Who Should Use This Book This book is intended for network installers and system administrators engaged in configuring and maintaining a network. The administrator should be familiar with Ethernet concepts, IP addressing, Spanning Tree Protocol, and SNMP configuration parameters. G8332 Command Reference for ENOS 8.4...
Typographic Conventions The following table describes the typographic styles used in this book. Table 1. Typographic Conventions Typeface or Symbol Meaning plain fixedwidth This type is used for names of commands, files, and text directories used within the text. For example: View the readme.txt file. It also depicts on‐screen computer output and prompts. bold fixedwidth This bold type appears in command examples. It shows text text that must be typed in exactly as shown. For example: show sysinfo bold body text This bold type indicates objects such as window names, dialog box names, and icons, as well as user interface objects such as buttons, and tabs. italicized body text This italicized type indicates book titles, special terms, or words to be emphasized. angle brackets < > Indicate a variable to enter based on the description inside the brackets. Do not type the brackets when entering the command. Example: If the command syntax is ping <IP address> you enter ping 192.32.10.12 braces {} Indicate required elements in syntax descriptions where there is more than one option. You must choose only one of the options. Do not type the braces when entering the ...
ISCLI Command Modes The ISCLI has three major command modes listed in order of increasing privileges, as follows: User EXEC mode This is the initial mode of access. By default, password checking is disabled for this mode, on console. Privileged EXEC mode This mode is accessed from User EXEC mode. This mode can be accessed using the following command: enable Global Configuration mode This mode allows you to make changes to the running configuration. If you save the configuration, the settings survive a reload of the G8332. Several sub‐modes can be accessed from the Global Configuration mode. For more details, see Table 2. This mode can be accessed using the following command: configure terminal Each mode provides a specific set of commands. The command set of a higher‐privilege mode is a superset of a lower‐privilege mode—all lower‐privilege mode commands are accessible when using a higher‐privilege mode. The following table lists the ISCLI command modes. Table 2. ISCLI Command Modes Command Mode/Prompt Command used to enter or exit User EXEC Default mode, entered automatically on console RS G8332> Exit: exit or logout Privileged EXEC Enter Privileged EXEC mode, from User EXEC mode:...
Page 24
Table 2. ISCLI Command Modes (continued) Command Mode/Prompt Command used to enter or exit Router RIP Enter RIP Configuration mode, from Global Configuration mode: RS G8332(configrouterrip)# router rip Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end Route Map Enter Route Map Configuration mode, from Global Configuration mode: RS G8332(configroutemap)# routemap <1‐255> Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end Router VRRP Enter VRRP Configuration mode, from Global Configuration mode: RS G8332(configvrrp)# router vrrp Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end PIM Component Enter Protocol Independent Multicast (PIM) Component Configuration mode, from Global Configuration mode: RS G8332(configippimcomp)# ip pim component <1‐2>...
Global Commands Some basic commands are recognized throughout the ISCLI command modes. These commands are useful for obtaining online help, navigating through the interface, and for saving configuration changes. For help on a specific command, type the command, followed by help. Table 3. Description of Global Commands Command Action Provides more information about a specific command or lists commands available at the current level. list Lists the commands available at the current level. exit Go up one level in the command mode structure. If already at the top level, exit from the command line interface and log out. copy runningconfig Write configuration changes to non‐volatile flash startupconfig memory. logout Exit from the command line interface and log out. traceroute Use this command to identify the route used for station‐to‐station connectivity across the network. The format is as follows: traceroute [{<hostname>|<IP address>} [<max‐hops (1‐32)> [<msec‐delay (1‐4294967295)>]] [dataport|mgtport]] Where: hostname/IP address: Sets the hostname or IP address of the target station. maxhops: Sets the maximum distance to trace. msecdelay: Sets the number of milliseconds ...
