Page 1 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 NETGEAR, Inc. 350 Plumeria Dr. San Jose, CA 95124 USA 202-10770-01 November 2010...
Page 2: Statement Of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
Page 3 Product and Publication Details Model Number: XSM7224S Publication Date: November 2010 Product Family: managed switch Product Name: ProSafe XSM7224S Managed Stackable Switch Home or Business Product: Business Language: English Publication Part Number: 202-10770-01 Publication Version Number v1.0, November 2010...
Page 4 v1.0, November 2010...
Page 5: Table Of Contents
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Contents About This Manual Audience ........................... ix About the Software ......................ix Scope .......................... x Product Concept ......................x Chapter 1 Using the Command-Line Interface Command Syntax ......................1-1 Command Conventions ....................1-2 Common Parameter Values ...................1-3 Unit/Slot/Port Naming Convention ..................1-3 Using the “No”...
Page 6: Prosafe Xsm7224S Managed Stackable Switch Cli Manual, Software Version
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 VLAN Commands ......................3-32 Double VLAN Commands ....................3-47 Voice VLAN Commands ....................3-50 Provisioning (IEEE 802.1p) Commands ...............3-52 Protected Ports Commands ..................3-53 Private Group Commands ....................3-56 GARP Commands ......................3-58 GVRP Commands ......................3-61 GMRP Commands .......................3-63 Port-Based Network Access Control Commands ............3-66 Storm-Control Commands ....................3-82...
Page 7 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Chapter 5 Quality of Service (QoS) Commands Class of Service (CoS) Commands ................5-2 Differentiated Services (DiffServ) Commands ..............5-9 DiffServ Class Commands ...................5-11 DiffServ Policy Commands ...................5-20 DiffServ Service Commands ..................5-25 DiffServ Show Commands ...................5-27 MAC Access Control List (ACL) Commands ..............5-33 IP Access Control List (ACL) Commands ..............5-38...
Page 8 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Secure Shell (SSH) Commands ...................7-16 Management Security Commands ................7-19 Hypertext Transfer Protocol (HTTP) Commands ............7-20 Access Commands .......................7-28 User Account Commands .....................7-29 SNMP Commands ......................7-47 RADIUS Commands .....................7-59 TACACS+ Commands ....................7-73 Configuration Scripting Commands ................7-77 Pre-login Banner and System Prompt Commands ............7-79 Switch Database Management (SDM) Templates ............7-80...
Page 9: About This Manual
About This Manual This document describes command-line interface (CLI) commands you use to view and configure XSM7224S software. You can access the CLI by using a direct connection to the serial port or by using telnet or SSH over a remote network connection. Note: This document contains both standalone and stacking commands.
Page 10: Scope
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Scope The software encompasses both hardware and software support. The software is partitioned to run in the following processors: • CPU – This code runs the networking device management portfolio and controls the overall networking device hardware.
Page 11 • Scope. This manual is written for the XSM7224S. Product Version ProSafe XSM7224S Managed Stackable Switch Manual Publication Date November 2010 Note: Product updates are available on the NETGEAR, Inc. website at http://kbserver.netgear.com v1.0, November 2010...
Page 12: How To Print This Manual
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 How to Print This Manual To print this manual, your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at http://www.adobe.com.
Page 13: Using The Command-Line Interface
Chapter 1 Using the Command-Line Interface The command-line interface (CLI) is a text-based way to manage and monitor the system. You can access the CLI by using a direct serial connection or by using a remote logical connection with telnet or SSH. This chapter describes the CLI syntax, conventions, and modes.
Page 14: Command Conventions
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 • network parms is the command name. • <ipaddr> and <netmask> are parameters and represent required values that you must enter after you type the command keywords. • [gateway] is an optional parameter, so you are not required to enter a value in place of the parameter.
Page 15: Common Parameter Values
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Common Parameter Values Parameter values might be names (strings) or numbers.To use spaces as part of a name parameter, enclose the name value in double quotes. For example, the expression “System Name with Spaces”...
Page 16: Using The "No" Form Of A Command
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The slot number has two uses. In the case of physical ports, it identifies the card containing the ports. In the case of logical and CPU ports it also identifies the type of interface or port. Table 3.
Page 17: Managed Switch Modules
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 shutdown configuration command reverses the shutdown of an interface. Use the command without the keyword no to re-enable a disabled feature or to enable a feature that is disabled by default.
Page 18 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 5. CLI Command Modes Command Mode Prompt Mode Description User EXEC Contains a limited set of commands to view Switch> basic system information. Privileged EXEC Allows you to issue any EXEC command, enter Switch# the VLAN mode, or enter the Global Configuration mode.
Page 19 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 5. CLI Command Modes (continued) Command Mode Prompt Mode Description TACACS Config Switch (Tacacs)# Contains commands to configure properties for the TACACS servers. DHCP Pool Switch (Config dhcp-pool)# Contains the DHCP server IP address pool Config configuration commands.
Page 20 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 6. CLI Mode Access and Exit (continued) Command Mode Access Method Exit or Access Previous Mode Class-Map From the Global Config mode, To exit to the Global Config mode, enter exit. To Config enter return to the Privileged EXEC mode, enter Ctrl-...
Page 21: Command Completion And Abbreviation
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 6. CLI Mode Access and Exit (continued) Command Mode Access Method Exit or Access Previous Mode DHCPv6 Pool From the Global Config mode, To exit to the Global Config mode, enter exit. To Config enter return to the Privileged EXEC mode, enter Ctrl-...
Page 22: Cli Line-Editing Conventions
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 7. CLI Error Messages Message Text Description Command not found / Incomplete Indicates that you did not enter the required keywords or values. command. Use ? to list commands. Ambiguous command Indicates that you did not enter enough letters to uniquely identify the command.
Page 23: Using Cli Help
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8. CLI Editing Conventions (continued) Key Sequence Description Exit Go to next lower command prompt List available commands, keywords, or parameters Using CLI Help Enter a question mark (?) at the command prompt to display the commands available in the current mode.
Page 24: Accessing The Cli
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 (switch) #show m? mac-addr-table mac-address-table monitor Accessing the CLI You can access the CLI by using a direct console connection or by using a telnet or SSH connection from a remote management host. For the initial connection, you must use a direct connection to the console port.
Page 25: Stacking Commands
Chapter 2 Stacking Commands The Stacking Commands chapter includes the following sections: • “Dedicated Port Stacking” on page 2-1 • “Front Panel Stacking Commands” on page 2-10 • “Non-Stop Forwarding Commands” on page 2-12 • “Stack Firmware Synchronization Commands” on page 2-14 Note: The commands in this chapter are in two functional groups: •...
Page 26 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format stack Mode Global Config member This command configures a switch. The <unit> is the switch identifier of the switch to be added/removed from the stack. The <switchindex> is the index into the database of the supported switch types, indicating the type of the switch being preconfigured.
Page 27 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 active Primary Management Unit fails. The switch priority defaults to the hardware management preference value 1. Switches that do not have the hardware capability to become the Primary Management Unit are not eligible for management. Default enabled Format...
Page 28 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 nvram:startup-config (in Privileged EXEC) command before performing the stack move. A stack move causes all routes and layer 2 addresses to be lost. This command is executed on the Primary Management Unit. The system prompts you to confirm the management move. Format movemanagement <fromunit>...
Page 29 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 set slot disable This command configures the administrative mode of the slot(s). If you specify [all], the command is applied to all slots, otherwise the command is applied to the slot identified by <unit/slot>.
Page 30 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Use this command when installing or removing cards. If a card or other module is present in this slot, the power mode is applied to the contents of the slot. If the slot is empty, the power mode is applied to any card inserted into the slot.
Page 31: Show Supported Cardtype
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Slot The slot identifier in a <unit/slot> format. Slot Status The slot is empty, full, or has encountered an error Admin State The slot administrative mode is enabled or disabled. Power State The slot power mode is enabled or disabled.
Page 32: Show Switch
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 If you supply a value for <cardindex>, the following output appears: Term Definition Card Type The 32-bit numeric card type for the supported card. Model Identifier The model identifier for the supported card type. Card Description The description for the supported card type.
Page 33: Show Supported Switchtype
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 When you specify a value for <unit>, the following information appears: Term Definition Management Indicates whether the switch is the Primary Management Unit, a stack member, or the Status status is unassigned. Hardware The hardware management preference of the switch.
Page 34: Front Panel Stacking Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 If you do not supply a value for <switchindex>, the following output appears: Term Definition Switch Index (SID) The index into the database of supported switch types. This index is used when preconfiguring a member to be added to the stack.
Page 35 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show stack-port This command displays summary stack-port information for all interfaces. Format show stack-port Mode Privileged EXEC Term Definition QOS Mode Front Panel Stacking QOS Mode for all Interfaces. For Each Interface: Term Definition Unit...
Page 36: Non-Stop Forwarding Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Tx Total Error Platform-specific number of total transmit errors since power-up. Rx Data Rate Receive data rate in megabits per second on the stacking port. Rx Error Rate Platform-specific number of receive errors per second.
Page 37 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 This command enables non-stop forwarding. Default Enabled Format Mode Stack Global Config no nsf This command disables non-stop forwarding. Format no nsf Mode Stack Global Config show nsf This command shows the status of non-stop forwarding. Format show nsf Mode...
Page 38: Stack Firmware Synchronization Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show checkpoint statistics This command displays the statistics for the checkpointing process. Format show checkpoint statistics Mode Privileged EXEC Example: (Switch)#show checkpoint statistics Messages Checkpointed.....6708 Bytes Checkpointed......894305 Time Since Counters Cleared....3d 01:05:09 Checkpoint Message Rate....0.025 msg/sec Last 10-second Message Rate....0 msg/sec Highest 10-second Message Rate....8 msg/sec...
Page 39 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 • Delete image • Update bootcode • Clear config A reboot operation is allowed during stack firmware synchronization. If the firmware is corrupted during stack firmware synchronization, manual intervention by the administrator is required to restore the switch to working condition.
Page 40 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 boot auto-copy-sw trap This command sends SNMP traps related to stack firmware synchronization. Default Enabled Format boot auto-copy-sw trap Mode Privileged EXEC no boot auto-copy-sw trap This command disables sending SNMP traps related to stack firmware synchronization. Format no boot auto-copy-sw trap Mode...
Page 41: Show Auto-Copy-Sw
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show auto-copy-sw This command displays the stack firmware synchronization configuration status. Format show auto-copy-sw Mode Privileged EXEC Example: (Switch)#show auto-copy-sw Stack Firmware Synchronization Synchronization: Enabled SNMP Trap status: Enabled Allow Downgrade: Enabled Stacking Commands 2-17 v1.0, November 2010...
Page 42: Switching Commands
Chapter 3 Switching Commands This chapter describes the switching commands available in the managed switch CLI. The Switching Commands chapter includes the following sections: • “Port Configuration Commands” on page 3-2 • “show port description” on page 3-9 • “VLAN Commands” on page 3-32 •...
Page 43: Port Configuration Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 • “LLDP-MED Commands” on page 3-172 • “Denial of Service Commands” on page 3-183 • “MAC Database Commands” on page 3-195 • “ISDP Commands” on page 3-197 • “Priority-Based Flow control commands” on page 3-203 Warning: The commands in this chapter are in one of three functional groups: •...
Page 44 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 interface range This command gives you access to a range of port interfaces, allowing the same port configuration to be applied to a set of ports. Format interface range <unit/slot/port>-<unit/slot/port> Mode Global Config interface vlan...
Page 45 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format auto-negotiate Mode Interface Config no auto-negotiate This command disables automatic negotiation on a port. Note: Automatic sensing is disabled when automatic negotiation is disabled. auto-negotiate all Format no auto-negotiate Mode Interface Config This command enables automatic negotiation on all ports.
Page 46 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 description Use this command to create an alpha-numeric description of the port. Format description <description> Mode Interface Config Use the mtu command to set the maximum transmission unit (MTU) size, in bytes, for frames that ingress or egress the interface.
Page 47 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 shutdown This command disables a port. Note: You can use the shutdown command on physical and port-channel (LAG) interfaces, but not on VLAN routing interfaces. Default enabled Format shutdown Mode Interface Config no shutdown This command enables a port.
Page 48 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no shutdown all This command enables all ports. Format no shutdown all Mode Global Config speed This command sets the speed and duplex setting for the interface. Format speed {<100 | 10> <half-duplex | full-duplex>} Mode Interface Config Acceptable...
Page 49: Show Port
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show port This command displays port information. Format show port {<unit/slot/port> | all} Mode Privileged EXEC Term Definition Interface Valid slot and port number separated by forward slashes. Type If not blank, this field indicates that this port is a special type of port. The possible values are: •...
Page 50: Show Port Description
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Group Name The group name of an entry in the Protocol-based VLAN table. Group ID The group identifier of the protocol group. Protocol(s) The type of protocol(s) for this group. VLAN The VLAN associated with this Protocol Group.
Page 51 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Physical Mode Either “Auto” or fixed speed and duplex mode. Physical Status The actual speed and duplex mode. Link Status Whether the link is Up or Down. Loop Status Whether the port is in loop state or not.
Page 52: Spanning Tree Protocol (Stp) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Spanning Tree Protocol (STP) Commands This section describes the commands you use to configure Spanning Tree Protocol (STP). STP helps prevent network loops, duplicate messages, and network instability. spanning-tree This command sets the spanning-tree operational mode to enabled. Default enabled Format...
