Hirschmann RS20 Reference Manual

Hirschmann RS20 Reference Manual

Ethernet gigabit switch
Hide thumbs Also See for RS20:
Table of Contents

Advertisement

Reference Manual

Command Line Interface

Industrial ETHERNET Gigabit Switch
RS20/RS30/RS40, RSB20, MS20/MS30, RSR20/RSR30,
MACH100, MACH 1000, PowerMICE, MACH 4000, OCTOPUS
CLI L2P
Technical Support
Release 7.0 05/2011
HAC-Support@belden.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the RS20 and is the answer not in the manual?

Questions and answers

Summary of Contents for Hirschmann RS20

  • Page 1: Command Line Interface

    Reference Manual Command Line Interface Industrial ETHERNET Gigabit Switch RS20/RS30/RS40, RSB20, MS20/MS30, RSR20/RSR30, MACH100, MACH 1000, PowerMICE, MACH 4000, OCTOPUS CLI L2P Technical Support Release 7.0 05/2011 HAC-Support@belden.com...
  • Page 2 This publication has been created by Hirschmann Automation and Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change the contents of this manual without prior notice. Hirschmann can give no guarantee in respect of the correctness or accuracy of the details in this publication.
  • Page 3: Table Of Contents

    Content Content Command Structure Format 1.1.1 Command 1.1.2 Parameters 1.1.3 Values 1.1.4 Conventions 1.1.5 Annotations 1.1.6 Special keys 1.1.7 Special characters in scripts 1.1.8 Secrets in scripts Quick Start up Quick Starting the Switch System Info and System Setup Mode-based CLI Mode-based Topology Mode-based Command Hierarchy Flow of Operation...
  • Page 4 Content 4.1.9 show bridge vlan-learning 4.1.10bridge framesize 4.1.11show config-watchdog 4.1.12show device-status 4.1.13show authentication 4.1.14show eventlog 4.1.15show interface 4.1.16show interface ethernet 4.1.17show interface switchport 4.1.18show logging 4.1.19show mac-addr-table 4.1.20show signal-contact 4.1.21show slot 4.1.22show running-config 4.1.23show sysinfo 4.1.24show temperature Debug Commands 4.2.1 debug tcpdump help 4.2.2 debug tcpdump start cpu 4.2.3 debug tcpdump start cpu filter 4.2.4 debug tcpdump stop...
  • Page 5 Content 4.5.1 link-aggregation staticcapability 4.5.2 show link-aggregation brief Management Commands 4.6.1 telnet 4.6.2 transport input telnet 4.6.3 transport output telnet 4.6.4 session-limit 4.6.5 session-timeout 4.6.6 bridge address-learning 4.6.7 bridge address-relearn detect operation 4.6.8 bridge address-relearn detect threshold 4.6.9 bridge aging-time 4.6.10bridge fast-link-detection 4.6.11bridge duplex-mismatch-detect operation 4.6.12bridge vlan-learning...
  • Page 6 Content 4.6.38show network mgmt-access 4.6.39show profinetio 4.6.40show serial 4.6.41show snmp-access 4.6.42show snmpcommunity 4.6.43show snmptrap 4.6.44show telnet 4.6.45show telnetcon 4.6.46show trapflags 4.6.47snmp-access global 4.6.48snmp-access version 4.6.49snmp-access version v3-encryption 4.6.50snmp-server 4.6.51snmp-server community 4.6.52snmp-server contact 4.6.53snmp-server community ipaddr 4.6.54snmp-server community ipmask 4.6.55snmp-server community mode 4.6.56snmp-server community ro 4.6.57snmp-server community rw 4.6.58snmp-server location...
  • Page 7 Content 4.7.5 logging host 4.7.6 logging host reconfigure 4.7.7 logging host remove 4.7.8 logging snmp-requests get operation 4.7.9 logging snmp-requests set operation 4.7.10logging snmp-requests get severity 4.7.11logging snmp-requests set severity 4.7.12logging syslog 4.7.13logging syslog port Scripting Commands 4.8.1 script apply 4.8.2 script delete 4.8.3 script list 4.8.4 script show...
  • Page 8 Content 4.9.25rmon-alarm modify interval 4.9.26rmon-alarm modify sample-type 4.9.27rmon-alarm modify startup-alarm 4.9.28rmon-alarm modify rising-event 4.9.29rmon-alarm modify falling-event 4.9.30set garp timer join 4.9.31set garp timer leave 4.9.32set garp timer leaveall 4.9.33set gmrp adminmode 4.9.34set gmrp interfacemode 4.9.35set gmrp interfacemode 4.9.36set gmrp forward-all-groups 4.9.37set igmp 4.9.38set igmp 4.9.39set igmp aging-time-unknown...
  • Page 9 Content 4.9.66show port 4.9.67show link-aggregation 4.9.68show rmon-alarm 4.9.69show selftest 4.9.70show storm-control 4.9.71show storm-control limiters port 4.9.72show vlan 4.9.73show vlan brief 4.9.74show vlan port 4.9.75show voice vlan 4.9.76show voice vlan interface 4.9.77shutdown 4.9.78shutdown all 4.9.79snmp trap link-status 4.9.80snmp trap link-status all 4.9.81spanning-tree bpdumigrationcheck 4.9.82speed 4.9.83storm-control broadcast...
  • Page 10 Content 4.9.107voice vlan (Global Config Mode) 4.9.108voice vlan <id> 4.9.109voice vlan dot1p 4.9.110voice vlan none 4.9.111voice vlan untagged 4.9.112voice vlan auth 4.10 User Account Management Commands 4.10.1disconnect 4.10.2show loginsession 4.10.3show users 4.10.4users defaultlogin 4.10.5users login <user> 4.10.6users access 4.10.7users name 4.10.8users passwd 4.10.9users snmpv3 accessmode 4.10.10users snmpv3 authentication...
  • Page 11 Content 4.11.22logout 4.11.23ping 4.11.24signal-contact connection-error 4.11.25signal-contact 4.11.26temperature 4.11.27reboot 4.11.28show reboot 4.11.29reload 4.11.30show reload 4.12 LLDP - Link Layer Discovery Protocol 4.12.1show lldp 4.12.2show lldp config 4.12.3show lldp config chassis 4.12.4show lldp config chassis admin-state 4.12.5show lldp config chassis notification-interval 4.12.6show lldp config chassis re-init-delay 4.12.7show lldp config chassis tx-delay 4.12.8show lldp config chassis tx-hold-mult 4.12.9show lldp config chassis tx-interval...
  • Page 12 Content 4.12.31lldp med all 4.12.32lldp med confignotification 4.12.33lldp med confignotification all 4.12.34lldp med faststartrepeatcount 4.12.35lldp med transmit-tlv 4.12.36lldp med transmit-tlv all 4.12.37lldp notification 4.12.38lldp tlv link-aggregation 4.12.39lldp tlv mac-phy-config-state 4.12.40lldp tlv max-frame-size 4.12.41lldp tlv mgmt-addr 4.12.42lldp tlv pnio 4.12.43lldp tlv pnio-alias 4.12.44lldp tlv pnio-mrp 4.12.45lldp tlv port-desc 4.12.46lldp tlv port-vlan...
  • Page 13 Content 4.13.14sntp client offset 4.13.15sntp client request-interval 4.13.16no sntp client server 4.13.17sntp client server primary 4.13.18sntp client server secondary 4.13.19sntp client threshold 4.13.20sntp operation 4.13.21sntp server disable-if-local 4.13.22sntp time system 4.14 PTP - Precision Time Protocol 4.14.1show ptp 4.14.2show ptp configuration 4.14.3show ptp operation 4.14.4show ptp port 4.14.5show ptp status...
  • Page 14 Content 4.14.31ptp v2bc asymmetry 4.14.32ptp v2tc asymmetry 4.14.33ptp v2tc delay-mechanism 4.14.34ptp v2tc management 4.14.35ptp v2tc multi-domain-mode 4.14.36ptp v2tc network-protocol 4.14.37ptp v2tc operation 4.14.38ptp v2tc pdelay-interval 4.14.39ptp v2tc primary-domain 4.14.40ptp v2tc syntonization 4.14.41ptp v2tc vlan 4.14.42ptp v2tc vlan-priority 4.14.43ptp v2tc sync-local-clock 4.15 PoE - Power over Ethernet 4.15.1show inlinepower 4.15.2show inlinepower port...
  • Page 15 Content CLI Commands: Switching Spanning Tree Commands 5.1.1 show spanning-tree 5.1.2 show spanning-tree interface 5.1.3 show spanning-tree mst detailed 5.1.4 show spanning-tree mst port detailed 5.1.5 show spanning-tree mst port summary 5.1.6 show spanning-tree mst summary 5.1.7 show spanning-tree summary 5.1.8 show spanning-tree vlan 5.1.9 spanning-tree 5.1.10spanning-tree auto-edgeport...
  • Page 16 Content 5.2.7 show arc HIPER-Ring 5.3.1 show hiper-ring 5.3.2 hiper-ring 5.3.3 hiper-ring mode 5.3.4 hiper-ring port primary 5.3.5 hiper-ring port secondary 5.3.6 hiper-ring recovery-delay Fast-HIPER-Ring 5.4.1 show fast-hiper-ring (MACH 1000, RSR20/RSR30) 5.4.2 show fast-hiper-ring current-id (MACH 1000, RSR20/RSR30) 5.4.3 fast-hiper-ring Redundant Coupling 5.5.1 show ring-coupling 5.5.2 ring-coupling...
  • Page 17 5.8.6 dhcp-server operation 5.8.7 dhcp-server pool add <id> 5.8.8 dhcp-server pool modify <id> mode 5.8.9 dhcp-server pool modify <id> option 5.8.10dhcp-server pool modify leasetime 5.8.11dhcp-server pool modify <id> hirschmann-device 5.8.12dhcp-server pool enable 5.8.13dhcp-server pool disable 5.8.14dhcp-server pool delete Sub-Ring Commands 5.9.1 show sub-ring...
  • Page 18 Content 6.1.13dot1x port-control 6.1.14dot1x port-control all 6.1.15dot1x re-authenticate 6.1.16dot1x re-authentication 6.1.17dot1x safe-vlan 6.1.18dot1x system-auth-control 6.1.19dot1x timeout 6.1.20dot1x timeout guest-vlan-period 6.1.21dot1x unauthenticated-vlan 6.1.22dot1x user 6.1.23radius accounting mode 6.1.24radius server host 6.1.25radius server key 6.1.26radius server msgauth 6.1.27radius server primary 6.1.28radius server retransmit 6.1.29radius server timeout 6.1.30show radius accounting 6.1.31show authentication...
  • Page 19 Content Glossary Index Further support CLI L2P Release 7.0 05/2011...
  • Page 20 Content CLI L2P Release 7.0 05/2011...
  • Page 21: Command Structure

    Command Structure 1 Command Structure The Command Line Interface (CLI) syntax, conventions and terminology are described in this section. Each CLI command is illustrated using the structure outlined below. CLI L2P Release 7.0 05/2011...
  • Page 22: Format

    Command Structure 1.1 Format 1.1 Format Commands are followed by values, parameters, or both. Example 1 network parms <ipaddr> <netmask> [gateway] network parms is the command name. <ipaddr> <netmask> are the required values for the command. [gateway] is the optional value for the command. Example 2 snmp-server location <loc>...
  • Page 23: Parameters

    Command Structure 1.1 Format 1.1.2 Parameters Parameters are order dependent. Parameters may be mandatory values, optional values, choices, or a combi- nation. <parameter>. The <> angle brackets indicate that a mandatory param- eter is to be entered in place of the brackets and text inside them. [parameter].
  • Page 24 Command Structure 1.1 Format operator can use the logical slot/port to configure the link-aggregation. CLI L2P Release 7.0 05/2011...
  • Page 25: Conventions

    Command Structure 1.1 Format 1.1.4 Conventions Network addresses are used to define a link to a remote host, workstation or network. Network addresses are shown using the following syntax: Address Type Format Range ipaddr 192.168.11.110 0.0.0.0 to 255.255.255.255 (decimal) macaddr A7:C9:89:DD:A9:B3 hexadecimal digit pairs Table 1: Network Address Syntax...
  • Page 26: Annotations

    Command Structure 1.1 Format 1.1.5 Annotations The CLI allows the user to type single-line annotations at the command prompt for use when writing test or configuration scripts and for better read- ability. The exclamation point (‘!’) character flags the beginning of a com- ment.
  • Page 27: Special Keys

    Command Structure 1.1 Format 1.1.6 Special keys The following list of special keys may be helpful to enter command lines. delete previous character Ctrl-A go to beginning of line Ctrl-E go to end of line Ctrl-F go forward one character Ctrl-B go backward one character Ctrl-D...
  • Page 28: Special Characters In Scripts

    Command Structure 1.1 Format 1.1.7 Special characters in scripts Some of the configuration parameters are strings that can contain special characters. When the switch creates a script from the running configuration (by use of the command #show running-config <scriptname.cli>), these spe- cial characters are written to the script with a so-called escape character pre- ceding them.
  • Page 29 Command Structure 1.1 Format The commands with strings that may contain these special characters are listed below. Note: Not every string is allowed to contain special characters. The string that is output with the escape characters (if necessary) is shown as "...". Command Note !System Description "..."...
  • Page 30: Secrets In Scripts

    Command Structure 1.1 Format Command Note vlan name <n> "..." Tab. 7: Commands in VLAN Database mode When a device creates a script, a human-readable header is included that lists the special characters and the escape characters: !Parameter string escape handling \, 1 !Characters to be preceded with escape char (\): \, !, ", ', ? 1.1.8 Secrets in scripts A configuration may include secrets (e.
  • Page 31 Command Structure 1.1 Format string must not be longer than 64 hex digits string must only contain the digits 0-9 and the characters A-F (or a-f) string length must be even CLI L2P Release 7.0 05/2011...
  • Page 32 Command Structure 1.1 Format CLI L2P Release 7.0 05/2011...
  • Page 33: Quick Start Up

    Quick Start up 2 Quick Start up The CLI Quick Start up details procedures to quickly become acquainted with the software. CLI L2P Release 7.0 05/2011...
  • Page 34: Quick Starting The Switch

    Enter the state on delivery password private. Press the enter key The CLI User EXEC prompt will be displayed. User EXEC prompt: (Hirschmann Product) > Use “enable” to switch to the Privileged EXEC mode from User EXEC. Privileged EXEC prompt: (Hirschmann Product) # Use “configure”...
  • Page 35: System Info And System Setup

    Quick Start up 2.2 System Info and System Setup 2.2 System Info and System Setup This chapter informs you about: Quick Start up Software Version Information Quick Start up Physical Port Data Quick Start up User Account Management Quick Start up IP Address Quick Start up Uploading from Switch to Out-of-Band PC Only XMODEM) Quick Start up Downloading from Out-of-Band PC to Switch...
  • Page 36: Quick Start Up Physical Port Data

    Quick Start up 2.2 System Info and System Setup Quick Start up Physical Port Data Command Details show port all Displays the Ports (in Privileged EXEC) slot/port Type - Indicates if the port is a special type of port Admin Mode - Selects the Port Control Administration State Physical Mode - Selects the desired port speed and duplex mode Physical Status - Indicates the port speed and duplex mode Link Status - Indicates whether the link is up or down...
  • Page 37 Quick Start up 2.2 System Info and System Setup Command Details users passwd <user- Allows the user to set passwords or change passwords name> needed to login (in Global Config) A prompt will appear after the command is entered requesting the users old password. In the absence of an old password leave the area blank.
  • Page 38: Quick Start Up Ip Address

    Quick Start up 2.2 System Info and System Setup Quick Start up IP Address To view the network parametes the operator can access the device by the following three methods. Simple Network Management Protocol - SNMP Telnet Web Browser Note: After configuring the network parameters it is advisable to execute the command ‘copy system:running-config nvram:startup-config’...
  • Page 39: Quick Start Up Factory Defaults

    Quick Start up 2.2 System Info and System Setup Command Details Subnet Mask range from 0.0.0.0 to 255.255.255.255 Gateway Address range from 0.0.0.0 to 255.255.255.255 Table 11: Quick Start up IP Address Quick Start up Downloading from TFTP Server Before starting a TFTP server download, the operator must complete the Quick Start up for the IP Address.
  • Page 40 Quick Start up 2.2 System Info and System Setup CLI L2P Release 7.0 05/2011...
  • Page 41: Mode-Based Cli

    Access Method Prompt Exit or Access Next Mode This is the first level of Enter Logout command User Exec Mode (Hirschmann access. Perform basic Product)> tasks and list system information From the User Exec To exit to the User Exec...
  • Page 42: Mode-Based Topology

    Mode-based CLI 3.1 Mode-based Topology 3.1 Mode-based Topology The CLI tree is built on a mode concept where the commands are available according to the interface. Some of the modes are depicted in the following figure. ROOT The User Exec commands User Exec are also accessible in the Privileged Exec mode.
  • Page 43: Mode-Based Command Hierarchy

    When the operator logs into the CLI, the User Exec mode is the initial mode. The User Exec mode contains a limited set of commands. The command prompt shown at this level is: Command Prompt: (Hirschmann Product)> Privileged Exec Mode To have access to the full suite of commands, the operator must enter the Privileged Exec mode.
  • Page 44 MAC Access-List Config Mode Use the MAC Access-List Config mode to create a MAC Access-List and to enter the mode containing Mac Access-List configuration com- mands. (Hirschmann Product)(Config)# mac-access-list extended <name> Command Prompt: (Hirschmann Product)(Config mac- access-list)# CLI L2P Release 7.0 05/2011...
  • Page 45: Flow Of Operation

    This section captures the flow of operation for the CLI: The operator logs into the CLI session and enters the User Exec mode. In the User Exec mode the (Hirschmann Product)(exec)> prompt is displayed on the screen. The parsing process is initiated whenever the operator types a command and presses <ENTER>.
  • Page 46 Mode-based CLI 3.3 Flow of Operation For mandatory parameters, the command tree extends till the mandatory parameters make the leaf of the branch. The callback function is only in- voked when all the mandatory parameters are provided. For optional pa- rameters, the command tree extends till the mandatory parameters and the optional parameters make the leaf of the branch.
  • Page 47: No" Form Of A Command

    Mode-based CLI 3.4 “No” Form of a Command 3.4 “No” Form of a Command “No” is a specific form of an existing command and does not represent a new or distinct command. Only the configuration commands are available in the “no”...
  • Page 48 Mode-based CLI 3.4 “No” Form of a Command CLI L2P Release 7.0 05/2011...
  • Page 49: Cli Commands: Base

    CLI Commands: Base 4 CLI Commands: Base This chapter provides detailed explanation of the Switching commands. The commands are divided into five functional groups: Show commands display switch settings, statistics, and other information. Configuration commands configure features and options of the switch. For every configuration command, there is a show command that displays the configuration setting.
  • Page 50: System Information And Statistics Commands

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1 System Information and Statistics Commands 4.1.1 show address-conflict This command displays address-conflict settings. Format show address-conflict Mode Privileged EXEC and User EXEC 4.1.2 show arp switch This command displays the Address Resolution Protocol cache of the switch. Format show arp switch Mode...
  • Page 51: Show Bridge Address-Learning

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.3 show bridge address-learning This command displays the address-learning setting. The setting can be enable or disable. Format show bridge address-learning Mode Privileged EXEC and User EXEC 4.1.4 show bridge address-relearn-detect This command displays the Bridge Address Relearn Detection setting and the Bridge Address Relearn Threshold.
  • Page 52: Show Bridge Aging-Time

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.5 show bridge aging-time This command displays the timeout for address aging. Format show bridge aging-time Mode Privileged EXEC and User EXEC 4.1.6 show bridge duplex-mismatch-detect This command displays the Bridge Duplex Mismatch Detection setting (Enabled or Disabled).
  • Page 53: Show Bridge Framesize

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.8 show bridge framesize This command displays the maximum size of frame (packet size) setting. Format show bridge framesize Mode Privileged EXEC and User EXEC 4.1.9 show bridge vlan-learning This command displays the bridge vlan-learning mode. Format show bridge vlan-learning Mode...
  • Page 54: 11Show Config-Watchdog

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.10 bridge framesize Activation of long frames. Configure 1522 or 1632 as maximum size of frame (packet size). Default: 1522. Format bridge framesize {1522|1632 Mode Global Config bridge framesize 1522 Configure 1522 as maximum size of frame. bridge framesize 1632 Configure 1632 as maximum size of frame.
  • Page 55: 12Show Device-Status

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.12 show device-status The signal device status is for displaying the monitoring functions of the switch, the device status trap setting. Format show device-status [monitor|state|trap] Mode Privileged EXEC and User EXEC Device status monitor Displays the possible monitored events and which of them are monitored:...
  • Page 56: 13Show Authentication

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.13 show authentication This command displays users assigned to authentication login lists. Format show authentication [users <listname>] Mode Privileged EXEC and User EXEC CLI L2P Release 7.0 05/2011...
  • Page 57: 14Show Eventlog

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.14 show eventlog This command displays the event log, which contains error messages from the system. The event log is not cleared on a system reset. Format show eventlog Mode Privileged EXEC and User EXEC File The file in which the event originated.
  • Page 58: 15Show Interface

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.15 show interface This command displays a summary of statistics for a specific port or a count of all CPU traffic based upon the argument. Format show interface {<slot/port> | ethernet{<slot/port>|switchport} | switchport} Mode Privileged EXEC and User EXEC...
  • Page 59 CLI Commands: Base 4.1 System Information and Statistics Com- Packets Received Without Error The total number of packets (including broadcast packets and multi- cast packets) received by the processor. Broadcast Packets Received The total number of packets received that were directed to the broad- cast address.
  • Page 60: 16Show Interface Ethernet

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.16 show interface ethernet This command displays detailed statistics for a specific port or for all CPU traffic based upon the argument. Format show interface ethernet {<slot/port> | switchport} Mode Privileged EXEC and User EXEC The display parameters, when the argument is '<slot/port>', are as follows : Packets Received Octets Received - The total number of octets of data (including those...
  • Page 61 CLI Commands: Base 4.1 System Information and Statistics Com- octets in length inclusive (excluding framing bits but including FCS octets). Packets Received 1024-1518 Octets - The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).
  • Page 62 CLI Commands: Base 4.1 System Information and Statistics Com- Alignment Errors - The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with a non-integral number of octets.
  • Page 63 CLI Commands: Base 4.1 System Information and Statistics Com- Upstream Threshold - The number of frames discarded due to lack of cell descriptors available for that packet's priority level. Packets Transmitted Octets Total Bytes - The total number of octets of data (including those in bad packets) transmitted into the network (excluding framing bits but including FCS octets).
  • Page 64 CLI Commands: Base 4.1 System Information and Statistics Com- Packets Transmitted Successfully Total - The number of frames that have been transmitted by this port to its segment. Unicast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to a subnetwork-uni- cast address, including those that were discarded or not sent.
  • Page 65 CLI Commands: Base 4.1 System Information and Statistics Com- Protocol Statistics BPDUs received - The count of BPDUs (Bridge Protocol Data Units) received in the spanning tree layer. BPDUs Transmitted - The count of BPDUs (Bridge Protocol Data Units) transmitted from the spanning tree layer. 802.3x Pause Frames Received - A count of MAC Control frames received on this interface with an opcode indicating the PAUSE oper- ation.
  • Page 66 CLI Commands: Base 4.1 System Information and Statistics Com- The display parameters, when the argument is ‘switchport, are as follows : Octets Received - The total number of octets of data received by the processor (excluding framing bits but including FCS octets). Total Packets Received Without Error- The total number of packets (including broadcast packets and multicast packets) received by the processor.
  • Page 67 CLI Commands: Base 4.1 System Information and Statistics Com- Address Entries in Use - The number of Learned and static entries in the Forwarding Database Address Table for this switch. Maximum VLAN Entries - The maximum number of Virtual LANs (VLANs) allowed on this switch.
  • Page 68: 17Show Interface Switchport

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.17 show interface switchport This command displays data concerning the internal port to the management agent. Format show interface switchport Mode Privileged EXEC and User EXEC 4.1.18 show logging This command displays the trap log maintained by the switch. The trap log contains a maximum of 256 entries that wrap.
  • Page 69: 19Show Mac-Addr-Table