Page 28
Table 3. Description of Global Commands Command Action telnet This command is used to form a Telnet session between the switch and another network device. The format is as follows: telnet [{<hostname>|<IP address>} [<service port (1‐65535)>] [dataport|mgtport]] Where: hostname/IP address: Sets the target station. port: Sets the logical Telnet port or service number. By default, the management port is used. To use a specific port, use the following options: data port: dataport management port: mgtport Note: The DNS parameters must be configured if specifying hostnames. show history This command displays the last ten issued commands. show who Displays a list of users who are currently logged in. show line Displays a list of users who are currently logged in, in table format. G8332 Command Reference for ENOS 8.4...
User Access Levels To enable better switch management and user accountability, three levels or classes of user access have been implemented on the G8332. Levels of access to CLI, Web management functions, and screens increase as needed to perform various switch management tasks. Conceptually, access classes are defined as follows: user Interaction with the switch is completely passive—nothing can be changed on the G8332. Users may display information that has no security or privacy implications, such as switch statistics and current operational state information. oper Operators can make temporary changes on the G8332. These changes are lost when the switch is rebooted. Operators have access to the switch management features used for daily switch operations. Because any changes an operator makes are undone by a reboot of the switch, operators cannot severely impact switch operation. admin Administrators are the only ones that may make permanent changes to the switch configuration—changes that are persistent across a reboot of the switch. Administrators can access switch functions to configure and troubleshoot problems on the G8332. Because administrators can also make temporary (operator‐level) changes as well, they must be aware of the interactions between temporary and permanent changes. Access to switch functions is controlled through the use of unique surnames and passwords. Once you are connected to the switch via local Telnet, remote Telnet, or SSH, you are prompted to enter a password. The default user names/password for each access level are listed in the following table. Note: It is recommended that you change default switch passwords after initial configuration and as regularly as required under your network security policies. Table 4. User Access Levels User Account Description and Tasks Performed Password User The User has no direct responsibility for switch ...
System Information The information provided by each command option is briefly described in the following table, with pointers to where detailed information can be found. Table 6. System Information Options Command Syntax and Usage dir [configs|images] Displays the configuration files and NOS images currently on the switch. configs ‐ displays only the configuration files currently on the switch images ‐ displays only the system images currently on the switch For more details, see page Command mode: Privileged EXEC show access user Displays configured user names and their status. Command mode: Privileged EXEC show logging [messages] [severity <0‐7>] [reverse] [|{include|exclude|section|begin|head <1‐2000>| |last <1‐2000>}] Displays the current syslog configuration, followed by the most recent 2000 syslog messages. messages displays the most recent 2000 syslog messages only severity displays syslog messages of the specified severity level reverse displays syslog messages starting with the most recent message | displays syslog messages that match one of the following filters: • include displays syslog messages that match the specified expression • exclude displays syslog messages that don’t match the specified expression •...
CLI Display Information These commands allow you to display information about the number of lines per screen displayed in the CLI. Table 7. CLI Display Information Options Command Syntax and Usage show terminallength Displays the number of lines per screen displayed in the CLI for the current session. A value of 0 means paging is disabled. Command mode: All show line console length Displays the number of lines per screen displayed in the CLI by default for console sessions. A value of 0 means paging is disabled. Command mode: All show line vty length Displays the number of lines per screen displayed in the CLI by default for Telnet and SSH sessions. A value of 0 means paging is disabled. Command mode: All G8332 Command Reference for ENOS 8.4...
SNMPv3 System Information SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2 framework by supporting the following: a new SNMP message format security for messages access control remote configuration of SNMP parameters For more details on the SNMPv3 architecture please refer to RFC2271 to RFC2276. Table 9. SNMPv3 Information Options Command Syntax and Usage show snmpserver v3 Displays all the SNMPv3 information. To view a sample, see page Command mode: All show snmpserver v3 access Displays View‐based Access Control information. To view a sample, see page Command mode: All show snmpserver v3 community Displays information about the community table information. To view a sample, see page Command mode: All show snmpserver v3 group Displays information about the group, including the security model, user name and group name. To view a sample, see page Command mode: All show snmpserver v3 notify Displays the Notify table information. To view a sample, see page Command mode: All show snmpserver v3 targetaddress Displays the Target Address table information. To view a sample, see page Command mode: All show snmpserver v3 targetparameters...