Page 53 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default enabled Format no spanning-tree bpdufilter default Mode Global Config spanning-tree bpduflood Use this command to enable BPDU Flood on the interface. Default disabled Format spanning-tree bpduflood Mode Interface Config no spanning-tree bpduflood Use this command to disable BPDU Flood on the interface.
Page 54 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no spanning-tree bpduguard Mode Global Config spanning-tree bpdumigrationcheck Use this command to force a transmission of rapid spanning tree (RSTP) and multiple spanning tree (MSTP) BPDUs. Use the <unit/slot/port> parameter to transmit a BPDU from a specified interface, or use the all keyword to transmit BPDUs from all interfaces.
Page 55 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 spanning-tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using. The Configuration Identifier Revision Level is a number in the range of 0 to 65535.
Page 56 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 spanning-tree forceversion This command sets the Force Protocol Version parameter to a new value. Default 802.1s Format spanning-tree forceversion <802.1d | 802.1s | 802.1w> Mode Global Config • Use 802.1d to specify that the switch transmits ST BPDUs rather than MST BPDUs (IEEE 802.1d functionality supported).
Page 57 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no spanning-tree forward-time This command sets the Bridge Forward Delay parameter for the common and internal spanning tree to the default value. Format no spanning-tree forward-time Mode Global Config spanning-tree guard This command selects whether loop guard or root guard is enabled on an interface.
Page 58 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no spanning-tree tcnguard This command disables the propagation of received topology change notifications and topology changes to other ports. Format no spanning-tree tcnguard Mode Global Config spanning-tree max-age This command sets the Bridge Max Age parameter to a new value for the common and internal spanning tree.
Page 59 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no spanning-tree max-hops This command sets the Bridge Max Hops parameter for the common and internal spanning tree to the default value. Format no spanning-tree max-hops Mode Global Config spanning-tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the common and internal spanning tree.
Page 60 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no spanning-tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance, or in the common and internal spanning tree to the respective default values. If you specify an <mstid>...
Page 61 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no spanning-tree mst instance This command removes a multiple spanning tree instance from the switch and reallocates all VLANs allocated to the deleted instance to the common and internal spanning tree. The parameter <mstid>...
Page 62 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 spanning-tree mst vlan This command adds an association between a multiple spanning tree instance and one or more VLANs so that the VLAN(s) are no longer associated with the common and internal spanning tree. The parameter <mstid>...
Page 63 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 spanning-tree port mode all This command sets the Administrative Switch Port State for all ports to enabled. Default disabled Format spanning-tree port mode all Mode Global Config no spanning-tree port mode all This command sets the Administrative Switch Port State for all ports to disabled.
Page 64 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 spanning-tree bpduforwarding Normally a switch will not forward Spanning Tree Protocol (STP) BPDU packets if STP is disabled. However, if in some network setup, the user wishes to forward BDPU packets received from other network devices, this command can be used to enable the forwarding.
Page 65: Show Spanning-Tree Brief
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Topology Number of times changed. Change Count Topology Boolean value of the Topology Change parameter for the switch indicating if a topology Change change is in progress on any port assigned to the common and internal spanning tree. Designated The bridge identifier of the root bridge.
Page 66: Show Spanning-Tree Interface
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Bridge Priority Configured value. Bridge Identifier The bridge identifier for the selected MST instance. It is made up using the bridge priority and the base MAC address of the bridge. Bridge Max Age Configured value.
Page 67: Show Spanning-Tree Mst Port Detailed
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition STP BPDUs Spanning Tree Protocol Bridge Protocol Data Units sent. Transmitted STP BPDUs Received Spanning Tree Protocol Bridge Protocol Data Units received. RSTP BPDUs Rapid Spanning Tree Protocol Bridge Protocol Data Units sent. Transmitted RSTP BPDUs Received Rapid Spanning Tree Protocol Bridge Protocol Data Units received.
Page 68 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Designated The Identifier of the designated root for this port. Root Root Path Cost The path cost to get to the root bridge for this instance. The root path cost is zero if the bridge is the root bridge for that instance.
Page 69 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition External Port The cost to get to the root bridge of the CIST across the boundary of the region. This Path Cost means that if the port is a boundary port for an MSTP region, then the external path cost is used.
Page 70 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show spanning-tree mst port summary This command displays the settings of one or all ports within the specified multiple spanning tree instance. The parameter <mstid> indicates a particular MST instance. The parameter {<unit/ slot/port>...
Page 71: Show Spanning-Tree Mst Summary
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition STP Mode Indicates whether spanning tree is enabled or disabled on the port. Type Currently not used. STP State The forwarding state of the port in the specified spanning tree instance. Port Role The role of the specified port within the spanning tree.
Page 72: Show Spanning-Tree Summary
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command. Format show spanning-tree summary Mode • Privileged EXEC •...
Page 73: Vlan Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition VLAN Identifier The VLANs associated with the selected MST instance. Associated Identifier for the associated multiple spanning tree instance or “CST” if associated with Instance the common and internal spanning tree. VLAN Commands This section describes the commands you use to configure VLAN settings.
Page 74 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 vlan This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN). The vlan-list contains VlanId's in range <1- 4093>.
Page 75 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no vlan acceptframe This command resets the frame acceptance mode for the interface to the default value. Format no vlan acceptframe Mode Interface Config vlan ingressfilter This command enables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
Page 76 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 vlan name This command changes the name of a VLAN. The name is an alphanumeric string of up to 32 characters, and the ID is a valid VLAN identification number. ID range is 1-4093. Default •...
Page 77 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 vlan participation all This command configures the degree of participation for all interfaces in a VLAN. The ID is a valid VLAN identification number. Format vlan participation all {exclude | include | auto} <1-4093> Mode Global Config You can use the following participation options:...
Page 78 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no vlan port acceptframe all This command sets the frame acceptance mode for all interfaces to Admit All. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port.
Page 79 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no vlan port pvid all This command sets the VLAN ID for all interfaces to 1. Format no vlan port pvid all Mode Global Config vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames.
Page 80 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no vlan protocol group This command removes a protocol group. Format no vlan protocol group <1-128> Mode Global Config vlan protocol group name This command assigns a name to a protocol-based VLAN groups. The groupname variable can be a character string of 0 to 16 characters.
Page 81 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no vlan protocol group add protocol This command removes the <protocol> from this protocol-based VLAN group that is identified by this <groupid>. The possible values for protocol are ip, arp, and ipx. Format no vlan protocol group add protocol <groupid>...
Page 82 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default none Format protocol vlan group <groupid> Mode Interface Config no protocol vlan group This command removes the interface from this protocol-based VLAN group that is identified by this <groupid>. Format no protocol vlan group <groupid>...
Page 83 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 vlan pvid This command changes the VLAN ID per interface. Default Format vlan pvid <1-4093> Mode Interface Config no vlan pvid This command sets the VLAN ID per interface to 1. Format no vlan pvid Mode...
Page 84 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 vlan association subnet This command associates a VLAN to a specific IP-subnet. Format vlan association subnet <ipaddr> <netmask> <1-4093> Mode VLAN Config no vlan association subnet This command removes association of a specific IP-subnet to a VLAN. Format no vlan association subnet <ipaddr>...
Page 85: Show Vlan
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show vlan This command displays a list of all configured VLAN Format show vlan Mode • Privileged EXEC • User EXEC Term Definition VLAN ID There is a VLAN Identifier (VID) associated with each VLAN. The range of the VLAN ID is 1 to 4093.
Page 86: Show Vlan Brief
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Current The degree of participation of this port in this VLAN. The permissible values are: • Include - This port is always a member of this VLAN. This is equivalent to registration fixed in the IEEE 802.1Q standard.
Page 87: Show Vlan Port
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show vlan port This command displays VLAN port information. Format show vlan port {<unit/slot/port> | all} Mode • Privileged EXEC • User EXEC Term Definition Interface Valid slot and port number separated by forward slashes. It is possible to set the parameters for all ports by using the selectors on the top line.
Page 88: Double Vlan Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition IP Subnet The IP address assigned to each interface. IP Mask The subnet mask. VLAN ID There is a VLAN Identifier (VID) associated with each VLAN. show vlan association mac This command displays the VLAN associated with a specific configured MAC address.
Page 89 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default vman Format dvlan-tunnel ethertype {802.1Q | vman | custom} [0-65535] Mode Global Config mode dot1q-tunnel This command is used to enable Double VLAN Tunneling on the specified interface. Default disabled Format mode dot1q-tunnel...
Page 90 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no mode dvlan-tunnel This command is used to disable Double VLAN Tunneling on the specified interface. By default, Double VLAN Tunneling is disabled. Format no mode dvlan-tunnel Mode Interface Config show dot1q-tunnel Use this command without the optional parameters to display all interfaces enabled for Double VLAN Tunneling.
Page 91: Voice Vlan Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format show dvlan-tunnel [interface {<unit/slot/port> | all}] Mode • Privileged EXEC • User EXEC Term Definition Interface Valid slot and port number separated by forward slashes. Mode The administrative mode through which Double VLAN Tunneling can be enabled or disabled.
Page 92 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no voice vlan (Global Config) Use this command to disable the Voice VLAN capability on the switch. Format no voice vlan Mode Global Config voice vlan (Interface Config) Use this command to enable the Voice VLAN capability on the interface. Default disabled Format...
Page 93: Provisioning (Ieee 802.1P) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default trust Format voice vlan data priority {untrust | trust} Mode Interface Config show voice vlan Format show voice vlan [interface {<unit/slot/port> | all}] Mode Privileged EXEC When the interface parameter is not specified, only the global mode of the Voice VLAN is displayed.
Page 94: Protected Ports Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 vlan port priority all This command configures the port priority assigned for untagged packets for all ports presently plugged into the device. The range for the priority is 0-7. Any subsequent per port configuration will override this configuration setting.
Page 95 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 switchport protected (Global Config) Use this command to create a protected port group. The <groupid> parameter identifies the set of protected ports. Use the name <name> pair to assign a name to the protected port group. The name can be up to 32 alphanumeric characters long, including blanks.
Page 96: Show Switchport Protected
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format switchport protected <groupid> Mode Interface Config no switchport protected (Interface Config) Use this command to configure a port as unprotected. The groupid parameter identifies the set of protected ports to which this interface is assigned. Format no switchport protected <groupid>...
Page 97: Private Group Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Name A string associated with this group as a convenience. It can be up to 32 alphanumeric characters long, including blanks. The default is blank. This field is optional. Protected port Indicates whether the interface is protected or not.
Page 98 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no switchport private group This command is used to remove the specified port from the given private group. Format no switchport private-group [<privategroup-name>|<privategroup-id>] Mode Interface Config private-group name This command is used to create a private group with name <private-group-name>. The name string can be up to 24 bytes of non-blank characters.
Page 99: Garp Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show private-group This command displays the private groups’ information. Format show private-groupname [<private-group-name>|<private-group- id>|port <unit/slot/port>] Mode Privileged EXEC Term Definition Interface Valid slot and port number separated by forward slashes. The VLAN ID associated with the port Port VLANID Private Group...
Page 100 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default Format set garp timer join <10-100> Mode • Interface Config • Global Config no set garp timer join This command sets the GVRP join time (for one or all ports and per GARP) to the default and only has an effect when GVRP is enabled.
Page 101 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no set garp timer leave Mode • Interface Config • Global Config set garp timer leaveall This command sets how frequently Leave All PDUs are generated. A Leave All PDU indicates that all registrations will be unregistered.
Page 102: Gvrp Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition GMRP Admin Mode The administrative mode of GARP Multicast Registration Protocol (GMRP) for the system. GVRP Admin Mode The administrative mode of GARP VLAN Registration Protocol (GVRP) for the system.
Page 103 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 set gvrp interfacemode This command enables GVRP on a single port (Interface Config mode) or all ports (Global Config mode). Default disabled Format set gvrp interfacemode Mode • Interface Config •...
Page 104: Gmrp Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Leave Timer The period of time to wait after receiving an unregister request for an attribute before deleting the attribute. Current attributes are a VLAN or multicast group. This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service.
Page 105 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no set gmrp adminmode This command disables GARP Multicast Registration Protocol (GMRP) on the system. Format no set gmrp adminmode Mode Privileged EXEC set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a single interface (Interface Config mode) or all interfaces (Global Config mode).
Page 106: Show Gmrp Configuration
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show gmrp configuration This command displays Generic Attributes Registration Protocol (GARP) information for one or all interfaces. Format show gmrp configuration {<unit/slot/port> | all} Mode • Privileged EXEC • User EXEC Term Definition Interface...
Page 107: Port-Based Network Access Control Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Mac Address A unicast MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB.
Page 108 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dot1x guest-vlan This command configures VLAN as guest vlan on a per port basis. The command specifies an active VLAN as an IEEE 802.1x guest VLAN. The range is 1 to the maximum VLAN ID supported by the platform.
Page 109 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format dot1x max-req <count> Mode Interface Config no dot1x max-req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request/Identity frame before timing out the supplicant. Format no dot1x max-req Mode...
Page 110 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 controlled port mode to reflect the outcome of the authentication exchanges between the supplicant, authenticator and the authentication server. If the option is specified, then mac-based MAC-based dot1x authentication is enabled on the port. Default auto Format...
Page 111 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no dot1x port-control all Mode Global Config dot1x re-authenticate This command begins the re-authentication sequence on the specified port. This command is only valid if the control mode for the specified port is “auto” or “mac-based”. If the control mode is not “auto”...
