authentication to be enabled. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring RADIUS 14-7...
Page 690: Clear Radius
Command Type Switch command. 14-8 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Resets the last resort local and/or remote action to Challenge. Resets the maximum number of attempts a user can contact the RADIUS server before timing out to 3.
Page 691 This example shows how to reset configurations on all RADIUS servers Matrix>clear radius server all This example shows how to reset the RADIUS timeout to the default value of 20 seconds Matrix>clear radius timeout Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring RADIUS 14-9...
Page 692: Show Radius Accounting
If no parameters are specified, all RADIUS accounting configuration information will be displayed. 14-10 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays one or all RADIUS accounting server configurations. (Optional) Displays counters for one or all active RADIUS accounting servers.
Page 693 Accounting update interval: Accounting interval minimum: Server Index ----------------------------------------------------------------- Disabled 1800 secs 600 secs Server Acct Port 1.1.1.1 1236 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring RADIUS Section 14.3.1.5: Retries Timeout Status Primary 14-11...
Page 694: Set Radius Accounting
Command Type Switch command. Command Mode Read-Write. 14-12 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide [retries retries index] [timeout timeout index] [intervalminimum Enables or disables the RADIUS accounting client. Specifies the accounting server’s: • index number (1 - 2147483647) •...
Page 695 Matrix>set radius accounting timeout 30 6 This example shows how to set RADIUS accounting retries to 10 on server 6: Matrix>set radius accounting retries 10 6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring RADIUS...
Page 696: Clear Radius Accounting
This example shows how to reset the RADIUS accounting timeout to 5 seconds on all servers: Matrix>clear radius accounting timeout all 14-14 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Clears the configuration on one or more accounting servers. Resets the retries to the default value of 2 on one or more accounting servers.
Page 697: Configuring 802.1X Authentication
MAC authentication and 802.1X methods. For more information on these precedence rules, refer to In addition to the EAPOL commands described in this section, Matrix E1 (1G58x-09 and 1H582-xx) devices with firmware versions 3.xx.xx and higher also support a dot1x command set for enabling and configuring 802.1X authentication.
Page 698: Show Dot1X
Examples This example shows how to display 802.1X status: Matrix>show dot1x DOT1X is disabled. 14-16 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays authentication configuration information. (Optional) Displays authentication diagnostics information. (Optional) Displays authentication statistics. (Optional) Displays information for specific PAE port(s).
Page 699 Session Frames Tx: Session Id: Session Authentic Method: Remote Auth Server Session Time: Session Terminate Cause: Session UserName: Auth-Diag: Auth-Session-Stats: (1, 00-00-00-00-00-00) 0 secs Port Failure Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring 802.1X Authentication 14-17...
Page 700 EAPOL Resp Frames Rx: EAPOL ReqId Frames Tx: EAPOL Req Frames Tx: Invalid EAPOL Frames Rx: EAP Length Error Frames Rx: 0 Last EAPOL Frame Version: Last EAPOL Frame Source: 14-18 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Auth-Stats: 0:0:0:0:0:0...
Page 701: Show Dot1X Auth-Config
(Optional) Displays the transmission period value. (Optional) Displays information for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. (Section 14.3.2.7) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring 802.1X Authentication 14-19...
Page 702: Set Dot1X
Syntax Description enable | disable Command Type Switch command. Command Mode Read-Write. Command Defaults None. Example This example shows how to enable 802.1X: Matrix>set dot1x enable 14-20 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables or disables 802.1X. Auto...
Page 703: Set Dot1X Auth-Config
Valid values are 1 - 2147483647. Specifies a timeout period (in seconds) for the authentication server. Valid values are 1 - 2147483647. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring 802.1X Authentication...
Page 704 This example shows how to set the 802.1X quiet period to 120 seconds on Fast Ethernet front panel ports 1-3: Matrix>set dot1x auth-config quietperiod 120 fe.0.1-3 14-22 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a timeout period (in seconds) for the authentication supplicant. Valid values are 1 - 2147483647.
Page 705: Set Dot1X Port
Specifies the port(s) on which to enable reauthentication or reauthentication. For a detailed description of possible port-string values, refer to (Optional) Enables initialization control or reauthentication. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring 802.1X Authentication Section 4.1.2.