SNMPv3 View Table Information The user can control and restrict the access allowed to a group to only a subset of the management information in the management domain that the group can access within each context by specifying the group’s rights in terms of a particular MIB view for security reasons. The following command displays the SNMPv3 View Table: show snmpserver v3 view Command mode: All View Name Subtree Mask Type iso 1.3 included v1v2only 1.3 included v1v2only 1.3.6.1.6.3.15 excluded v1v2only 1.3.6.1.6.3.16 excluded v1v2only 1.3.6.1.6.3.18 excluded Table 11. SNMPv3 View Table Information Parameters Field Description View Name Displays the name of the view. Subtree Displays the MIB subtree as an OID string. A view subtree is the set of all MIB object instances which have a common Object Identifier prefix to their names. Mask Displays the bit mask. Type Displays whether a family of view subtrees is included or excluded from the MIB view. G8332 Command Reference for ENOS 8.4...
SNMPv3 Group Table Information A group is a combination of security model and security name that defines the access rights assigned to all the security names belonging to that group. The group is identified by a group name. The following command displays SNMPv3 group information: show snmpserver v3 group Command mode: All All active SNMPv3 groups are listed below: Sec Model User Name Group Name snmpv1 v1v2only v1v2grp usm adminmd5 admingrp usm adminsha admingrp usm adminshaaes admingrp Table 13. SNMPv3 Group Table Information Parameters Field Description Sec Model Displays the security model used, which is any one of: USM, SNMPv1, SNMPv2, and SNMPv3. User Name Displays the name for the group. Group Name Displays the access name of the group. SNMPv3 Community Table Information The following command displays the SNMPv3 community table information stored in the SNMP engine: show snmpserver v3 community Command mode: All ...
SNMPv3 Target Parameters Table Information The following command displays SNMPv3 target parameters information: show snmpserver v3 targetparameters Command mode: All Name MP Model User Name Sec Model Sec Level v1v2param snmpv2c v1v2only snmpv1 noAuthNoPriv Table 16. SNMPv3 Target Parameters Table Information Field Description Name Displays the locally arbitrary, but unique identifier associated with this snmpTargeParamsEntry. MP Model Displays the Message Processing Model used when generating SNMP messages using this entry. User Name Displays the securityName, which identifies the entry on whose behalf SNMP messages will be generated using this entry. Sec Model Displays the security model used when generating SNMP messages using this entry. The system may choose to return an inconsistentValue error if an attempt is made to set this variable to a value for a security model the system does not support. Sec Level Displays the level of security used when generating SNMP messages using this entry. SNMPv3 Notify Table Information The following command displays the SNMPv3 Notify Table: show snmpserver v3 notify Command mode: All ...
General System Information The following command displays system information: show sysinfo Command mode: All System Information at 5:00:53 Fri Mar 13, 2015 Time zone: No timezone configured Daylight Savings Time Status: Disabled Lenovo RackSwitch G8332 Switch has been up for 0 days, 0 hours, 2 minutes and 6 seconds. Last boot: 5:00:09 Fri Mar 13, 2015 (reset from console) MAC address: a8:97:dc:88:c9:00 IP (If 1) address: 0.0.0.0 Management Port MAC Address: a8:97:dc:88:c9:fe Management Port IP Address (if 128): 10.241.39.14 Hardware Revision: 0 Hardware Part No: BAC0009500 Switch Serial No: Y019CM3CA180 Manufacturing date: 13/49 MTM Value: 8036HC4 ESN: MM17503 Software Version 8.4.1.0 (FLASH image1), active configuration. Boot kernel version 8.4.1.0 USB Boot: disabled Temperature CPU Local : 32 C Temperature Rear In/Ex : 28 C Temperature Front In/Ex : 25 C Temperature Hot Spot : 32 C Temperature Asic Max : 36 C Temperature MDA : 30 C System Warning at 85 C / Shutdown at 95 C / Set Point is 70 C Fan 1 Module 1: 7021rpm 60pwm(23%) FrontToBack Fan 2 Module 1: 7447rpm 60pwm(23%) FrontToBack Fan 3 Module 2: 6733rpm 60pwm(23%) FrontToBack Fan 4 Module 2: 7447rpm 60pwm(23%) FrontToBack Fan 5 Module 3: 6687rpm 60pwm(23%) FrontToBack Fan 6 Module 3: 7447rpm 60pwm(23%) FrontToBack Fan 7 Module 4: 6922rpm 60pwm(23%) FrontToBack Fan 8 Module 4: 7123rpm 60pwm(23%) FrontToBack System Fan Airflow: FrontToBack Power Supply 1: FrontToBack [94Y8104]...