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.19 show mac-addr-table This command displays the forwarding database entries. If the command is entered with no parameter, the entire table is displayed. This is the same as entering the optional parameter.
  • Page 70: 20Show Signal-Contact

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.20 show signal-contact The signal contact is for displaying the manual setting and the current state of the signal contact, the monitoring functions of the switch, the signal-contacts trap setting. Format show signal-contact [1|2|all [mode|monitor|state|trap]] Mode...
  • Page 71: 21Show Slot

    CLI Commands: Base 4.1 System Information and Statistics Com- Signal contact manual setting closed The signal contact´s manual setting is closed. open The signal contact´s manual setting is open. Signal contact operating state closed The signal contact is currently closed. open The signal contact is currently open.
  • Page 72: 22Show Running-Config

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.22 show running-config This command is used to display the current setting of different protocol packages supported on the switch. This command displays only those parameters, the values of which differ from default value. The output is displayed in the script format, which can be used to configure another switch with the same configuration.
  • Page 73: 23Show Sysinfo

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.23 show sysinfo This command displays switch information. Format show sysinfo Mode Privileged EXEC and User EXEC Alarm Displays the latest present Alarm for a signal contact. System Description Text used to identify this switch. System Name Name used to identify the switch.
  • Page 74 CLI Commands: Base 4.1 System Information and Statistics Com- Running Software Release The operating system´s software version number. Running Software Build Date The operating system´s software build date. Stored Software Release The stored operating system´s software version number. Stored Software Build Date The stored operating system´s software build date.
  • Page 75 CLI Commands: Base 4.1 System Information and Statistics Com- Media Module Information The description of each media module – Description: media module type, – Serial Number of the media modul (if available), SFP Information: – SFP Part ID: SFP type (if available), –...
  • Page 76: 24Show Temperature

    4.1 System Information and Statistics Com- 4.1.24 show temperature This command displays the lower and upper temperature limit for sending a trap. Note: The command is available for RS20/RS30/RS40, MS20/MS30, RSR20/RSR30, MACH100, MACH 1000, PowerMICE, MACH 4000 and OCTOPUS devices. Format...
  • Page 77: Debug Commands

    CLI Commands: Base 4.2 Debug Commands 4.2 Debug Commands 4.2.1 debug tcpdump help Run diagnostics commands. With the TCP dump you run a packet analyzer for capturing network traffic. This command displays the supported options and expressions for the tcpdump command. Format debug tcpdump help Mode...
  • Page 78: Debug Tcpdump Start Cpu Filter

    CLI Commands: Base 4.2 Debug Commands 4.2.3 debug tcpdump start cpu filter Run diagnostics commands. With the TCP dump you run a packet analyzer for capturing network traffic. This command starts a capture on the CPU interface with the options and expressions in the filter file.
  • Page 79: Debug Tcpdump Filter Show

    CLI Commands: Base 4.2 Debug Commands 4.2.5 debug tcpdump filter show Run diagnostics commands. With the TCP dump you run a packet analyzer for capturing network traffic. This command shows a saved filter file stored in flash memory. Format debug tcpdump filter show <capturefilter> Mode Privileged EXEC 4.2.6 debug tcpdump filter list...
  • Page 80: Debug Tcpdump Filter Delete

    CLI Commands: Base 4.2 Debug Commands 4.2.7 debug tcpdump filter delete Run diagnostics commands. With the TCP dump you run a packet analyzer for capturing network traffic. This command removes a saved filter file from the flash memory. Format debug tcpdump filter delete <capturefilter> Mode Privileged EXEC CLI L2P...
  • Page 81: Management Vlan Commands

    CLI Commands: Base 4.3 Management VLAN Commands 4.3 Management VLAN Com- mands 4.3.1 network mgmt_vlan This command configures the Management VLAN ID. If you enter the VLAN ID “0” , the agent can be accessed by all VLANs. Default Format network mgmt_vlan <0-4042>...
  • Page 82: Class Of Service (Cos) Commands

    CLI Commands: Base 4.4 Class of Service (CoS) Commands 4.4 Class of Service (CoS) Commands This chapter provides a detailed explanation of the QoS CoS commands. The following commands are available. The commands are divided into these different groups: Configuration Commands are used to configure features and options of the switch.
  • Page 83: Classofservice Dot1P-Mapping

    CLI Commands: Base 4.4 Class of Service (CoS) Commands 4.4.1 classofservice dot1p-mapping This command maps an 802.1p priority to an internal traffic class for a device when in ‘Global Config’ mode. The number of available traffic classes may vary with the platform. Userpriority and trafficclass can both be the range from 0-7.
  • Page 84: Classofservice Ip-Dscp-Mapping

    CLI Commands: Base 4.4 Class of Service (CoS) Commands 4.4.2 classofservice ip-dscp-mapping This command maps an IP DSCP value to an internal traffic class. The <ipdscp> value is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
  • Page 85: Classofservice Trust

    CLI Commands: Base 4.4 Class of Service (CoS) Commands 4.4.3 classofservice trust This command sets the class of service trust mode of an interface. The mode can be set to trust one of the Dot1p (802.1p) or IP DSCP packet markings. Note: In trust ip-dscp mode the switch modifies the vlan priority for out- going frames according to –...
  • Page 86: Show Classofservice Dot1P-Mapping

    CLI Commands: Base 4.4 Class of Service (CoS) Commands 4.4.4 show classofservice dot1p-mapping This command displays the current 802.1p priority mapping to internal traffic classes for a specific interface. The slot/port parameter is required on platforms that support priority to traffic class mapping on a ‘per-port’ basis. Platforms that support priority to traffic class mapping on a per-port basis: Format show classofservice dot1p-mapping...
  • Page 87: Show Classofservice Ip-Dscp-Mapping

    CLI Commands: Base 4.4 Class of Service (CoS) Commands 4.4.5 show classofservice ip-dscp-mapping This command displays the current IP DSCP mapping to internal traffic class- es for the global configuration settings. Format show classofservice ip-dscp-mapping [<slot/port>] Mode Privileged EXEC The following information is repeated for each user priority. IP DSCP The IP DSCP value.
  • Page 88: Show Classofservice Trust

    CLI Commands: Base 4.4 Class of Service (CoS) Commands 4.4.6 show classofservice trust This command displays the current trust mode for the specified interface. The slot/port parameter is optional. If specified, the trust mode of the inter- face is displayed. If omitted, the most recent global configuration settings are displayed.
  • Page 89: Vlan Port Priority All

    CLI Commands: Base 4.4 Class of Service (CoS) Commands 4.4.7 vlan port priority all This command configures the port priority assigned for untagged packets for all ports presently plugged into the device. The range for the priority is 0-7. Any subsequent per port configuration will override this configuration setting. Format vlan port priority all <priority>...
  • Page 90: Dvlan-Tunnel Ethertype

    802.1q, vMAN or custom. The configured ethertype is used for VLAN classification on all ports which are configured as core ports. This command is available for the RS20/RS30/RS40, RSB20, MS20/MS30, RSR20/RSR30, MACH100, MACH104, MACH1000, MACH1040, MACH4002-24G/48G (XG), OCTOPUS, OS20/OS30 devices.
  • Page 91: 10Mode Dvlan-Tunnel

    4.4 Class of Service (CoS) Commands 4.4.10 mode dvlan-tunnel Use this command to configure the port either as core port or access port. This command is available for the RS20/RS30/RS40, RSB20, MS20/MS30, RSR20/RSR30, MACH100, MACH104, MACH1000, MACH1040, MACH4002-24G/48G (XG), OCTOPUS, OS20/OS30 devices.
  • Page 92: 11Show Dvlan-Tunnel

    4.4 Class of Service (CoS) Commands 4.4.11 show dvlan-tunnel Use this command to display the DVLAN-Tunnel mode and used ether-type for the specified interface(s). This command is available for the RS20/RS30/RS40, RSB20, MS20/MS30, RSR20/RSR30, MACH100, MACH104, MACH1000, MACH1040, MACH4002-24G/48G (XG), OCTOPUS, OS20/OS30 devices. Format...
  • Page 93: Link Aggregation(802.3Ad) Commands

    CLI Commands: Base 4.5 Link Aggregation(802.3ad) Commands 4.5 Link Aggregation(802.3ad) Commands 4.5.1 link-aggregation staticcapability This command enables the support of link-aggregations (static LAGs) on the device. By default, the static capability for all link-aggregations is disabled. Default disabled Format link-aggregation staticcapability Mode Global Config no link-aggregation staticcapability...
  • Page 94: Show Link-Aggregation Brief

    CLI Commands: Base 4.5 Link Aggregation(802.3ad) Commands 4.5.2 show link-aggregation brief This command displays the static capability of all link-aggregations (LAGs) on the device as well as a summary of individual link-aggregations. Format show link-aggregation brief Mode Privileged EXEC and User EXEC Static Capability This field displays whether or not the device has static capability enabled.
  • Page 95: Management Commands

    CLI Commands: Base 4.6 Management Commands 4.6 Management Commands These commands manage the switch and show current management settings. 4.6.1 telnet This command establishes a new outbound telnet connection to a remote host. The host value must be a valid IP address. Valid values for port should be a valid decimal integer in the range of 0 to 65535, where the default value is 23.
  • Page 96: Transport Input Telnet

    CLI Commands: Base 4.6 Management Commands 4.6.2 transport input telnet This command regulates new telnet sessions. If sessions are enabled, new telnet sessions can be established until there are no more sessions available. If sessions are disabled, no new telnet sessions are established. An established session remains active until the session is ended or an abnormal network error ends the session.
  • Page 97: Transport Output Telnet

    CLI Commands: Base 4.6 Management Commands 4.6.3 transport output telnet This command regulates new outbound telnet connections. If enabled, new outbound telnet sessions can be established until it reaches the maximum number of simultaneous outbound telnet sessions allowed. If disabled, no new outbound telnet session can be established. An established session remains active until the session is ended or an abnormal network error ends it.
  • Page 98: Session-Limit

    CLI Commands: Base 4.6 Management Commands 4.6.4 session-limit This command specifies the maximum number of simultaneous outbound telnet sessions. A value of 0 indicates that no outbound telnet session can be established. Default Format session-limit < 0-5> Mode Line Config no session-limit This command sets the maximum number of simultaneous outbound tel- net sessions to the default value.
  • Page 99: Session-Timeout

    CLI Commands: Base 4.6 Management Commands 4.6.5 session-timeout This command sets the telnet session timeout value.The timeout value unit of time is minutes. Default Format session-timeout <1-160> Mode Line Config no session-timeout This command sets the telnet session timeout value to the default. The timeout value unit of time is minutes.
  • Page 100: Bridge Address-Relearn Detect Operation

    CLI Commands: Base 4.6 Management Commands 4.6.7 bridge address-relearn detect operation This command enables or disables Bridge Address Relearn Detection. The default value is disable. Default Disabled Format bridge address-relearn detect operation {disable|enable} Mode Global Config 4.6.8 bridge address-relearn detect threshold This command defines the value of relearned addresses to signal address relearn threshold exceeded.
  • Page 101: Bridge Aging-Time

    CLI Commands: Base 4.6 Management Commands 4.6.9 bridge aging-time This command configures the forwarding database address aging timeout in seconds. Default Format bridge aging-time < 10-630> Mode Global Config Seconds The <seconds> parameter must be within the range of 10 to 630 sec- onds.
  • Page 102: 10Bridge Fast-Link-Detection

    CLI Commands: Base 4.6 Management Commands 4.6.10 bridge fast-link-detection This command enables or disables the Bridge Fast Link Detection. Default Enabled Format bridge fast-link-detection {disable|enable} Mode Global Config 4.6.11 bridge duplex-mismatch-detect operation This command enables or disables Bridge Duplex Mismatch Detection. Reasons for Duplex Mismatch can be: - A local port is configured to fix full-duplex.
  • Page 103: 12Bridge Vlan-Learning

    CLI Commands: Base 4.6 Management Commands 4.6.12 bridge vlan-learning With ”independent” you set the Shared VLAN Learning mode to Indepen- dent. The switch will treat equal MAC source addresses from different VLANs as separate addresses. With ”shared” you set the Shared VLAN Learning mode to Shared. The switch will treat equal MAC source addresses from different VLANs as the same adress.
  • Page 104 CLI Commands: Base 4.6 Management Commands refresh-interval This command configures the digital inputs refresh interval. Each input configured for event logging or SNMP traps is polled with this interval. <refresh-interval> The refresh interval is in the range of 1..10 seconds. Default: 1. log-event This command enables or disables the event logging of input status changes for one or all digital inputs.
  • Page 105: 14Digital-Output

    CLI Commands: Base 4.6 Management Commands 4.6.14 digital-output This command configures the IO-Module digital outputs. Format digital-output admin-state {enable | disable} refresh-interval <refresh-interval> retry-count <refresh-interval> log-event {all | <slot/output>} {enable|disable} snmp-trap {all | <slot/output>} {enable|disable} mirror all | <slot>/<output> {disable | from <IPaddress>...
  • Page 106 CLI Commands: Base 4.6 Management Commands <refresh-interval>. Configure the IO-Module event logging for one or all digital outputs. all Configure the IO-Module event logging for all digital outputs. Configure the IO-Module event logging for a <slot/output> single digital output. disable Disable event logging for digital output status changes. Enable event logging for digital output status changes.
  • Page 107 CLI Commands: Base 4.6 Management Commands mirror Configure the IO-Module mirroring for one or all digital outputs. This command determines the input mirrored to the currently selected output. To disable mirroring, the following commands are equivalent: digital-output mirror 1/2 disable digital-output mirror 1/2 from 0.0.0.0 1/1 <all>: Configure the IO-Module mirroring for all digital outputs.
  • Page 108: 15Show Digital-Input

    CLI Commands: Base 4.6 Management Commands 4.6.15 show digital-input This command shows the input value or configuration from all available digital inputs of the MICE I/O Module. Format show digital-input Mode Global Config Digital Input System Information: Admin State Show the IO-Module digital inputs Admin State. Possible values: Disabled, Enabled.
  • Page 109: 16Show Digital-Input Config

    CLI Commands: Base 4.6 Management Commands 4.6.16 show digital-input config This command shows the IO-Module digital inputs global configuration. Format show digital-input config Mode Global Config Digital Input System Information: Admin State Show the IO-Module digital inputs Admin State. Possible values: Disabled, Enabled. Refresh Interval [s] Show the IO-Module digital inputs Refresh Interval in seconds.
  • Page 110: 17Show Digital-Input All

    CLI Commands: Base 4.6 Management Commands 4.6.17 show digital-input all This command shows the IO-Module value or configuration for all inputs. Format show digital-input all {all | config | value} Mode Global Config Show the IO-Module configuration and value for all inputs config Show the IO-Module configuration for all inputs.
  • Page 111: 18Show Digital-Input

    CLI Commands: Base 4.6 Management Commands 4.6.18 show digital-input <slot/input> This command shows the IO-Module value or configuration for a single input. Format show digital-input <slot/input> {all | config | value} Mode Global Config Show the IO-Module configuration and value for one input. config Show the IO-Module configuration for one input.
  • Page 112: 19Show Digital-Output

    CLI Commands: Base 4.6 Management Commands 4.6.19 show digital-output This command shows the output value or configuration from all available digital outputs of the MICE I/O Module. Format show digital-output Mode Global Config Digital output System Information: Admin State Show the IO-Module digital outputs Admin State. Possible values: Disabled, Enabled.
  • Page 113: 20Show Digital-Output Config

    CLI Commands: Base 4.6 Management Commands Mirror from IP Show the IP address used for reading the input value. Possible values: None, a.b.c.d (valid IP address). Input Show the input number of the device used for reading the input value. Possible values (example): 1/1, 1/2, 1/3, 1/4, 3/1, 3/2, 3/3, 3/4 4.6.20 show digital-output config...
  • Page 114: 21Show Digital-Output All

    CLI Commands: Base 4.6 Management Commands 4.6.21 show digital-output all This command shows the IO-Module value or configuration for all outputs. Format show digital-output all {all | config | value} Mode Global Config Show the IO-Module configuration and value for all outputs config Show the IO-Module configuration for all outputs.
  • Page 115: 22Show Digital-Output

    CLI Commands: Base 4.6 Management Commands 4.6.22 show digital-output <slot/output> This command shows the IO-Module value or configuration for a single out- put. Format show digital-output <slot/output> {all | config | value} Mode Global Config Show the IO-Module configuration and value for one output. config Show the IO-Module configuration for one output.
  • Page 116: 23Ethernet-Ip

    CLI Commands: Base 4.6 Management Commands 4.6.23 ethernet-ip This command controls the EtherNet/IP function on the switch. Detailed information you can find in the User Manual Industrial Protocols. Default depends on the order code (standard = disable) Format ethernet-ip admin-state {enable | disable} Mode Global Config Admin-state...
  • Page 117 CLI Commands: Base 4.6 Management Commands Format no network javascriptmode Mode Privileged EXEC CLI L2P Release 7.0 05/2011...
  • Page 118: 25Network Mgmt-Access Add

    CLI Commands: Base 4.6 Management Commands 4.6.25 network mgmt-access add This command is used to configure the restricted management access feature (RMA). It creates a new empty entry at the <index> (if you enter the command with parameter <index>) or at the next free index (if you enter the command without parameter <index>).
  • Page 119: 27Network Mgmt-Access Modify

    CLI Commands: Base 4.6 Management Commands 4.6.27 network mgmt-access modify This command is used to configure the restricted management access feature (RMA). The command modifies an existing rule with <index> to change IP address, net mask and allowed services. Format network mgmt-access modify <index>...
  • Page 120: 28Network Mgmt-Access Operation

    CLI Commands: Base 4.6 Management Commands 4.6.28 network mgmt-access operation This command is used to configure the restricted management access feature (RMA). It enables or disables the service to have management access. The default value is disable. Format network mgmt-access operation {disable|enable} Mode Global Config enable...
  • Page 121: 30Network Parms

    CLI Commands: Base 4.6 Management Commands 4.6.30 network parms This command sets the IP Address, subnet mask and gateway of the router. The IP Address and the gateway must be on the same subnet. Format network parms <ipaddr> <netmask> [gateway] Mode Privileged EXEC 4.6.31 network protocol...
  • Page 122: 32Network Priority

    CLI Commands: Base 4.6 Management Commands 4.6.32 network priority This command configures the VLAN priority or the IP DSCP value for out- going management packets. The <ipdscp> is specified as either an integer from 0-63, or symbolically through one of the following keywords: af11,af12,af13,af21,af22,af23,af31,af32,af33,af41,af42,af43,be,cs0, cs1, cs2,cs3,cs4,cs5,cs6,cs7,ef.
  • Page 123: 33Profinetio

    CLI Commands: Base 4.6 Management Commands 4.6.33 profinetio This command controls the PROFINET IO function on the switch. Detailed information you can find in the User Manual Industrial Protocols. Default depends on the order code (standard = disable) Format profinetio admin-state {enable | disable} Mode Global Config Admin-state...
  • Page 124: 34Serial Timeout

    CLI Commands: Base 4.6 Management Commands 4.6.34 serial timeout This command specifies the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected in- definitely. The time range is 0 to 160. Default Format serial timeout <0-160>...
  • Page 125: 35Set Prompt

    CLI Commands: Base 4.6 Management Commands 4.6.35 set prompt This command changes the name of the prompt. The length of name may be up to 64 alphanumeric characters. Format set prompt <prompt string> Mode Privileged EXEC 4.6.36 show ethernet-ip This command displays the admin state of the EtherNet/IP function. Format show ethernet-ip Mode...
  • Page 126: 37Show Network

    CLI Commands: Base 4.6 Management Commands 4.6.37 show network This command displays configuration settings associated with the switch's network interface. The network interface is the logical interface used for in- band connectivity with the switch via any of the switch's front panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed.
  • Page 127: Show Network Mgmt-Access

    CLI Commands: Base 4.6 Management Commands Management VLAN IP-DSCP Value Specifies the management VLAN IP-DSCP value. Java Script Mode Specifies if the Switch will use Java Script to start the Management Applet. The factory default is enabled. 4.6.38 show network mgmt-access This command displays the operating status and entries for restricted management access (RMA).
  • Page 128: Show Profinetio

    CLI Commands: Base 4.6 Management Commands TELNET Indicates whether TELNETis allowed to have management access or not. The options are Yes | No. Indicates whether SSH is allowed to have management access or not. The options are Yes | No. Active Indicates whether the feature is active or not.
  • Page 129: Show Serial

    CLI Commands: Base 4.6 Management Commands 4.6.40 show serial This command displays serial communication settings for the switch. Format show serial Mode Privileged EXEC and User EXEC Serial Port Login Timeout (minutes) Specifies the time, in minutes, of inactivity on a Serial port connection, after which the Switch will close the connection.
  • Page 130: Show Snmpcommunity

    CLI Commands: Base 4.6 Management Commands 4.6.42 show snmpcommunity This command displays SNMP community information. Six communities are supported. You can add, change, or delete communities. The switch does not have to be reset for changes to take effect. The SNMP agent of the switch complies with SNMP Version 1 (for more about the SNMP specification, see the SNMP RFCs).
  • Page 131: Show Snmptrap

    CLI Commands: Base 4.6 Management Commands 4.6.43 show snmptrap This command displays SNMP trap receivers. Trap messages are sent across a network to an SNMP Network Manager. These messages alert the manager to events occurring within the switch or on the network. Six trap re- ceivers are simultaneously supported.
  • Page 132: Show Telnet

    CLI Commands: Base 4.6 Management Commands 4.6.44 show telnet This command displays outbound telnet settings. Format show telnet Mode Privileged EXEC and User EXEC Outbound Telnet Connection Login Timeout (minutes) This object indicates the number of minutes a remote connection session is allowed to remain inactive before being logged off.
  • Page 133: Show Telnetcon

    CLI Commands: Base 4.6 Management Commands 4.6.45 show telnetcon This command displays inbound telnet settings. Format show telnetcon Mode Privileged EXEC and User EXEC Telnet Connection Login Timeout (minutes) This object indicates the number of minutes a remote connection ses- sion is allowed to remain inactive before being logged off.
  • Page 134: Show Trapflags

    CLI Commands: Base 4.6 Management Commands 4.6.46 show trapflags This command displays trap conditions. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the switch's SNMP agent sends the trap to all enabled trap receivers.
  • Page 135: Snmp-Access Global

    CLI Commands: Base 4.6 Management Commands Port Security (MAC, IP and 802.1X) Enable/disable sending port security event traps (for MAC/IP port security as well as for 802.1X). Spanning Tree Flag May be enabled or disabled. The factory default is enabled. Indicates whether spanning tree traps will be sent.
  • Page 136: Snmp-Access Version

    CLI Commands: Base 4.6 Management Commands 4.6.48 snmp-access version This command configures the SNMP version specific access mode for SNMPv1 and SNMPv2. Format snmp-access version {all|v1|v2} {disable|enable} Mode Global Config Enable or disable SNMP access by all protocol versions (v1 and v2). Enable or disable SNMP access by v1.
  • Page 137: Snmp-Server

    CLI Commands: Base 4.6 Management Commands readwrite Enable SNMP read-write access to this switch (enable write access) by SNMPv3 protocol version. 4.6.50 snmp-server This command sets the name and the physical location of the switch, and the organization responsible for the network.The range for name, location and contact is from 0 to 64 alphanumeric characters.
  • Page 138: Snmp-Server Community

    CLI Commands: Base 4.6 Management Commands 4.6.51 snmp-server community This command adds a new SNMP community name. A community name is a name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level. The length of name can be up to 32 case-sensitive characters.
  • Page 139: Snmp-Server Contact

    CLI Commands: Base 4.6 Management Commands 4.6.52 snmp-server contact This command adds a new SNMP server contact. Format snmp-server contact <con> Mode Global Config Enter system contact up to 63 characters in length. If the name contains spaces, enclose it in quotation marks ("). no snmp-server contact This command removes this SNMP server contact from the table.
  • Page 140: Snmp-Server Community Ipaddr