Page 706: Clear Dot1X Auth-Config
• If port-string is not specified, parameters will be set on all ports. 14-24 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Resets the 802.1X port control mode to auto. (Optional) Resets the 802.1X key transmission state to disabled (false).
Page 707: Show Eapol
(Optional) Displays EAPOL status for specific port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. (Section 14.3.2.1) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring 802.1X Authentication (Section 14.3.2.4) 14-25...
Page 708 Section Table 14-2 show eapol Output Details Output Port 14-26 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Authentication State -------------------- Initialized Initialized Initialized provides an explanation of the command output. For details on using 14.3.2.8.
Page 709 After any login failure the port remains in this state for the number of seconds equal to quietPeriod (can be set using MIB). Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring 802.1X Authentication 14-27...
Page 710 Table 14-2 show eapol Output Details (Continued) Output Authentication State (Cont’d) Authentication Mode 14-28 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... • forceAuth: Management is allowing normal, unsecured switching on this port. • forceUnauth: Management is preventing any frames from being forwarded to or from this port.
Page 711: Set Eapol
Specifies the port(s) on which to set EAPOL parameters. For a detailed description of possible port-string values, refer to Section 4.1.2. (Section 14.3.2.3) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring 802.1X Authentication (Section 14.3.2.4) 14-29...
Page 712: Configuring Mac Authentication
• show macauthentication • show macauthentication session • set macauthentication (Section 14-30 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 14.4.2. Section (Section 14.3.3.1) (Section 14.3.3.2) 14.3.3.3) 14.3.4. When a frame arrives at a...
Page 713: Show Macauthentication
(Section 14.3.3.11) (Section 14.3.3.12) (Optional) Displays MAC authentication information for specific port(s). For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Authentication Section 4.1.2. 14-31...
Page 714: Mac Authentication
30 fe.0.15 disabled 30 Table 14-3 Table 14-3 show macauthentication Output Details Output authentication MAC user password 14-32 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide - disabled - NOPASSWORD - 48 Reauth Auth Period Allowed 3600 3600 3600...
Page 715 Default is 1 and cannot be reset Reauthentications Whether or not reauthentication is enabled or disabled on this port. Set using the set macauthentication reauthentication command described in Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Authentication Section 4.1.2.
Page 716: Show Macauthentication Session
Table 14-4 show macauthentication session Output Details Output Port MAC Address Duration 14-34 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays active MAC authenticated sessions for specific port(s). For a detailed description of possible port-string values, refer to Duration Reauth Period...
Page 717: Set Macauthentication
Section 14.3.3.11. this port. Set using the set macauthentication reauthentication command described in Globally enables or disables MAC authentication. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Authentication Section 14.3.3.8. 14-35...
Page 718: Set Macauthentication Password
Switch command. Command Mode Read-Write. Command Defaults None. Example This example shows how to set the MAC authentication password to “macauth”: Matrix>set macauthentication password macauth 14-36 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a text string MAC authentication password.
Page 719: Set Macauthentication Port
(Optional) Enables or disables MAC authentication on specific port(s). For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Authentication 14.3.3.3, and then enabling it on a Section 4.1.2.
Page 720: Set Macauthentication Portinitialize
Command Type Switch command. Command Mode Read-Write. 14-38 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Re-initializes specific MAC authentication port(s). For a detailed description of possible port-string values, refer to Section 4.1.2. Specifies the MAC address of the session to re-initialize.
Page 721: Set Macauthentication Reauthentication
Enables or disables MAC reauthentication. (Optional) Enables or disables MAC reauthentication on specific port(s). For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Authentication Section 4.1.2.
Page 722: Set Macauthentication Portreauthenticate
Command Type Switch command. Command Mode Read-Write. 14-40 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Forces reauthentication of specific MAC authentication port(s). For a detailed description of possible port-string values, refer to Section Specifies the MAC address of the session to reauthenticate.
Page 723: Set Macauthentication Reauthperiod