Page 112 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default disabled Format dot1x system-auth-control Mode Global Config no dot1x system-auth-control This command is used to disable the dot1x authentication support on the switch. Format no dot1x system-auth-control Mode Global Config dot1x timeout This command sets the value, in seconds, of the timer used by the authenticator state machine on this port.
Page 113 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default • guest-vlan-period: 90 seconds • reauth-period: 3600 seconds • quiet-period: 60 seconds • tx-period: 30 seconds • supp-timeout: 30 seconds • server-timeout: 30 seconds Format dot1x timeout {{guest-vlan-period <seconds>} |{reauth-period <seconds>} | {quiet-period <seconds>} | {tx-period <seconds>} | {supp-timeout <seconds>} | {server-timeout <seconds>}} Mode...
Page 114 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no dot1x unauthenticated-vlan Mode Interface Config dot1x user This command adds the specified user to the list of users with access to the specified port or all ports. The <user> parameter must be a configured user. Format dot1x user <user>...
Page 115 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dot1x dynamic-vlan enable Use this command to enable the switch to create VLANs dynamically when a RADIUS assigned VLAN does not exist in the switch. Format dot1x dynamic-vlan enable Mode Global Config Default Disabled...
Page 116: Show Dot1X Authentication-History
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show dot1x authentication-history This command displays 802.1X authentication events and information during successful and unsuccessful Dot1x authentication process for all interfaces or the specified interface. Use the optional keywords to display only failure authentication events in summary or in detail. Format show dot1x authentication-history {unit/slot/port | all} [failedauth- only] [detail]...
Page 117 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 _____________________ Console Console_Default Console_Default Telnet Network_Default Network_Default SSH Network_Default Network_Default http : Local https : Local dot1x : show dot1x This command is used to show a summary of the global dot1x configuration, summary information of the dot1x configuration for a specified port or all ports, the detailed dot1x configuration for a specified port and the dot1x statistics for a specified port - depending on the tokens used.
Page 118 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Control Mode The configured control mode for this port. Possible values are force-unauthorized | force- authorized | auto | mac-based | authorized | unauthorized. Operating The control mode under which this port is operating. Possible values are authorized | Control Mode unauthorized.
Page 119 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Guest VLAN The time in seconds for which the authenticator waits before authorizing and placing the Period port in the Guest VLAN, if no EAPOL packets are detected on that port. Supplicant The timer used by the authenticator state machine on this port to timeout the supplicant.
Page 120 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 command will display the following MAC- show dot1x detail <unit/slot/port> based dot1x fields if the port-control mode for that specific port is MAC-based. For each client authenticated on the port, the command will display show dot1x detail <unit/slot/port>...
Page 121: Show Dot1X Clients
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition EAP Response/ The number of EAP response/identity frames that have been received by this Id Frames authenticator. Received EAP Response The number of valid EAP response frames (other than resp/id frames) that have been Frames received by this authenticator.
Page 122: Show Dot1X Users
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Interface The physical port to which the supplicant is associated. User Name The user name used by the client to authenticate to the server. Supplicant MAC The supplicant device MAC address. Address Session Time The time since the supplicant is logged on.
Page 123: Storm-Control Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Storm-Control Commands This section describes commands you use to configure storm-control and view storm-control configuration information. A traffic storm is a condition that occurs when incoming packets flood the LAN, which creates performance degradation in the network. The Storm-Control feature protects against this condition.
Page 124 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default enabled Format storm-control broadcast Mode Interface Config no storm-control broadcast Use this command to disable broadcast storm recovery mode for a specific interface. Format no storm-control broadcast Mode Interface Config storm-control broadcast level Use this command to configure the broadcast storm recovery threshold for an interface as a percentage of link speed and enable broadcast storm recovery.
Page 125 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 storm-control broadcast rate Use this command to configure the broadcast storm recovery threshold for an interface in packets per second. If the mode is enabled, broadcast storm recovery is active, and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold, the traffic is dropped.
Page 126 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no storm-control broadcast Mode Global Config storm-control broadcast level (Global) This command configures the broadcast storm recovery threshold for all interfaces as a percentage of link speed and enables broadcast storm recovery. If the mode is enabled, broadcast storm recovery is active, and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped.
Page 127 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format storm-control broadcast rate <0-14880000> Mode Global Config no storm-control broadcast rate This command sets the broadcast storm recovery threshold to the default value for all interfaces and disables broadcast storm recovery. Format no storm-control broadcast rate Mode...
Page 128 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 storm-control multicast level This command configures the multicast storm recovery threshold for an interface as a percentage of link speed and enables multicast storm recovery mode. If the mode is enabled, multicast storm recovery is active, and if the rate of L2 multicast traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped.
Page 129 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no storm-control multicast rate Mode Interface Config storm-control multicast (Global) This command enables multicast storm recovery mode for all interfaces. If the mode is enabled, multicast storm recovery is active, and if the rate of L2 multicast traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped.
Page 130 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no storm-control multicast level This command sets the multicast storm recovery threshold to the default value for all interfaces and disables multicast storm recovery. Format no storm-control multicast level Mode Global Config storm-control multicast rate (Global) Use this command to configure the multicast storm recovery threshold for all interfaces in packets...
Page 131 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default disabled Format storm-control unicast Mode Interface Config no storm-control unicast This command disables unicast storm recovery mode for an interface. Format no storm-control unicast Mode Interface Config storm-control unicast level This command configures the unicast storm recovery threshold for an interface as a percentage of link speed, and enables unicast storm recovery.
Page 132 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 storm-control unicast rate Use this command to configure the unicast storm recovery threshold for an interface in packets per second. If the mode is enabled, unicast storm recovery is active, and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold, the traffic is dropped.
Page 133 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no storm-control unicast Mode Global Config storm-control unicast level (Global) This command configures the unicast storm recovery threshold for all interfaces as a percentage of link speed, and enables unicast storm recovery. If the mode is enabled, unicast storm recovery is active, and if the rate of unknown L2 unicast (destination lookup failure) traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped.
Page 134 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no storm-control unicast rate This command sets the multicast storm recovery threshold to the default value for an interface and disables multicast storm recovery. Format no storm-control unicast rate Mode Global Config storm-control flowcontrol This command enables 802.3x flow control for the switch and only applies to full-duplex mode...
Page 135: Port-Channel/Lag (802.3Ad) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show storm-control This command displays switch configuration information. If you do not use any of the optional parameters, this command displays global storm control configuration parameters: • Broadcast Storm Control Mode may be enabled or disabled. The factory default is disabled. •...
Page 136 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 shares traffic based upon the source and destination MAC address.Assign the port-channel (LAG) VLAN membership after you create a port-channel. If you do not assign VLAN membership, the port-channel might become a member of the management VLAN which can result in learning and switching issues.
Page 137 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 deleteport (Global Config) This command deletes all configured ports from the port-channel (LAG). The interface is a logical unit/slot/port number of a configured port-channel. To clear the port channels, see “clear port- channel”...
Page 138 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lacp collector max-delay Use this command to configure the port-channel collector max delay. The valid range of <delay> is 0-65535. Default 0x8000 Format lacp collector max-delay <delay> Mode Interface Config Note: This command is only applicable to port-channel interfaces.
Page 139 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Note: This command is only applicable to physical interfaces. no lacp actor admin key Use this command to configure the default administrative value of the key. Format no lacp actor admin key Mode Interface Config lacp actor admin state individual...
Page 140 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lacp actor admin state longtimeout Use this command to set LACP actor admin state to longtimeout. Format lacp actor admin state longtimeout Mode Interface Config Note: This command is only applicable to physical interfaces. no lacp actor admin state longtimeout Use this command to set the LACP actor admin state to short timeout.
Page 141 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no lacp actor admin state passive Use this command to set the LACP actor admin state to active. Format no lacp actor admin state passive Mode Interface Config lacp actor port priority Use this command to configure the priority value assigned to the Aggregation Port.
Page 142 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Note: This command is only applicable to physical interfaces. no lacp actor system priority Use this command to configure the priority value associated with the Actor’s SystemID. Format no lacp actor system priority Mode Interface Config lacp partner admin key...
Page 143 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lacp partner admin state individual Use this command to set LACP partner admin state to individual. Format lacp partner admin state individual Mode Interface Config Note: This command is only applicable to physical interfaces. no lacp partner admin state individual Use this command to set the LACP partner admin state to aggregation.
Page 144 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no lacp partner admin state longtimeout Use this command to set the LACP partner admin state to short timeout. Format no lacp partner admin state longtimeout Mode Interface Config Note: This command is only applicable to physical interfaces. lacp partner admin state passive Use this command to set the LACP partner admin state to passive.
Page 145 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lacp partner port id Use this command to configure the LACP partner port id. The valid range for <port-id> is 0 to 65535. Default 0x80 Format lacp partner portid <port-id> Mode Interface Config Note: This command is only applicable to physical interfaces.
Page 146 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no lacp partner port priority Use this command to configure the default LACP partner port priority. Format no lacp partner port priority Mode Interface Config lacp partner system id Use this command to configure the 6-octet MAC Address value representing the administrative value of the Aggregation Port’s protocol Partner’s System ID.
Page 147 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lacp partner system priority Use this command to configure the administrative value of the priority associated with the Partner’s System ID. The valid range for <priority> is 0 to 65535. Default Format lacp partner system priority <priority>...
Page 148 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no port-channel static This command sets the static mode on a particular port-channel (LAG) interface to the default value. This command will be executed only for interfaces of type port-channel (LAG). Format no port-channel static Mode...
Page 149 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no port lacpmode enable all This command disables Link Aggregation Control Protocol (LACP) on all ports. Format no port lacpmode enable all Mode Global Config port lacptimeout (Interface Config) This command sets the timeout on a physical interface of a particular device type (actor or partner) to either long or short timeout.
Page 150 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no port lacptimeout This command sets the timeout for all physical interfaces of a particular device type (actor or partner) back to their default values. Format no port lacptimeout {actor | partner} Mode Global Config port-channel adminmode...
Page 151 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no port-channel linktrap This command disables link trap notifications for the port-channel (LAG). The interface is a logical slot and port for a configured port-channel. The option all disables link trap notifications for all the configured port-channels.
Page 152 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Source/Destination MAC, VLAN, EtherType, and incoming port associated with the packet Source IP and Source TCP/UDP fields of the packet Destination IP and Destination TCP/UDP Port fields of the packet Source/Destination IP and source/destination TCP/UDP Port fields of the packet Enhanced Hashing Mode <unit/slot/...
Page 153 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 port-channel system priority Use this command to configure port-channel system priority. The valid range of <priority> is 0- 65535. Default 0x8000 Format port-channel system priority <priority> Mode Global Config no port-channel system priority Use this command to configure the default port-channel system priority value.
Page 154: Show Lacp Partner
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show lacp partner Use this command to display LACP partner attributes. Format show lacp partner {<unit/slot/port>|all} Mode Privileged EXEC The following output parameters are displayed. Parameter Description System Priority The administrative value of priority associated with the Partner’s System ID. System ID The value representing the administrative value of the Aggregation Port’s protocol Partner’s System ID.
Page 155 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Mbr Ports The members of this port-channel. Active Ports The ports that are actively participating in the port-channel. show port-channel This command displays the static capability of all port-channels (LAGs) on the device as well as a summary of individual port-channels.
Page 156: Port Mirroring
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Logical Valid slot and port number separated by forward slashes. Interface Port-Channel The name of this port-channel (LAG). You may enter any string of up to 15 alphanumeric Name characters.
Page 157 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 monitor session This command configures a probe port and a monitored port for monitor session (port monitoring). Use the source interface <unit/slot/port> parameter to specify the interface to monitor. Use rx to monitor only ingress packets, or use tx to monitor only egress packets. If you do not specify an {rx | tx} option, the destination port monitors both ingress and egress packets.
Page 158: Show Monitor Session
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Note: This is a stand-alone “no” command. This command does not have a “normal” form. Default enabled Format no monitor Mode Global Config show monitor session This command displays the Port monitoring information for a particular mirroring session. Note: The <session-id>...
Page 159: Static Mac Filtering
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Static MAC Filtering The commands in this section describe how to configure static MAC filtering. Static MAC filtering allows you to configure destination ports for a static multicast MAC filter irrespective of the platform.
Page 160 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The <vlanid> parameter must identify a valid VLAN. Format no macfilter <macaddr> <vlanid> Mode Global Config macfilter adddest Use this command to add the interface to the destination filter set for the MAC filter with the given <macaddr>...
Page 161 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 macfilter adddest all This command adds all interfaces to the destination filter set for the MAC filter with the given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6- byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
Page 162 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no macfilter addsrc This command removes a port from the source filter set for the MAC filter with the MAC address of <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6- byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
Page 163 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show mac-address-table static This command displays the Static MAC Filtering information for all Static MAC Filters. If you select <all>, all the Static MAC Filters in the system are displayed. If you supply a value for <macaddr>, you must also enter a value for <vlanid>, and the system displays Static MAC Filter information only for that MAC address and VLAN.
Page 164: Dhcp Snooping Configuration Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Description The text description of this multicast table entry. Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:). DHCP Snooping Configuration Commands This section describes commands you use to configure DHCP Snooping. ip dhcp snooping Use this command to enable DHCP Snooping globally.