    CLI Commands: Base 4.6 Management Commands 4.6.53 snmp-server community ipaddr This command sets a client IP address for an SNMP community. The ad- dress is the associated community SNMP packet sending address and is used along with the client IP mask value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
  • Page 141: Snmp-Server Community Ipmask

    CLI Commands: Base 4.6 Management Commands 4.6.54 snmp-server community ipmask This command sets a client IP mask for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP address value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
  • Page 142: Snmp-Server Community Mode

    CLI Commands: Base 4.6 Management Commands 4.6.55 snmp-server community mode This command activates an SNMP community. If a community is enabled, an SNMP manager associated with this community manages the switch accord- ing to its access right. If the community is disabled, no SNMP requests using this community are accepted.
  • Page 143: Snmp-Server Community Ro

    CLI Commands: Base 4.6 Management Commands 4.6.56 snmp-server community ro This command restricts access to switch information. The access mode is read-only (also called public). Format snmp-server community ro <name> Mode Global Config 4.6.57 snmp-server community rw This command restricts access to switch information. The access mode is read/write (also called private).
  • Page 144: Snmp-Server Sysname

    CLI Commands: Base 4.6 Management Commands 4.6.59 snmp-server sysname This command configures the system name. Format snmp-server sysname <system name> Mode Global Config CLI L2P Release 7.0 05/2011...
  • Page 145: Snmp-Server Enable Traps

    CLI Commands: Base 4.6 Management Commands 4.6.60 snmp-server enable traps This command enables the Authentication Trap Flag. Default enabled Format snmp-server enable traps Mode Global Config no snmp-server enable traps This command disables the Authentication Trap Flag. Format no snmp-server enable traps Mode Global Config CLI L2P...
  • Page 146: Snmp-Server Enable Traps Chassis

    CLI Commands: Base 4.6 Management Commands 4.6.61 snmp-server enable traps chassis Configures whether traps that are related to the chassis functionality of the switch will be sent. These functions include the signal contacts, the ACA, temperature limits exceeded, changes in the module map, addition or removal of SFP modules, status of power supply has changed and the LLDP and SNTP features.
  • Page 147: Snmp-Server Enable Traps L2Redundancy

    CLI Commands: Base 4.6 Management Commands 4.6.62 snmp-server enable traps l2redundancy Indicates whether traps that are related to the layer 2 redundancy features of the switch will be sent. The HiPER-Ring and the Redundant Coupling will tell you with these traps when the main line has become inoperative or returned. May be enabled or disabled.
  • Page 148: Snmp-Server Enable Traps Linkmode

    CLI Commands: Base 4.6 Management Commands 4.6.63 snmp-server enable traps linkmode This command enables Link Up/Down traps for the entire switch. When en- abled, link traps are sent only if the Link Trap flag setting associated with the port is enabled (see ‘snmp trap link-status’ command). Default enabled Format...
  • Page 149: Snmp-Server Enable Traps Multiusers

    CLI Commands: Base 4.6 Management Commands 4.6.64 snmp-server enable traps multiusers This command enables Multiple User traps. When the traps are enabled, a Multiple User Trap is sent when a user logs in to the terminal interface (EIA 232 (serial port) or telnet) and there is an existing terminal interface session. Default enabled Format...
  • Page 150: Snmp-Server Enable Traps Port-Sec

    CLI Commands: Base 4.6 Management Commands 4.6.65 snmp-server enable traps port-sec This command enables port security traps. When the traps are enabled, a Port Security Trap is sent if a port security event occurs (applies to MAC/IP Port Security as well as to 802.1X Port Security). Default enabled Format...
  • Page 151: Snmp-Server Enable Traps Stpmode

    CLI Commands: Base 4.6 Management Commands 4.6.66 snmp-server enable traps stpmode This command enables the sending of new root traps and topology change notification traps. Default enabled Format snmp-server enable traps stpmode Mode Global Config no snmp-server enable traps stpmode This command disables the sending of new root traps and topology change notification traps.
  • Page 152: Snmptrap

    CLI Commands: Base 4.6 Management Commands 4.6.67 snmptrap This command adds an SNMP trap name. The maximum length of name is 32 case-sensitive alphanumeric characters. Default The default name for the six undefined community names is Delete. Format snmptrap <name> <ipaddr> [snmpversion snmpv1] Mode Global Config no snmptrap...
  • Page 153: Snmptrap Ipaddr

    CLI Commands: Base 4.6 Management Commands 4.6.68 snmptrap ipaddr This command assigns an IP address to a specified community name. The maximum length of name is 32 case-sensitive alphanumeric characters. Note: IP addresses in the SNMP trap receiver table must be unique. If you make multiple entries using the same IP address, the first entry is retained and processed.
  • Page 154: Snmptrap Mode

    CLI Commands: Base 4.6 Management Commands 4.6.69 snmptrap mode This command activates or deactivates an SNMP trap. Enabled trap receiv- ers are active (able to receive traps). Disabled trap receivers are inactive (not able to receive traps). Format snmptrap mode <name> <ipaddr> Mode Global Config no snmptrap mode...
  • Page 155: Snmptrap Snmpversion

    CLI Commands: Base 4.6 Management Commands 4.6.70 snmptrap snmpversion This command configures SNMP trap version for a specified community. Format snmptrap snmpversion <name> <ipAddr> {snmpv1 | snmpv2} Mode Global Config name Enter the community name. ipAaddr Enter the IP Address. snmpv1 Use SNMP v1 to send traps.
  • Page 156: Telnetcon Maxsessions

    CLI Commands: Base 4.6 Management Commands 4.6.71 telnetcon maxsessions Configure the number of remote telnet connections allowed. Default Format telnetcon maxsessions <0-5> Mode Privileged EXEC no telnetcon maxsessions This command sets the maximum number of telnet connection sessions that can be established to the default value. Format no telnetcon maxsessions Mode...
  • Page 157: Telnetcon Timeout

    CLI Commands: Base 4.6 Management Commands 4.6.72 telnetcon timeout This command sets the telnet connection session timeout value, in minutes. A session is active as long as the session has not been idle for the value set. The time is a decimal value from 1 to 160. Default Format telnetcon timeout <1-160>...
  • Page 158: Syslog Commands

    CLI Commands: Base 4.7 Syslog Commands 4.7 Syslog Commands This section provides a detailed explanation of the Syslog commands. The commands are divided into two functional groups: Show commands display spanning tree settings, statistics, and other in- formation. Configuration Commands configure features and options of the device. For every configuration command there is a show command that displays the configuration setting.
  • Page 159: Logging Buffered Wrap

    CLI Commands: Base 4.7 Syslog Commands 4.7.2 logging buffered wrap This command enables wrapping of in-memory logging when full capacity reached. Otherwise when full capacity is reached, logging stops. Default wrap Format logging buffered wrap Mode Privileged EXEC no logging buffered wrap This command disables wrapping of in-memory logging and configures logging to stop when capacity is full.
  • Page 160: Logging Cli-Command

    CLI Commands: Base 4.7 Syslog Commands 4.7.3 logging cli-command This command enables the CLI command Logging feature. The Command Logging component enables the switch software to log all Command Line Interface (CLI) commands issued on the system. Default disabled Format logging cli-command Mode Global Config...
  • Page 161: Logging Console

    CLI Commands: Base 4.7 Syslog Commands 4.7.4 logging console This command enables logging to the console. The <severitylevel> value is specified as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), informational (6), debug (7).
  • Page 162: Logging Host

    CLI Commands: Base 4.7 Syslog Commands 4.7.5 logging host This command enables logging to a host where up to eight hosts can be configured. Default Port - 514; Level - Critical; Format logging host <hostaddress> [<port> [<severitylevel>]] Mode Global Config Severity number Severity name Meaning...
  • Page 163: Logging Host Reconfigure

    CLI Commands: Base 4.7 Syslog Commands 4.7.6 logging host reconfigure The Logging Host Index for which to change the IP Address. Format logging host reconfigure <hostindex> <hostaddress> Mode Global Config 4.7.7 logging host remove The Logging Host Index to be removed. Format logging host remove <hostindex>...
  • Page 164: Logging Snmp-Requests Set Operation

    CLI Commands: Base 4.7 Syslog Commands 4.7.9 logging snmp-requests set operation This command enables or disables the logging of SNMP SET requests. Default Disabled Format logging snmp-requests set operation { enable | disable } Mode Global Config 4.7.10 logging snmp-requests get severity With this command you can define the severity level of logging SNMP GET requests.
  • Page 165: Logging Snmp-Requests Set Severity

    CLI Commands: Base 4.7 Syslog Commands 4.7.11 logging snmp-requests set severity With this command you can define the severity level of logging SNMP SET requests. Default Disabled Format logging snmp-requests set severity <level|[0-7]> Mode Global Config level | [0-7] Enter Logging Severity Level (emergency|0, alert|1, critical|2, error|3, warning|4, notice|5, info|6, debug|7).
  • Page 166: Logging Syslog

    CLI Commands: Base 4.7 Syslog Commands 4.7.12 logging syslog This command enables syslog logging. Default disabled Format logging syslog Mode Global Config no logging syslog This command disables syslog logging. Format no logging syslog 4.7.13 logging syslog port Enter the port number of the syslog server. Default Format logging syslog port <portid>...
  • Page 167: Scripting Commands

    CLI Commands: Base 4.8 Scripting Commands 4.8 Scripting Commands Configuration Scripting allows the user to generate text-formatted script files representing the current configuration. These configuration script files can be uploaded to a PC and edited, downloaded to the system and applied to the system.
  • Page 168: Script Delete

    CLI Commands: Base 4.8 Scripting Commands 4.8.2 script delete This command deletes a specified script where the <scriptname> parameter is the name of the script to be deleted. The ‘all’ option deletes all the scripts present on the switch. Format script delete {<scriptname>...
  • Page 169: Script Show

    CLI Commands: Base 4.8 Scripting Commands 4.8.4 script show This command displays the contents of a script file. The parameter <script- name> is the name of the script file. Format script show <scriptname> Mode Privileged EXEC The format of display is Line <no>: <Line contents>...
  • Page 170 CLI Commands: Base 4.8 Scripting Commands CLI L2P Release 7.0 05/2011...
  • Page 171: Device Configuration Commands

    4.9 Device Configuration Commands Device Configuration Commands 4.9.1 addport This command adds one port to the Link Aggregation (LAG). The given inter- face is a logical slot and port number of a configured Link Aggregation. Note: Before adding a port to a Link Aggregation, set the physical mode of the port.
  • Page 172: Adminmode

    4.9 Device Configuration Commands 4.9.2 adminmode This command enables the whole Link Aggregation as one single port. Note: Before adding a port to a Link Aggregation, set the physical mode of the port. See ‘speed’ command. Format adminmode Mode Interface Config no adminmode This command disables the whole Link Aggregation as one single port.
  • Page 173: Auto-Negotiate

    4.9 Device Configuration Commands 4.9.3 auto-negotiate This command enables automatic negotiation on a port. The default value is enable. Format auto-negotiate Mode Interface Config no auto-negotiate This command disables automatic negotiation on a port. Format no auto-negotiate Mode Interface Config CLI L2P Release 7.0 05/2011...
  • Page 174: Cable-Crossing

    The cable-crossing settings are irrelevant for a certain port, if auto-negotiate is enabled for this port. Note: The cable-crossing function is available for the RS20/RS30/RS40, MS20/MS30, RSR20/RSR30, MACH 1000, PowerMICE and OCTOPUS devices. Format...
  • Page 175: Auto-Negotiate All

    4.9 Device Configuration Commands 4.9.5 auto-negotiate all This command enables automatic negotiation on all ports. The default value is enable. Format auto-negotiate all Mode Global Config no auto-negotiate all This command disables automatic negotiation on all ports. Format no auto-negotiate all Mode Global Config 4.9.6 media-module remove...
  • Page 176: Deleteport

    4.9 Device Configuration Commands 4.9.7 deleteport This command deletes the port from the link-aggregation (LAG). The inter- face is a logical slot and port number of a configured link aggregation. Note: This command has to be issued in the member port's interface config mode.
  • Page 177: Macfilter

    4.9 Device Configuration Commands 4.9.9 macfilter This command adds a static MAC filter entry for the MAC address <macad- dr> on the VLAN <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The restricted MAC Addresses are: 00:00:00:00:00:00, 01:80:C2:00:00:00 to 01:80:C2:00:00:0F, 01:80:C2:00:00:20 to 01:80:C2:00:00:21, and FF:FF:FF:FF:FF:FF.
  • Page 178: Macfilter Adddest

    4.9 Device Configuration Commands 4.9.10 macfilter adddest This command adds the interface to the destination filter set for the MAC filter with the given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
  • Page 179: Macfilter Adddest All

    4.9 Device Configuration Commands 4.9.11 macfilter adddest all This command adds all interfaces to the destination filter set for the MAC filter with the given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
  • Page 180: Monitor Session

    4.9 Device Configuration Commands 4.9.12 monitor session <session-id> This command configures a probe port and a monitored port for monitor ses- sion (port monitoring). The first slot/port is the source monitored port and the second slot/port is the destination probe port. If this command is executed while port monitoring is enabled, it will have the effect of changing the probe and monitored port values.
  • Page 181: Monitor Session Mode

    4.9 Device Configuration Commands 4.9.13 monitor session <session-id> mode This command configures the monitor session (port monitoring) mode to en- able. The probe and monitored ports must be configured before monitor ses- sion (port monitoring) can be enabled. If enabled, the probe port will monitor all traffic received and transmitted on the physical monitored port.
  • Page 182: Monitor Session Source/Destination

    4.9 Device Configuration Commands 4.9.14 monitor session <session-id> source/ destination This command allows you to configure and activate the port mirroring func- tion of the switch. Port mirroring is when the data traffic of a source port is copied to a specified destination port. The data traffic at the source port is not influenced by port mirroring.
  • Page 183: Link-Aggregation

    4.9 Device Configuration Commands Mode Global Config session-id Session number (currently, session number 1 is supported). 4.9.15 link-aggregation This command configures a new Link Aggregation (LAG) and generates a logical slot/port number for the Link Aggregation. Display this number using the “show link-aggregation”.
  • Page 184: Link-Aggregation Adminmode

    4.9 Device Configuration Commands 4.9.16 link-aggregation adminmode This command enables a Link Aggregation (LAG). The interface is a logical slot/port for a configured Link Aggregation. The option all sets every con- figured Link Aggregation with the same administrative mode setting. Format link-aggregation adminmode all Mode...
  • Page 185: Link-Aggregation Linktrap

    4.9 Device Configuration Commands 4.9.17 link-aggregation linktrap This command enables link trap notifications for the link-aggregation (LAG). The interface is a logical slot/port for a configured link-aggregation. The op- tion all sets every configured link-aggregation with the same administrative mode setting. Default enabled Format...
  • Page 186: Link-Aggregation Name

    4.9 Device Configuration Commands 4.9.18 link-aggregation name This command defines a name for the link-aggregation (LAG). The interface is a logical slot/port for a configured link-aggregation, and name is an alpha- numeric string up to 15 characters. This command is used to modify the name that was associated with the link-aggregation when it was created.
  • Page 187: Rmon-Alarm Add

    4.9 Device Configuration Commands 4.9.19 rmon-alarm add This command adds an RMON alarm. Format rmon-alarm add <index> [<mib-variable> <rising-threshold> <falling-threshold>] Mode Global Config index Enter the index of the RMON alarm. mib-variable Enter the MIB variable. rising-threshold Enter the rising threshold for the RMON alarm. falling-threshold Enter the falling threshold for the RMON alarm.
  • Page 188: Rmon-Alarm Enable

    4.9 Device Configuration Commands 4.9.21 rmon-alarm enable This command enables an RMON alarm. Format rmon-alarm enable <index> Mode Global Config index Enter the index of the RMON alarm. 4.9.22 rmon-alarm disable This command disables an RMON alarm. Format rmon-alarm disable <index> Mode Global Config index...
  • Page 189: Rmon-Alarm Modify Mib-Variable

    4.9 Device Configuration Commands 4.9.23 rmon-alarm modify mib-variable This command modifies the mib-variable of an RMON alarm. Format rmon-alarm modify <index> mib-variable <mib-variable> Mode Global Config index Enter the index of the RMON alarm. mib-variable Enter the MIB variable. 4.9.24 rmon-alarm modify thresholds This command modifies the thresholds of an RMON alarm.
  • Page 190: Rmon-Alarm Modify Interval

    4.9 Device Configuration Commands 4.9.25 rmon-alarm modify interval This command modifies the interval of an RMON alarm. Format rmon-alarm modify <index> interval <interval> Mode Global Config index Enter the index of the RMON alarm. interval Enter the interval for the RMON alarm. 4.9.26 rmon-alarm modify sample-type This command modifies the sample-type of an RMON alarm.
  • Page 191: Rmon-Alarm Modify Startup-Alarm

    4.9 Device Configuration Commands 4.9.27 rmon-alarm modify startup-alarm This command modifies the startup-alarm of an RMON alarm. Format rmon-alarm modify <index> startup-alarm {rising | falling | risingorfalling} Mode Global Config index Enter the index of the RMON alarm. rising Start-up alarm if the value is rising. falling Start-up alarm if the value is falling.
  • Page 192: Rmon-Alarm Modify Rising-Event

    4.9 Device Configuration Commands 4.9.28 rmon-alarm modify rising-event This command modifies the rising-event of an RMON alarm. Format rmon-alarm modify <index> rising-event <rising-event-index> Mode Global Config index Enter the index of the RMON alarm. rising-event-index Enter the index for the rising event for the RMON alarm.
  • Page 193: Set Garp Timer Join

    4.9 Device Configuration Commands 4.9.30 set garp timer join This command sets the GVRP join time per port and per GARP. Join time is the interval between the transmission of GARP Protocol Data Units (PDUs) registering (or re-registering) membership for a VLAN or multicast group. This command has an effect only when GVRP is enabled.
  • Page 194: Set Garp Timer Leave

    4.9 Device Configuration Commands 4.9.31 set garp timer leave This command sets the GVRP leave time per port. Leave time is the time to wait after receiving an unregister request for a VLAN or a multicast group be- fore deleting the VLAN entry. This can be considered a buffer time for anoth- er station to assert registration for the same attribute in order to maintain uninterrupted service.time is 20 to 600 (centiseconds).
  • Page 195: Set Garp Timer Leaveall

    4.9 Device Configuration Commands 4.9.32 set garp timer leaveall This command sets how frequently Leave All PDUs are generated per port. A Leave All PDU indicates that all registrations will be unregistered. Participants would need to rejoin in order to maintain registration. The value applies per port and per GARP participation.
  • Page 196: Set Gmrp Adminmode

    4.9 Device Configuration Commands 4.9.33 set gmrp adminmode This command enables GARP Multicast Registration Protocol (GMRP) on the system. The default value is disable. Format set gmrp adminmode Mode Privileged EXEC and Global Config no set gmrp adminmode This command disables GARP Multicast Registration Protocol (GMRP) on the system.
  • Page 197: Set Gmrp Interfacemode

    4.9 Device Configuration Commands 4.9.34 et gmrp interfacemode This command enables GARP Multicast Registration Protocol on a selected interface. If an interface which has GARP enabled is enlisted as a member of a Link Aggregation (LAG), GARP functionality will be disabled on that in- terface.
  • Page 198: Set Gmrp Interfacemode

    4.9 Device Configuration Commands 4.9.35 set gmrp interfacemode This command enables GARP Multicast Registration Protocol on all interfac- es. If an interface which has GARP enabled is enabled for routing or is enlist- ed as a member of a link-aggregation (LAG), GARP functionality will be disabled on that interface.
  • Page 199: Set Gmrp Forward-All-Groups

    4.9 Device Configuration Commands 4.9.36 set gmrp forward-all-groups This command enables the GMRP Multicast Registration Protocol feature 'Forward All Groups' for all ports. Default disabled Format set gmrp forward-all-groups Mode Interface Config Global Config no set gmrp forward-all-groups This command disables the GMRP Multicast Registration Protocol fea- ture 'Forward All Groups' for all ports.
  • Page 200: Set Igmp

    4.9 Device Configuration Commands 4.9.37 set igmp This command enables IGMP Snooping on the system. The default value is disable. Note: The IGMP snooping application supports the following: Global configuration or per interface configuration. Validation of the IP header checksum (as well as the IGMP header check- sum) and discarding of the frame upon checksum error.
  • Page 201: Set Igmp

    4.9 Device Configuration Commands 4.9.38 set igmp This command enables IGMP Snooping on a selected interface. Default enabled Format set igmp Mode Interface Config no set igmp This command disables IGMP Snooping on a selected interface. Format no set igmp Mode Interface Config CLI L2P...
  • Page 202: Set Igmp Aging-Time-Unknown

    If enabled, this port is allowed to be set as static query port automatically, if the LLDP protocol has found a switch or router connected to this port. Use the command's normal form to enable the feature, the 'no' form to disable it. Default disabled (RS20: enabled) Format set igmp automatic-mode Mode...
  • Page 203: Set Igmp Forward-All

    4.9 Device Configuration Commands 4.9.41 set igmp forward-all This command activates the forwarding of multicast frames to this interface even if the given interface has not received any reports by hosts. N. B.: this applies only to frames that have been learned via IGMP Snooping. The pur- pose is that an interface (e.
  • Page 204: Set Igmp Forward-Unknown

    4.9 Device Configuration Commands 4.9.42 set igmp forward-unknown This command defines how to handle unknown multicast frames. This command is available for MS20/MS30. Format set igmp forward-unknown { discard | flood | query-ports} Mode Global Config discard Unknown multicast frames will be discarded. flood Unknown multicast frames will be flooded.
  • Page 205: Set Igmp Static-Query-Port

    4.9 Device Configuration Commands 4.9.43 set igmp static-query-port This command activates the forwarding of IGMP membership report frames to this interface even if the given interface has not received any queries. The purpose is that a port may need to forward such frames even if no queries have been received on it (e.
  • Page 206: Set Igmp Groupmembershipinterval

    4.9 Device Configuration Commands 4.9.44 set igmp groupmembershipinterval This command sets the IGMP Group Membership Interval time on the sys- tem. The Group Membership Interval time is the amount of time in seconds that a switch will wait for a report from a particular group on a particular inter- face before deleting the interface from the entry.
  • Page 207: Set Igmp Interfacemode

    4.9 Device Configuration Commands 4.9.45 set igmp interfacemode This command enables IGMP Snooping on all interfaces. If an interface which has IGMP Snooping enabled is enabled for port-based routing or is en- listed as a member of a link-aggregation (LAG), IGMP Snooping functionality will be disabled on that interface.
  • Page 208: Set Igmp Lookup-Interval-Unknown

    4.9 Device Configuration Commands 4.9.46 set igmp lookup-interval-unknown This command configures the IGMP Snooping lookup response time for unknown multicast frames (unit: seconds, min.: 2, max.: 3,599, default: 125). Format set igmp lookup-interval-unknown <2-3599> Mode Global Config <2-3599> Enter the IGMP Snooping lookup response time for unknown multi- cast frames (unit: seconds, min.: 2, max.: 3,599, default: 125).
  • Page 209: Set Igmp Maxresponse

    4.9 Device Configuration Commands 4.9.48 set igmp maxresponse This command sets the IGMP Maximum Response time on the system. The Maximum Response time is the amount of time in seconds that a switch will wait after sending a query in response to a received leave message, before deleting the multicast group received in the leave message.
  • Page 210: Set Igmp Querier Max-Response-Time

    4.9 Device Configuration Commands 4.9.49 set igmp querier max-response-time Configure the IGMP Snooping Querier's maximum response time. The range is 1 to 3,598 seconds. The default value is 10 seconds. Default Format set igmp querier max-response-time <1-3598> Mode Global Config Note: The IGMP Snooping max.
  • Page 211: Set Igmp Querier Status

    4.9 Device Configuration Commands 4.9.51 set igmp querier status Configure the IGMP Snooping Querier's administrative status (enable or disable). Default disable Format set igmp querier status {enable | disable} Mode Global Config 4.9.52 set igmp querier tx-interval Configure the IGMP Snooping Querier's transmit interval. The range is 2 to 3,599 seconds.
  • Page 212: Set Igmp Query-Ports-To-Filter