Show Recent Syslog Messages The following command displays system log messages: show logging [messages] [severity <0‐7>] [reverse] Command mode: All Current syslog configuration: host 0.0.0.0 via MGT port, severity 7, facility 0 host2 0.0.0.0 via MGT port, severity2 7, facility2 0 console enabled severity level of console output 6 severity level of write to flash 7 syslogging all features Syslog source loopback interface not set Nov 2 5:49:53 172.25.254.19 INFO console: System log cleared by user admin. Nov 2 5:51:23 172.25.254.19 CRIT system: Fan Mod 4 Removed Nov 2 5:54:27 172.25.254.19 CRIT system: **** MAX TEMPERATURE (61) ABOVE FAIL THRESH **** Nov 2 5:54:27 172.25.254.19 CRIT system: **** PLATFORM THERMAL SHUTDOWN **** Nov 2 6:02:06 0.0.0.0 NOTICE system: link up on management port MGT Nov 2 6:02:06 0.0.0.0 INFO system: booted version 0.0.0 from FLASH image2, active configuration Nov 2 6:02:09 0.0.0.0 NOTICE system: SR SFP+ inserted at port 63 is Approved Nov 2 6:02:12 0.0.0.0 NOTICE system: 1m DAC inserted at port 64 is Accepted Nov 2 6:02:12 0.0.0.0 NOTICE system: link up on management port MGT Nov 2 6:03:11 0.0.0.0 NOTICE ip: MGT port default gateway 172.25.1.1 operational Nov 2 6:22:54 172.25.254.19 NOTICE mgmt: admin(admin) login on Console Nov 2 6:33:00 172.25.254.19 NOTICE mgmt: admin(admin) idle timeout from Console Each syslog message has a severity level associated with it, included in text form as a prefix to the log message. One of eight different prefixes is used, depending on the condition that the administrator is being notified of, as shown here. EMERG Indicates the system is unusable ALERT Indicates action should be taken immediately...
LDAP Information The following command displays LDAP server configuration information: show ldapserver Command mode: All except User EXEC for LDAP configured in legacy mode: Current LDAP settings: Primary LDAP Server (null) via MGT port Secondary LDAP Server (null) via MGT port Current LDAP server (null) LDAP port 389, Retries 3, Timeout 5, LDAP server OFF, Backdoor access disabled LDAP domain name LDAP user attribute uid for LDAP configured in enhanced mode: Current LDAP settings: LDAP server 1 10.10.43.55:389 via MGT port LDAP server 2 LDAPserver109:389 via DATA port LDAP server 3 (null) LDAP server 4 (null) LDAP Bind Mode Login Credentials LDAP Bind DN (null) Retries 3, Timeout 5, LDAP server OFF, Backdoor access disabled LDAP domain name LDAP attributes user attribute uid group attribute memberOf login attribute ibmchassisRole LDAP group filter (null) G8332 Command Reference for ENOS 8.4...