Page 165 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip dhcp snooping vlan Use this command to disable DHCP Snooping on VLANs. Format no ip dhcp snooping vlan <vlan-list> Mode Global Config ip dhcp snooping verify mac-address Use this command to enable verification of the source MAC address with the client hardware address in the received DCHP message.
Page 166 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip dhcp snooping database write-delay Use this command to configure the interval in seconds at which the DHCP Snooping database will be persisted. The interval value ranges from 15 to 86400 seconds. Default 300 seconds Format...
Page 167 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format ip verify binding <mac-address> vlan <vlan id> <ip address> interface <interface id> Mode Global Config no ip verify binding Use this command to remove the IPSG static entry from the IPSG database. Format no ip verify binding <mac-address>...
Page 168 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip dhcp snooping log-invalid Use this command to control the logging DHCP messages filtration by the DHCP Snooping application. Default disabled Format ip dhcp snooping log-invalid Mode Interface Config no ip dhcp snooping log-invalid Use this command to disable the logging DHCP messages filtration by the DHCP Snooping application.
Page 169 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip verify source Use this command to configure the IPSG source ID attribute to filter the data traffic in the hardware. Source ID is the combination of IP address and MAC address. Normal command allows data traffic filtration based on the IP address.
Page 170: Show Ip Dhcp Snooping Binding
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Example: The following shows example CLI display output for the command. (switch) #show ip dhcp snooping DHCP snooping is Disabled DHCP snooping source MAC verification is enabled DHCP snooping is enabled on the following VLANs: 11 - 30, 40 Interface Trusted...
Page 171: Show Ip Dhcp Snooping Database
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Type Binding type; statically configured from the CLI or dynamically learned. Lease (sec) The remaining lease time for the entry. Example: The following shows example CLI display output for the command. (switch) #show ip dhcp snooping binding Total number of bindings: 2 MAC Address...
Page 172 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show ip dhcp snooping statistics Use this command to list statistics for DHCP Snooping security violations on untrusted ports. Format show ip dhcp snooping statistics Mode • Privileged EXEC • User EXEC Term Definition Interface...
Page 173 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 1/0/20 clear ip dhcp snooping binding Use this command to clear all DHCP Snooping bindings on all interfaces or on a specific interface. Format clear ip dhcp snooping binding [interface <unit/slot/port>] Mode •...
Page 174: Show Ip Source Binding
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition MAC Address If MAC address filtering is not configured on the interface, the MAC Address field is empty. If port security is disabled on the interface, then the MAC Address field displays “permit-all.”...
Page 175: Dynamic Arp Inspection Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 00:00:00:00:00:08 1.2.3.4 dhcp-snooping 1/0/1 00:00:00:00:00:09 1.2.3.4 dhcp-snooping 1/0/1 00:00:00:00:00:0A 1.2.3.4 dhcp-snooping 1/0/1 Dynamic ARP Inspection Commands Dynamic ARP Inspection (DAI) is a security feature that rejects invalid and malicious ARP packets.
Page 176 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip arp inspection validate Use this command to enable additional validation checks like source-mac validation, destination- mac validation, and ip address validation on the received ARP packets. Each command overrides the configuration of the previous command.
Page 177 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no ip arp inspection vlan vlan-list logging Mode Global Config ip arp inspection trust Use this command to configure an interface as trusted for Dynamic ARP Inspection. Default enabled Format ip arp inspection trust Mode...
Page 178 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip arp inspection limit Use this command to set the rate limit and burst interval values for an interface to the default values of 15 pps and 1 second, respectively. Format no ip arp inspection limit Mode...
Page 179 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no arp access-list Use this command to delete a configured ARP ACL. Format no arp access-list acl-name Mode Global Config permit ip host mac host Use this command to configure a rule for a valid IP address and MAC address combination used in ARP packet validation.
Page 180: Show Ip Arp Inspection Statistics
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Source MAC Displays whether Source MAC Validation of ARP frame is enabled or disabled. Validation Destination Displays whether Destination MAC Validation is enabled or disabled. MAC Validation IP Address Displays whether IP Address Validation is enabled or disabled.
Page 181 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format show ip arp inspection statistics [vlan vlan-list] Mode • Privileged EXEC • User EXEC Term Definition VLAN The VLAN ID for each displayed row. Forwarded The total number of valid ARP packets forwarded in this VLAN. Dropped The total number of not valid ARP packets dropped in this VLAN.
Page 182: Show Ip Arp Inspection Interfaces
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default none Format clear ip arp inspection statistics Mode Privileged EXEC show ip arp inspection interfaces Use this command to display the Dynamic ARP Inspection configuration on all the DAI-enabled interfaces.
Page 183: Igmp Snooping Configuration Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format show arp access-list [acl-name] Mode • Privileged EXEC • User EXEC Example: The following shows example CLI display output for the command. (Switch) #show arp access-list ARP access list H2 permit ip host 1.1.1.1 mac host 00:01:02:03:04:05 permit ip host 1.1.1.2 mac host 00:03:04:05:06:07 ARP access list H3...
Page 184 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 • Flooding of unregistered multicast data packets to all ports in the VLAN. Default disabled Format set igmp Mode • Global Config • Interface Config Format set igmp <vlanid> Mode VLAN Config no set igmp This command disables IGMP Snooping on the system, an interface or a VLAN.
Page 185 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no set igmp interfacemode This command disables IGMP Snooping on all interfaces. Format no set igmp interfacemode Mode Global Config set igmp fast-leave This command enables or disables IGMP Snooping fast-leave admin mode on a selected interface or VLAN.
Page 186 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 set igmp groupmembership-interval This command sets the IGMP Group Membership Interval time on a VLAN, one interface or all interfaces. The Group Membership Interval time is the amount of time in seconds that a switch waits for a report from a particular group on a particular interface before deleting the interface from the entry.
Page 187: Set Igmp Mcrtrexpiretime
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format set igmp maxresponse <1-25> Mode • Global Config • Interface Config Format set igmp maxresponse <vlan_id> <1-25> Mode VLAN Config no set igmp maxresponse This command sets the max response time (on the interface or VLAN) to the default value. Format no set igmp maxresponse Mode...
Page 188 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no set igmp mcrtrexpiretime This command sets the Multicast Router Present Expiration time to 0. The time is set for the system, on a particular interface or a VLAN. Format no set igmp mcrtrexpiretime Mode •...
Page 189 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no set igmp mrouter interface This command disables the status of the interface as a statically configured multicast router interface. Format no set igmp mrouter interface Mode Interface Config ip igmpsnooping unknown-multicast This command enables the filtering of unknown multicast packets to the VLAN.
Page 190 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 When the optional arguments <unit/slot/port> or <vlan_id> are not used, the command displays the following information: Term Definition Admin Mode Indicates whether or not IGMP Snooping is active on the switch. Multicast The number of multicast control frames that are processed by the CPU.
Page 191: Show Igmpsnooping Mrouter Interface
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Group The amount of time in seconds that a switch will wait for a report from a particular group Membership on a particular interface, which is participating in the VLAN, before deleting the interface Interval from the entry.This value may be configured.
Page 192: Igmp Snooping Querier Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show mac-address-table igmpsnooping This command displays the IGMP Snooping entries in the MFDB table. Format show mac-address-table igmpsnooping Mode Privileged EXEC Term Definition MAC Address A multicast MAC address for which the switch has forwarding or filtering information. The format is two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB.
Page 193 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 If a VLAN has IGMP Snooping Querier enabled and IGMP Snooping is operationally disabled on it, IGMP Snooping Querier functionality is disabled on that VLAN. IGMP Snooping functionality is re-enabled if IGMP Snooping is operational on the VLAN. Note: The Querier IP Address assigned for a VLAN takes preference over global configuration.
Page 194 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no set igmp querier query-interval Use this command to set the IGMP Querier Query Interval time to its default value. Format no set igmp querier query-interval Mode Global Config set igmp querier timer expiry Use this command to set the IGMP Querier timer expiration period.
Page 195 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no set igmp querier version Use this command to set the IGMP Querier version to its default value. Format no set igmp querier version Mode Global Config set igmp querier election participate Use this command to enable the Snooping Querier to participate in the Querier Election process when it discovers the presence of another Querier in the VLAN.
Page 196 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 When the optional argument <vlanid> is not used, the command displays the following information. Field Description Admin Mode Indicates whether or not IGMP Snooping Querier is active on the switch. Admin Version The version of IGMP that will be used while sending out the queries.
Page 197 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default disabled Format set mld Mode Global Config Interface Config Format no set mld <vlanid> Mode VLAN Mode Default disabled Format set mld fast-leave <vlanid> Mode • VLAN Mode Format no set mld fast-leave <vlanid>...
Page 198: Port Security Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no set mld mcrtexpiretime Mode • Global Config • Interface Config Default disabled Format set mld querier <address ipv6_address> Mode • Global Config Format no set mld querier address Mode •...
Page 199 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no port-security This command disables port locking for one (Interface Config) or all (Global Config) ports. Format no port-security Mode • Global Config • Interface Config port-security max-dynamic This command sets the maximum number of dynamically locked MAC addresses allowed on a specific port.
Page 200 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no port-security max-static This command sets maximum number of statically locked MAC addresses to the default value. Format no port-security max-static Mode Interface Config port-security mac-address This command adds a MAC address to the list of statically locked MAC addresses. The <vid> is the VLAN ID.
Page 201 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show port-security This command displays the port-security settings. If you do not use a parameter, the command displays the settings for the entire system. Use the optional parameters to display the settings on a specific interface or on all interfaces.
Page 202: Lldp (802.1Ab) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show port-security static This command displays the statically locked MAC addresses for port. Format show port-security static <unit/slot/port> Mode Privileged EXEC Term Definition MAC Address MAC Address of statically locked MAC. show port-security violation This command displays the source MAC address of the last packet discarded on a locked port.
Page 203 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no lldp transmit Use this command to return the local data transmission capability to the default. Format no lldp transmit Mode Interface Config lldp receive Use this command to enable the LLDP receive capability. Default enabled Format...
Page 204 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format lldp timers [interval <interval-seconds>] [hold <hold-value>] [reinit <reinit-seconds> Mode Global Config no lldp timers Use this command to return any or all timing parameters for local data transmission on ports enabled for LLDP to the default values.
Page 205 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lldp transmit-mgmt Use this command to include transmission of the local system management address information in the LLDPDUs. Default enabled Format lldp transmit-mgmt Mode Interface Config no lldp transmit-mgmt Use this command to include transmission of the local system management address information in the LLDPDUs.
Page 206 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lldp notification-interval Use this command to configure how frequently the system sends remote data change notifications. The <interval> parameter is the number of seconds to wait between sending notifications. The valid interval range is 5-3600 seconds.
Page 207: Show Lldp
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show lldp Use this command to display a summary of the current LLDP configuration. Format show lldp Mode Privileged Exec Term Definition Transmit How frequently the system transmits local data LLDPDUs, in seconds. Interval Transmit Hold The multiplier on the transmit interval that sets the TTL in local data LLDPDUs.
Page 208: Show Lldp Statistics
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show lldp statistics Use this command to display the current LLDP traffic and remote table statistics for a specific interface or for all interfaces. Format show lldp statistics {<unit/slot/port> | all} Mode Privileged Exec Term...
Page 209: Show Lldp Remote-Device
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show lldp remote-device Use this command to display summary information about remote devices that transmit current LLDP data to the system. You can show information about LLDP remote data received on all ports or on a specific port.
Page 210 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 (switch) #show lldp remote-device all LLDP Remote Device Summary Local Interface RemID Chassis ID Port ID System Name ------- ------- -------------------- ------------------ ------------------ 00:FC:E3:90:01:0F 00:FC:E3:90:01:11 00:FC:E3:90:01:0F 00:FC:E3:90:01:12 00:FC:E3:90:01:0F 00:FC:E3:90:01:13 00:FC:E3:90:01:0F 00:FC:E3:90:01:14 00:FC:E3:90:01:0F 00:FC:E3:90:03:11...
Page 211 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Port ID The port number that transmitted the LLDPDU. System Name The system name of the remote device. System Describes the remote system by identifying the system name and versions of hardware, Description operating system, and networking software supported in the device.
Page 212: Show Lldp Local-Device
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show lldp local-device Use this command to display summary information about the advertised LLDP local data. This command can display summary information or detail for each interface. Format show lldp local-device {<unit/slot/port> | all} Mode Privileged EXEC Term...
Page 213: Lldp-Med Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition System Shows which of the supported system capabilities are enabled. Capabilities Enabled Management The type of address and the specific address the local LLDP agent uses to send and Address receive information.
Page 214 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lldp med confignotification Use this command to configure all the ports to send the topology change notification. Default enabled Format lldp med confignotification Mode Interface Config no ldp med confignotification Use this command to disable notifications.
Page 215 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no lldp med transmit-tlv Use this command to remove a TLV. Format no lldp med transmit-tlv [capabilities] [network-policy] [ex-pse] [ex-pd] [location] [inventory] Mode Interface Config lldp med all Use this command to configure LLDP-MED on all the ports Format lldp med all Mode...
Page 216 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lldp med faststartrepeatcount Use this command to set the value of the fast start repeat count. [count] is the number of LLDP PDUs that will be transmitted when the product is enabled. The range is 1 to 10. Default Format lldp med faststartrepeatcount [count]...