    4.9 Device Configuration Commands 4.9.53 set igmp query-ports-to-filter This command enables or disables the addition of query ports to multicast fil- ter portmasks. The setting can be enable or disable. Default Disable Format set igmp query-ports-to-filter {enable | disable} Mode Global Config enable Addition of query ports to multicast filter portmasks.
  • Page 213: Selftest Ramtest

    4.9 Device Configuration Commands 4.9.54 selftest ramtest Enable or disable the RAM test for a cold start of the device. Deactivating the RAM test reduces the booting time for a cold start of the de- vice. Default: enabled. Format selftest ramtest {disable|enable} Mode Global Config selftest ramtest disable...
  • Page 214: Show Garp

    4.9 Device Configuration Commands 4.9.56 how garp This command displays Generic Attributes Registration Protocol (GARP) in- formation. Format show garp Mode Privileged EXEC and User EXEC GMRP Admin Mode This displays the administrative mode of GARP Multicast Registration Protocol (GMRP) for the system. CLI L2P Release 7.0 05/2011...
  • Page 215: Show Gmrp Configuration

    4.9 Device Configuration Commands 4.9.57 show gmrp configuration This command displays Generic Attributes Registration Protocol (GARP) in- formation for one or all interfaces. Format show gmrp configuration {<slot/port> | all} Mode Privileged EXEC and User EXEC Interface This displays the slot/port of the interface that this row in the table describes.
  • Page 216 4.9 Device Configuration Commands 1000 centiseconds (10 seconds). The finest granularity of specifica- tion is 1 centisecond (0.01 seconds). Port GMRP Mode Indicates the GMRP administrative mode for the port. It may be enabled or disabled. If this parameter is disabled, Join Time, Leave Time and Leave All Time have no effect.
  • Page 217: Show Igmpsnooping

    4.9 Device Configuration Commands 4.9.58 how igmpsnooping This command displays IGMP Snooping information. Configured information is displayed whether or not IGMP Snooping is enabled. Status information is only displayed when IGMP Snooping is enabled. Format show igmpsnooping Mode Privileged EXEC and User EXEC Admin Mode This indicates whether or not IGMP Snooping is globally enabled on the switch.
  • Page 218 4.9 Device Configuration Commands Querier Transmit Interval This displays the IGMP Snooping Querier's transmit interval in seconds. Querier Max. Response Time This displays the IGMP Snooping Querier's maximum response time in seconds. Querier Protocol Version This displays the IGMP Snooping Querier's protocol version number. CLI L2P Release 7.0 05/2011...
  • Page 219: Show Mac-Filter-Table Gmrp

    4.9 Device Configuration Commands 4.9.59 show mac-filter-table gmrp This command displays the GARP Multicast Registration Protocol (GMRP) entries in the Multicast Forwarding Database (MFDB) table. Format show mac-filter-table gmrp Mode Privileged EXEC and User EXEC Mac Address A unicast MAC address for which the switch has forwarding and or filtering information.
  • Page 220: Show Mac-Filter-Table Igmpsnooping

    4.9 Device Configuration Commands 4.9.60 show mac-filter-table igmpsnooping This command displays the IGMP Snooping entries in the Multicast Forward- ing Database (MFDB) table. Format show mac-filter-table igmpsnooping Mode Privileged EXEC and User EXEC Mac Address A multicast MAC address for which the switch has forwarding and or filtering information.
  • Page 221: Show Mac-Filter-Table Multicast

    4.9 Device Configuration Commands 4.9.61 show mac-filter-table multicast This command displays the Multicast Forwarding Database (MFDB) informa- tion. If the command is entered with no parameter, the entire table is dis- played. This is the same as entering the optional all parameter. The user can display the table entry for one MAC Address by specifying the MAC ad- dress as an optional parameter.
  • Page 222: Show Mac-Filter-Table Static

    4.9 Device Configuration Commands 4.9.62 show mac-filter-table static This command displays the Static MAC Filtering information for all Static MAC Filters. If all is selected, all the Static MAC Filters in the system are displayed. If a macaddr is entered, a vlan must also be entered and the Static MAC Filter information will be displayed only for that MAC address and VLAN.
  • Page 223: Show Mac-Filter-Table Staticfiltering

    4.9 Device Configuration Commands 4.9.63 show mac-filter-table staticfiltering This command displays the Static Filtering entries in the Multicast Forward- ing Database (MFDB) table. Format show mac-filter-table staticfiltering Mode Privileged EXEC and User EXEC Mac Address A unicast MAC address for which the switch has forwarding and or fil- tering information.
  • Page 224: Show Mac-Filter-Table Stats

    4.9 Device Configuration Commands 4.9.64 show mac-filter-table stats This command displays the Multicast Forwarding Database (MFDB) statis- tics. Format show mac-filter-table stats Mode Privileged EXEC and User EXEC Total Entries This displays the total number of entries that can possibly be in the Multicast Forwarding Database table.
  • Page 225: Show Monitor Session

    4.9 Device Configuration Commands 4.9.65 show monitor session This command displays the Port monitoring information for the system. Format show monitor session <Session Number> Mode Privileged EXEC and User EXEC Session Display port monitor session settings. Session Number Session Number. Enter 1 for the Session Number. Port Monitor Mode indicates whether the Port Monitoring feature is enabled or disabled.
  • Page 226: Show Port

    4.9 Device Configuration Commands 4.9.66 show port This command displays port information. Format show port {<slot/port> | all} [name] Mode Privileged EXEC and User EXEC Slot/Port Valid slot and port number separated by forward slashes. Name When the optional command parameter name was specified, the out- put is different.
  • Page 227: Show Link-Aggregation

    4.9 Device Configuration Commands Link Trap This object determines whether or not to send a trap when link status changes. The factory default is enabled. Flow Indicates if enable flow control is enabled on this port. Device Status Indicates whether or not the given port's link status is monitored by the device status.
  • Page 228 4.9 Device Configuration Commands Link Trap Mode This object determines whether or not to send a trap when link status changes. The factory default is enabled. STP Mode The Spanning Tree Protocol Administrative Mode associated with the port or link-aggregation (LAG). The possible values are: Disable - Spanning tree is disabled for this port.
  • Page 229: Show Rmon-Alarm

    4.9 Device Configuration Commands 4.9.68 show rmon-alarm This command displays switch configuration information. Format show rmon-alarm Mode Privileged EXEC and User EXEC 4.9.69 show selftest This command displays switch configuration information. Format show selftest Mode Privileged EXEC and User EXEC Ramtest state May be enabled or disabled.
  • Page 230: Show Storm-Control

    4.9 Device Configuration Commands 4.9.70 show storm-control This command displays switch configuration information. Format show storm-control Mode Privileged EXEC and User EXEC Ingress Limiting May be enabled or disabled. The factory default is disabled. Ingress Limiter Mode (MACH 4000 and PowerMICE only) Sets the global mode for the ingress limiter.
  • Page 231: Show Storm-Control Limiters Port

    Shows the ingress rate limit. The factory default is: 0. Egress Broadcast Limit Shows the egress broadcast rate limit. The factory default is: 0. Egress Limit (all traffic; RS20/RS30/RS40, MS20/MS30 and OCTOPUS only) Shows the egress rate limit for all frame types.
  • Page 232 4.9 Device Configuration Commands VLAN Name A string associated with this VLAN as a convenience. It can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always has a name of `Default`. This field is optional.
  • Page 233: Show Vlan Brief

    4.9 Device Configuration Commands Tagging Select the tagging behavior for this port in this VLAN. Tagged - specifies to transmit traffic for this VLAN as tagged frames. Untagged - specifies to transmit traffic for this VLAN as untagged frames. 4.9.73 show vlan brief This command displays a list of all configured VLANs.
  • Page 234: Show Vlan Port

    4.9 Device Configuration Commands 4.9.74 show vlan port This command displays VLAN port information. Format show vlan port {<slot/port> | all} Mode Privileged EXEC and User EXEC Slot/Port Valid slot and port number separated by forward slashes. It is possi- ble to set the parameters for all ports by using the selectors on the top line.
  • Page 235: Show Voice Vlan

    4.9 Device Configuration Commands to be supported by every switch. GVRP may be enabled or disabled. The factory default is disabled. Default Priority The 802.1p priority assigned to tagged packets arriving on the port. 4.9.75 show voice vlan Use this command to display the current global Voice VLAN Administrative Mode.
  • Page 236: Show Voice Vlan Interface

    4.9 Device Configuration Commands 4.9.76 show voice vlan interface Use this command to display Use this command to display a summary of the current Voice VLAN configuration for a specific interface. <slot/port> indicates a specific physical interface. all indicates all valid interfaces. Format show voice vlan interface {<slot/port>...
  • Page 237: Shutdown

    4.9 Device Configuration Commands 4.9.77 shutdown This command disables a port. Default enabled Format shutdown Mode Interface Config no shutdown This command enables a port. Format no shutdown Mode Interface Config CLI L2P Release 7.0 05/2011...
  • Page 238: Shutdown All

    4.9 Device Configuration Commands 4.9.78 shutdown all This command disables all ports. Default enabled Format shutdown all Mode Global Config no shutdown all This command enables all ports. Format no shutdown Mode Global Config CLI L2P Release 7.0 05/2011...
  • Page 239: Snmp Trap Link-Status

    4.9 Device Configuration Commands 4.9.79 snmp trap link-status This command enables link status traps by interface. Note: This command is valid only when the Link Up/Down Flag is enabled. See ‘snmp-server enable traps linkmode’ command. Format snmp trap link-status Mode Interface Config no snmp trap link-status This command disables link status traps by interface.
  • Page 240: Snmp Trap Link-Status All

    4.9 Device Configuration Commands 4.9.80 snmp trap link-status all This command enables link status traps for all interfaces. Note: This command is valid only when the Link Up/Down Flag is enabled (see “snmp-server enable traps linkmode” ). Format snmp trap link-status all Mode Global Config no snmp trap link-status all...
  • Page 241: Spanning-Tree Bpdumigrationcheck

    4.9 Device Configuration Commands 4.9.81 spanning-tree bpdumigrationcheck This command enables BPDU migration check on a given interface. This will force the specified port to transmit RST or MST BPDUs. The all option enables BPDU migration check on all interfaces. Format spanning-tree bpdumigrationcheck {<slot/port>|all} Mode Global Config...
  • Page 242: Speed

    4.9 Device Configuration Commands 4.9.82 speed This command sets the speed and duplex setting for the interface. Format speed { <100 | 10> <half-duplex | full-duplex> | 1000 full-duplex} Mode Interface Config Acceptable values are: 1000f 1000BASE-T full duplex 100h 100BASE-T half duplex 100f 100BASE-T full duplex...
  • Page 243: Storm-Control Broadcast

    4.9 Device Configuration Commands 4.9.83 storm-control broadcast This command enables the egress broadcast limiter globally. Format storm-control broadcast Mode Global Config no storm-control broadcast This command disables the egress broadcast limiter globally. Format no storm-control broadcast Mode Global Config CLI L2P Release 7.0 05/2011...
  • Page 244: Storm-Control Egress-Limiting

    4.9 Device Configuration Commands 4.9.84 storm-control egress-limiting This command enables or disables the egress limiter globally for all frame types. Format storm-control egress-limiting {disable | enable} Mode Global Config 4.9.85 storm-control ingress-limiting This command enables or disables the ingress limiter globally. Format storm-control ingress-limiting {disable | enable} Mode...
  • Page 245: Storm-Control Broadcast (Port-Related)

    (unit: frames per second, min.: 0 (no limit), default: 0 (no limit)). Format storm-control broadcast <max. broadcast rate> Mode Interface Config 4.9.88 storm-control egress-limit Sets the egress rate limit in kbit/s. "0" means: no limit (RS20/RS30/RS40, MS20/MS30, OCTOPUS only). Format storm-control egress-limit <max. egress rate> Mode Interface Config 4.9.89 storm-control ingress-limit...
  • Page 246: Storm-Control Ingress-Mode

    4.9 Device Configuration Commands 4.9.90 storm-control ingress-mode This command sets the frame type for the ingress limiter to: All, BC, BC+MC, BC+MC+uUC (RS20/RS30/RS40, MS20/MS30, OCTO- PUS only). Format storm-control ingress-mode {all | bc | mc+bc | uuc+mc+bc} Mode Interface Config CLI L2P Release 7.0 05/2011...
  • Page 247: Storm-Control Flowcontrol

    4.9 Device Configuration Commands 4.9.91 storm-control flowcontrol This command enables 802.3x flow control for the switch. Note: This command only applies to full-duplex mode ports. Default disabled Format storm-control flowcontrol Mode Interface Config Global Config no storm-control flowcontrol This command disables 802.3x flow control for the switch. Note: This command only applies to full-duplex mode ports.
  • Page 248: Storm-Control Flowcontrol Per Port

    4.9 Device Configuration Commands 4.9.92 storm-control flowcontrol per port This command enables 802.3x flow control for the port. Note: This command only applies to full-duplex mode ports. Default enabled Format storm-control flowcontrol Mode Interface Config no storm-control flowcontrol per port This command disables 802.3x flow control for the port.
  • Page 249: Vlan

    4.9 Device Configuration Commands 4.9.93 vlan This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN). VLAN range is 1-4042. Format vlan <1-4042> Mode VLAN database no vlan...
  • Page 250: Vlan0-Transparent-Mode

    In transparency mode devices ignore received vlan tags. Set the vlan mem- bership of the ports to untagged for all vlans. Note for RS20/RS30/RS40, MS20/MS30 and OCTOPUS: In transparency mode devices ignore the configured port vlan id. Set the vlan membership of the ports from vlan 1 to untagged or member.
  • Page 251: Vlan Acceptframe

    4.9 Device Configuration Commands 4.9.95 vlan acceptframe This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port.
  • Page 252: Vlan Database

    4.9 Device Configuration Commands 4.9.96 vlan database This command switches into the global VLAN mode. Default Admit All Format vlan database Mode Privileged EXEC CLI L2P Release 7.0 05/2011...
  • Page 253: Vlan Ingressfilter

    4.9 Device Configuration Commands 4.9.97 vlan ingressfilter This command enables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the re- ceiving interface are admitted and forwarded to ports that are members of that VLAN.
  • Page 254: Vlan Name

    4.9 Device Configuration Commands 4.9.98 vlan name This command changes the name of a VLAN. The name is an alphanumeric string of up to 32 characters, and the ID is a valid VLAN identification number. ID range is 1-4042. Default The name for VLAN ID 1 is always Default.
  • Page 255: Vlan Participation

    4.9 Device Configuration Commands 4.9.99 vlan participation This command configures the degree of participation for a specific interface in a VLAN. The ID is a valid VLAN identification number, and the interface is a valid interface number . Format vlan participation <exclude | include | auto>...
  • Page 256: Vlan Participation All

    4.9 Device Configuration Commands 4.9.100vlan participation all This command configures the degree of participation for all interfaces in a VLAN. The ID is a valid VLAN identification number. Format vlan participation all <exclude | include | auto> <1-4042> Mode Global Config Participation options are: include The interface is always a member of this VLAN.
  • Page 257: Vlan Port Acceptframe All

    4.9 Device Configuration Commands 4.9.101vlan port acceptframe all This command sets the frame acceptance mode for all interfaces. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port.
  • Page 258: Vlan Port Ingressfilter All

    4.9 Device Configuration Commands 4.9.102vlan port ingressfilter all This command enables ingress filtering for all ports. If ingress filtering is dis- abled, frames received with VLAN IDs that do not match the VLAN member- ship of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
  • Page 259: Vlan Port Pvid All

    4.9 Device Configuration Commands 4.9.103vlan port pvid all This command changes the VLAN ID for all interface. Default Format vlan port pvid all <1-4042> Mode Global Config no vlan port pvid all This command sets the VLAN ID for all interfaces to 1. Format no vlan port pvid all <1-4042>...
  • Page 260: Vlan Port Tagging All

    4.9 Device Configuration Commands 4.9.104vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tag- ging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.
  • Page 261: Vlan Pvid

    4.9 Device Configuration Commands 4.9.105vlan pvid This command changes the VLAN ID per interface. Default Format vlan pvid <1-4042> Mode Interface Config no vlan pvid This command sets the VLAN ID per interface to 1. Format no vlan pvid <1-4042> Mode Interface Config CLI L2P...
  • Page 262: Vlan Tagging

    4.9 Device Configuration Commands 4.9.106vlan tagging This command configures the tagging behavior for a specific interface in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.
  • Page 263: Voice Vlan (Global Config Mode)

    4.9 Device Configuration Commands 4.9.107voice vlan (Global Config Mode) This command enables the Voice VLAN feature. Voice VLAN is a feature used to automatically separate voice and data traffic on a port, by VLAN and/or priority. A primary benefit of using Voice VLAN is to ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high.
  • Page 264: Voice Vlan

    4.9 Device Configuration Commands 4.9.108voice vlan <id> Use this command to configure VLAN tagging and 802.1p priority. Format voice vlan <id> [dot1p <priority>] } Mode Interface Config <id> Enter the Voice VLAN ID. dot1p Configure Voice VLAN 802.1p priority tagging for voice traffic. <priority>...
  • Page 265: Voice Vlan Dot1P

    4.9 Device Configuration Commands 4.9.109voice vlan dot1p Use this command to configure Voice VLAN 802.1p priority tagging for voice traffic. Format voice vlan dot1p <priority> Mode Interface Config <priority> Configure Voice VLAN 802.1p priority tagging for voice traffic. The priority tag range is 0–7. 4.9.110voice vlan none Use this command to allow the IP phone to use its own configuration to send untagged voice traffic.
  • Page 266: Voice Vlan Untagged

    4.9 Device Configuration Commands 4.9.111voice vlan untagged Use this command to configure the phone to send untagged voice traffic. Format voice vlan untagged Mode Interface Config 4.9.112voice vlan auth Use this command to set Voice VLAN Authentication Mode. If disabled, VOIP devices which are detected via LLDP-med will have access to the Voice VLAN without authentication.
  • Page 267: User Account Management Commands

    4.10 User Account Management Commands 4.10 User Account Management Commands These commands manage user accounts. 4.10.1 disconnect This command closes a telnet session. Format disconnect {<sessionID> | all} Mode Privileged EXEC Session ID Enter the session ID (1-11). CLI L2P Release 7.0 05/2011...
  • Page 268: Show Loginsession

    4.10 User Account Management Commands 4.10.2 show loginsession This command displays current telnet and serial port connections to the switch. Format show loginsession Mode Privileged EXEC and User EXEC Login Session ID User Name The name the user will use to login using the serial port or Telnet. A new user may be added to the switch by entering a name in a blank entry.
  • Page 269: Show Users

    4.10 User Account Management Commands 4.10.3 show users This command displays the configured user names and their settings. This command is only available for users with readwrite privileges. The SNMPv3 fields will only be displayed if SNMP is available on the system. Format show users Mode...
  • Page 270: Users Defaultlogin

    4.10 User Account Management Commands 4.10.4 users defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is config- ured locally.
  • Page 271: Users Login

    4.10 User Account Management Commands 4.10.5 users login <user> Enter user name. Format users login <user> <listname> Mode Global Config Note: When assigning a list to the 'admin' account, include an authentica- tion method that allows administrative access even when remote authentication is unavailable (use 'authentication login <listname>...
  • Page 272: Users Access

    4.10 User Account Management Commands 4.10.6 users access This command sets access for a user: readonly/readwrite. Format users access <username> {readonly readwrite} Mode Global Config <username> Enter a name up to 32 alphanumeric characters in length. readonly Enter the access mode as readonly. readwrite Enter the access mode as readwrite.
  • Page 273: Users Name

    4.10 User Account Management Commands 4.10.7 users name This command adds a new user (account) if space permits. The account <username> can be up to eight characters in length. The name may be com- prised of alphanumeric characters as well as the dash (‘-’) and underscore (‘_’).
  • Page 274: Users Passwd

    4.10 User Account Management Commands 4.10.8 users passwd This command is used to change a password. The password should not be more than eight alphanumeric characters in length. If a user is authorized for authentication or encryption is enabled, the password must be at least eight alphanumeric characters in length.
  • Page 275: Users Snmpv3 Accessmode

    4.10 User Account Management Commands 4.10.9 users snmpv3 accessmode This command specifies the snmpv3 access privileges for the specified login user. The valid accessmode values are readonly or readwrite. The <username> is the login user name for which the specified access mode applies.
  • Page 276: Users Snmpv3 Authentication

    4.10 User Account Management Commands 4.10.10users snmpv3 authentication This command specifies the authentication protocol to be used for the specified login If md5 or sha are user. The valid authentication protocols are none specified, the user login password is also used as the snmpv3 authentication password and therefore must be at least eight characters in length.
  • Page 277: Users Snmpv3 Encryption

    4.10 User Account Management Commands 4.10.11 users snmpv3 encryption This command specifies the encryption protocol to be used for the specified login user. The valid encryption protocols are des or none. If des is specified, the required key may be specified on the command line. The key may be up to 16 characters long.
  • Page 278 4.10 User Account Management Commands CLI L2P Release 7.0 05/2011...
  • Page 279: System Utilities

    4.11 System Utilities 4.11 System Utilities This section describes system utilities. 4.11.1 address-conflict This command configures the setting for detection possible address conflicts of the agent´s IP address with other devices´ IP addresses in the network. Format address-conflict {detection-mode { active-only | disable | enable | passive-only}| ongoing-detection { disable | enable } } Mode...
  • Page 280: Cablestatus

    4.11 System Utilities 4.11.2 cablestatus This command tests the cable attached to an interface for short or open circuit. During the test the traffic is interrupted on this port. Format cablestatus <slot/port> Mode Privileged EXEC 4.11.3 clear eventlog Clear the event log. The CLI will ask for confirmation. Answer y (yes) or n (no).
  • Page 281: Clear Arp-Table-Switch

    4.11 System Utilities Format traceroute <ipaddr> [port] Mode Privileged EXEC 4.11.5 clear arp-table-switch This command clears the agent´s ARP table (cache). Format clear arp-table-switch Mode Privileged EXEC CLI L2P Release 7.0 05/2011...
  • Page 282: Clear Config

    4.11 System Utilities 4.11.6 clear config This command resets the configuration in RAM to the factory defaults without powering off the switch. Format clear config Mode Privileged EXEC 4.11.7 clear config factory This command resets the whole configuration to the factory defaults. Confi- guration data and scripts stored in nonvolatile memory will also be deleted.
  • Page 283: Clear Hiper-Ring

    4.11 System Utilities 4.11.9 clear hiper-ring This command clears the HIPER Ring configuration (deletes it). Format clear hiper-ring Mode Privileged EXEC 4.11.10clear igmpsnooping This command clears the tables managed by the IGMP Snooping function and will attempt to delete these entries from the Multicast Forwarding Data- base.
  • Page 284: Clear Mac-Addr-Table

    4.11 System Utilities 4.11.11clear mac-addr-table This command clears the switch's MAC address table (the forwarding data- base that contains the learned MAC addresses). Note: this command does not affect the MAC filtering table. Format clear mac-addr-table Mode Privileged EXEC 4.11.12clear pass This command resets all user passwords to the factory defaults without pow- ering off the switch.
  • Page 285: Clear Link-Aggregation

    4.11 System Utilities 4.11.13clear link-aggregation This command clears all link-aggregations (LAGs). Format clear link-aggregation Mode Privileged EXEC 4.11.14clear signal-contact This command clears the signal-contact output configuration. Switches the signal contact 1´s mode to auto and its manual setting to open. Switches the signal contact 2´s mode to manual and its manual setting to closed.
  • Page 286: Clear Traplog

    4.11 System Utilities 4.11.15clear traplog This command clears the trap log. Format clear traplog Mode Privileged EXEC 4.11.16clear ring-coupling This command clears the ring-coupling configuration. Format clear ring-coupling Mode Privileged EXEC CLI L2P Release 7.0 05/2011...
  • Page 287: Clear Vlan