Page 52
Table 19. Layer 2 Information Commands (continued) Command Syntax and Usage show spanningtree Displays Spanning Tree information, including the status (on or off), Spanning Tree mode (RSTP, PVRST, or MSTP) and VLAN membership. In addition to seeing if STG is enabled or disabled, you can view the following STG bridge information: Priority Hello interval Maximum age value Forwarding delay Aging time You can also see the following port‐specific STG information: Port alias and priority Cost State For details, see page Command mode: All show spanningtree blockedports Lists the ports blocked by each STP instance. Command mode: All show spanningtree mst configuration Displays the current MSTP settings. Command mode: All show spanningtree mst <0‐32> [information] Displays Spanning Tree information for the specified instance. 0 is used for CIST. CIST bridge information includes: Priority ...
802.1X Information The following command displays 802.1X information: show dot1x information Command mode: All System capability : Authenticator System status : disabled Protocol version : 1 Guest VLAN status : disabled Guest VLAN : none Authenticator Backend Assigned Port Auth Mode Auth Status PAE State Auth State VLAN *1 forceauth unauthorized initialize initialize none *2 forceauth unauthorized initialize initialize none *3 forceauth unauthorized initialize initialize none The following table describes the IEEE 802.1X parameters. Table 20. 802.1X Parameter Descriptions Parameter Description Port Displays each port’s alias. Auth Mode Displays the Access Control authorization mode for the port. The Authorization mode can be one of the following: forceunauth auto forceauth Auth Status Displays the current authorization status of the port, either authorized or unauthorized. Authenticator Displays the Authenticator Port Access Entity State. The PAE State PAE state can be one of the following: initialize ...
FDB Information The forwarding database (FDB) contains information that maps the media access control (MAC) address of each known device to the switch port where the device address was learned. The FDB also shows which other ports have seen frames destined for a particular MAC address. Note: The master forwarding database supports up to 128K MAC address entries on the MP per switch. Table 21. FDB Information Options Command Syntax and Usage show macaddresstable Displays all entries in the Forwarding Database. Command mode: All show macaddresstable all Displays all unicast and multicast entries in the Forwarding Database. Command mode: All show macaddresstable address <MAC address> Displays a single database entry by its MAC address. You are prompted to enter the MAC address of the device. Enter the MAC address using the format, xx:xx:xx:xx:xx:xx. For example, 08:00:20:12:34:56. You can also enter the MAC address using the format, xxxxxxxxxxxx. For example, 080020123456. Command mode: All show macaddresstable configuredstatic Displays all configured static MAC entries in the FDB. Command mode: All show macaddresstable interface port <port alias or number> Displays all FDB entries for a particular port. Command mode: All show macaddresstable multicast Displays all static multicast MAC entries in the FDB. For details, see page Command mode: All show macaddresstable portchannel <1‐208> Displays all FDB entries for a particular Link Aggregation Group (LAG).
Show All FDB Information The following command displays Forwarding Database information: show macaddresstable Command mode: All Mac address Aging Time: 300 MAC address VLAN Port Trnk State Permanent Openflow a8:97:dc:8a:1e:00 1 105 TRK a8:97:dc:8a:1e:01 1 105 TRK a8:97:dc:8a:1e:02 2 105 TRK a8:97:dc:8a:1e:63 3 105 TRK a8:97:dc:d1:f4:00 4 105 TRK a8:97:dc:d1:f5:00 5 105 TRK An address that is in the forwarding (FWD) state, means that it has been learned by the switch. When in the aggregation (TRK) state, the port field represents the Link Aggregation Group (LAG) number. If the state for the port is listed as unknown (UNK), the MAC address has not yet been learned by the switch, but has only been seen as a destination address. When an address is in the unknown state, no outbound port is indicated, although ports which reference the address as a destination are listed under “Reference ports.” Clearing Entries from the Forwarding Database To clear the entire FDB, refer to “Forwarding Database Maintenance” on page 711. G8332 Command Reference for ENOS 8.4...