Valid values are 1 - 4294967295. (Optional) Sets the MAC reauthentication period on specific port(s). For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Authentication Section 4.1.2.
Page 724: Set Macauthentication Quietperiod
This example shows how to globally set the MAC quiet period to 3600 seconds (1 hour): Matrix>set macauthentication quietperiod 3600 14-42 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of seconds between reauthentication attempts. Valid values are 1 - 4294967295. Default is 30.
Page 725: Configuring Mac Locking
14.3.4.2) 14.3.4.3) 14.3.4.4) 14.3.4.6) 14.3.4.7) 14.3.4.8) 14.3.4.9) (Section 14.3.4.10) 14.3.4.11) (Section 14.3.4.12) (Section 14.3.4.13) (Section 14.3.4.14) (Section 14.3.4.15) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking Section 14.3.3. When a frame arrives 14-43...
Page 726: Show Maclock
If port-string is not specified, MAC locking status will be displayed for all ports. Command Type Switch command. Command Mode Read-Only. 14-44 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Section 14.3.4.16) 14.3.4.17) 14.3.4.18) (Optional) Displays MAC locking status for specified port(s).
Page 727 Trap Max Static Max FirstArrival Status Allocated Allocated --------- ------------ provides an explanation of the command output. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking Violating MAC Address ------------------ Violating MAC Address ------------------...
Page 728: Show Maclock Stations
Use this command to display MAC locking information about end stations connected to the device. show maclock stations [port-string] [firstarrival | firstarrival port-string] [static | static port-string] 14-46 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Port designation. For a detailed description of possible port-string values, refer to Section Whether MAC locking is enabled or disabled on the port.
Page 729 MAC locked ports, or about those connected to specific port(s). Status --------------- active active active active active Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking 4.1.2. State -------------- static first learned static first learned...
Page 730: Set Maclock Enable
NOTE: MAC locking is disabled by default at device startup. Configuring one or more ports for MAC locking requires globally enabling it on the device and then enabling it on the desired ports as described in 14-48 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Status --------------- active...
Page 731: Set Maclock Disable
Section 4.1.2. (Optional) Disables MAC locking on specific port(s). For a detailed description of possible port-string values, refer Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking 14-49...
Page 732: Set Maclock
Switch command. Command Mode Read-Write. 14-50 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the MAC address for which MAC locking will be created, enabled or disabled. Specifies the port on which to create, enable or disable MAC locking. For a detailed description of possible...
Page 733: Set Maclock Firstarrival
4.1.2. Specifies the number of first arrival end station MAC addresses to be allowed connections to the port. Valid values are 0 to 600. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking 14-51...
Page 734: Set Maclock Static
This example shows how to use restrict MAC locking to 4 static addresses on Fast Ethernet front panel port 3: Matrix>set maclock static fe.0.3 4 14-52 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the port on which to limit MAC locking. For a detailed description of possible port-string values, refer Section 4.1.2.
Page 735: Set Maclock Move
Specifies the port from which statically locked MACs will be removed. For a detailed description of possible port-string values, refer to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking Section 4.1.2.
Page 736: Show Maclock Autostatic
Command Type Switch command. Command Mode Read-Only. 14-54 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays the status of the MAC locking autostatic function on specified port(s). For a detailed description of possible port-string values, refer to Section...
Page 737: Set Maclock Autostatic
If it is zero, the port will be locked and no further address learning will be allowed. set maclock autostatic port-string [enable | disable] Section Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking 14.3.4.7) will be used to determine...
Page 738: Set Maclock Autostatic Isl
14.3.4.14) to automatically assign MAC-VID bindings to both the ingress and egress ports to improve switch performance. NOTE: Enterasys Networks recommends that you contact Technical Support before attempting to use this feature. set maclock autostatic isl port-string [enable | disable]...
Page 739: Set Maclock Autostatic Publicvlan
(Optional) Enables or disables the auto learning function. Specifies a VLAN ID. Specifies whether to use the VLAN as an ingress or egress VLAN. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking Section 4.1.2.
Page 740: Set Maclock Autostatic Publicmac