    4.11 System Utilities 4.11.17clear vlan This command resets VLAN configuration parameters to the factory defaults. Format clear vlan Mode Privileged EXEC 4.11.18config-watchdog If the function is enabled and the connection to the switch is interrupted for longer than the time specified in “timeout [s]”, the switch then loads the last configuration saved.
  • Page 288: Copy

    4.11 System Utilities 4.11.19copy This command uploads and downloads to/from the switch. Remote URLs can be specified using tftp. copy (without parameters) displays a brief explanation of the most important copy commands. A list of valid commands is provided below. The command can be used to the save the running configuration to nvram by specifying the source as system:running-config and the destination as nvram:startup-config.
  • Page 289 4.11 System Utilities copy aca:capturefilter <sourcefilename> nvram:capturefilter <destfilename> copy <url> nvram:script <destfilename> copy <url> nvram:startup-config copy <url> system:image copy <url> system:running-config copy <url> system:bootcode Mode Privileged EXEC copy aca:script <sourcefilename> nvram:script [targetfilename] Copies the script from the Auto Configuration Adapter. –...
  • Page 290 4.11 System Utilities The clear config factory command deletes the SFP white list, too. copy nvram:backup-image system:image Use this command to swap current and backup images. The backup image (backup.bin) and current image (main.bin) will exchange the file name, after reboot the both OS and configuration files will be swapped.
  • Page 291 4.11 System Utilities copy nvram:capturefilter <sourcefilename> aca:capturefilter <targetfilename> Save a capture filter file from the flash memory to the Auto Configura- tion Adapter. – sourcefilename: Filename of source capture filter expressions file. – targetfilename: Filename of target capture filter expressions file. copy nvram:capturefilter <sourcefilename>...
  • Page 292 4.11 System Utilities copy nvram:startup-config <url> Uploads config file using <tftp://ip/filepath/fileName>. copy nvram:startup-config system:running-config Uploads/Copies config file. The target is the currently running configuration. copy nvram:traplog <url> Uploads Trap log file. Uploads Trap log file using <tftp://ip/filepath/fileName>. copy system:running-config nvram:startup-config Copies system config file.
  • Page 293 4.11 System Utilities System Name: <Product Name>-518280 Mgmt-IP a.b.c.d 1.Router-IP: 0.0.0.0 Base-MAC aa:bb:cc:dd:ee:ff System Time: 2010-01-02 05:51:11 --------------------------------------------------- The command uploads the CLI Banner file by tftp using <tftp://ip/filepath/fileName>. After the upload you logout from CLI and the new CLI banner file will be displayed at the next login.
  • Page 294 4.11 System Utilities copy aca:capturefilter <sourcefilename> nvram:capturefilter <targetfilename> Load a capture filter file from AutoConfiguration Adapter ACA21 into the flash memory. – sourcefilename: Filename of source capture filter expressions file. – targetfilename: Specify the file name on the switch's NVRAM. copy <url>...
  • Page 295 4.11 System Utilities clear sfp-white-list Use this command to delete the SFP white list file from the flash memory. Note: The clear config factory command deletes the SFP white list, too. CLI L2P Release 7.0 05/2011...
  • Page 296: Device-Status Connection-Error

    4.11 System Utilities 4.11.20device-status connection-error This command configures the device status link error monitoring for this port. Default ignore Format device-status connection-error {ignore|propagate} Mode Interface Config 4.11.21device-status monitor This command configures the device-status. Format device-status monitor {aca-removal | all | connection-error | hiper-ring | module-removal | power-supply-1 | power-supply-2 | power-supply-3-1 |...
  • Page 297: Logout

    4.11 System Utilities trap Configure if a trap is sent when the device status changes its state. – enable enables sending traps, – disable disables sending traps. 4.11.22logout This command closes the current telnet connection or resets the current se- rial connection.
  • Page 298: Ping

    4.11 System Utilities 4.11.23ping This command checks if another computer is on the network and listens for connections. To use this command, configure the switch for network (in- band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.
  • Page 299: Signal-Contact

    4.11 System Utilities 4.11.25signal-contact This command configures the signal contacts. Format signal-contact {1|2|all} {mode {auto|device-status|manual} |monitor {aca-removal| all| connection-error|hiper-ring|module-removal |power-supply-1| power-supply-2 |power-supply-3-1|power-supply-3-2 |power-supply-4-1|power-supply-4-2 |ring-coupling|temperature} {disable|enable} |state {closed|open} |trap {disable|enable} } Mode Global Config Contact No. Selection of the signal contact: –...
  • Page 300: Temperature

    99. The default for the lower limit is 0, for the upper limit, it is 70. Note: To give the temperature in Fahrenheit, use the suffix f. Note: The command is available for RS20/RS30/RS40, MS20/MS30, RSR20/RSR30, MACH100, MACH 1000, PowerMICE, MACH 4000 and OCTOPUS devices.
  • Page 301: Reboot

    4.11 System Utilities 4.11.27reboot This command resets the switch (cold start) after a given time delay, for warm start See “reload” on page 302. Reset means that all network connections are terminated and the boot code executes. The switch uses the stored con- figuration to initialize the switch.
  • Page 302: Reload

    4.11 System Utilities <seconds> The number of seconds after which the switch will reboot. Value range: None (no reboot sceduled), 0 - 2,147,483 sec (= 596 h + 31 min + 23 sec) . 4.11.29reload This command enables you to reset the switch (warm start) after a given time delay, for cold start See “reboot”...
  • Page 303: Show Reload

    4.11 System Utilities 4.11.30show reload This command displays if a reload is sceduled for the device. If sceduled, the command displays the number of seconds after which the switch will reload. Format show reload Modes Privileged EXEC User Exec <seconds> The number of seconds after which the switch will reload.
  • Page 304 4.11 System Utilities CLI L2P Release 7.0 05/2011...
  • Page 305: Lldp - Link Layer Discovery Protocol

    4.12 LLDP - Link Layer Discovery Protocol 4.12 LLDP - Link Layer Discovery Protocol These commands show and configure the LLDP parameters in compliance with IEEE 802.1 AB. 4.12.1 show lldp This command shows all LLDP settings. Format show lldp Mode Privileged EXEC and User EXEC 4.12.2 show lldp config...
  • Page 306: Show Lldp Config Chassis

    4.12 LLDP - Link Layer Discovery Protocol 4.12.3 show lldp config chassis This command shows all LLDP configuration settings concerning the entire device. Format show lldp config chassis Mode Privileged EXEC and User EXEC 4.12.4 show lldp config chassis admin-state Display the LLDP/IEEE802.1AB functionality on this device.
  • Page 307: Show Lldp Config Chassis Notification-Interval

    4.12 LLDP - Link Layer Discovery Protocol 4.12.5 show lldp config chassis notification-interval Display the LLDP minimum notification trap interval (unit: seconds). Format show lldp config chassis notification-interval Mode Privileged EXEC and User EXEC 4.12.6 show lldp config chassis re-init-delay Display the LLDP configuration's chassis re-initialization delay (unit: seconds).
  • Page 308: Show Lldp Config Chassis Tx-Delay

    4.12 LLDP - Link Layer Discovery Protocol 4.12.7 show lldp config chassis tx-delay Display the LLDP transmit delay (unit: seconds). It indicates the delay between successive LLDP frame transmissions. Format show lldp config chassis tx-delay Mode Privileged EXEC and User EXEC 4.12.8 show lldp config chassis tx-hold-mult Display the LLDP transmit hold multiplier, a time-to-live value expressed as a multiple of the LLDP Message Tx Interval (tx-interval).
  • Page 309: Show Lldp Config Port

    Display the port's LLDP admin state (if LLDP/IEEE802.1AB frames will be transmitted and/or received). fdb-mode Display the port's LLDP FDB mode. hm-mode Display the port's LLDP Hirschmann mode. .max-neighbors Display the port's max. no. of LLDP neighbors. notification Display the port's LLDP notification (trap) setting.
  • Page 310: Show Lldp Config Port Tlv

    4.12 LLDP - Link Layer Discovery Protocol 4.12.11show lldp config port tlv This command shows all LLDP TLV configuration settings (if the given infor- mation is included in the sent LLDP frames or not) concerning one or all ports. Format show lldp config port <{slot/port|all}>...
  • Page 311: Show Lldp Med

    4.12 LLDP - Link Layer Discovery Protocol sys-cap Display the port's LLDP TLV inclusion of System Capabilities. sys-desc Display the port's LLDP TLV inclusion of System Description. sys-name Display the port's LLDP TLV inclusion of System Name. vlan-name Display the port's LLDP TLV inclusion of VLAN Name. 4.12.12show lldp med Use this command to display a summary of the current LLDP MED global configuration.
  • Page 312: Show Lldp Med Interface

    4.12 LLDP - Link Layer Discovery Protocol 4.12.13show lldp med interface Use this command to display a summary of the current LLDP MED configu- ration for a specific interface. Format show lldp med interface {<unit/slot/port> | all} Mode Privileged EXEC <unit/slot/port>...
  • Page 313: Show Lldp Med Local-Device Detail

    4.12 LLDP - Link Layer Discovery Protocol 4.12.14show lldp med local-device detail Use this command to display detailed information about the LLDP MED data that a specific interface transmits. <unit/slot/port> indicates a specific physical interface. Format show lldp med local-device detail {<slot/port>} Mode Privileged EXEC <slot/port>...
  • Page 314: Show Lldp Med Remote-Device Detail

    4.12 LLDP - Link Layer Discovery Protocol Local Interface Displays the local interface. RemoteID Displays the RemoteID. Device Class Displays the Device Class. 4.12.16show lldp med remote-device detail Use this command to display detailed information about remote devices that transmit current LLDP MED data to an interface on the system. Format show lldp med remote-device detail <slot/port>...
  • Page 315 4.12 LLDP - Link Layer Discovery Protocol mgmt-addr | profinetio-port-info | port-desc | port-id | summary | sys-desc | sys-name | vlan-info Mode Privileged EXEC and User EXEC chassis-id Display the remote data's chassis ID only. detailed Display remote data in detailed format (i. e., all available data). Note: most important data is output first (not in alphabetic order of command names).
  • Page 316: Lldp

    4.12 LLDP - Link Layer Discovery Protocol summary Display remote data in summary format (table with most important data only, strings will be truncated if necessary, indicated by an appended '>' character). sys-desc Display the remote data's system description only. sys-name Display the remote data's system name only.
  • Page 317: Lldp Config Chassis Admin-State

    4.12 LLDP - Link Layer Discovery Protocol Format no lldp Mode Global Config 4.12.19lldp config chassis admin-state Configure the LLDP/IEEE802.1AB functionality on this device. If disabled, the LLDP protocol will become inactive, but the LLDP MIBs can still be accessed. off: Disable the LLDP/IEEE802.1AB functionality.
  • Page 318: Lldp Config Chassis Notification-Interval

    4.12 LLDP - Link Layer Discovery Protocol 4.12.20lldp config chassis notification-interval Configure the LLDP minimum notification interval (the minimum time after a notification trap has been sent until a new trap can be sent, unit: seconds, min.: 5 sec., max.: 3600 sec., default: 5 sec.). Format lldp config chassis notification-interval <notification interval>...
  • Page 319: Lldp Config Chassis Tx-Delay

    4.12 LLDP - Link Layer Discovery Protocol 4.12.22lldp config chassis tx-delay Configure the LLDP transmit delay, the delay between successive LLDP frame transmissions (unit: seconds, min.: 1 sec., max.: 8192 sec., default: 2 sec.). Format lldp config chassis tx-delay <tx delay> Mode Global Config Tx-delay...
  • Page 320: Lldp Chassis Tx-Interval

    4.12 LLDP - Link Layer Discovery Protocol 4.12.24lldp chassis tx-interval Configure the interval at which LLDP frames are transmitted on behalf of this LLDP agent (unit: seconds, min.: 5 sec., max.: 32768 sec., default: 30 sec.) Format lldp chassis tx-interval <tx interval> Mode Global Config Tx-interval...
  • Page 321: Lldp Admin-State

    4.12 LLDP - Link Layer Discovery Protocol 4.12.26lldp admin-state Configure the port's LLDP admin state (if LLDP/IEEE802.1AB frames will be transmitted to and/or received from the standard IEEE multicast address 01:80:c2:00:00:0e). The default setting is tx-and-rx. Format lldp admin-state <{tx-only|rx-only|tx-and-rx|off}> Mode Interface Config 4.12.27lldp fdb-mode...
  • Page 322: Lldp Hm-Mode

    4.12 LLDP - Link Layer Discovery Protocol 4.12.28lldp hm-mode Configure the port's LLDP Hirschmann mode (if LLDP/IEEE802.1AB frames will be transmitted to and/or received from the Hirschmann-specific multicast address 01:80:63:2f:ff:0b). The default setting is tx-and-rx. Format lldp hm-mode <{tx-only|rx-only|tx-and-rx|off}> Mode Interface Config 4.12.29lldp max-neighbors...
  • Page 323: Lldp Med All

    4.12 LLDP - Link Layer Discovery Protocol discovery, network policy, Power over Ethernet, inventory management and location information. Use this command to enable MED. By enabling MED, you will be effectively enabling the transmit and receive function of LLDP. Default Enabled Format lldp med...
  • Page 324: Lldp Med Confignotification

    4.12 LLDP - Link Layer Discovery Protocol 4.12.32lldp med confignotification Use this command to configure all the ports to send the topology change no- tification. Default Disabled Format lldp med confignotification Mode Interface Config no lldp med confignotification Use this command to disable notifications. Format no lldp med confignotification Mode...
  • Page 325: Lldp Med Faststartrepeatcount

    4.12 LLDP - Link Layer Discovery Protocol 4.12.34lldp med faststartrepeatcount Use this command to set the value of the fast start repeat count. Default Format lldp med faststartrepeatcount [count] Mode Global Config [count] The number of LLDP PDUs that will be transmitted when the product is enabled.
  • Page 326: Lldp Med Transmit-Tlv

    4.12 LLDP - Link Layer Discovery Protocol 4.12.35lldp med transmit-tlv Use this command to specify which optional Type Length Values (TLVs) in the LLDP-MED set will be transmitted in the Link Layer Discovery Protocol Data Units (LLDPDUs). Default By default, the capabilities and network policy TLVs are included.
  • Page 327: Lldp Med Transmit-Tlv All

    4.12 LLDP - Link Layer Discovery Protocol 4.12.36lldp med transmit-tlv all Use this command to specify which optional Type Length Values (TLVs) in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units (LLDPDUs). Default By default, the capabilities and network policy TLVs are included.
  • Page 328: Lldp Notification

    4.12 LLDP - Link Layer Discovery Protocol 4.12.37lldp notification Configure the port's LLDP notification setting (on or off, default: off). Format lldp notification <{off|on}> Mode Interface Config 4.12.38lldp tlv link-aggregation Configure the port's LLDP TLV inclusion of Link Aggregation (on or off, default: on).
  • Page 329: Lldp Tlv Max-Frame-Size

    4.12 LLDP - Link Layer Discovery Protocol 4.12.40lldp tlv max-frame-size Configure the port's LLDP TLV inclusion of Max. Frame Size (on or off, default: on). Format lldp tlv max-frame-size <{off|on}> Mode Interface Config 4.12.41lldp tlv mgmt-addr Configure the port's LLDP TLV inclusion of Management Address (on or off, default: on).
  • Page 330: Lldp Tlv Pnio-Alias

    4.12 LLDP - Link Layer Discovery Protocol 4.12.43lldp tlv pnio-alias Configure the port's LLDP TLV inclusion of PROFINET IO Alias (on or off, default: on). Format lldp tlv pnio-alias <{off|on}> Mode Interface Config 4.12.44lldp tlv pnio-mrp Configure the port's LLDP TLV inclusion of PROFINET IO MRP (on or off, default: on).
  • Page 331: Lldp Tlv Port-Vlan

    4.12 LLDP - Link Layer Discovery Protocol 4.12.46lldp tlv port-vlan Configure the port's LLDP TLV inclusion of Port VLAN (on or off, default: on). Format lldp tlv port-vlan <{off|on}> Mode Interface Config 4.12.47lldp tlv gmrp Configure the port's LLDP TLV inclusion of GMRP (on or off, default: on). Format lldp tlv gmrp <{off|on (on)}>...
  • Page 332: Lldp Tlv Portsec

    4.12 LLDP - Link Layer Discovery Protocol 4.12.49lldp tlv portsec Configure the port's LLDP TLV inclusion of PortSec (on or off, default: on). Format lldp tlv portsec <{off|on (on)}> Mode Interface Config 4.12.50lldp tlv ptp Configure the port's LLDP TLV inclusion of PTP (on or off, default: on). Format lldp tlv ptp <{off|on (on)}>...
  • Page 333: Lldp Tlv Sys-Cap

    4.12 LLDP - Link Layer Discovery Protocol 4.12.52lldp tlv sys-cap Configure the port's LLDP TLV inclusion of System Capabilities (on or off, default: on). Format lldp tlv sys-cap <{off|on}> Mode Interface Config 4.12.53lldp tlv sys-desc Configure the port's LLDP TLV inclusion of System Description (on or off, default: on).
  • Page 334: Lldp Tlv Vlan-Name

    4.12 LLDP - Link Layer Discovery Protocol 4.12.55lldp tlv vlan-name Configure the port's LLDP TLV inclusion of VLAN Name. Format lldp tlv vlan-name <{off|on}> Mode Interface Config 4.12.56name Set or remove a descriptive name for the current interface (physical ports only). Format name <descriptive name>...
  • Page 335: Sntp - Simple Network Time Protocol

    4.13 SNTP - Simple Network Time Protocol 4.13 SNTP - Simple Network Time Protocol These commands show and configure the SNTP parameters. 4.13.1 show sntp This command shows all SNTP settings. Format show sntp Mode Privileged EXEC and User EXEC SNTP Server Anycast Address Show SNTP Server Anycast Address (a.b.c.d).
  • Page 336: Show Sntp Anycast

    4.13 SNTP - Simple Network Time Protocol SNTP Client Local Time Offset Show SNTP Client Local Time Offset (in minutes). SNTP Client Primary Server IP Address Show SNTP Client Primary Server IP Address (a.b.c.d). SNTP Client Secondary Server IP Address Show SNTP Client Secondary Server IP Address (a.b.c.d).
  • Page 337: Show Sntp Client

    4.13 SNTP - Simple Network Time Protocol address Show the SNTP server's anycast destination IP Address. transmit-interval Show the SNTP Server's interval for sending Anycast messages (unit: seconds). vlan Show the SNTP server's Anycast VLAN ID (used for sending Anycast messages).
  • Page 338: Show Sntp Operation

    4.13 SNTP - Simple Network Time Protocol request-interval Show the SNTP Client's request interval (unit: seconds). server Show the SNTP Client's server IP addresses. server primary Show the SNTP Client's primary server IP addresses. server secondary Show the SNTP Client's redundant server IP addresses. server threshold Show the SNTP Client's threshold in milliseconds.
  • Page 339: Show Sntp Status

    4.13 SNTP - Simple Network Time Protocol Mode Privileged EXEC and User EXEC disable-if-local Show if the server will be disabled if the time is running from the local clock and not synchronized to an external time source. 4.13.6 show sntp status This command shows the SNTP state, synchronization and error messages.
  • Page 340: Show Sntp Time

    4.13 SNTP - Simple Network Time Protocol 4.13.7 show sntp time This command shows time and date. Format show sntp time [sntp|system] Mode Privileged EXEC and User EXEC sntp Show the current SNTP date and UTC time. system Show the local system's current date and time. 4.13.8 no sntp This command disables sntp.
  • Page 341: Sntp Anycast Address

    4.13 SNTP - Simple Network Time Protocol 4.13.9 sntp anycast address Set the SNTP server's anycast destination IP Address, default: 0.0.0.0 (none). Format sntp anycast address <IPAddress> Mode Global Config no sntp anycast address Set the SNTP server's anycast destination IP Address to 0.0.0.0. Format no sntp anycast address Mode...
  • Page 342: Sntp Anycast Vlan

    4.13 SNTP - Simple Network Time Protocol 4.13.11sntp anycast vlan Set the SNTP server's Anycast VLAN ID used for sending Anycast messages, default: 1. Format sntp anycast vlan <1-4042> Mode Global Config 4.13.12sntp client accept-broadcast Enable/Disable that the SNTP Client accepts SNTP broadcasts. Format sntp client accept-broadcast <on | off>...
  • Page 343: Sntp Client Disable-After-Sync

    4.13 SNTP - Simple Network Time Protocol 4.13.13sntp client disable-after-sync If this option is activated, the SNTP client disables itself once it is synchro- nised to a server. Format sntp client disable-after-sync <on | off> Mode Global Config Do not disable SNTP client when it is synchronised to a time server. Disable SNTP client as soon as it is synchronised to a time server.
  • Page 344: Sntp Client Request-Interval

    4.13 SNTP - Simple Network Time Protocol 4.13.15sntp client request-interval The synchronization interval in seconds, default: 30. Format sntp client request-interval <1-3600> Mode Global Config 4.13.16no sntp client server Disable the SNTP client servers. Format no sntp client server Mode Global Config 4.13.17sntp client server primary Set the SNTP Client's primary server IP Address, default: 0.0.0.0 (none).
  • Page 345 4.13 SNTP - Simple Network Time Protocol no sntp client server primary Disable the primary SNTP client server. Format no sntp client server primary Mode Global Config CLI L2P Release 7.0 05/2011...
  • Page 346: Sntp Client Server Secondary

    4.13 SNTP - Simple Network Time Protocol 4.13.18sntp client server secondary Set the SNTP Client's secondary server IP Address, default: 0.0.0.0 (none). Format sntp client server secondary <IP-Address> Mode Global Config no sntp client server secondary Disable the secondary SNTP client server. Format no sntp client server secondary Mode...
  • Page 347: Sntp Client Threshold

    4.13 SNTP - Simple Network Time Protocol 4.13.19sntp client threshold With this option you can reduce the frequency of time alterations. Enter this threshold as a positive integer value in milliseconds. The switch obtains the server timer as soon as the deviation to the server time is above this threshold.
  • Page 348: Sntp Operation

    4.13 SNTP - Simple Network Time Protocol 4.13.20sntp operation Enable/Disable the SNTP function. Format sntp operation <on | off> | client { on | off } | server { on | off } Mode Global Config client Enable or disable SNTP Client. server Enable or disable SNTP Server.
  • Page 349: Sntp Server Disable-If-Local

    4.13 SNTP - Simple Network Time Protocol 4.13.21sntp server disable-if-local With this option enabled, the switch disables the SNTP Server Function if it is not synchronized to a time server itself. Format sntp server disable-if-local <on | off> Mode Global Config Enable the SNTP Server even if it is not synchronized to a time server itself.
  • Page 350 4.13 SNTP - Simple Network Time Protocol CLI L2P Release 7.0 05/2011...
  • Page 351: Ptp - Precision Time Protocol

    4.14 PTP - Precision Time Protocol 4.14 PTP - Precision Time Protocol These commands show and configure the PTP (IEEE 1588) parameters. The operation parameter is available for all devices. All other parameters are additionally available for MS20/MS30, MACH 1040, MACH 104 and PowerMICE.
  • Page 352: Show Ptp Configuration

    4.14 PTP - Precision Time Protocol 4.14.2 show ptp configuration This command shows the configured PTP (IEEE 1588) values depending on the currently configured clock mode. Format show ptp configuration Mode Privileged EXEC and User EXEC PTP (Global) Clock Mode Show which PTP clock mode is currently configured.
  • Page 353: Show Ptp Port

    4.14 PTP - Precision Time Protocol 4.14.4 show ptp port This command shows the PTP (IEEE 1588) port configuration settings depending on the currently configured clock mode. Format show port [<slot/port>|all] Mode Privileged EXEC and User EXEC <slot/port> Show the port-related PTP (IEEE 1588) settings for the given port. Show the port-related PTP (IEEE 1588) settings for all ports.
  • Page 354: Show Ptp Status

    4.14 PTP - Precision Time Protocol 4.14.5 show ptp status This command shows the device´s global PTP (IEEE 1588) status (the oper- ating states). Format show ptp status Mode Privileged EXEC and User EXEC PTP Status, Is Synchronized Show if the device is synchronized (true or false). PTP Status, Offset From Master Show the device’s offset from the master (unit: nanoseconds).
  • Page 355: Ptp Clock-Mode