Link Aggregation Control Protocol The following command displays LACP information: show lacp information Command mode: All port mode adminkey operkey selected prio aggr trunk status minlinks 1 active 65535 65535 yes 32768 1 65 up 1 2 active 65535 65535 yes 32768 1 65 up 1 3 active 65535 65535 individual 32768 down 1 4 active 65535 65535 yes 32768 1 65 up 1 5 active 65535 65535 yes 32768 1 65 up 1 6 active 65535 65535 yes 32768 1 65 up 1 7 active 65535 65535 yes 32768 1 65 up 1 8 active 65535 65535 yes 32768 1 65 up 1 9 active 1000 1000 suspended 32768 down 1 10 active 1000 1000 suspended 32768 down 1 (*) LACP PortChannel is statically bound to the admin key LACP dump includes the following information for each port in the G8332: mode Displays the port’s LACP mode (active, passive or off). adminkey Displays the value of the port’s adminkey. operkey Shows the value of the port’s operational key. selected Indicates whether the port has been selected to be part of a Link Aggregation Group. prio Shows the value of the port priority. aggr Displays the aggregator associated with each port. trunk ...
Page 62
A monitor port’s Failover status is Operational only if all the following conditions hold true: Port link is up. If Spanning‐Tree is enabled, the port is in the Forwarding state. If the port is a member of an LACP Link Aggregation Group (LAG), the port is aggregated. If any of these conditions are not true, the monitor port is considered to be failed. A control port is considered to be operational if the monitor trigger state is Up. Even if a port’s link status is Down, Spanning‐Tree status is Blocking, and the LACP status is Not Aggregated, from a teaming perspective the port status is Operational, since the trigger is Up. A control port’s status is displayed as Failed only if the monitor trigger state is Down. G8332 Command Reference for ENOS 8.4...
LLDP Information The following commands display LLDP information. Table 25. LLDP Information Options Command Syntax and Usage show lldp Displays the current Link Layer Discovery Protocol (LLDP) configuration. Command mode: All show lldp information Displays all LLDP information. Command mode: All show lldp port [<port alias or number>] Displays LLDP information for all ports or a specific port. Command mode: All show lldp port <port alias or number> tlv evb Displays Edge Virtual Bridge (EVB) type‐length‐value (TLV) information for the specified port. Command mode: All show lldp receive Displays information about the LLDP receive state machine. Command mode: All show lldp remotedevice [<1‐256>|detail] Displays information received from LLDP‐capable devices. For more information, see page Command mode: All show lldp remotedevice port <port alias or number> Displays information received from LLDP‐capable devices for a specific port. A list of ports needs to be delimited by ʹ,ʹ and a range of ports delimited by ʹ‐ʹ. Command mode: All show lldp transmit Displays information about the LLDP transmit state machine. Command mode: All G8332 Command Reference for ENOS 8.4...
1 | 2 | 00 00 c9 e5 47 e3 | 0000c9e547e3 | | NnTB 2 | 3 | 00 90 fa 75 0e c5 | 0090fa750ec5 | | NB 14 | 4 | a8 97 dc d1 f8 00 | 60 | | NB 14 | 5 | a8 97 dc d1 f8 00 | 60 | | NnTB 15 | 6 | a8 97 dc d1 f8 00 | 80 | | NB 15 | 7 | a8 97 dc d1 f8 00 | 80 | | NnTB 18 | 8 | 00 90 fa 3d 48 49 | 0090fa3d4849 | | NB MGT | 9 | 74 99 75 c5 08 00 | 6 | G805254 | NB LLDP remote device information provides a summary of information about remote devices connected to the switch. To view detailed information about a device, as shown below, follow the command with the index number of the remote device. To view detailed information about all devices, use the detail option. Local Port Alias: 1 Remote Device Index : 15 Remote Device TTL : 99 Remote Device RxChanges : false Chassis Type : Mac Address Chassis Id : 0018b1331d00 Port Type : Locally Assigned Port Id : 23 Port Description : 23 System Name : System Description : Lenovo RackSwitch G8296, Lenovo Ne