Switch command. Command Mode Read-Write. Example This example shows how to assign MAC address 00-a0-c9-0d-32-11 as the public autostatic MAC locking address: Matrix>set maclock autostatic publicmac 00-a0-c9-0d-32-11 14-58 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies a MAC address.
Page 741: Set Maclock Autostatic Passthroughmac
This example shows how to assign MAC address 01:00:5e:00:00:05 as the autostatic MAC pass through address: Matrix>set maclock autostatic psssthrough mac 01:00:5e:00:00:05 Specifies a MAC address. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking Section 14.3.4.13, and...
Page 742: Clear Maclock Autostatic
3 back to the default state of disabled: Matrix>clear maclock autostatic fe.0.3 14-60 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Resets autolearning of the autostatic public VLAN back to the default state of disabled for one or more ports.; ; or clears the public VLAN ID on specified ports.
Page 743: Set Maclock Trap
Specifies the port on which MAC lock trap messaging will be enabled or disabled. For a detailed description of possible port-string values, refer to Enables or disables MAC lock trap messaging. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring MAC Locking Section 4.1.2.
Page 744: Clear Maclock
Ethernet front panel port 3: Matrix>clear maclock 00-a0-c9-0d-32-11 fe.0.3 14-62 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the MAC address for which the MAC locking will be cleared. Specifies the port on which to clear MAC locking. For a...
Page 745: Configuring Port Web Authentication (Pwa)
(Section • set pwa displaylogo (Section • set pwa refreshtime (Section — Enterasys Networks’ web-based security 14.3.5.3) 14.3.5.4) 14.3.5.5) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Port Web Authentication (PWA) 14-63...
Page 746: Show Pwa
Use this command to display port web authentication information. show pwa Syntax Description None. Command Defaults None. Command Type Switch command. Command Mode Read-Only. 14-64 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 14.3.5.6) 14.3.5.7) 14.3.5.8) (Section 14.3.5.9) 14.3.5.10) (Section 14.3.5.11) 14.3.5.12) 14.3.5.13) 14.3.5.14)
Page 747 Set using the set pwa ipaddress command as described in Section 14.3.5.7. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Port Web Authentication (PWA) - disabled - secureharbour - 0.0.0.0...
Page 748 Time Port Mode Auth Status 14-66 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide What It Displays... Status of DNS and WINS clients. Default state of disabled can be changed using the set pwa nameservices command as described in Section 14.3.5.6.
Page 749: Set Pwa
Default value of 2 can be changed using the set pwa maxrequests command as described in Section 14.3.5.15. Enables or disables port web authentication. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Section 14.3.5.14. 14-67...
Page 750: Set Pwa Hostname
This example shows how to set the PWA host name to pwahost: Matrix>set pwa hostname pwahost 14.3.5.4 set pwa displaylogo Use this command to set the display options for the Enterasys Networks logo on the PWA website. set pwa displaylogo {display | hide} Syntax Description...
Page 751: Set Pwa Refreshtime
Command Mode Read-Write. Example This example shows how to hide the Enterasys Networks logo: Matrix>set pwa displaylogo hide 14.3.5.5 set pwa refreshtime Use this command to set the port web authentication screen refresh time. set pwa refreshtime time Syntax Description...
Page 752: Set Pwa Nameservices
Syntax Description ip-address Command Defaults None. 14-70 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables or disables DNS and WINS. Specifies a globally unique IP address. This same value must be configured into every authenticating switch in the domain.
Page 753: Set Pwa Protocol
• PAP (Password Authentication Protocol- does not provide any encryption between the end-station the switch port. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set 14-71...
Page 754: Set Pwa Enhancedmode
Command Defaults None. Command Type Switch command. Command Mode Read-Write. Example This example shows how to enable PWA enhanced mode: Matrix>set pwa enhancedmode enable 14-72 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 14.3.5.16. Enables or disables PWA enhanced mode.
Page 755: Set Pwa Guestname
14.3.5.9), PWA will use this name to grant network access Specifies a guest user name. 14.3.5.9) PWA will use this password and the guest user name to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set 14-73...
Page 756: Set Pwa Gueststatus
This example shows how to enable PWA guest networking with RADIUS authentication: Matrix>set pwa guestnetworking authradius 14-74 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 14.3.5.9), PWA will use a guest password and Enables guest networking with no authentication method.
Page 757: Set Pwa Initialize
Section 4.1.2. Specifies quiet time in seconds. (Optional) Sets the quiet period for specific port(s). For a detailed description of possible port-string values, refer Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set 14-75...