Page 217: Show Lldp Med
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no lldp med transmit-tlv Use this command to remove a TLV. Format no lldp med transmit-tlv all [capabilities] [network-policy] [ex-pse] [ex-pd] [location] [inventory] Mode Global Config show lldp med Use this command to display a summary of the current LLDP MED configuration. Format show lldp med Mode...
Page 218: Show Lldp Med Interface
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show lldp med interface Use this command to display a summary of the current LLDP MED configuration for a specific interface. <unit/slot/port> indicates a specific physical interface. all indicates all valid LLDP interfaces.
Page 219: Show Lldp Med Local-Device Detail
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 TLV Codes: 0- Capabilities, 1- Network Policy 2- Location, 3- Extended PSE 4- Extended Pd, 5- Inventory --More-- or (q)uit (Switch) #show lldp med interface 1/0/2 Interface Link configMED operMED ConfigNotify TLVsTx --------- ------...
Page 220 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Example: The following shows example CLI display output for the command. (Switch) #show lldp med local-device detail 1/0/8 LLDP MED Local Device Detail Interface: 1/0/8 Network Policies Media Policy Application Type : voice Vlan ID: 10 Priority: 5 DSCP: 1...
Page 221: Show Lldp Med Remote-Device
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Source: local Priority: low show lldp med remote-device This command displays summary information about remote devices that transmit current LLDP MED data to the system. You can show information about LLDP remote data received on all ports or on a specific port.
Page 222: Show Lldp Med Remote-Device Detail
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show lldp med remote-device detail Use this command to display detailed information about remote devices that transmit current LLDP MED data to an interface on the system. Format show lldp med remote-device detail <unit/slot/port> Mode Privileged EXEC Term...
Page 223 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Sub Type Shows the type of location information. Location Shows the location information as a string for a given type of location id Information Device Type Shows the remote device’s PoE device type connected to this port. Available Shows the remote port’s PSE power value in tenths of a watt.
Page 224: Denial Of Service Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Software Rev: xxx xxx xxx Serial Num: xxx xxx xxx Mfg Name: xxx xxx xxx Model Name: xxx xxx xxx Asset ID: xxx xxx xxx Location Subtype: elin Info: xxx xxx xxx Extended POE Device Type: pseDevice Extended POE PSE...
Page 225 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dos-control all This command enables Denial of Service protection checks globally. Default disabled Format dos-control all Mode Global Config no dos-control all This command disables Denial of Service prevention checks globally. Format no dos-control all Mode...
Page 226 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dos-control firstfrag This command enables Minimum TCP Header Size Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having a TCP Header Size smaller then the configured value, the packets will be dropped if the mode is enabled.The default is disabled.
Page 227 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dos-control tcpflag This command enables TCP Flag Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attacks. If packets ingress having TCP Flag SYN set and a source port less than 1024 or having TCP Control Flags set to 0 and TCP Sequence Number set to 0 or having TCP Flags FIN, URG, and PSH set and TCP Sequence Number set to 0 or having TCP Flags SYN and FIN both set, the packets will be dropped if the mode is enabled.
Page 228 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no dos-control l4port This command disables L4 Port Denial of Service protections. Format no dos-control l4port Mode Global Config dos-control icmp This command enables Maximum ICMP Packet Size Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack.
Page 229 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no dos-control smacdmac This command disables Source MAC address = Destination MAC address (SMAC=DMAC) Denial of Service protection. Format no dos-control smacdmac Mode Global Config dos-control tcpport This command enables TCP L4 source = destination port number (Source TCP Port =Destination TCP Port) Denial of Service protection.
Page 230 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default disabled Format dos-control udppport Mode Global Config no dos-control udpport This command disables UDP L4 source = destination port number (Source UDP Port =Destination UDP Port) Denial of Service protection. Format no dos-control udppport Mode...
Page 231 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dos-control tcpoffset This command enables TCP Offset Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP Header Offset equal to one (1), the packets will be dropped if the mode is enabled.
Page 232 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dos-control tcpsynfin This command enables TCP SYN and FIN Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP flags SYN and FIN set, the packets will be dropped if the mode is enabled.
Page 233 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dos-control icmpv4 Format no dos-control tcpfinurgpsh Mode Global Config dos-control icmpv4 This command enables Maximum ICMPv4 Packet Size Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If ICMPv4 Echo Request (PING) packets ingress having a size greater than the configured value, the packets will be dropped if the mode is enabled.
Page 234 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no dos-control icmpv6 This command disables Maximum ICMP Packet Size Denial of Service protections. Format no dos-control icmpv6 Mode Global Config dos-control icmpfrag This command enables ICMP Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack.
Page 235 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Note: Not all messages below are available in all 7000series managed switches. Term Definition First Fragment May be enabled or disabled. The factory default is disabled. Mode Min TCP Hdr The factory default is 20.
Page 236: Mac Database Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 MAC Database Commands This section describes the commands you use to configure and view information about the MAC databases. bridge aging-time This command configures the forwarding database address aging timeout in seconds. The <seconds>...
Page 237: Show Mac-Address-Table Multicast
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show mac-address-table multicast This command displays the Multicast Forwarding Database (MFDB) information. If you enter the command with no parameter, the entire table is displayed. You can display the table entry for one MAC Address by specifying the MAC address as an optional parameter.
Page 238: Isdp Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ISDP Commands This section describes the commands you use to configure the industry standard Discovery Protocol (ISDP). isdp run This command enables ISDP on the switch. Default Enabled Format isdp run Mode Global Config no isdp run...
Page 239 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 isdp timer This command sets the period of time between sending new ISDP packets. The range is given in seconds. Default 30 seconds Format isdp timer <5-254> Mode Global Config isdp advertise-v2 This command enables the sending of ISDP version 2 packets from the device.
Page 240 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no isdp enable This command disables ISDP on the interface. Format no isdp enable Mode Interface Config clear isdp counters This command clears ISDP counters. Format clear isdp counters Mode Privileged EXEC clear isdp table This command clears entries in the ISDP table.
Page 241: Show Isdp Interface
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Device ID The Device ID advertised by this device. The format of this Device ID is characterized by the value of the Device ID Format object. Device ID Indicates the Device ID format capability of the device.
Page 242: Show Isdp Neighbors
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Device ID The device ID associated with the neighbor which advertised the information. IP Addresses The IP address(es) associated with the neighbor. Platform The hardware platform advertised by the neighbor. Interface The interface (slot/port) on which the neighbor's advertisement was received.
Page 243: Show Isdp Traffic
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Example: The following shows example CLI display output for the command. (Switch) #show isdp neighbors detail Device ID 0001f45f1bc0 Address(es): IP Address: 10.27.7.57 Capability Router Trans Bridge Switch IGMP Platform SecureStack C2 Interface 0/48...
Page 244: Priority-Based Flow Control Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition ISDP IP Address Table Full Displays the number of times a neighbor entry was added to the table without an IP address. debug isdp packet This command enables tracing of ISDP packets processed by the switch. ISDP must be enabled on both the device and the interface in order to monitor packets for a particular interface.
Page 245 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 To enable priority-based flow control for a particular CoS value on an interface: • Ensure that VLAN tagging is enabled on the interface so that the 802.1p priority values are carried through the network.
Page 246: Show Datacenter-Bridging Priority-Flow-Control
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 VLAN tagging must be enabled to carry the 802.1p value through the network. The number of lossless priorities supported on XSM7224S is 2. Additionally, the mapping of class-of-service levels to 802.1p priority values to must be set to one- to-one.
Page 247: Routing Commands
Chapter 4 Routing Commands This chapter describes the routing commands available in the 7000 series CLI. The Routing Commands chapter contains the following sections: • “Address Resolution Protocol (ARP) Commands” on page 4-1 • “IP Routing Commands” on page 4-8 •...
Page 248 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The format of the MAC address is 6 two-digit hexadecimal numbers that are separated by colons, for example 00:06:29:32:81:40. Format arp <ipaddress> <macaddr> Mode Global Config no arp This command deletes an ARP entry. The value for <arpentry> is the IP address of the interface.
Page 249 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 arp cachesize This command configures the ARP cache size. The ARP cache size value is a platform specific integer value. The default size also varies depending on the platform. Format arp cachesize <platform specific integer value>...
Page 250 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 arp purge This command causes the specified IP address to be removed from the ARP cache. Only entries of type dynamic or gateway are affected by this command. Format arp purge <ipaddr> Mode Privileged EXEC arp resptime...
Page 251 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no arp retries This command configures the default ARP count of maximum request for retries. Format no arp retries Mode Global Config arp timeout This command configures the ARP entry ageout time. The value for <seconds>...
Page 252 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 clear arp-switch Use this command to clear the contents of the switch’s Address Resolution Protocol (ARP) table that contains entries learned through the Management port. To observe whether this command is successful, ping from the remote system to the DUT.
Page 253: Show Arp Brief
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition MAC Address The hardware MAC address of that device. Interface The routing unit/slot/port associated with the device ARP entry. Type The type that is configurable. The possible values are Local, Gateway, Dynamic and Static.
Page 254: Ip Routing Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition IP Address The IP address of a device on a subnet attached to the switch. MAC Address The hardware MAC address of that device. Interface The routing unit/slot/port associated with the device’s ARP entry. IP Routing Commands This section describes the commands you use to enable and configure IP routing on the switch.
Page 255 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip routing This command disables the IP Router Admin Mode for the master switch. Format no ip routing Mode Global Config ip address This command configures an IP address on an interface. You can also use this command to configure one or more secondary IP addresses on the interface.The value for <ipaddr>...
Page 256 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 entered into the forwarding database. By specifying the preference of a static route, you control whether a static route is more or less preferred than routes from dynamic routing protocols. The preference also controls whether a static route is more or less preferred than other static routes to the same destination.
Page 257 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip route default This command deletes all configured default routes. If the optional <nexthopip> parameter is designated, the specific next hop is deleted from the configured default route and if the optional preference value is designated, the preference of the configured default route is reset to its default.
Page 258 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format ip netdirbcast Mode Interface Config no ip netdirbcast This command disables the forwarding of network-directed broadcasts. When disabled, network directed broadcasts are dropped. Format no ip netdirbcast Mode Interface Config ip mtu This command sets the IP Maximum Transmission Unit (MTU) on a routing interface.
Page 259 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip mtu This command resets the ip mtu to the default value. Format no ip mtu <mtu> Mode Interface Config encapsulation This command configures the link layer encapsulation type for the packet. The encapsulation type can be ethernet or snap.
Page 260: Show Ip Interface
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format show ip brief Modes • Privileged EXEC • User EXEC Term Definition Default Time to Live The computed TTL (Time to Live) of forwarding a packet from the local router to the final destination.
Page 261 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Routing Determine the operational status of IPv4 routing Interface. The possible values are Up or Interface Status Down. Primary IP The primary IP address and subnet masks for the interface. This value appears only if you Address configure it.
Page 262: Show Ip Interface Brief
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Routing Mode........Disable Administrative Mode......Enable Forward Net Directed Broadcasts....Disable Proxy ARP........Enable Local Proxy ARP........ Disable Active State........Inactive Link Speed Data Rate......Inactive MAC Address........00:10:18:82:0C:68 Encapsulation Type......Ethernet IP MTU.........
Page 263 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 prefixes keyword, the <ip-address> and <mask> pair becomes the prefix, and the command displays the routes to the addresses that match that prefix. Use the <protocol> parameter to specify the protocol that installed the routes. The value for <protocol> can be connected, ospf, rip, or static.
Page 264: Show Ip Route Summary
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 To administratively control the traffic destined to a particular network and prevent it from being forwarded through the router, you can configure a static reject route on the router. Such traffic would be discarded and the ICMP destination unreachable message is sent back to the source.
Page 265: Show Ip Route Preferences
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Reject Routes Total number of reject routes installed by all protocols. Total Routes Total number of routes in the routing table. The following shows example CLI display output for the command. (Switch) #show ip route summary Connected Routes......1 Static Routes.........7...
Page 266: Virtual Lan Routing Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show ip stats This command displays IP statistical information. Refer to RFC 1213 for more information about the fields that are displayed. Format show ip stats Modes • Privileged EXEC •...
Page 267: Dhcp And Bootp Relay Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show ip vlan This command displays the VLAN routing information for all VLANs with routing enabled. Format show ip vlan Modes • Privileged EXEC • User EXEC Term Definition MAC Address The MAC Address associated with the internal bridge-router interface (IBRI).
Page 268 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no bootpdhcprelay cidoptmode This command disables the circuit ID option mode for BootP/DHCP Relay on the system. Format no bootpdhcprelay cidoptmode Mode Global Config bootpdhcprelay maxhopcount This command configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system.
Page 269 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no bootpdhcprelay minwaittime This command configures the default minimum wait time in seconds for BootP/DHCP Relay on the system. Format no bootpdhcprelay minwaittime Mode Global Config show bootpdhcprelay This command displays the BootP/DHCP Relay information. Format show bootpdhcprelay Modes...
Page 270: Ip Helper Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 IP Helper Commands This section describes the commands to configure a DHCP relay agent with multiple DHCP server addresses per routing interface, and to use different server addresses for client packets arriving on different interfaces on the relay agent.
Page 271 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no ip helper-address {<ip-address>} {<1-65535>|dhcp|domain|isakmp|mobile-ip|nameserver| netbios-dgm|netbios-ns|ntp|pim-auto-rip|rip|tacacs|tftp|time} Mode GlobalConfig ip helper-address Use this command to add a unicast helper address to the list of helper addresses on an interface. This is the address of a DHCP server. This command can be applied multiple times on the routing interface to form the helper addresses list until the list reaches the maximum supported helper addresses.