    4.14 PTP - Precision Time Protocol 4.14.6 ptp clock-mode Configure the Precision Time Protocol (PTP, IEEE 1588) clock mode. If the clock mode is changed, PTP will be initialized. The default is "disable" Format ptp clock-mode {v1-simple-mode |v2-simple-mode |v1-boundary-clock |v2-boundary-clock-onestep |v2-boundary-clock-twostep |v2-transparent-clock} Mode...
  • Page 356: Ptp Operation

    4.14 PTP - Precision Time Protocol v2-transparent-clock Set the clock mode to 'v2 Transparent Clock'. This specifies the trans- parent-clock mode (one-step) as described in the IEEE1588-2008 (PTPv2) standard. 4.14.7 ptp operation Enable or disable the Precision Time Protocol (IEEE 1588). The default is "disable"...
  • Page 357: Ptp Sync-Lower-Bound

    4.14 PTP - Precision Time Protocol 4.14.8 ptp sync-lower-bound Configure the lower bound for the PTP clock synchronization (unit: nanoseconds, min.: 0, max.: 999999999 (10 -1), default: 30). Note: the lower bound always has to be smaller than the upper bound. Format ptp sync-lower-bound <0-999999999>...
  • Page 358: Ptp V1 Preferred-Master

    4.14 PTP - Precision Time Protocol 4.14.10ptp v1 preferred-master Configure the PTPv1 (IEEE1588-2002) specific settings. Specify if the local switch shall be regarded as a preferred master clock (i. e., if it will remain master in the presence of disconnection or connection of other clocks).
  • Page 359: Ptp V1 Subdomain-Name

    4.14 PTP - Precision Time Protocol 4.14.12ptp v1 subdomain-name Configure the PTPv1 (IEEE1588-2002) specific settings. Enter a Precision Time Protocol subdomain name. The default is "_DFLT". Note: changes are only applied after the 're-initialize' command or after a re- boot if the configuration was saved. Format ptp v1 subdomain-name <subdomain name>...
  • Page 360: Ptp V1 Sync-Interval

    4.14 PTP - Precision Time Protocol 4.14.13ptp v1 sync-interval Configure the PTPv1 (IEEE1588-2002) specific settings. Configure the Precision Time Protocol sync interval. The sync interval is the interval (in seconds) between successive sync messages issued by a master clock. Valid values are: sec-1, sec-2, sec-8, sec-16, and sec-64. Default is sec-2. Note: changes are only applied after the 're-initialize' command or after a reboot if the configuration was saved.
  • Page 361: Ptp V2Bc Priority1

    4.14 PTP - Precision Time Protocol 4.14.14ptp v2bc priority1 Configure the PTPv2 Boundary Clock (IEEE1588-2008) specific settings. Configure the priority1 value (0..255) for the BMC as described in IEEE1588- 2008. Format ptp v2bc priority1 <0-255> Mode Global Config 4.14.15ptp v2bc priority2 Configure the PTPv2 Boundary Clock (IEEE1588-2008) specific settings.
  • Page 362: Ptp V2Bc Domain

    4.14 PTP - Precision Time Protocol 4.14.16ptp v2bc domain Configure the PTPv2 Boundary Clock (IEEE1588-2008) specific settings. Configure the domain number (0..255) as described in IEEE1588-2008. Format ptp v2bc domain <0-255> Mode Global Config 4.14.17ptp v2bc utc-offset Configure the PTPv2 Boundary Clock (IEEE1588-2008) specific settings. Configure the current UTC offset in seconds.
  • Page 363: Ptp V2Bc Vlan

    4.14 PTP - Precision Time Protocol 4.14.19ptp v2bc vlan Configure the PTPv2 Boundary Clock (IEEE1588-2008) specific settings. Use this command to configure the VLAN in which PTP packets are send. With a value of none all packets are send untagged. Format ptp v2bc vlan {none | <0-4042>} Mode...
  • Page 364: Ptp V1 Operation

    4.14 PTP - Precision Time Protocol enable During a synchronization interval, there are 2 to 8 synchronization runs. This permits faster synchronization when the network load is high. disable During a synchronization interval, there is only one synchronization run. 4.14.22ptp v1 operation Enable or disable the sending and receiving / processing of PTP synchronization messages.
  • Page 365: Ptp V2Bc Operation

    4.14 PTP - Precision Time Protocol 4.14.23ptp v2bc operation Enable or disable the sending and receiving / processing of PTP synchroni- zation messages. Format ptp v2bc operation {disable|enable} Mode Interface Config enable Port sends and receives/ processes PTP synchronization messages. disable Port blocks PTP synchronization messages.
  • Page 366: Ptp V2Bc Announce-Timeout

    4.14 PTP - Precision Time Protocol 4.14.25ptp v2bc announce-timeout Configure the Announce Receipt Timeout (2..10). Format ptp v2bc announce-timeout <2-10> Mode Interface Config 4.14.26ptp v2bc sync-interval Configure the Sync Interval in seconds {0.5|1|2}. Format ptp v2bc sync-interval {0.5|1|2} Mode Interface Config 4.14.27ptp v2bc delay-mechanism Configure the delay mechanism {e2e|p2p|disabled} of the transparent-clock.
  • Page 367: Ptp V2Bc Pdelay-Interval

    4.14 PTP - Precision Time Protocol 4.14.28ptp v2bc pdelay-interval Configure the Peer Delay Interval in seconds {1|2|4|8|16|32}. This interval is used if delay-mechanism is set to p2p. Format ptp v2bc pdelay-interval {1|2|4|8|16|32} Mode Interface Config 4.14.29ptp v2bc network-protocol Configure the network-protocol {ieee802_3|udp_ipv4} of the transparent-clock.
  • Page 368: Ptp V2Bc Asymmetry

    4.14 PTP - Precision Time Protocol 4.14.31ptp v2bc asymmetry Specifies the asymmetrie in nanoseconds of the link connected to this port {+-1000000000}. Format ptp v2bc asymmetry <value in ns> Mode Interface Config 4.14.32ptp v2tc asymmetry Specifies the asymmetrie in nanoseconds of the link connected to this port {+-1000000000}.
  • Page 369: Ptp V2Tc Management

    4.14 PTP - Precision Time Protocol 4.14.34ptp v2tc management Configure the PTPv2 Transparent Clock (IEEE1588-2008) specific settings. Enable or disable the management of the transparent-clock (disable for fast packet rates). Format ptp v2tc management {enable|disable} Mode Global Config 4.14.35ptp v2tc multi-domain-mode Configure the PTPv2 Transparent Clock (IEEE1588-2008) specific settings.
  • Page 370: Ptp V2Tc Network-Protocol

    4.14 PTP - Precision Time Protocol 4.14.36ptp v2tc network-protocol Configure the PTPv2 Transparent Clock (IEEE1588-2008) specific settings. Configure the network-protocol {ieee802_3|udp_ipv4} of the transparent- clock. Format ptp v2tc network-protocol {ieee802_3|udp_ipv4} Mode Global Config 4.14.37ptp v2tc operation Enable or disable the sending and receiving/ processing of PTP synchroni- zation messages.
  • Page 371: Ptp V2Tc Pdelay-Interval

    4.14 PTP - Precision Time Protocol 4.14.38ptp v2tc pdelay-interval Configure the Peer Delay Interval in seconds {1|2|4|8|16|32}. This interval is used if delay-mechanism is set to p2p. Format ptp v2tc pdelay-interval {1|2|4|8|16|32} Mode Interface Config 4.14.39ptp v2tc primary-domain Configure the PTPv2 Transparent Clock (IEEE1588-2008) specific settings. Configure the primary-domain {for syntonization} of the transparent-clock.
  • Page 372: Ptp V2Tc Vlan

    4.14 PTP - Precision Time Protocol 4.14.41ptp v2tc vlan Configure the PTPv2 Transparent Clock (IEEE1588-2008) specific settings. Use the command to configure the VLAN in which PTP packets are send. With a value of none all packets are send untagged. Format ptp v2tc vlan {none | <0-4042>} Mode...
  • Page 373: Ptp V2Tc Sync-Local-Clock

    4.14 PTP - Precision Time Protocol 4.14.43ptp v2tc sync-local-clock Configure the PTPv2 Transparent Clock (IEEE1588-2008) specific settings. Use the command to enable or disable synchronisation of the local clock (only valid if syntonization is enabled). Format ptp v2tc sync-local-clock {enable | disable} Mode Global Config CLI L2P...
  • Page 374 4.14 PTP - Precision Time Protocol CLI L2P Release 7.0 05/2011...
  • Page 375: Poe - Power Over Ethernet

    4.15 PoE - Power over Ethernet 4.15 PoE - Power over Ethernet These commands show and configure the Power over Ethernet (IEEE 802.3af) parameters. 4.15.1 show inlinepower This command shows global Inline Power settings PoE. Format show inlinepower Mode Privileged EXEC and User EXEC 4.15.2 show inlinepower port This command shows the configuration settings and states per port.
  • Page 376: Inlinepower (Global Config)

    4.15 PoE - Power over Ethernet 4.15.3 inlinepower (Global Config) Configure the global Inline Power parameters. Format inlinepower {admin-mode {disable|enable} | trap {disable|enable} | threshold <1-99> } Mode Global Config admin-mode Configure the global Inline Power administrative setting (enable or disable, default: enable).
  • Page 377: Inlinepower (Interface Config)

    4.15 PoE - Power over Ethernet 4.15.4 inlinepower (Interface Config) Configure the portrelated Inline Power parameters. Note: The interface name you enter in the name-command. Format inlinepower {admin-mode {disable|enable} | priority {critical|high|low} } Mode Interface Config admin-mode Configure the port-related Inline Power administrative setting (enable or disable, default: enable).
  • Page 378 4.15 PoE - Power over Ethernet CLI L2P Release 7.0 05/2011...
  • Page 379: Poe+ - Power Over Ethernet Plus

    4.16 PoE+ - Power over Ethernet Plus 4.16 PoE+ - Power over Ethernet Plus Additionally to the PoE (Power over Ethernet) commands, these commands show and configure the Power over Ethernet Plus (IEEE 802.3at) parameters. PoE+ is available for: - MACH104-16TX-PoEP devices - MACH 102 devices with media module M1-8TP-RJ45 PoEP 4.16.1 show inlinepower slot This command shows the PoE+ configuration settings and states per slot.
  • Page 380: Inlinepower Budget Slot

    4.16 PoE+ - Power over Ethernet Plus Reserved Power Shows the maximum power which the device provides for all PoE+ devices together which are connected to the PoE+ module, based on their classification. Delivered Power Shows the current demand for power on all PoE+ ports of the module (valid range: 0 - 248 W).
  • Page 381: Inlinepower Threshold Slot

    4.16 PoE+ - Power over Ethernet Plus 4.16.3 inlinepower threshold slot Configure the usage power threshold expressed in per cents for comparing the measured power for this slot and initiating an alarm if the threshold is exceeded. Format inlinepower threshold slot <slot> <0..99> Mode Global Config Slot...
  • Page 382 4.16 PoE+ - Power over Ethernet Plus CLI L2P Release 7.0 05/2011...
  • Page 383: Port Monitor

    4.17 Port monitor 4.17 Port monitor These commands show and configure the port monitor parameters. The port monitor feature monitors certain port (or global) states or changes and performs a certain action, when the specified condition occurs. Using this commands, you can disable a port and send a trap (see "port ad- min shutdown").
  • Page 384: Show Port-Monitor

    4.17 Port monitor 4.17.1 show port-monitor Use this command to display the global Port Monitor settings. Format show port-monitor Mode Global Config Port Monitor Display if Port Monitor function is enabled or disabled. Condition crc-fragment interval (seconds) Display the condition of the CRC fragment interval in seconds. Condition crc-fragment count Display the condition of the CRC fragment count.
  • Page 385: Show Port-Monitor

    4.17 Port monitor 4.17.2 show port-monitor <slot/port> Use this command to display the Port Monitor details for the port. Format show port-monitor <slot/port> Mode Global Config Port Monitor Display if Port Monitor is enabled or disabled. Link Flap Display if Link Flap is enabled or disabled. Crc-Fragment Display if CRC Fragment is enabled or disabled.
  • Page 386: Show Port-Monitor Brief

    4.17 Port monitor 4.17.3 show port-monitor brief Use this command to display the Port Monitor brief summary. Format show port-monitor brief Mode Global Config Intf Display the number of the interface (slot/port). Admin Mode Display if Port Monitor is enabled or disabled. Link Flap Display if Link Flap is enabled or disabled.
  • Page 387: Show Port-Monitor Crc-Fragment

    4.17 Port monitor 4.17.4 show port-monitor crc-fragment Use this command to display the CRC fragment counter. Format show port-monitor crc-fragment <slot/port> Mode Global Config <slot/port> Display the Port Monitor interface details. Crc_fragments in last interval Display the CRC fragments in last interval. Crc_fragments total Display the CRC fragments total.
  • Page 388: Port-Monitor (Global Config)

    4.17 Port monitor 4.17.6 port-monitor (Global Config) Use this command to enable or disable the Port Monitor globally. Note: This command does not reset the port disable states. Default Disable Format port-monitor {enable | disable} Mode Global Config 4.17.7 port-monitor (Interface Config) Use this command to enable or disable the Port Monitor on the port.
  • Page 389: Port-Monitor Condition Link-Flap (Global Config)

    4.17 Port monitor 4.17.8 port-monitor condition link-flap (Global Config) Use this command to configure the Link Flap settings (Link Flap counter and interval for Link Flap detection). Default Disable Format port-monitor condition link-flap {count <1-100>| interval <1-180>} Mode Global Config count Configure the Link Flap counter.
  • Page 390: Port-Monitor Condition Crc-Fragment (Global Config)

    4.17 Port monitor 4.17.10port-monitor condition crc-fragment (Global Config) Use this command to configure the crc-fragment settings (crc-fragment counter and interval for crc-fragment detection). Default Disable Format port-monitor condition crc-fragment {count <1-1000000> | interval <5-180>} Mode Global Config count Configure the crc-fragment counter. Default: 1,000.
  • Page 391: Port-Monitor Condition Crc-Fragment (Interface Config)

    4.17 Port monitor 4.17.11port-monitor condition crc-fragment (Interface Config) Use this command to enable or disable crc-fragment settings on a port to trigger an action. Default Disable Format port-monitor condition crc-fragment {enable | disable} Mode Interface Config 4.17.12port-monitor action Use this command to configure the Port Monitor action (disable a port or send a trap).
  • Page 392 4.17 Port monitor CLI L2P Release 7.0 05/2011...
  • Page 393: Cli Commands: Switching

    CLI Commands: Switching 5 CLI Commands: Switching This section provides detailed explanation of the Switching commands. The commands are divided into two functional groups: Show commands display spanning tree settings, statistics, and other information. Configuration Commands configure features and options of the switch. For every configuration command there is a show command that displays the configuration setting.
  • Page 394 CLI Commands: Switching CLI L2P Release 7.0 05/2011...
  • Page 395: Spanning Tree Commands

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1 Spanning Tree Commands 5.1.1 show spanning-tree This command displays spanning tree settings for the common and internal spanning tree, when the optional parameter “brief” is not included in the com- mand. The following details are displayed. Format show spanning-tree [brief] Mode...
  • Page 396 CLI Commands: Switching 5.1 Spanning Tree Commands Root Port Identifier Identifier of the port to access the Designated Root for the CST. Root Port Max Age Derived value Root Port Bridge Forward Delay Derived value Hello Time Configured value Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units (BPDUs) CST Regional Root...
  • Page 397: Show Spanning-Tree Interface

    CLI Commands: Switching 5.1 Spanning Tree Commands Bridge Max Age Configured value. Bridge Hello Time Configured value. Bridge Forward Delay Configured value. Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units (BPDUs) Rstp Mrp Mode Rapid spanning tree mrp (Media Redundancy Protocol) mode (Enabled/Disabled) Rstp Mrp configuration error Configuration error in Rapid spanning tree mrp (Media Redundancy...
  • Page 398: Show Spanning-Tree Mst Detailed

    CLI Commands: Switching 5.1 Spanning Tree Commands Port Up Time Since Counters Last Cleared Time since port was reset, displayed in days, hours, minutes, and seconds. STP BPDUs Transmitted Spanning Tree Protocol Bridge Protocol Data Units sent STP BPDUs Received Spanning Tree Protocol Bridge Protocol Data Units received.
  • Page 399 CLI Commands: Switching 5.1 Spanning Tree Commands MST Instance ID Valid value: 0 MST Bridge Priority Valid values: 0-61440 in increments of 4096. Time Since Topology Change in seconds Topology Change Count Number of times the topology has changed for this multiple spanning tree instance.
  • Page 400: Show Spanning-Tree Mst Port Detailed

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.4 show spanning-tree mst port detailed This command displays the detailed settings and parameters for a specific switch port within a particular multiple spanning tree instance. The instance <mstid> is a number that corresponds to the desired existing multiple span- ning tree instance.
  • Page 401 CLI Commands: Switching 5.1 Spanning Tree Commands If 0 (defined as the default CIST ID) is passed as the <mstid>, then this com- mand displays the settings and parameters for a specific switch port within the common and internal spanning tree. The <slot/port> is the desired switch port.
  • Page 402 CLI Commands: Switching 5.1 Spanning Tree Commands Edge Port Status The derived value of the edge port status. True if operating as an edge port; false otherwise. Point To Point MAC Status Derived value indicating if this port is part of a point to point link. CST Regional Root The regional root identifier in use for this port.
  • Page 403: Show Spanning-Tree Mst Port Summary

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.5 show spanning-tree mst port summary This command displays the settings of one or all ports within the specified multiple spanning tree instance. The parameter <mstid> indicates a particu- lar MST instance. The parameter {<slot/port> | all} indicates the desired switch port or all ports.
  • Page 404: Show Spanning-Tree Mst Summary

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.6 show spanning-tree mst summary This command displays settings and parameters for the specified multiple spanning tree instance. The following details are displayed. Format show spanning-tree mst summary Mode Privileged EXEC and User EXEC MST Instance ID Valid value: 0 Associated FIDs...
  • Page 405: Show Spanning-Tree Summary

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.7 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command. Format show spanning-tree summary Mode Privileged EXEC and User EXEC Spanning Tree Adminmode Enabled or disabled.
  • Page 406: Show Spanning-Tree Vlan

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.8 show spanning-tree vlan This command displays the association between a VLAN and a multiple spanning tree instance. The <vlanid> corresponds to an existing VLAN ID (1-4042). Format show spanning-tree vlan <vlanid> Mode Privileged EXEC and User EXEC vlanid Enter a VLAN identifier (1 - 4042).
  • Page 407: Spanning-Tree

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.9 spanning-tree This command sets the spanning-tree operational mode to enabled. Default disabled Format spanning-tree Mode Global Config no spanning-tree This command sets the spanning-tree operational mode to disabled. While disabled, the spanning-tree configuration is retained and can be changed, but is not activated.
  • Page 408: Spanning-Tree Auto-Edgeport

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.10 spanning-tree auto-edgeport This command specifies that this port is an Edge Port within the common and internal spanning tree. This will allow this port to transition to Forwarding State without delay. Format spanning-tree auto-edgeport Mode Interface Config...
  • Page 409: Spanning-Tree Bpduguard

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.11 spanning-tree bpduguard This command sets the BPDU (Bridge Protocol Data Units) Guard on the switch to enabled. Default disabled Format spanning-tree bpduguard Mode Global Config no spanning-tree bpduguard This command sets the BPDU (Bridge Protocol Data Units) Guard to disabled.
  • Page 410: Spanning-Tree Configuration Name

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.12 spanning-tree configuration name This command sets the Configuration Identifier Name for use in identifying the configuration that this switch is currently using. The <name> is a string of at most 32 characters. Default The base MAC address displayed using hexadecimal notation as specified in IEEE 802 standard.
  • Page 411: Spanning-Tree Configuration Revision

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.13 spanning-tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using. The Configu- ration Identifier Revision Level is a number in the range of 0 to 65535. Default Format spanning-tree configuration revision <0-65535>...
  • Page 412: Spanning-Tree Edgeport

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.14 spanning-tree edgeport This command specifies that this port is an Edge Port within the common and internal spanning tree. This will allow this port to transition to Forwarding State without delay. Format spanning-tree edgeport Mode Interface Config...
  • Page 413: Spanning-Tree Forceversion

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.15 spanning-tree forceversion This command sets the Force Protocol Version parameter to a new value. The Force Protocol Version can be one of the following: 802.1d - ST BPDUs are transmitted (802.1Q-2005 functionality supported) 802.1s - ST BPDUs are transmitted (802.1Q-2005 functionality supported) 802.1w - RST BPDUs are transmitted...
  • Page 414: Spanning-Tree Forward-Time

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.16 spanning-tree forward-time This command sets the Bridge Forward Delay parameter to a new value for the common and internal spanning tree. The forward-time value is in seconds within a range of 4 to 30, with the value being greater than or equal to "(Bridge Max Age / 2) + 1".
  • Page 415: Spanning-Tree Guard Loop

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.17 spanning-tree guard loop This command enables loop guard and disables root guard guard on an interface. Default disabled Format spanning-tree guard loop Mode Interface Config no spanning-tree guard This command disables the guard for this port. Format no spanning-tree guard Mode...
  • Page 416: Spanning-Tree Guard None

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.18 spanning-tree guard none This command disables root guard and disables loop guard guard on an interface. Default disabled Format spanning-tree guard none Mode Interface Config no spanning-tree guard This command disables the guard for this port. Format no spanning-tree guard Mode...
  • Page 417: Spanning-Tree Guard Root

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.19 spanning-tree guard root This command enables root guard and disables loop guard on an interface. Default disabled Format spanning-tree guard root Mode Interface Config no spanning-tree guard This command disables the guard for this port. Format no spanning-tree guard Mode...
  • Page 418: Spanning-Tree Hello-Time

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.20 spanning-tree hello-time This command sets the Hello Time parameter to a new value for the common and internal spanning tree. The hellotime <value> is in whole seconds within a range of 1 to 2 with the value being less than or equal to "(Bridge Max Age / 2) - 1".
  • Page 419: Spanning-Tree Hold-Count

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.21 spanning-tree hold-count This command sets the bridge hold count parameter. Default disabled Format spanning-tree hold-count <1-40> Mode Global Config <1-40> Enter the bridge parameter for hold count as an integer in the range 1 - 40.
  • Page 420: Spanning-Tree Max-Age

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.22 spanning-tree max-age This command sets the Bridge Max Age parameter to a new value for the common and internal spanning tree. The max-age value is in seconds within a range of 6 to 40, with the value being less than or equal to "2 times (Bridge Forward Delay - 1)".
  • Page 421: Spanning-Tree Max-Hops

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.23 spanning-tree max-hops This command sets the Bridge Max Hops parameter to a new value for the common and internal spanning tree. The max-hops value is an integer within a range of 1 to127. Format spanning-tree max-hops <1-127>...
  • Page 422: Spanning-Tree Mst

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.24 spanning-tree mst This command sets the Path Cost or Port Priority for this port within the mul- tiple spanning tree instance or in the common and internal spanning tree. If the <mstid> parameter corresponds to an existing multiple spanning tree in- stance, then the configurations are done for that multiple spanning tree in- stance.
  • Page 423 CLI Commands: Switching 5.1 Spanning Tree Commands (defined as the default CIST ID) is passed as the <mstid>, then the con- figurations are performed for the common and internal spanning tree instance. This command accepts the value 0 for the mstid, meaning the common and internal spanning tree.
  • Page 424: Spanning-Tree Mst Priority

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.25 spanning-tree mst priority This command sets the bridge priority for a specific multiple spanning tree in- stance. The instance <mstid> is a number that corresponds to the desired ex- isting multiple spanning tree instance. The priority value is a number within a range of 0 to 61440 in increments of 4096.
  • Page 425: Spanning-Tree Mst Vlan