Page 758: Set Pwa Maxrequests
This example shows how to set the PWA maximum requests to 3 for all ports: Matrix>set pwa maxrequests 3 14-76 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the maximum number of log on attempts. (Optional) Sets the maximum requests for specific port(s).
Page 759: Set Pwa Portcontrol
(Optional) Sets the control mode on specific port(s). For a detailed description of possible port-string values, refer Section 4.1.2. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set 14-77...
Page 760: Configuring Secure Shell (Ssh)
• set ssh passwordguesses • set ssh logingracetime (Section • clear ssh keys (Section • clear ssh config (Section 14-78 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 14.3.6.4) 14.3.6.5) (Section 14.3.6.9) (Section 14.3.6.10) 14.3.6.11) 14.3.6.12) 14.3.6.13)
Page 761: Show Ssh
(Optional) Displays SSH administration (admin) or operational (oper) configuration settings. (Optional) Displays all server supported MAC algorithms. (Optional) Displays information related to SSH sessions. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Secure Shell (SSH) 14-79...
Page 762: Set Ssh
Syntax Description enable | disable Command Type Switch command. Command Mode Read-Write. Command Defaults None. 14-80 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 1 inbound SSH-2.0-3.0.4 SSH Secure Shell 10.0.0.2 SSH-1.99-3.1.0 SSH Secure Shell for Windows diffie-hellman-group1-sha1 ssh-rsa hmac-md5 aes128-cbc 2 outbound SSH-2.0-VShell_2_1_4_154 VShell...
Page 763: Ssh
Valid values are 1 - 65535. The default of 22 can also be changed using the set ssh port command as described in Section 14.3.6.6. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Secure Shell (SSH) 14-81...
Page 764: Set Ssh Ciphers
This example shows how to set the cipher name used for SSH encryption to “blowfish-cbc Matrix>set ssh cipher blowfish-cbc 14-82 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies that all supported ciphers will be allowed. Specifies that all server-supported ciphers will be allowed.
Page 765: Clear Ssh Ciphers
Resets the cipher name to the default: anycipher Specifies a user-named cipher to clear. Specifies a TCP port as the SSH listening port. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Secure Shell (SSH) 14-83...
Page 766: Set Ssh Mac
Command Mode Read-Write. Command Defaults None. 14-84 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies all server-supported MAC algorithms. Specifies any server-supported MAC algorithms. Specifies that the subset of server and IETF-supported MAC algorithms. Specifies a user-supplied MAC algorithm name. Valid values are: •...
Page 767: Clear Ssh Mac
This example shows how to clear all SSH MAC algorithms: Matrix>clear ssh mac all Specifies that all server-supported MAC algorithms will be cleared. Specifies a MAC algorithm name to be cleared. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Secure Shell (SSH) 14-85...
Page 768: Set Ssh Rekeyintervalseconds
Command Type Switch command. 14-86 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the interval (in seconds) between SSH key exchanges. Valid values are from 0 (which disables re-keying) to 86400. Default is 3600. Specifies the number of authentication attempts allowed before remote access is denied.
Page 769: Set Ssh Logingracetime
Specifies the number of seconds the client will be allowed to authenticate. Valid values are from 15 to 600. Default is Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Secure Shell (SSH)
Page 770: Clear Ssh Config
Private key saved to sshdrv:/hostkey Public key saved to sshdrv:/hostkey.pub 14.3.6.13clear ssh config Use this command to reset the SSH configuration to default settings. clear ssh config Syntax Description None. Command Type Switch command. 14-88 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 771: Configuring Access Lists
ROUTER: This command can be executed when the device is in router mode only. For details on how to enable router configuration modes, refer to 14.3.7.1) 14.3.7.2) 14.3.7.3) 14.3.7.4) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Access Lists Section 3.3.3. 14-89...
Page 772: Access-List (Standard)
ROUTER: This command can be executed when the device is in router mode only. For details on how to enable router configuration modes, refer to 14-90 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide (Optional) Displays access list information for a specific access list number. Valid values are between 1 and 199.
Page 773 - Any source host • host source - IP address of a single source host (Optional) Specifies the bits to ignore in the source address. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Access Lists 14-91...
Page 774: Access-List (Extended)