Page 272: Icmp Throttling Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip helper-address discard Use this command to permit the matching packets. Format no ip helper-address discard {<1-65535>|dhcp|domain|isakmp|mobile-ip|nameserver| netbios-dgm|netbios-ns|ntp|pim-auto-rip|rip|tacacs|tftp|time} Mode Interface Config show ip helper-address Use this command to display the configured helper addresses on the given interface. Format show ip helper-address <interface>...
Page 273 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip unreachables Use this command to prevent the generation of ICMP Destination Unreachable messages. Format no ip unreachables Mode Interface Config ip redirects Use this command to enable the generation of ICMP Redirect messages by the router. By default, the generation of ICMP Redirect messages is enabled.
Page 274 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip icmp echo-reply Use this command to prevent the generation of ICMP Echo Reply messages by the router. Format no ip icmp echo-reply Mode Global Config ip icmp error-interval Use this command to limit the rate at which IPv4 ICMP error messages are sent.
Page 275 Chapter 5 Quality of Service (QoS) Commands This chapter describes the Quality of Service (QoS) commands available in the managed switch CLI. The QoS Commands chapter contains the following sections: • “Class of Service (CoS) Commands” on page 5-2 • “Differentiated Services (DiffServ) Commands”...
Page 276: Quality Of Service (Qos) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Class of Service (CoS) Commands This section describes the commands you use to configure and view Class of Service (CoS) settings for the switch. The commands in this section allow you to control the priority and transmission rate of traffic.
Page 277 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The <trafficclass> values can range from 0-6, although the actual number of available traffic classes depends on the platform. Format classofservice ip-dscp-mapping <ipdscp> <trafficclass> Mode Global Config no classofservice ip-dscp-mapping This command maps each IP DSCP value to its default internal traffic class value.
Page 278 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 cos-queue min-bandwidth This command specifies the minimum transmission bandwidth guarantee for each interface queue. The total number of queues supported per interface is platform specific. A value from 0-100 (percentage of link rate) must be specified for each supported queue, with 0 indicating no guaranteed minimum bandwidth.
Page 279 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 cos-queue random-detect This command activates weighted random early discard (WRED) for each specified queue on the interface. Specific WRED parameters are configured using the randomdetect queue-parms and the random-detect exponential-weighting-constant commands. When specified in Interface Config' mode, this command affects a single interface only, whereas in Global Config mode, it applies to all interfaces.
Page 280 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The last precedence applies to all non-TCP traffic. For example, in a 3-color system, four of each parameter specified: green TCP, yellow TCP, red TCP, and non-TCP, respectively. Format random-detect queue-parms queue-id-1 [queue-id-2 … queue-id-n] minthresh thresh-prec-1 …...
Page 281 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show classofservice dot1p-mapping This command displays the current Dot1p (802.1p) priority mapping to internal traffic classes for a specific interface. The <unit/slot/port> parameter is optional and is only valid on platforms that support independent per-port class of service mappings.
Page 282 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show classofservice ip-dscp-mapping This command displays the current IP DSCP mapping to internal traffic classes for the global configuration settings. Format show classofservice ip-dscp-mapping Mode Privileged EXEC The following information is repeated for each user priority. Term Definition IP DSCP...
Page 283: Differentiated Services (Diffserv) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show interfaces cos-queue This command displays the class-of-service queue configuration for the specified interface. The unit/slot/port parameter is optional and is only valid on platforms that support independent per- port class of service mappings. If specified, the class-of-service queue configuration of the interface is displayed.
Page 284 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 a. Creating and deleting classes. b. Defining match criteria for a class. 2. Policy a. Creating and deleting policies b. Associating classes with a policy c. Defining policy statements for a policy/class combination 3.
Page 285: Diffserv Class Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 diffserv This command sets the DiffServ operational mode to active. While disabled, the DiffServ configuration is retained and can be changed, but it is not activated. When enabled, DiffServ services are activated. Format diffserv Mode...
Page 286 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 class-map This command defines a DiffServ class of type match-all. When used without any match condition, this command enters the class-map mode. The <class-map-name> is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying an existing DiffServ class.
Page 287 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 class-map rename This command changes the name of a DiffServ class. The <class-map-name> is the name of an existing DiffServ class. The <new-class-map-name> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the class. Default none Format...
Page 288 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 match class-map This command adds to the specified class definition the set of match conditions defined for another class. The <refclassname> is the name of an existing DiffServ class whose match conditions are being referenced by the specified class definition.
Page 289 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 match cos This command adds to the specified class definition a match condition for the Class of Service value (the only tag in a single tagged packet or the first or outer 802.1Q tag of a double VLAN tagged packet).
Page 290 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 match dstip This command adds to the specified class definition a match condition based on the destination IP address of a packet. The <ipaddr> parameter specifies an IP address. The <ipmask> parameter specifies an IP address bit mask and must consist of a contiguous set of leading 1 bits.
Page 291 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 match ip dscp This command adds to the specified class definition a match condition based on the value of the IP DiffServ Code Point (DSCP) field in a packet, which is defined as the high-order six bits of the Service Type octet in the IP header (the low-order two bits are not checked).
Page 292 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 match ip tos This command adds to the specified class definition a match condition based on the value of the IP TOS field in a packet, which is defined as all eight bits of the Service Type octet in the IP header. The value of <tosbits>...
Page 293 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default none Format match protocol {<protocol-name> | <0-255>} Mode Class-Map Config Ipv6-Class-Map Config match source-address mac This command adds to the specified class definition a match condition based on the source MAC address of a packet.
Page 294: Diffserv Policy Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 match srcl4port This command adds to the specified class definition a match condition based on the source layer 4 port of a packet using a single keyword or numeric notation. To specify the match condition as a single keyword notation, the value for <portkey>...
Page 295 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 assign-queue This command modifies the queue id to which the associated traffic stream is assigned. The queueid is an integer from 0 to n-1, where n is the number of egress queues supported by the device.
Page 296 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 conform-color Use this command to enable color-aware traffic policing and define the conform-color class map. Used in conjunction with the police command where the fields for the conform level are specified. The <class-map-name>...
Page 297 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no class This command deletes the instance of a particular class and its defined treatment from the specified policy. <classname> is the names of an existing DiffServ class. Note: This command removes the reference to the class definition for the specified policy. Format no class <classname>...
Page 298 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 mark ip-precedence This command marks all packets for the associated traffic stream with the specified IP Precedence value. The IP Precedence value is an integer from 0 to 7. Note: This command may not be used on IPv6 classes. IPv6 does not have a precedence field.
Page 299: Diffserv Service Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 policy-map This command establishes a new DiffServ policy. The <policyname> parameter is a case- sensitive alphanumeric string from 1 to 31 characters uniquely identifying the policy. The type of policy is specific to the inbound traffic direction as indicated by the in parameter. Note: The CLI mode is changed to Policy-Map Config when this command is successfully executed.
Page 300 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The service commands attach a defined policy to a directional interface. You can assign only one policy at any one time to an interface in the inbound direction. DiffServ is not used in the outbound direction.
Page 301: Diffserv Show Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no service-policy This command detaches a policy from an interface in the inbound direction. The <policyname> parameter is the name of an existing DiffServ policy. Note: This command causes a service to remove its reference to the policy. This command effectively disables DiffServ on an interface in the inbound direction.
Page 302: Show Diffserv
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Match Criteria The Match Criteria fields are only displayed if they have been configured. Not all platforms support all match criteria values. They are displayed in the order entered by the user. The fields are evaluated in accordance with the class type.
Page 303 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Policy Table Size The current number of entries (rows) and the maximum allowed entries (rows) in Current /Max the Policy Table. and the maximum allowed entries (rows) Policy Instance Table Current number of entries (rows) Size Current /Max the Policy Instance Table.
Page 304 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Conform COS The CoS mark value if the conform action is set-cos-transmit. Conform DSCP The DSCP mark value if the conform action is set-dscp-transmit. Value Conform IP The IP Precedence mark value if the conform action is set-prec-transmit. Precedence Value Drop...
Page 305: Show Diffserv Service
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Definition Term Class Members List of all class names associated with this policy. show diffserv service This command displays policy service information for the specified interface and direction. The <unit/slot/port> parameter specifies a valid unit/slot/port number for the system. Format show diffserv service <unit/slot/port>...
Page 306 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The following information is repeated for interface and direction (only those interfaces configured with an attached policy are shown): Term Definition Interface Valid slot and port number separated by forward slashes. Direction The traffic direction of this interface service.
Page 307: Mac Access Control List (Acl) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show service-policy This command displays a summary of policy-oriented statistics information for all interfaces in the specified direction. Format show service-policy in Mode Privileged EXEC The following information is repeated for each interface and direction (only those interfaces configured with an attached policy are shown): Term Definition...
Page 308 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 If a MAC ACL by this name already exists, this command enters Mac-Access-List config mode to allow updating the existing MAC ACL. Note: The CLI mode changes to Mac-Access-List Config mode when you successfully execute this command.
Page 309 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Note: An implicit 'deny all' MAC rule always terminates the access list. A rule may either deny or permit traffic according to the specified classification fields. At a minimum, the source and destination MAC value must be specified, each of which may be substituted using the keyword any to indicate a match on any value in that field.
Page 310 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule. The allowed <queue-id> value is 0-(n-1), where n is the number of user configurable queues available for the hardware platform. The assign-queue parameter is valid only for a permit rule.
Page 311: Show Mac Access-Lists
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format mac access-group <name> [vlan <vlan-id>] [in|out] [sequence <1- 4294967295>] Modes • Global Config • Interface Config no mac access-group This command removes a MAC ACL identified by <name> from the interface in a given direction.
Page 312: Ip Access Control List (Acl) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Redirect The unit/slot/port to which packets matching this rule are forwarded. Interface IP Access Control List (ACL) Commands This section describes the commands you use to configure IP ACL settings. IP ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources.
Page 313 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 IP Extended ACL: Format access-list <100-199> {deny | permit} {every | {{icmp | igmp | ip | tcp | udp | <number>} <srcip> <srcmask>[{eq {<portkey> | <0-65535>} <dstip> <dstmask> [{eq {<portkey>| <0-65535>}] [precedence <precedence>...
Page 314 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no access-list This command deletes an IP ACL that is identified by the parameter <accesslistnumber> from the system. The range for <accesslistnumber> 1-99 for standard access lists and 100- 199 for extended access lists. Format no access-list <accesslistnumber>...
Page 315 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip access-list rename This command changes the name of an IP Access Control List (ACL). The <name> parameter is the names of an existing IP ACL. The <newname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IP access list.
Page 316 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule. The allowed <queue-id> value is 0-(n-1), where n is the number of user configurable queues available for the hardware platform. The assign-queue parameter is valid only for a permit rule.
Page 317 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip access-group This command removes a specified IP ACL from an interface. Default none Format no ip access-group <accesslistnumber> [vlan <vlan-id>] in Mode • Interface Config • Global Config acl-trapflags This command enables the ACL trap mode.
Page 318: Show Access-Lists
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Rule Number The number identifier for each rule that is defined for the IP ACL. Action The action associated with each rule. The possible values are Permit or Deny. Match All Indicates whether this access list applies to every packet.
Page 319: Ipv6 Access Control List (Acl) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition ACL ID Access List name for a MAC or IPv6 access list or the numeric identifier for an IP access list. Sequence An optional sequence number may be specified to indicate the order of this access list Number relative to other access lists already assigned to this interface and direction.
Page 320 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ipv6 access-list This command deletes the IPv6 ACL identified by <name> from the system. Format no ipv6 access-list <name> Mode Global Config ipv6 access-list rename This command changes the name of an IPv6 ACL. The <name> parameter is the name of an existing IPv6 ACL.
Page 321 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule. The allowed <queue-id> value is 0-(n-1), where n is the number of user configurable queues available for the hardware platform. The assign-queue parameter is valid only for a permit rule.
Page 322: Show Ipv6 Access-Lists
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format ipv6 traffic-filter <name> [vlan <vlan-id>] <in | out>[sequence <1- 4294967295>] Modes • Global Config • Interface Config no ipv6 traffic-filter This command removes an IPv6 ACL identified by <name> from the interface(s) in a given direction.
Page 323: Auto-Voice Over Ip Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition IP DSCP The value specified for IP DSCP. Flow Label The value specified for IPv6 Flow Label. Displays when you enable logging for the rule. Assign Queue The queue identifier to which packets matching this rule are assigned. Mirror Interface The unit/slot/port to which packets matching this rule are copied.
Page 324: Show Auto-Voip
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no auto-voip all Mode Global Config auto-voip Use this command to enable VoIP Profile on the interface. Default disabled Format auto-voip Mode Interface Config no auto-voip Use this command to disable VoIP Profile on the interface. Format no auto-voip all Mode...
Page 325: Utility Commands
Chapter 6 Utility Commands This chapter describes the utility commands available in the CLI. The Utility Commands chapter includes the following sections: • “Auto Install Commands” on page 6-2 • “Dual Image Commands” on page 6-4 • “System Information and Statistics Commands” on page 6-6 •...
Page 326: Auto Install Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Auto Install Commands This section describes the Auto Install Commands. Auto Install is a software feature which provides for the configuration of a switch automatically when the device is initialized and no configuration file is found on the switch.