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.26 spanning-tree mst vlan This command adds an association between a multiple spanning tree instance and a VLAN. The VLAN will no longer be associated with the common and internal spanning tree. The instance <mstid> is a number that corresponds to the desired existing multiple spanning tree instance.
  • Page 426: Spanning-Tree Mst Instance

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.27 spanning-tree mst instance This command creates a MST instance. Format spanning-tree mst instance <1-4094> Mode Global Config <1-4094> Enter a multiple spanning tree instance identifier. no spanning-tree mst instance This command removes a MST instance. Format no spanning-tree mst instance <1-4094>...
  • Page 427: Spanning-Tree Port Mode

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.28 spanning-tree port mode This command sets the Administrative Switch Port State for this port to enabled. Default disabled Format spanning-tree port mode Mode Interface Config no spanning-tree port mode This command sets the Administrative Switch Port State for this port to disabled.
  • Page 428: Spanning-Tree Port Mode All

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.29 spanning-tree port mode all This command sets the Administrative Switch Port State for all ports to enabled. Default disabled Format spanning-tree port mode all Mode Global Config no spanning-tree port mode all This command sets the Administrative Switch Port State for all ports to disabled.
  • Page 429: Spanning-Tree Stp-Mrp-Mode

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.30 spanning-tree stp-mrp-mode This command sets the spanning tree mrp (Media Redundancy Protocol) mode to enabled. Default disabled Format spanning-tree stp-mrp-mode Mode Global Config no spanning-tree stp-mrp-mode This command sets the spanning tree mrp (Medium Redundancy Protocol) mode to disabled.
  • Page 430: Spanning-Tree Tcnguard

    CLI Commands: Switching 5.1 Spanning Tree Commands 5.1.31 spanning-tree tcnguard This command enables tcn guard on an interface. Default disabled Format spanning-tree guard tcnguard Mode Interface Config no spanning-tree tcnguard This command disables tcn guard for this port. Format no spanning-tree tcnguard Mode Interface Config CLI L2P...
  • Page 431: Show Mrp

    CLI Commands: Switching 5.2 MRP 5.2 MRP The concept of the MRP-Ring enables the construction of high-availability, ring-shaped network structures. The two ends of a backbone in a line-type configuration can be closed to form a redundant ring - the MRP-Ring - by using the RM function (Redundancy Manager) of the Switch.
  • Page 432: Show Mrp Current-Domain

    CLI Commands: Switching 5.2 MRP 5.2.2 show mrp current-domain This command displays the settings and states of the MRP-Ring´s current domain. The following details are displayed on execution of the command. If you omit the optional keywords (e. g., advanced-mode), all settings will be displayed.
  • Page 433 CLI Commands: Switching 5.2 MRP port primary Show the primary port for the given MRP domain. port secondary Show the secondary port for the given MRP domain. summary Show a summary for the given MRP domain. vlan Show the VLAN ID for the given MRP domain. CLI L2P Release 7.0 05/2011...
  • Page 434: Mrp Current-Domain

    CLI Commands: Switching 5.2 MRP 5.2.3 mrp current-domain Specify that you want to configure the current MRP domain's settings. Default none Format mrp current-domain {advanced-mode {disable|enable} | manager-priority <0-65535> | mode {client|manager} | name <domain-name> | recovery-delay {500ms|200ms} | operation {disable|enable} | port {primary|secondary} <slot/port>...
  • Page 435: Mrp Delete-Domain

    CLI Commands: Switching 5.2 MRP port Specify the switch's ports for the given MRP domain (in slot/port nota- tion). primary: Specify the switch's primary port for the given MRP domain. secondary: Specify the switch's secondary port for the given MRP domain.
  • Page 436: Mrp New-Domain

    CLI Commands: Switching 5.2 MRP 5.2.5 mrp new-domain Create a new MRP domain. The configuration will consist of default parame- ters and its operation will be disabled. Default n/a not set Format mrp new-domain (<domain-id> | default-domain) Mode Global Config domain-id Enter a new MRP domain id.
  • Page 437 CLI Commands: Switching 5.2 MRP 5.2.6 arc Use this command to configure ARC (Automatic Ring Configuration). ARC supports MRP. The ARC protocol is a simple protocol that checks a ring configuration and, if suitable, configures all clients of this ring automatically. The check cycle includes an analysis of the ARC devices for an already active ring configuration and wrong ring configuration values.
  • Page 438: Show Arc

    CLI Commands: Switching 5.2 MRP 5.2.7 show arc This command displays the current ARC configuration and the result of the last action. Format show arc Mode Global Config Client Settings: Display the Client Settings for the current ARC configuration. Admin Status Display if the ARC client is enabled or disabled.
  • Page 439 CLI Commands: Switching 5.2 MRP Manager Settings: Display the Manager Settings for the current ARC configuration. Admin Status Display the ARC manager is enabled or disabled Protocol Display the Protocol. Possible values: mrp, ..Port 1 Display the number of Ring Port 1 for the manager (slot/port). Port 2 Display the number of Ring Port 2 for the manager (slot/port).
  • Page 440 CLI Commands: Switching 5.2 MRP Error - Configuration failed – MRP Warning - Port not in full duplex mode – Port1: 1.1 Half – Port2: 1.2 Full Warning - ARC not supported by the ring devices CLI L2P Release 7.0 05/2011...
  • Page 441: Hiper-Ring

    HIPER-Ring are connected with each other via their ring ports. Exactly one redundancy manager assumes control of the ring. These commands are for configuring the Hirschmann High Performance Redundancy Ring. Further information concerning this function you will find in the User Manual ”Redundancy Configuration”.
  • Page 442: Show Hiper-Ring

    CLI Commands: Switching 5.3 HIPER-Ring 5.3.1 show hiper-ring This command displays the settings and states of the HIPER-Ring. The fol- lowing details are displayed on execution of the command. Format show hiper-ring {info | mode | port [primary | secondary] | redundancy-state | rm-state | recovery-delay} Mode Privileged EXEC and User EXEC...
  • Page 443: Hiper-Ring

    CLI Commands: Switching 5.3 HIPER-Ring 5.3.2 hiper-ring Configure the HIPER-Ring. Press Enter for a list of valid commands and their recommended order. Format hiper-ring Mode Global Config no hiper-ring Clear the HIPER Ring configuration (delete it). Format no hiper-ring Mode Global Config CLI L2P Release 7.0 05/2011...
  • Page 444: Hiper-Ring Mode

    CLI Commands: Switching 5.3 HIPER-Ring 5.3.3 hiper-ring mode This command sets the HIPER-Ring mode. Possible values are: ring-manager Set the switch's HIPER Ring mode to Ring Manager. rm Abbreviation of Ring Manager. ring-switch Set the switch's HIPER Ring mode to Ring Switch. rs Abbreviation of Ring Switch.
  • Page 445: Hiper-Ring Port Secondary

    CLI Commands: Switching 5.3 HIPER-Ring 5.3.5 hiper-ring port secondary Enter the switch's secondary HIPER Ring port. Default n/a not set Format hiper-ring port secondary <secondary ring port> Mode Global Config secondary ring port Enter the switch's secondary HIPER Ring port (<slot/port>). 5.3.6 hiper-ring recovery-delay Defines the maximum recovery delay of ring recovery in the HIPER Ring (500 or 300 ms).
  • Page 446 CLI Commands: Switching 5.3 HIPER-Ring CLI L2P Release 7.0 05/2011...
  • Page 447: Fast-Hiper-Ring

    Fast-HIPER-Ring are connected with each other via their ring ports. Exactly one redundancy manager assumes control of the ring. These commands are for configuring the Hirschmann Fast High Perfor- mance Redundancy Ring. Further information concerning this function you will find in the User Manual ”Redundancy Configuration”.
  • Page 448: Show Fast-Hiper-Ring (Mach 1000, Rsr20/Rsr30)

    CLI Commands: Switching 5.4 Fast-HIPER-Ring 5.4.1 show fast-hiper-ring (MACH 1000, RSR20/ RSR30) This command displays the settings and states of the HIPER-Ring. The fol- lowing details are displayed on execution of the command. Format show fast-hiper-ring Mode Privileged EXEC and User EXEC Ring ID Display the Ring ID.
  • Page 449: 5.4.2 Show Fast-Hiper-Ring Current-Id (Mach 1000, Rsr20/Rsr30

    CLI Commands: Switching 5.4 Fast-HIPER-Ring 5.4.2 show fast-hiper-ring current-id (MACH 1000, RSR20/RSR30) Specify that you want to show the current Fast HIPER-Ring ID's settings. Format show fast-hiper-ring current-id {id | info | mode | operation | port | port [primary |secondary] | summary | ring-name | nodes | vlan} Mode Privileged EXEC and User EXEC...
  • Page 450: Fast-Hiper-Ring

    CLI Commands: Switching 5.4 Fast-HIPER-Ring nodes Display the number of nodes in the ring for the given Fast HIPER- Ring ID. vlan Display the VLAN ID for the given Fast HIPER-Ring ID. 5.4.3 fast-hiper-ring Configure the Fast-HIPER-Ring. Format fast-hiper-ring {current-id {mode {ring-manager|ring-switch|rm|rs} | operation {disable|enable} | port {primary|secondary} <slot/port>...
  • Page 451 CLI Commands: Switching 5.4 Fast-HIPER-Ring mode ring-switch Switch is ring-switch for the given Fast HIPER-Ring ID. mode rm Abbreviation for 'ring-manager'. mode rs Abbreviation for 'ring-switch'. operation Enable or disable the switch for the given Fast-HIPER-Ring ID. port Specify the switch's ports for the given Fast-HIPER-Ring ID. ring-name Set a ring name for the given Fast HIPER-Ring ID.
  • Page 452 CLI Commands: Switching 5.4 Fast-HIPER-Ring CLI L2P Release 7.0 05/2011...
  • Page 453: Redundant Coupling

    The control intelligence built into the switch allows the redundant coupling of HIPER-Rings and network segments. Two network segments can be connected via two separate paths with one of the following switches: RS2-16M RS20/RS30/RS40 RSR20/RSR30 MICE (Rel. 3.0 or higher) MS20/MS30...
  • Page 454: Show Ring-Coupling

    CLI Commands: Switching 5.5 Redundant Coupling 5.5.1 show ring-coupling This command displays the settings and states of the network coupling / ring coupling. To set up a new Ring Coupling configuration when no configuration is cur- rently present (e. g., after a clear command), always set the local port first. Please refer to: ring-coupling port local <slot/port>.
  • Page 455 CLI Commands: Switching 5.5 Redundant Coupling partner IP Display the switch's Ring Coupling partner IP address (only valid for remote configurations). port Display the switch's Ring Coupling ports – all – local – partner (only takes effect in dual configurations) –...
  • Page 456: Ring-Coupling

    CLI Commands: Switching 5.5 Redundant Coupling 5.5.2 ring-coupling Configure the redundant coupling of HIPER-Rings / network segments. This command, if called without arguments, lists the available subcommands, their recommended order and tips how to set up a new configuration. Format ring-coupling Mode Global Config...
  • Page 457: Ring-Coupling Config

    CLI Commands: Switching 5.5 Redundant Coupling 5.5.3 ring-coupling config This command sets the Ring Coupling configuration. Possible values are: single Configure the Ring Coupling's basic setting to single (both cou- pling ports are local to the switch, switch performs master and slave func- tions).
  • Page 458: Ring-Coupling Net-Coupling

    CLI Commands: Switching 5.5 Redundant Coupling 5.5.4 ring-coupling net-coupling Coupling mode refers to the type of coupled network. Possible values are: network ,if you wish to couple a line-type configuration. ring-only ,if you wish to couple a HIPER-Ring. Default none Format ring-coupling net-coupling <{network|ring-only}>...
  • Page 459: Ring-Coupling Port

    CLI Commands: Switching 5.5 Redundant Coupling 5.5.6 ring-coupling port Configure the Ring Coupling's ports. Possible values are: control Enter the Ring Coupling's control coupling port in outband configurations. local Enter the Ring Coupling's local coupling port. partner Enter the Ring Coupling's partner coupling port in single mode configuration.
  • Page 460 CLI Commands: Switching 5.5 Redundant Coupling CLI L2P Release 7.0 05/2011...
  • Page 461: Port Security

    CLI Commands: Switching 5.6 Port Security 5.6 Port Security With the Port Securitiy function you can specify for each port from which terminal devices data can be received and sent to other ports. This function helps to protect the network from unauthorized access. 5.6.1 show port-sec mode Display the MAC/IP Based Port Security global setting for all ports.
  • Page 462: Port-Sec Mode

    CLI Commands: Switching 5.6 Port Security 5.6.3 port-sec mode Configure the global MAC/IP Based Port Security mode: ip-based Port security is based on a given, allowed source IP address. mac-based Port security is based on a given, allowed source MAC address.
  • Page 463: Port-Sec Allowed-Ip

    CLI Commands: Switching 5.6 Port Security no port-sec No action is taken if port security is violated at this port. Format no port-sec Mode Interface Config 5.6.5 port-sec allowed-ip Enter the allowed IP source address for this port, format: nnn.nnn.nnn.nnn (nnn: decimal number 0..255) (up to 10).
  • Page 464: Port-Sec Allowed-Ip Remove

    CLI Commands: Switching 5.6 Port Security 5.6.7 port-sec allowed-ip remove Enter the allowed IP source address for this port, format: nnn.nnn.nnn.nnn (nnn: decimal number 0..255) (up to 50). Format port-sec allowed-ip remove <IP Address 1> <IP Address 2> ... <IP Address 50> Mode Interface Config 5.6.8 port-sec allowed-mac...
  • Page 465: Port-Sec Allowed-Mac Add

    CLI Commands: Switching 5.6 Port Security 5.6.9 port-sec allowed-mac add Enter the allowed MAC source address for this port, format: nn:nn:nn:nn:nn:nn (n: hexadecimal digit) or format: nn:nn:nn:nn:nn:nn/m n: hexadecimal digit, m: decimal digit (1..48) (up to 50). Format port-sec allowed-mac add <MAC Address 1> <MAC Address 2>...
  • Page 466: Clear Port-Sec

    CLI Commands: Switching 5.6 Port Security 5.6.11 clear port-sec Clear the MAC/IP Based Port Security by setting each port's security action (applied when port security is violated) to None. Additionally, the global mode is set to MAC Based. Note: This does not clear the 802.1X Port Security. Format clear port-sec Mode...
  • Page 467: Dhcp Relay Commands

    CLI Commands: Switching 5.7 DHCP Relay Commands 5.7 DHCP Relay Commands These commands configure the DHCP Relay parameters. The commands are divided by functionality into these different groups: Configuration Commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting.
  • Page 468: Dhcp-Relay

    CLI Commands: Switching 5.7 DHCP Relay Commands 5.7.2 dhcp-relay Set different options for BOOTP/DHCP relay and option 82 inclusion. Format dhcp-relay {opt82 {operation {disable|enable}| man-id <Manual Remote ID>| remote-id-type {client-id|ip|mac|other}}| server-address <Server-ID (1..4)> <Server IP Address>} Mode Global Config dhcp-relay opt82 operation {disable|enable} Enable/Disable option 82 globally.
  • Page 469: Dhcp-Relay

    {disable|enable} Enable or disable the forwarding of DHCP requests that are received on this port. Enable this parameter if a Hirschmann DHCP client is connected to this port. Default: disable. Disable this parameter if a Non-Hirschmann DHCP client is con- nected to this port (these devices send normal broadcast DHCP requests;...
  • Page 470 CLI Commands: Switching 5.7 DHCP Relay Commands CLI L2P Release 7.0 05/2011...
  • Page 471: Dhcp Server Commands

    CLI Commands: Switching 5.8 DHCP Server Commands 5.8 DHCP Server Commands These commands configure the DHCP server parameters. The commands are divided by functionality into these different groups: Configuration Commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting.
  • Page 472: Dhcp Server Configuration Example

    1/1 with specified Mac address. <Hirschmann PowerMICE> >enable <Hirschmann PowerMICE> #configure <Hirschmann PowerMICE> <Config>#dhcp-server operation enable <Hirschmann PowerMICE> <Config>#dhcp-server pool add 1 static 192.168.0.10 <Hirschmann PowerMICE> <Config>#dhcp-server pool modify 1 mode interface 1/1 <Hirschmann PowerMICE> <Config>#dhcp-server pool modify 1 mode mac 00:80:63:12:34:56 <Hirschmann PowerMICE>...
  • Page 473: Show Dhcp-Server

    CLI Commands: Switching 5.8 DHCP Server Commands 5.8.2 show dhcp-server Display DHCP Server global and interface information. Format show dhcp-server Mode Privileged EXEC and User EXEC 5.8.3 show dhcp-server operation Display DHCP Server global information. Format show dhcp-server operation Mode Privileged EXEC and User EXEC CLI L2P Release 7.0 05/2011...
  • Page 474: Show Dhcp-Server Port

    CLI Commands: Switching 5.8 DHCP Server Commands 5.8.4 show dhcp-server port Display the DCHP port-related settings for all ports or specific port only. Format show dhcp-server port {all | <slot/port>} Mode Privileged EXEC and User EXEC show dhcp-server port all Display the DCHP port-related settings for all ports.
  • Page 475: Dhcp-Server Operation

    CLI Commands: Switching 5.8 DHCP Server Commands 5.8.6 dhcp-server operation Enable or disable the DHCP server globally. Default: disable. Format dhcp-server operation {disable|enable} Mode Interface Config dhcp-server operation disable Disable the DHCP server. This is the default. dhcp-server operation enable Enable the DHCP server.
  • Page 476: Dhcp-Server Pool Add

    CLI Commands: Switching 5.8 DHCP Server Commands 5.8.7 dhcp-server pool add <id> Add a pool with a single IP address (static) or with an IP range (dynamic) Format dhcp-server pool {add <id> {static <ipaddr> |dynamic <start ipaddr> <end ipaddr>} Mode Global Config dhcp-server pool add <id>...
  • Page 477: Dhcp-Server Pool Modify Mode

    CLI Commands: Switching 5.8 DHCP Server Commands 5.8.8 dhcp-server pool modify <id> mode Add or delete one or more pool modes. Format dhcp-server pool modify <id> mode {interface {all | <slot/port>} |mac {none | <macaddr>} |clientid {none | <clientid>} |relay {none | <ipaddr>} |remoteid {none | <remoteid>} |circuitid {none | <...
  • Page 478 CLI Commands: Switching 5.8 DHCP Server Commands dhcp-server pool modify <id> mode remoteid none Use none to remove the mode. dhcp-server pool modify <id> mode remoteid <remoteid> Enter remoteid in xx:xx:...:xx format. dhcp-server pool modify <id> mode circuitid none Use none to remove the mode. dhcp-server pool modify <id>...
  • Page 479: Dhcp-Server Pool Modify Option

    CLI Commands: Switching 5.8 DHCP Server Commands 5.8.9 dhcp-server pool modify <id> option Modify pool options. Format dhcp-server pool modify <id> option {configpath <url> |gateway <ipaddr> |netmask <netmask> |wins <ipaddr> |dns <ipaddr> |hostname <name>} Mode Global Config dhcp-server pool modify <id> option configpath <url> Enter the configpath URL in ’tftp://<servername-or-ip>/<file>’...
  • Page 480: Dhcp-Server Pool Modify Leasetime

    Format dhcp-server pool modify leasetime <seconds> Mode Global Config 5.8.11 dhcp-server pool modify <id> hirschmann-de- vice Set this pool to Hirschmann devices only or to all devices. Format dhcp-server pool modify <id> hirschmann-device {enable|disable} Mode Global Config dhcp-server pool modify <id> hirschmann-device disable Use pool for all devices.
  • Page 481: Dhcp-Server Pool Enable

    CLI Commands: Switching 5.8 DHCP Server Commands 5.8.12 dhcp-server pool enable Enable a specific pool. Format dhcp-server pool enable <id> Mode Global Config 5.8.13 dhcp-server pool disable Disable a specific pool. Format dhcp-server pool disable <id> Mode Global Config 5.8.14 dhcp-server pool delete Delete a specific pool.
  • Page 482 CLI Commands: Switching 5.8 DHCP Server Commands CLI L2P Release 7.0 05/2011...
  • Page 483: Sub-Ring Commands

    CLI Commands: Switching 5.9 Sub-Ring Commands 5.9 Sub-Ring Commands These commands configure the sub-ring parameters. The commands are divided by functionality into these different groups: Configuration commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting.
  • Page 484 CLI Commands: Switching 5.9 Sub-Ring Commands info Display status information for the given Sub-Ring ID. mode Display the switch's mode for the given Sub-Ring ID. operation Display the switch's operative setting for the given Sub-Ring ID. Note: in case of configuration problems, this value may differ from the administrative setting (may become 'Disabled').
  • Page 485: Sub-Ring Mode

    CLI Commands: Switching 5.9 Sub-Ring Commands 5.9.2 sub-ring <id> mode Configure the switch's Sub-Ring mode for the given ID (manager or redundant-manager). Format sub-ring <id> mode {manager | redundant-manager | single-manager} Mode Global Config <id> Specify the Sub-Ring ID whose settings you want to configure. manager Switch is manager for the given Sub-Ring ID.
  • Page 486: Sub-Ring Operation

    CLI Commands: Switching 5.9 Sub-Ring Commands 5.9.3 sub-ring <id> operation Enable or disable the switch for the given Sub-Ring ID. Format sub-ring <id> operation {enable|disable} Mode Global Config <id> Specify the Sub-Ring ID whose settings you want to configure. enable Enable the switch for the given Sub-Ring ID.
  • Page 487: Sub-Ring Port

    CLI Commands: Switching 5.9 Sub-Ring Commands 5.9.5 sub-ring <id> port Specify the switch's ports for the given Sub-Ring ID. Format sub-ring <id> port <slot/port> Mode Global Config <id> Specify the Sub-Ring ID whose settings you want to configure. <slot/port> Specify the port (in slot/port) notation. 5.9.6 sub-ring <id>...
  • Page 488: Sub-Ring Vlan

    CLI Commands: Switching 5.9 Sub-Ring Commands 5.9.7 sub-ring <id> vlan Specify the VLAN for the given Sub-Ring ID. Format sub-ring <id> vlan <0-4042> Mode Global Config <id> Specify the Sub-Ring ID whose settings you want to configure. <0-4042> Enter the VLAN for the given Sub-Ring ID (min.: 0, max.: 4042, default: 0).
  • Page 489: Sub-Ring Mrp-Domainid

    CLI Commands: Switching 5.9 Sub-Ring Commands 5.9.8 sub-ring <id> mrp-domainID Set an MRP domain ID for the given Sub-Ring ID. Format sub-ring <id> mrp-domainID {<id> | default-domainID} Mode Global Config <id> sub-ring <id>: Specify the Sub-Ring ID whose settings you want to configure.
  • Page 490: Sub-Ring Delete-Ring

    CLI Commands: Switching 5.9 Sub-Ring Commands 5.9.9 sub-ring delete-ring Delete all existing Sub-Rings IDs or a specific Sub-Ring ID. Format sub-ring delete-ring {all-ids | <id>} Mode Global Config all-ids Delete all existing Sub-Ring IDs. <id> Delete the given Sub-Ring ID. Format: a number in the range 1-2147483647 (2 - 1).
  • Page 491: Cli Commands: Security

    CLI Commands: Security 6 CLI Commands: Security This chapter provides a detailed explanation of the Security commands. The following Security CLI commands are available in the software Switching Package. Use the security commands to configure security settings for login users and port users. The commands are divided into these different groups: Show commands are used to display device settings, statistics and other information.
  • Page 492 CLI Commands: Security CLI L2P Release 7.0 05/2011...
  • Page 493: Security Commands

    CLI Commands: Security 6.1 Security Commands 6.1 Security Commands 6.1.1 authentication login This command creates an authentication login list. The <listname> is up to 15 alphanumeric characters and is not case sensitive. Up to 10 authenti- cation login lists can be configured on the switch. When a list is created, the authentication method “local”...
  • Page 494 CLI Commands: Security 6.1 Security Commands no authentication login This command deletes the specified authentication login list. You will be unable to delete if any of the following conditions are true: The login list name is invalid or does not match an existing authentication login list The specified authentication login list is assigned to any user or to the non configured user for any component...
  • Page 495: Authorization Network Radius