Restrictions defined by an access list are applied by using the ip access-group command as described in Section 14.3.7.4. access-list access-list-number [insert | replace entry] | [move destination source1 [source2]] {deny | permit} protocol source [source-wildcard] [operator [port]] destination [destination-wildcard] [operator [port]] [icmp-type [icmp-code] [established] 14-92 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 775 If not specified, only the source1 entry will be moved. Denies or permits access if specified conditions are met. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Access Lists Section 3.3.3.
Page 776 14-94 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies an IP protocol for which to deny or permit access. Valid values and their corresponding protocols are: • ip - Any Internet protocol • icmp - Internet Control Message Protocol •...
Page 777 • range min-dport max-dport - Match only packets in the range of destination ports. (Optional) Applies TCP restrictions to established connections only. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Access Lists 14-95...
Page 778: Ip Access-Group
Command Mode Interface configuration: Matrix>Router(config-if(Vlan <vlan_id>))# 14-96 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies the number of the access list to be applied to the access list. This is a decimal number from 1 to 199. Filters inbound packets.
Page 779: Configuring Denial Of Service Prevention
The commands needed to configure DoS prevention are listed below and described in the associated section as shown: • show HostDos (Section • HostDos (Section 14.3.8.2) • clear hostdos-counters (Section 14.3.8.1) 14.3.8.3) Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Denial of Service Prevention 14-97...
Page 780: Show Hostdos
Ping of Death is a subset of the fragmented ICMP function. Syntax Description None, Command Type Router command. Command Mode Global configuration: Matrix>Router(config)# Command Defaults None. 14-98 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 3.3.3.
Page 781: Hostdos
ROUTER: This command can be executed when the device is in router mode only. For details on how to enable router configuration modes, refer to Section 14.3.8.2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Denial of Service Prevention Section 3.3.3.
Page 782 2000 bytes: Matrix>Router(config)#HostDos land Matrix>Router(config)#HostDos largeicmp 2000 14-100 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables land attack protection and automatically discards illegal frames. Enables fragmented ICMP and Ping of Death packets protection and automatically discards illegal frames.
Page 783: Clear Hostdos-Counters
Global configuration: Matrix>Router(config)# Command Defaults None. Example This example shows how to clear Denial of Service security counters: Matrix>Router(config)#clear hostdos-counters Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Denial of Service Prevention Section 3.3.3. 14-101...
Page 784: Configuring Flow Setup Throttling (Fst)
(Section • set flowlimit (Section 14.3.9.2) • set flowlimit limit (Section • set flowlimit class (Section • clear flowlimit action (Section • set flowlimit shutdown 14-102 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 14.3.9.1) 14.3.9.3) 14.3.9.4) 14.3.9.5) (Section 14.3.9.6)
Page 785: Show Flowlimit
(Optional) Displays flow limits and actions. (Optional) Displays flow limiting port settings for one or all ports. (Optional) Displays flow limiting statistics for one or all ports. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Flow Setup Throttling (FST) 14-103...
Page 786 Table 14-8 Table 14-8 show flowlimit Output Details Output Flow limit status Flow limit notification 14-104 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Limit Action ---- ----- provides an explanation of the command output. What It Displays... Whether FST is enabled or disabled. Default state of...
Page 787: Set Flowlimit
Enables or disables FST globally or one specific port(s). Re-enables one or more ports disabled by the flow limit shut down function (as described in Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Flow Setup Throttling (FST) (Section 14.3.9.6).
Page 788: Set Flowlimit Limit
| userport limit 14-106 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Specifies this configuration as action 1 or 2. Two actions describing what will occur when a certain flow limit is reached can be defined per user classification.
Page 789 Disabling the interface (if the set flowlimit shutdown function is enabled as described in This will clear all FST settings on the port. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Flow Setup Throttling (FST) Section 14.3.9.6).
Page 790: Set Flowlimit Class
This example shows how to assign the user port classification type to Fast Ethernet front panel ports 3-5: Matrix>set flowlimit fe.0.3-5 class userport 14-108 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Section 14.3.9.3. Specifies port(s) on which to assign user classification.
Page 791: Clear Flowlimit Action
Valid values are 0 - 128000. Specifies the action to be removed. For a description of these parameters, refer back to Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Flow Setup Throttling (FST) Section 14.3.9.3.
Page 792: Set Flowlimit Shutdown