Page 327 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 boot autoinstall auto-save This command is used to enable automatically saving the downloaded configuration on the switch. Default Disabled Format boot autoinstall auto-save Mode Privileged EXEC no boot autoinstall auto-save This command is used to disable automatically saving the downloaded configuration on the switch.
Page 328: Dual Image Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 boot autoinstall retry-count This command is used to set the number of attempts to download a configuration. The valid range is from 1 to 6. Default Format boot autoinstall retry-count Mode Privileged EXEC no boot autoinstall retry-count...
Page 329 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 boot system This command activates the specified image. It will be the active-image for subsequent reboots and will be loaded by the boot loader. The current active-image is marked as the backup-image for subsequent reboots.
Page 330: System Information And Statistics Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 update bootcode This command updates the bootcode (boot loader) on the switch. The bootcode is read from the active-image for subsequent reboots.The optional <unit> parameter is valid only on Stacks. Error will be returned, if this parameter is provided, on Standalone systems.
Page 331 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show eventlog This command displays the event log, which contains error messages from the system. The event log is not cleared on a system reset. The <unit> is the switch identifier. Format show eventlog [<unit>] Mode...
Page 332: Show Version
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show version This command displays inventory information for the switch. Note: The show version command will replace the show hardware command in future releases of the software. Format show version Mode Privileged EXEC Term...
Page 333 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The display parameters, when the argument is <unit/slot/port>, are as follows: Parameters Definition Packets The total number of packets (including broadcast packets and multicast packets) received Received by the processor. Without Error Packets The number of inbound packets that contained errors preventing them from being...
Page 334: Show Interface Ethernet
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Address Entries The total number of Forwarding Database Address Table entries now active on the Currently In Use switch, including learned and static entries. VLAN Entries The number of VLAN entries presently occupying the VLAN table. Currently In Use Time Since The elapsed time, in days, hours, minutes, and seconds since the statistics for this switch...
Page 335: Show Mac-Addr-Table
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Octets The total number of octets transmitted out of the interface, including framing characters. Transmitted Packets The total number of packets transmitted out of the interface. Transmitted without Errors Unicast Packets The total number of packets that higher-level protocols requested be transmitted to a Transmitted...
Page 336 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Enter all or no parameter to display the entire table. Enter a MAC Address and VLAN ID to display the table entry for the requested MAC address on the specified VLAN. Enter the count parameter to view summary information about the forwarding database table.
Page 337 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 If you enter the interface <unit/slot/port> parameter, in addition to the MAC Address and Status fields, the following field appears: Term Definition VLAN ID The VLAN on which the MAC address was learned. The following information displays if you enter the count parameter: Term Definition...
Page 338: Show Mbuf Total
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ------ ---------- free 192980480 alloc 53409968 Task Utilization Report Task Utilization ----------------------- ----------- bcmL2X.0 0.75% bcmCNTR.0 0.20% bcmLINK.0 0.35% DHCP snoop 0.10% Dynamic ARP Inspection 0.10% dot1s_timer_task 0.10% dhcpsPingTask 0.20% show mbuf total This command shows the total system buffer pools status.
Page 339 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show running-config Use this command to display or capture the current setting of different protocol packages supported on the switch. This command displays or captures commands with settings and configurations that differ from the default value. To display or capture the commands with settings and configurations that are equal to the default value, include the [all] option.
Page 340 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show running-config interface This command shows the current configuration on a particular interface. The interface could be a physical port or a virtual port—like a LAG or VLAN. The output captures how the configuration differs from the factory default value.
Page 341 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 • show port all • show isdp neighbors • show logging • show event log • show logging buffered • show trap log Format show tech-support Mode Privileged EXEC terminal length Use this command to set the number of lines of output to be displayed on the screen, i.e.
Page 342: Logging Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show terminal length Use this command to display the value of the user-configured terminal length size. Format show terminal length Mode Privileged EXEC Logging Commands This section describes the commands you use to configure system logging, and to view logs and the logging settings.
Page 343 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no logging buffered wrap This command disables wrapping of in-memory logging and configures logging to stop when the log file capacity is full. Format no logging buffered wrap Mode Privileged EXEC logging cli-command This command enables the CLI command logging feature, which enables the 7000 series software to log all CLI commands issued on the system.
Page 344 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no logging console This command disables logging to the console. Format no logging console Mode Global Config logging host This command enables logging to a host. You can configure up to eight hosts. The <ipaddr|hostname>...
Page 345: Show Logging
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no logging syslog This command disables syslog logging. Format no logging syslog Mode Global Config show logging This command displays logging configuration information. Format show logging Mode Privileged EXEC Term Definition Logging Client Port on the collector/relay to which syslog messages are sent.
Page 346: Show Logging Hosts
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Buffered (In- Shows whether the In-Memory log is enabled or disabled. Memory) Logging Buffered The behavior of the In Memory log when faced with a log full situation. Logging Wrapping Behavior...
Page 347: System Utility And Clear Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Number of Traps The number of traps since the last boot. Since Last Reset Trap Log The number of traps the system can retain. Capacity Number of Traps The number of new traps since the command was last executed.
Page 348 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 traceroute Use the traceroute command to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. Traceroute continues to provide a synchronous response when initiated from the CLI.
Page 349 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Example: The following are examples of the CLI command. traceroute Success: (Switch) # traceroute 10.240.10.115 initTtl 1 maxTtl 4 maxFail 0 interval 1 count 3 port 33434 size 43 Traceroute to 10.240.10.115 ,4 hops max 43 byte packets: 1 10.240.4.1 708 msec 41 msec...
Page 350 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 clear config This command resets the configuration to the factory defaults without powering off the switch. When you issue this command, a prompt appears to confirm that the reset should proceed. When you enter y, you automatically reset the current configuration on the switch to the default values.
Page 351 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 clear igmpsnooping This command clears the tables managed by the IGMP Snooping function and attempts to delete these entries from the Multicast Forwarding Database. Format clear igmpsnooping Mode Privileged EXEC clear pass This command resets all user passwords to the factory defaults without powering off the switch.
Page 352 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 enable password This command prompts you to change the Privileged EXEC password. Passwords are a maximum of 64 alphanumeric characters. The password is case sensitive. The option [encrypted] allows the administrator to transfer the enable password between devices without having to know the password.
Page 353 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Using the options described below, you can specify the number and size of Echo Requests and the interval between Echo Requests. Parameter Description count Use the count parameter to specify the number of ping packets (ICMP Echo requests) that are sent to the destination address specified by the <ip-address>...
Page 354 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 1 packets transmitted,0 packets received, 100% packet loss round-trip (msec) min/avg/max = 0/0/0 quit This command closes the current telnet connection or resets the current serial connection. The system asks you whether to save configuration changes before quitting. Format quit Modes...
Page 355 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 copy The copy command uploads and downloads files to and from the switch. You can also use the copy command to manage the dual images (image1 and image2) on the file system. Upload and download files from a server by using TFTP or Xmodem.
Page 356 When you use this option, the copy command will not <destfilename> noval validate the downloaded script file. An example of the CLI command follows: (NETGEAR Switch) #copy tftp://1.1.1.1/ file.scr nvram:script file.scr <url> nvram:sshkey-dsa Downloads an SSH key file. For more information, see “Secure Shell (SSH) Commands”...
Page 357: Simple Network Time Protocol (Sntp) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Source Destination Description <url> {image1 | image2} Download an image from the remote server to either image. In a stacking environment, the downloaded image is distributed to the stack nodes. {image1 | image2} <url>...
Page 358 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no sntp broadcast client poll-interval This command resets the poll interval for SNTP broadcast client back to the default value. Format no sntp broadcast client poll-interval Mode Global Config sntp client mode This command enables Simple Network Time Protocol (SNTP) client mode and may set the mode to either broadcast or unicast.
Page 359 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 sntp unicast client poll-interval This command sets the poll interval for SNTP unicast clients in seconds as a power of two where <poll-interval> can be a value from 6 to 10. Default Format sntp unicast client poll-interval <poll-interval>...
Page 360 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format sntp unicast client poll-retry <poll-retry> Mode Global Config no sntp unicast client poll-retry This command will reset the poll retry for SNTP unicast clients to its default value. Format no sntp unicast client poll-retry Mode Global Config...
Page 361 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Mode Global Config Default no clock timezone Zone name: A name to associate with the time zone Hours-offset: Number of hours difference with UTC Minutes-offset: Number of minutes difference with UTC no clock timezone This command sets the switch to UTC time.
Page 362: Show Sntp Client
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show sntp client This command is used to display SNTP client settings. Format show sntp client Mode Privileged EXEC Term Definition Client Supported Supported SNTP Modes (Broadcast, Unicast, or Multicast). Modes SNTP Version The highest SNTP version the client supports.
Page 363: Show Clock
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 For each configured server: Term Definition Host Address IP address or hostname of configured SNTP Server. Address Type Address Type of configured SNTP server. Priority IP priority type of the configured server. Version SNTP Version number of the server.
Page 364: Dhcp Server Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 DHCP Server Commands This section describes the commands you to configure the DHCP server settings for the switch. DHCP uses UDP as its transport protocol and supports a number of features that facilitate in administration address allocations.
Page 365 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no client-identifier This command deletes the client identifier. Format no client-identifier Mode DHCP Pool Config client-name This command specifies the name for a DHCP client. Name is a string consisting of standard ASCII characters.
Page 366 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no default-router This command removes the default router list. Format no default-router Mode DHCP Pool Config dns-server This command specifies the IP servers available to a DHCP client. Address parameters are valid IP addresses;...
Page 367 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no hardware-address This command removes the hardware address of the DHCP client. Format no hardware-address Mode DHCP Pool Config host This command specifies the IP address and network mask for a manual binding to a DHCP client. Address and Mask are valid IP addresses;...
Page 368 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no lease This command restores the default value of the lease time for DHCP Server. Format no lease Mode DHCP Pool Config network (DHCP Pool Config) Use this command to configure the subnet number and mask for a DHCP address pool on the server.
Page 369 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no bootfile This command deletes the boot image name. Format no bootfile Mode DHCP Pool Config domain-name This command specifies the domain name for a DHCP client. The <domain> specifies the domain name string of the client.
Page 370 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no netbios-name-server This command removes the NetBIOS name server list. Format no netbios-name-server Mode DHCP Pool Config netbios-node-type The command configures the NetBIOS node type for Microsoft Dynamic Host Configuration Protocol (DHCP) clients.type Specifies the NetBIOS node type.
Page 371 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no next-server This command removes the boot server list. Format no next-server Mode DHCP Pool Config option The option command configures DHCP Server options. The <code> parameter specifies the DHCP option code and ranges from 1-254. The <ascii string> parameter specifies an NVT ASCII character string.
Page 372 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format ip dhcp excluded-address <lowaddress> [highaddress] Mode Global Config no ip dhcp excluded-address This command removes the excluded IP addresses for a DHCP client. Low-address and high- address are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid.
Page 373 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 service dhcp This command enables the DHCP server. Default disabled Format service dhcp Mode Global Config no service dhcp This command disables the DHCP server. Format no service dhcp Mode Global Config ip dhcp bootp automatic This command enables the allocation of the addresses to the bootp client.
Page 374 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip dhcp conflict logging This command enables conflict logging on DHCP server. Default enabled Format ip dhcp conflict logging Mode Global Config no ip dhcp conflict logging This command disables conflict logging on DHCP server. Format no ip dhcp conflict logging Mode...
Page 375 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 clear ip dhcp conflict The command is used to clear an address conflict from the DHCP Server database. The server detects conflicts using a ping. DHCP server clears all conflicts If the asterisk (*) character is used as the address parameter.
Page 376: Show Ip Dhcp Pool Configuration
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Number of Ping The maximum number of Ping Packets that will be sent to verify that an ip address id not Packets already assigned. Conflict Logging Shows whether conflict logging is enabled or disabled. BootP Automatic Shows whether BootP for dynamic pools is enabled or disabled.
Page 377: Show Ip Dhcp Server Statistics
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show ip dhcp server statistics This command displays DHCP server statistics. Format show ip dhcp server statistics Modes • Privileged EXEC • User EXEC Field Definition Automatic The number of IP addresses that have been automatically mapped to the MAC addresses Bindings of hosts that are found in the DHCP database.
Page 378: Dns Client Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show ip dhcp conflict This command displays address conflicts logged by the DHCP Server. If no IP address is specified, all the conflicting addresses are displayed. Format show ip dhcp conflict [<ip-address>] Modes •...
Page 379 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip domain name Use this command to define a default domain name that the software uses to complete unqualified host names (names with a domain name). By default, no default domain name is configured in the system.
Page 380 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip domain list Use this command to delete a name from a list. Format no ip domain list <name> Mode Global Config ip name server Use this command to configure the available name servers. Up to eight servers can be defined in one command or by using multiple commands.
Page 381 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip host Use this command to remove the name-to-address mapping. Format no ip host <name> Mode Global Config ipv6 host Use this command to define static host name-to-IPv6 address mapping in the host cache. <name> is host name.
Page 382 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip domain retry Use this command to return to the default. Format no ip domain retry <number> Mode Global Config ip domain timeout Use this command to specify the amount of time to wait for a response to a DNS query. The parameter <seconds>...
Page 383: Show Hosts
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show hosts Use this command to display the default domain name, a list of name server hosts, the static and the cached list of host names and addresses <name> ranges from 1-255 characters. This command displays both IPv4 and IPv6 entries.