    CLI Commands: Security 6.1 Security Commands 6.1.2 authorization network radius Use this command to enable the switch to accept VLAN assignment by the RADIUS server. Format authorization network radius Mode Privileged EXEC no authorization network radius Use this command to disable the switch to accept VLAN assignment by the RADIUS server.
  • Page 496: Clear Radius Statistics

    CLI Commands: Security 6.1 Security Commands 6.1.4 clear radius statistics This command is used to clear all RADIUS statistics. Format clear radius statistics Mode Privileged EXEC 6.1.5 dot1x defaultlogin This command assigns the authentication login list to use for non-configured users for 802.1X port security.
  • Page 497: Dot1X Dynamic-Vlan Enable

    CLI Commands: Security 6.1 Security Commands 6.1.6 dot1x dynamic-vlan enable Use this command to enable the switch to create VLANs dynamically when a RADIUS-assigned VLAN does not exist in the switch. Default disabled Format dot1x dynamic-vlan enable Mode Global Config no dot1x dynamic-vlan enable Use this command to disable the switch to create VLANs dynamically when a RADIUS-assigned VLAN does not exist in the switch.
  • Page 498: Dot1X Guest-Vlan

    CLI Commands: Security 6.1 Security Commands 6.1.7 dot1x guest-vlan This command configures VLAN as guest vlan on an interface. The command specifies an active VLAN as an IEEE 802.1x guest VLAN. The range is 1 to the maximum VLAN ID supported by the platform. Format dot1x guest-vlan <vlan-id>...
  • Page 499: Dot1X Initialize

    CLI Commands: Security 6.1 Security Commands 6.1.8 dot1x initialize This command begins the initialization sequence on the specified port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto' an error will be returned. Format dot1x initialize <slot/port>...
  • Page 500: Dot1X Mac-Auth-Bypass

    CLI Commands: Security 6.1 Security Commands 6.1.10 dot1x mac-auth-bypass This command enables the MAC-authorized-bypass on that interface. Default disabled Format dot1x mac-auth-bypass Mode Interface Config no dot1x mac-auth-bypass This command disables the MAC-authorized-bypass on that interface. Default disabled Format no dot1x mac-auth-bypass Mode Interface Config CLI L2P...
  • Page 501: Dot1X Max-Req

    CLI Commands: Security 6.1 Security Commands 6.1.11 dot1x max-req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request/Identity frame be- fore timing out the supplicant. The <count> value must be in the range 1 - 10. Default Format dot1x max-req <count>...
  • Page 502: Dot1X Max-Users

    CLI Commands: Security 6.1 Security Commands 6.1.12 dot1x max-users Use this command to set the maximum number of clients supported on an interface when MAC-based 802.1X authentication is enabled on the port. The count value is in the range 1-16 and the default value is 16. Default Format dot1x max-users <count>...
  • Page 503: Dot1X Port-Control

    CLI Commands: Security 6.1 Security Commands 6.1.13 dot1x port-control This command sets the authentication mode to be used on the specified port. The control mode may be one of the following. force-unauthorized: The authenticator PAE unconditionally sets the controlled port to unauthorized. Thus the port is always blocked. force-authorized: The authenticator PAE unconditionally sets the controlled port to authorized.
  • Page 504: Dot1X Port-Control All

    CLI Commands: Security 6.1 Security Commands 6.1.14 dot1x port-control all This command sets the authentication mode to be used on all ports. The control mode may be one of the following. force-unauthorized: The authenticator PAE unconditionally sets the controlled port to unauthorized. Thus the ports are always blocked. force-authorized: The authenticator PAE unconditionally sets the controlled port to authorized.
  • Page 505: Dot1X Re-Authenticate

    CLI Commands: Security 6.1 Security Commands 6.1.15 dot1x re-authenticate This command begins the re-authentication sequence on the specified port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto' an error will be returned. Format dot1x re-authenticate <slot/port>...
  • Page 506: Dot1X Safe-Vlan

    CLI Commands: Security 6.1 Security Commands 6.1.17 dot1x safe-vlan Use this command to enable the safe-vlan assignment on the switch. This command is available for the RS20/RS30/RS40, RSB20, MS20/MS30, RSR20/RSR30, MACH100, MACH 1000, PowerMICE, MACH 4000, OCTOPUS devices. Default disabled...
  • Page 507: Dot1X System-Auth-Control

    CLI Commands: Security 6.1 Security Commands 6.1.18 dot1x system-auth-control This command is used to enable the dot1x authentication support on the switch. By default, the authentication support is disabled. While disabled, the dot1x configuration is retained and can be changed, but is not activated. Default disabled Format...
  • Page 508: Dot1X Timeout

    CLI Commands: Security 6.1 Security Commands 6.1.19 dot1x timeout This command sets the value, in seconds, of the timer used by the authenticator state machine on this port. Depending on the token used and the value (in seconds) passed, various timeout configurable parameters are set. The following tokens are supported.
  • Page 509 CLI Commands: Security 6.1 Security Commands no dot1x timeout This command sets the value, in seconds, of the timer used by the authenticator state machine on this port to the default values. Depending on the token used, the corresponding default values are set. Format no dot1x timeout {reauth-period | quiet-period | tx-period | supp-timeout | server-timeout}...
  • Page 510: Dot1X Timeout Guest-Vlan-Period

    CLI Commands: Security 6.1 Security Commands 6.1.20 dot1x timeout guest-vlan-period Use this command to configure the timeout value for the guest-vlan-period. The time, in seconds, for which the authenticator waits to see if any EAPOL packets are received on a port before authorizing the port and placing the port in the guest vlan (if configured).
  • Page 511: Dot1X Unauthenticated-Vlan

    CLI Commands: Security 6.1 Security Commands 6.1.21 dot1x unauthenticated-vlan Use this command to configure the unauthenticated VLAN associated with the specified interface. The unauthenticated VLAN ID can be a valid VLAN ID from 0 to maximum supported VLAN ID. The unauthenticated VLAN must be statically configured in the VLAN database to be operational.
  • Page 512: Dot1X User

    CLI Commands: Security 6.1 Security Commands 6.1.22 dot1x user This command adds the specified user to the list of users with access to the specified port or all ports. The <user> parameter must be a configured user. Format dot1x user <user> {<slot/port> | all} Mode Global Config no dot1x user...
  • Page 513: Radius Accounting Mode

    CLI Commands: Security 6.1 Security Commands 6.1.23 radius accounting mode This command is used to enable the RADIUS accounting function. Default disabled Format radius accounting mode Mode Global Config no radius accounting mode This command is used to set the RADIUS accounting function to the default value - i.e.
  • Page 514: Radius Server Host

    CLI Commands: Security 6.1 Security Commands 6.1.24 radius server host This command is used to configure the RADIUS authentication and accounting server. If the 'auth' token is used, the command configures the IP address to use to connect to a RADIUS authentication server. Up to 3 servers can be configured per RADIUS client.
  • Page 515: Radius Server Key

    CLI Commands: Security 6.1 Security Commands Format no radius server host {auth | acct} <ipaddress> Mode Global Config 6.1.25 radius server key This command is used to configure the shared secret between the RADIUS client and the RADIUS accounting / authentication server. Depending on whether the 'auth' or 'acct' token is used, the shared secret will be configured for the RADIUS authentication or RADIUS accounting server.
  • Page 516: Radius Server Primary

    CLI Commands: Security 6.1 Security Commands 6.1.27 radius server primary This command is used to configure the primary RADIUS authentication server for this RADIUS client. The primary server is the one that is used by default for handling RADIUS requests. The remaining configured servers are only used if the primary server cannot be reached.
  • Page 517: Radius Server Retransmit

    CLI Commands: Security 6.1 Security Commands 6.1.28 radius server retransmit This command sets the maximum number of times a request packet is retransmitted when no response is received from the RADIUS server. The retries value is an integer in the range of 1 to 15. Default Format radius server retransmit <retries>...
  • Page 518: Radius Server Timeout

    CLI Commands: Security 6.1 Security Commands 6.1.29 radius server timeout This command sets the timeout value (in seconds) after which a request must be retransmitted to the RADIUS server if no response is received. The timeout value is an integer in the range of 1 to 30. Default Format radius server timeout <seconds>...
  • Page 519: Show Radius Accounting

    CLI Commands: Security 6.1 Security Commands 6.1.30 show radius accounting This command is used to display the configured RADIUS accounting mode, accounting server and the statistics for the configured accounting server. Format show radius accounting [statistics <ipaddr>] Mode Privileged EXEC and User EXEC If the optional token 'statistics <ipaddr>' is not included, then only the accounting mode and the RADIUS accounting server details are displayed.
  • Page 520 CLI Commands: Security 6.1 Security Commands Retransmission The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Responses The number of RADIUS packets received on the accounting port from this server. Malformed Responses The number of malformed RADIUS Accounting-Response packets received from this server.
  • Page 521: Show Authentication

    CLI Commands: Security 6.1 Security Commands 6.1.31 show authentication This command displays the ordered authentication methods for all authenti- cation login lists. Format show authentication Mode Privileged EXEC and User EXEC Authentication Login List This displays the authentication login listname. Method 1 This displays the first method in the specified authentication login list, if any.
  • Page 522: Show Authentication Users

    CLI Commands: Security 6.1 Security Commands 6.1.32 show authentication users This command displays information about the users assigned to the specified authentication login list. If the login is assigned to non-configured users, the user “default” will appear in the user column. Format show authentication users <listname>...
  • Page 523: Show Dot1X

    CLI Commands: Security 6.1 Security Commands 6.1.33 show dot1x This command is used to show a summary of the global dot1x configuration, summary information of the dot1x configuration for a specified port or all ports, the detailed dot1x configuration for a specified port and the dot1x statistics for a specified port - depending on the tokens used.
  • Page 524 CLI Commands: Security 6.1 Security Commands Operating Control Mode The control mode under which this port is operating. Possible values are authorized unauthorized Reauthentication Enabled Indicates whether re-authentication is enabled on this port Key Transmission Enabled Indicates if the key is transmitted to the supplicant for the specified port If the optional parameter 'detail <slot/port>' is used, the detailed dot1x configuration for the specified port are displayed.
  • Page 525 CLI Commands: Security 6.1 Security Commands supplicant. The value is expressed in seconds and will be in the range 0 and 65535. Transmit Period The timer used by the authenticator state machine on the specified port to determine when to send an EAPOL EAP Request/Identity frame to the supplicant.
  • Page 526 CLI Commands: Security 6.1 Security Commands Reauthentication Enabled Indicates if reauthentication is enabled on this port. Possible values are ‘True” or “False”. Key Transmission Enabled Indicates if the key is transmitted to the supplicant for the specified port. Possible values are True or False. Control Direction Indicates the control direction for the specified port or ports.
  • Page 527 CLI Commands: Security 6.1 Security Commands EAPOL Start Frames Received The number of EAPOL start frames that have been received by this authenticator. EAPOL Logoff Frames Received The number of EAPOL logoff frames that have been received by this authenticator. Last EAPOL Frame Version The protocol version number carried in the most recently received EAPOL frame.
  • Page 528: Show Dot1X Users

    CLI Commands: Security 6.1 Security Commands 6.1.34 show dot1x users This command displays 802.1X port security user information for locally con- figured users. Format show dot1x users <slot/port> Mode Privileged EXEC and User EXEC User Users configured locally to have access to the specified port. CLI L2P Release 7.0 05/2011...
  • Page 529: Show Dot1X Clients

    CLI Commands: Security 6.1 Security Commands 6.1.35 show dot1x clients This command displays 802.1X port security client information for locally configured clients. Format show dot1x clients <slot/port> Mode Privileged EXEC Logical Interface Display the Logical Interface. Interface Display the Interface. User Name Display the User Name.
  • Page 530: Show Radius

    CLI Commands: Security 6.1 Security Commands 6.1.36 show radius This command is used to display the various RADIUS configuration items for the switch as well as the configured RADIUS servers. If the optional token 'servers' is not included, the following RADIUS configuration items will be dis- played.
  • Page 531: Show Radius Statistics

    CLI Commands: Security 6.1 Security Commands 6.1.37 show radius statistics This command is used to display the statistics for RADIUS or configured server . To show the configured RADIUS server statistic, the IP Address specified must match that of a previously configured RADIUS server. On ex- ecution, the following fields are displayed.
  • Page 532 CLI Commands: Security 6.1 Security Commands Access Rejects The number of RADIUS Access-Reject packets, including both valid and invalid packets, which were received from this server. Access Challenges The number of RADIUS Access-Challenge packets, including both valid and invalid packets, which were received from this server. Malformed Access Responses The number of malformed RADIUS Access-Response packets received from this server.
  • Page 533: Show Users Authentication

    CLI Commands: Security 6.1 Security Commands 6.1.38 show users authentication This command displays all user and all authentication login information. It also displays the authentication login list assigned to the default user. Format show users authentication Mode Privileged EXEC User This field lists every user that has an authentication login list assigned.
  • Page 534: Users Login

    CLI Commands: Security 6.1 Security Commands 6.1.39 users login This command assigns the specified authentication login list to the specified user for system login. The <user> must be a configured <user> and the <listname> must be a configured login list. If the user is assigned a login list that requires remote authentication, all ac- cess to the interface from all CLI, web, and telnet sessions will be blocked until the authentication is complete.
  • Page 535: Http Commands

    CLI Commands: Security 6.2 HTTP Commands 6.2 HTTP Commands 6.2.1 ip http secure-port This command is used to set the sslt port where port can be 1-65535 and the default is port 443. Default Format ip http secure-port <portid> Mode Privileged EXEC no ip http secure-port This command is used to reset the sslt port to the default value.
  • Page 536: Ip Http Secure-Protocol

    CLI Commands: Security 6.2 HTTP Commands 6.2.2 ip http secure-protocol This command is used to set protocol levels (versions). The protocol level can be set to TLS1, SSL3 or to both TLS1 and SSL3. Default SSL3 and TLS1 Format ip http secure-protocol [SSL3] [TLS1] Mode Privileged EXEC CLI L2P...
  • Page 537: Ip Http Server

    CLI Commands: Security 6.2 HTTP Commands 6.2.3 ip http server This command enables access to the switch through the Web interface. When access is enabled, the user can login to the switch from the Web inter- face. When access is disabled, the user cannot login to the switch's Web server.
  • Page 538: Show Ip Http

    CLI Commands: Security 6.2 HTTP Commands 6.2.4 show ip http This command displays the http settings for the switch. Format show ip http Mode Privileged EXEC and User EXEC Secure-Server Administrative Mode This field indicates whether the administrative mode of secure HTTP is enabled or disabled.
  • Page 539: Appendix- Vlan Example

    Appendix- VLAN Example 7 Appendix- VLAN Example LAN switches can segment networks into logically defined virtual work- groups.This logical segmentation is commonly referred as a virtual LAN (VLAN). This logical segmentation of devices provides better LAN adminis- tration, security, and management of broadcast activity over the network. Vir- tual LANs have become an integral feature of switched LAN solutions.
  • Page 540 Appendix- VLAN Example VLAN Command create VLAN 3 vlan database vlan 3 exit config interface 0/3 vlan participation include 3 exit interface 0/4 vlan participation include 3 exit create VLAN 4 vlan database vlan 4 exit config interface 0/5 vlan participation include 4 exit interface 0/6 vlan participation include 4...
  • Page 541: Solution 1

    Appendix- VLAN Example 7.1 SOLUTION 1 7.1 SOLUTION 1 All traffic entering the ports is tagged traffic. Since the traffic is tagged, the PVID configuration for each port is not a concern. The network card configuration for devices on Project A must be set to tag all traffic with 'VLAN 2' The network card configuration for devices on Project B must be set to tag all traffic with 'VLAN 3'...
  • Page 542 Appendix- VLAN Example 7.1 SOLUTION 1 CLI L2P Release 7.0 05/2011...
  • Page 543: Solution 2

    Appendix- VLAN Example 7.2 SOLUTION 2 7.2 SOLUTION 2 The network card configuration for devices on Project A, B and C should be set to NOT tag traffic. To take care of these untagged frames configure the following: vlan pvid 2 (in interface 0/1) vlan pvid 2 (in interface 0/2) vlan pvid 3 (in interface 0/3) vlan pvid 3 (in interface 0/4)
  • Page 544 Appendix- VLAN Example 7.2 SOLUTION 2 CLI L2P Release 7.0 05/2011...
  • Page 545: Glossary

    Glossary 8 Glossary Numerics (LAN). This Layer 2 network standard improves support of time critical traffic, and limits the extent of 802.1D. The IEEE designator for high bandwidth multicast traffic Spanning Tree Protocol (STP). STP, within a bridged LAN. To do this, a link management protocol, is part 802.1P defines a methodology for of the 802.1D standard for media...
  • Page 546 Glossary Advanced Network Device Layer/ Bridge Protocol Data Unit. BPDU Software. Hirschmann term for the is the IEEE 802.1D MAC Bridge Device Driver level. Management protocol that is the standard implementation of STP Aging. When an entry for a node is (Spanning Tree Protocol).
  • Page 547 Glossary Complex Programmable Logic (ToS), Differentiated Services avoids Device. CPLD is a programmable simple priority tagging and depends circuit on which a logic network can on more complex policy or rule be programmed after its statements to determine how to construction.
  • Page 548 Glossary addresses. Dynamic addressing There are many flow control simplifies network administration mechanisms. One of the most because the software tracks IP common flow control protocols for addresses rather than requiring an asynchronous communication is administrator to manage the task. A called xon-xoff.
  • Page 549 Glossary GARP Multicast Registration types, the values that they can carry, Protocol. GMRP provides a and the semantics that are mechanism that allows Bridges and associated with those values when end stations to dynamically register registered are specific to the (and subsequently, de-register) operation of the GARP Application Group membership information with...
  • Page 550 Glossary group. All hosts conforming to Level 2 of the IP Multicasting specification require IGMP. ICMP. See “Internet Control Message Protocol” on page 550. IP. See “Internet Protocol” on page 550. IGMP. See “Internet Group Management Protocol” on page 550. IP Multicasting.
  • Page 551 Glossary forwards the packet to an adjacent much longer addresses and gateway that in turn reads the therefore for the possibility of many destination address and so forth more Internet users. IPv6 includes across the Internet until one the capabilities of IPv4 and any gateway recognizes the packet as server that can support IPv6 packets belonging to a computer within its...
  • Page 552 Glossary the type of server hosting the and telephones connect two or more directory. LANs, the larger network constitutes what is called a WAN or Wide Area Learning. The bridge examines the Network. Layer 2 source addresses of every frame on the attached networks (called listening) and then maintains a table, or cache, of which MAC MAC.
  • Page 553 Glossary MDIX. Management Dependent will allow users to easily join Interface Crossover. multicast groups. Note that multicasting refers to sending a MIB. See “Management Information message to a select group whereas Base” on page 552. broadcasting refers to sending a message to everyone connected to MOSPF.
  • Page 554 Glossary autonomous system—or ISP—in fiber-optic cables to be plugged into order to simplify and improve IP- compatible devices as easily as packet exchange. MPLS gives plugging in a telephone cable. network operators a great deal of MUX. See “Multiplexing” on flexibility to divert and route traffic page 553.
  • Page 555 Glossary mirrored data to monitor each segment separately. The analyzer captures and evaluates the data PDU. See “Protocol Data Unit” on without affecting the client on the page 555. original port. The monitor port may PHY. The OSI Physical Layer: The be a port on the same SwitchModule physical layer provides for with an attached RMON probe, a...
  • Page 556 Glossary Simple Network Management Protocol. SNMP is the protocol governing network management and Real-Time Operating System. the monitoring of network devices RTOS is a component of the OSAPI and their functions. It is not module that abstracts operating necessarily limited to TCP/IP systems with which other systems networks.
  • Page 557 Glossary of SNMPv2p and SNMPv2u. (It is also called SNMPv2star.) The documents defing this version were TBI. Ten Bit Interface. never published as RFCs. Telnet. A character-based UNIX SNMPv3 (proposed): This version of application that enables users with a the protocol is a combination of Telnet server account to log on to a user-based security and the protocol UNIX computer and utilize its...
  • Page 558 Glossary UPMB. The second of two UPMs in client-server system to distribute Motorola's MPC855T processor. information, based upon the hypertext transfer protocol (HTTP). USP. An abbreviation that represents Unit, Slot, Port. Wide Area Network. A WAN is a computer network that spans a relatively large geographical area.
  • Page 559 Glossary slows down the rate of data transmission considerably, but it ensures accurate transmission. Xmodem can be implemented either in software or in hardware. Many modems, and almost all communications software packages, support Xmodem. However, it is useful only at relatively slow data transmission speeds (less than 4,800 bps).
  • Page 560 Glossary CLI L2P Release 7.0 05/2011...
  • Page 561 Index 9 Index clear port-sec addport clear radius statistics address-conflict clear ring-coupling adminmode clear sfp-white-list clear signal-contact areaid clear traplog authentication login clear vlan authorization network radius Competence Center auto-negotiate config commands auto-negotiate all config lags adminmode config lags linktrap config lags name bridge address-learning config loginsession...
  • Page 562 253, 258 dhcp-server pool disable inlinepower (Global Config) dhcp-server pool enable inlinepower (Interface Config) dhcp-server pool modify hirschmann-device inlinepower budget slot inlinepower threshold slot dhcp-server pool modify mode inlinepower trap slot dhcp-server pool modify option Interface Config Mode...
  • Page 563: Index

    Index Line Config Mode logging host reconfigure Link Aggregation(802.3ad) Commands logging host remove link aggregations. See LAGs logging snmp-requests get operation link traps logging snmp-requests get severity interface 239, 240 logging snmp-requests set operation logging snmp-requests set severity logging syslog link-aggregation logging syslog port link-aggregation adminmode...
  • Page 564 Index Port monitor ptp v2bc priority2 port-monitor (Global Config) ptp v2bc sync-interval port-monitor (Interface Config) ptp v2bc utc-offset port-monitor action ptp v2bc utc-offset-valid port-monitor condition crc-fragment (Global ptp v2bc v1-compatibility-mode Config) ptp v2bc vlan port-monitor condition crc-fragment (Interface ptp v2bc vlan-priority Config) ptp v2tc asymmetry port-monitor condition link-flap (Global Config)
  • Page 565 Index script show show stats switch detailed 58, 60, 66 script validate show switchconfig 229, 230, 231 selftest ramtest show users selftest reboot-on-error show vlan detailed serial timeout show vlan interface session-limit show vlan summary sessions show config-watchdog closing 267, 297 show device-status displaying show dhcp-relay...
  • Page 566 Index show lldp med show spanning-tree show lldp med interface show spanning-tree brief show lldp med local-device detail show spanning-tree interface show lldp med remote-device show spanning-tree mst detailed show lldp med remote-device detail show spanning-tree mst port detailed show lldp remote-data show spanning-tree mst port summary show logging show spanning-tree mst summary...
  • Page 567 Index sntp anycast address sub-ring protocol sntp anycast transmit-interval sub-ring ring-name sntp anycast vlan sub-ring vlan sntp client accept-broadcast Sub-Ring Commands sntp client disable-after-sync sub-ring delete-ring sntp client offset sub-ring new-ring sntp client request-interval switch sntp client server primary information, related 201 commands 229, sntp client server secondary 230, sntp client threshold...
  • Page 568 Index vlan vlan acceptframe 251, 252 vlan ingressfilter VLAN Mode vlan name vlan participation vlan participation all vlan port acceptframe all vlan port ingressfilter all vlan port priority all vlan port pvid all vlan port tagging all vlan priority vlan pvid vlan tagging vlan0-transparent-mode VLANs...
  • Page 569 Index CLI L2P Release 7.0 05/2011...
  • Page 570 Index CLI L2P Release 7.0 05/2011...
  • Page 571: Further Support

    Technical questions and training courses In the event of technical queries, please contact your local Hirschmann distributor or Hirschmann office. You can find the addresses of our distri- butors on the Internet: www.hirschmann-ac.com Our support line is also at your disposal:...

Table of Contents

Save PDF