Command Defaults None. Example This example shows how to enable the flow limit shut down function: Matrix>set flowlimit shutdown enable 14-110 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Enables or disables the flow limit shut down function. Section 14.3.9.3.
Page 793: Set Flowlimit Notification
Specifies a notification interval (in seconds) for SNMP trap messages. Valid values are 0 - 4294967295. Specifies port(s) on which flow limiting statistics will be cleared. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Security Configuration Command Set Configuring Flow Setup Throttling (FST) 14-111...
Page 794 Command Mode Read-Write. Command Defaults None. Example This example shows how to reset flow limiting statistics back to default values on Fast Ethernet front panel port 5: Matrix>set flowlimit fe.0.5 clearstats 14-112 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 795: Working With Security Configurations
If the local username and password matches the local database, then access to the switch is allowed. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 14-113...
Page 796: Port Based Network Access Control Overview
Matrix E1 device ports. When configured in conjunction with NetSight Policy Manager and RADIUS server(s), Enterasys Networks’ Matrix E1 devices can dynamically administer user based policy that is specifically tailored to the end user’s needs.
Page 797: Authentication Method Sequence
If a switch port is configured to enable both 802.1X and MAC authentication, then it is possible for the switch to receive a start or a response 802.1X frame while a MAC authentication is in progress. Section 14.3.5. Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Working with Security Configurations MAC Authentication Overview 14-115...
Page 798 Port Control Port (EAPOL) Control Force Don’t Authorized Care Force Don’t Authorized Care Auto Enabled 14-116 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Default Autho- Port rized Authen- Policy Policy ticated? Exists? Exists? Don’t Don’t Care Care Don’t Don’t...
Page 799 Care Don’t Care Don’t Care Don’t Care Don’t Care Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Working with Security Configurations MAC Authentication Overview Action • Hybrid authentication (both methods are active). • Frames are forwarded according to default policy.
Page 800 Enabled Unauthori- zation Force Enabled Unauthori- zation Force Enabled Unauthori- zation Force Disabled Unauthori- zation 14-118 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Default Autho- Port rized Authen- Policy Policy ticated? Exists? Exists? Don’t Care Don’t Care Don’t Care Don’t...
Page 801: Mac Authentication Control
Filter-ID Attribute Formats Enterasys Networks supports two Filter-ID formats — “decorated” and “undecorated.” The decorated format has three forms: Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 802 Decorated Filter-IDs are processed first by the switch. If no decorated Filter-IDs are found, then undecorated Filter-IDs are processed. If multiple Filter-IDs are found that contain conflicting values, a Syslog message is generated. 14-120 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...
Page 803 Console Port connecting to a Convergence End Points (CEP) phone Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 13-85 4-20 3-35 3-47 12-22 4-70 7-32 9-28 3-90...
Page 804 7-48 H.323 detection 11-74 Head of Line Blocking Prevention Hello Packets 13-35 13-36 Index-2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Host Access Control Authentication (HACA) how to use Host VLAN Hybrid quality of service (QoS) queueing ICMP 11-53...
Page 805 Port Classification Port Mirroring Port Priority configuring Port Status reviewing Port String 3-65 syntax used in the CLI Port Trunking Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 13-40 13-41 13-44 13-40 13-42 13-28 13-26 13-31 13-43 13-35 13-36...
Page 806 Radius Client and HACA use of 14-113 RADIUS server 14-6 14-12 Rapid Spanning Tree Protocol (RSTP) Rate Limiting 9-34 Index-4 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide Redistribute Reset Resetting the Device 4-20 authentication configuration mode, enabling configuration tasks distribute list neighbors...
Page 807 3-65 secure management, creating VRRP authentication configuration mode, enabling creating a session critical IP enabling on an interface priority virtual router address Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 12-36 4-39 13-20 13-23 3-23 13-10 13-9 3-37 13-45 13-60...
Page 808 Index WebView 3-12 Weighted Round Robin (WRR) Index-6 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide...

This manual is also suitable for:

1h582-xx E1 series Matrix e1 1g58x-09 series Matrix e1 1h582 series

Enterasys 1G58x-09 Configuration Manual

About this Guide

Introduction

Management Terminal and Modem Setup Requirements

Startup and General Configuration

Port Configuration

Snmp Configuration

Spanning Tree Configuration

Q Vlan Configuration

Quick Links

Related Manuals for Enterasys 1G58x-09

Summary of Contents for Enterasys 1G58x-09