Page 384: Packet Capture Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 www.stanford.edu 171.64.14.203 Packet Capture Commands Packet capture commands assist in troubleshooting protocol-related problems with the management CPU. The packets to and from the management CPU can be captured in an internally allocated buffer area for export to a PC host for protocol analysis.
Page 385 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no capture receive packet This command disables the capturing of receive packets. Format no capture receive packet Mode Global Config capture all packets This command enables the capturing of receive packets. Format capture all packet Mode...
Page 386: Serviceability Packet Tracing Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Mode Global Config Default Enabled Serviceability Packet Tracing Commands These commands improve the capability of network engineers to diagnose conditions affecting their managed switch product. Caution! The output of “debug” commands can be long and may adversely affect system performance.
Page 387 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no debug auto-voip Use this command to disable Auto VOIP debug messages. Format no debug auto-voip Mode Privileged EXEC debug clear This command disables all previously enabled “debug” traces. Default disabled Format debug clear...
Page 388 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 debug dot1x packet Use this command to enable dot1x packet debug trace. Default disabled Format debug dot1x Mode Privileged EXEC no debug dot1x packet Use this command to disable dot1x packet debug trace. Format no debug dot1x Mode...
Page 389 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 debug igmpsnooping packet transmit This command enables tracing of IGMP Snooping packets transmitted by the switch. Snooping should be enabled on the device and the interface in order to monitor packets for a particular interface.
Page 390 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no debug igmpsnooping transmit This command disables tracing of transmitted IGMP snooping packets. Format no debug igmpsnooping transmit Mode Privileged EXEC debug igmpsnooping packet receive This command enables tracing of IGMP Snooping packets received by the switch. Snooping should be enabled on the device and the interface in order to monitor packets for a particular interface.
Page 391 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Parameter Definition Group Multicast group address in the IGMP header. no debug igmpsnooping receive This command disables tracing of received IGMP Snooping packets. Format no debug igmpsnooping receive Mode Privileged EXEC debug ip acl Use this command to enable debug of IP Protocol packets matching the ACL criteria.
Page 392 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no debug ip dvmrp packet Use this command to disable debug tracing of DVMRP packet reception and transmission. Format no debug ip dvmrp packet [receive|transmit] Mode Privileged EXEC debug ip igmp packet Use this command to trace IGMP packet reception and transmission.
Page 393 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format debug ip mcache packet [receive|transmit] Mode Privileged EXEC no debug ip mcache packet Use this command to disable debug tracing of MDATA packet reception and transmission. Format no debug ip mcache packet [receive|transmit] Mode Privileged EXEC debug ip pimdm packet...
Page 394 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 debug ip pimsm packet Use this command to trace PIMSM packet reception and transmission. receive traces only received PIMSM packets and transmit traces only transmitted PIMSM packets. When neither keyword is used in the command, then all PIMSM packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console.
Page 395 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 debug ipv6 mcache packet Use this command for tracing MDATAv6 packet reception and transmission. receive traces only received data packets and transmit traces only transmitted data packets. When neither keyword is used in the command, then all data packet traces are dumped.
Page 396 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no debug ipv6 mld packet [receive|transmit] Mode Privileged EXEC debug ipv6 pimdm packet Use this command to trace PIMDMv6 packet reception and transmission. receive traces only received PIMDMv6 packets and transmit traces only transmitted PIMDMv6 packets. When neither keyword is used in the command, then all PIMDMv6 packet traces are dumped.
Page 397 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no debug ipv6 pimsm packet [receive|transmit] Mode Privileged EXEC debug lacp packet This command enables tracing of LACP packets received and transmitted by the switch. Default disabled Format debug lacp packet Mode Privileged EXEC A sample output of the trace message is shown below.
Page 398: Debug Ospf Packet
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no debug mldsnooping packet Use this command to disable debug tracing of MLD snooping packet reception and transmission. debug ospf packet This command enables tracing of OSPF packets received and transmitted by the switch. Default disabled Format...
Page 399 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Parameter Definition Intf The interface that the packet came in or went out on. Format used is unit/slot/port (internal interface number). SrcIp The source IP address in the IP header of the packet. DestIp The destination IP address in the IP header of the packet.
Page 400 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 LS_UPD packet field definitions. Field Definition Length Length of packet LS_ACK packet field definitions. Field Definition Length Length of packet no debug ospf packet This command disables tracing of OSPF packets. Format no debug ospf packet Mode...
Page 401 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 debug ping packet This command enables tracing of ICMP echo requests and responses. The command traces pings on the network port/ serviceport for switching packages. For routing packages, pings are traced on the routing ports as well.
Page 402 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 debug rip packet This command turns on tracing of RIP requests and responses. This command takes no options. The output is directed to the log file. Default disabled Format debug rip packet Mode Privileged EXEC A sample output of the trace message is shown below.
Page 403 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no debug rip packet This command disables tracing of RIP requests and responses. Format no debug rip packet Mode Privileged EXEC debug sflow packet Use this command to enable sFlow debug packet trace. Default disabled Format...
Page 404 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no debug spanning-tree bpdu This command disables tracing of spanning tree BPDUs. Format no debug spanning-tree bpdu Mode Privileged EXEC debug spanning-tree bpdu receive This command enables tracing of spanning tree BPDUs received by the switch. Spanning tree should be enabled on the device and on the interface in order to monitor packets for a particular interface.
Page 405 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no debug spanning-tree bpdu receive This command disables tracing of received spanning tree BPDUs. Format no debug spanning-tree bpdu receive Mode Privileged EXEC debug spanning-tree bpdu transmit This command enables tracing of spanning tree BPDUs transmitted by the switch. Spanning tree should be enabled on the device and on the interface in order to monitor packets on a particular interface.
Page 406: Cable Test Command
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no debug spanning-tree bpdu transmit This command disables tracing of transmitted spanning tree BPDUs. Format no debug spanning-tree bpdu transmit Mode Privileged EXEC Cable Test Command The cable test feature enables you to determine the cable connection status on a selected port. Note: The cable test feature is supported only for copper cable.
Page 407: Sflow Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Field Description Cable Length If this feature is supported by the PHY for the current link speed, the cable length is displayed as a range between the shortest estimated length and the longest estimated length.
Page 408: Sflow Sampler
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Field Description Receiver Max The maximum number of data bytes that can be sent in a single sample datagram. The Datagram Size management entity should set this value to avoid fragmentation of the sFlow datagrams. The allowed range is 200 to 9116).
Page 409: Sflow Poller
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Field Description Sampling Rate The statistical sampling rate for packet sampling from this source. A sampling rate of 1 counts all packets. A value of zero (0) disables sampling. A value of N means that out of N incoming packets, 1 packet will be sampled.
Page 410: Show Sflow Agent
Uniquely identifies the version and implementation of this MIB. The version string must have the following structure: MIB Version; Organization; Software Revision where: • MIB Version: ‘1.3’, the version of this MIB. • Organization: Netgear. • Revision: 1.0 IP Address The IP address associated with this agent.
Page 411: Show Sflow Receivers
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Field Description Poller Data The sFlowDataSource (slot/port) for this sFlow sampler. This agent will support Physical Source ports only. Receiver Index The sFlowReceiver associated with this sFlow counter poller. Poller Interval The number of seconds between successive samples of the counters associated with this data source.
Page 412: Software License Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Datagram Version....... 5 Maximum Datagram Size......1400 show sflow samplers Use this command to display the sFlow sampling instances created on the switch. Format show sflow samplers Mode Privileged EXEC Field Description Sampler Data...
Page 413: Show License
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show license This command displays the license status. License Date indicates the date of the license. License Status indicates whether license is active or inactive. Format show license Mode Privileged EXEC Example: The following shows example CLI display output for the command.
Page 414: Ip Address Conflict Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 IP Address Conflict Commands ip address-conflict-detect run This command triggers the switch to run active address conflict detection by sending gratuitous ARP packets for IPv4 addresses on the switch. Format ip address-conflict-detect run Mode Global Config...
Page 415: Link Local Protocol Filtering Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Link Local Protocol Filtering Commands Link Local Protocol Filtering (LLPF) allows the switch to filter out multiple proprietary protocol PDUs, such as Port Aggregation Protocol (PAgP), if the problems occur with proprietary protocols running on standards-based switches.
Page 416 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Block ISDP Shows whether the port blocks ISDP PDUs. Block VTP Shows whether the port blocks VTP PDUs. Block DTP Shows whether the port blocks DTP PDUs. Block UDLD Shows whether the port blocks UDLD PDUs.
Page 417: Management Commands
Chapter 7 Management Commands This chapter describes the management commands available in the managed switch CLI. The Management Commands chapter contains the following sections: • “Configuring the Switch Management CPU” on page 7-2. • “Network Interface Commands” on page 7-4. •...
Page 418: Configuring The Switch Management Cpu
To manage the switch via the web GUI or telnet, an IP address needs to be assigned to the switch management CPU. Whereas there are CLI commands that can be used to do this, ezconfig simplifies the task. The tool is applicable to all NETGEAR 7000-series managed switches, and allows you to configure the following parameters: 1.
Page 419 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The following is an example of an ezconfig session. NETGEAR EZ Configuration Utility -------------------------------- Hello and Welcome! This utility will walk you thru assigning the IP address for the switch management CPU.
Page 420: Network Interface Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 There are changes detected, do you wish to save the changes permanently (Y/N)? The configuration changes have been saved succesfully. Please enter 'show running-config' to see the final configuration. Thanks for using EzConfig! Network Interface Commands This section describes the commands you use to configure a logical interface for management access.
Page 421 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 network protocol This command specifies the network configuration protocol to be used. If you modify this value, change is effective immediately. If you use the bootp parameter, the switch periodically sends requests to a BootP server until a response is received.
Page 422 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no network mac-type This command resets the value of MAC address to its default. Format no network mac-type Mode Privileged EXEC network javamode This command specifies whether or not the switch should allow access to the Java applet in the header frame of the Web interface.
Page 423 Locally Administered address. The factory default is to use the burned in MAC address. The following shows example CLI display output for the network port. (Netgear Switch) #show network Interface Status....... Always Up IP Address........10.250.3.1 Subnet Mask........
Page 424: Console Port Access Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Management VLAN ID......1 Web Mode........Enable Java Mode........Enable Console Port Access Commands This section describes the commands you use to configure the console port. You can use a serial cable to connect a management host directly to the console port of the switch.
Page 425 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no serial baudrate This command sets the communication rate of the terminal interface. Format no serial baudrate Mode Line Config serial timeout This command specifies the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected indefinitely.
Page 426 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 enable authentication To specify authentication method list when the user accesses a higher privilege level in remote telnet or console, use the command in line configuration mode. enable authentication Format enable authentication {default | list-name} Mode Line Config...
Page 427: Telnet Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Telnet Commands This section describes the commands you use to configure and view Telnet settings. You can use Telnet to manage the device from a remote management host. ip telnet server enable Use this command to enable Telnet connections to the system and to enable the Telnet Server Admin Mode.
Page 428 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 transport input telnet This command regulates new Telnet sessions. If enabled, new Telnet sessions can be established until there are no more sessions available. An established session remains active until the session is ended or an abnormal network error ends the session.
Page 429 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no transport output telnet Use this command to prevent new outbound Telnet connection from being established. Format no transport output telnet Mode Line Config session-limit This command specifies the maximum number of simultaneous outbound Telnet sessions. A value of 0 indicates that no outbound Telnet session can be established.
Page 430 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no session-timeout This command sets the Telnet session timeout value to the default. The timeout value unit of time is minutes. Format no session-timeout Mode Line Config telnetcon maxsessions This command specifies the maximum number of Telnet connection sessions that can be established.
Page 431 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no telnetcon timeout This command sets the Telnet connection session timeout value to the default. Note: Changing the timeout value for active sessions does not become effective until the session is reaccessed. Also, any keystroke activates the new timeout duration. Format no telnetcon timeout Mode...
Page 432: Secure Shell (Ssh) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show telnetcon This command displays the current inbound Telnet settings. In other words, these settings apply to Telnet connections initiated from a remote system to the switch. Format show telnetcon Modes •...
Page 433 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format ip ssh Mode Privileged EXEC ip ssh protocol This command is used to set or remove protocol levels (or versions) for SSH. Either SSH1 (1), SSH2 (2), or both SSH 1 and SSH 2 (1 and 2) can be set. Default 1 and 2 Format...
Page 434 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no sshcon maxsessions This command sets the maximum number of allowed SSH connection sessions to the default value. Format no sshcon maxsessions Mode Privileged EXEC sshcon timeout This command sets the SSH connection session timeout value, in minutes. A session is active as long as the session has been idle for the value set.
Page 435: Management Security Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Administrative This field indicates whether the administrative mode of SSH is enabled or disabled. Mode Protocol Level The protocol level may have the values of version 1, version 2 or both versions 1 and version 2.
Page 436: Hypertext Transfer Protocol (Http) Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 crypto key generate rsa Use this command to generate an RSA key pair for SSH. The new key files will overwrite any existing generated or downloaded RSA key files. Format crypto key generate rsa Mode Global Config...
Page 437 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip http server This command enables access to the switch through the Web interface. When access is enabled, the user can login to the switch from the Web interface. When access is disabled, the user cannot login to the switch's Web server.
Page 438 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip http java This command enables the Web Java mode. The Java mode applies to both secure and un-secure Web connections. Default Enabled Format ip http java Mode Privileged EXEC no ip http java This command disables the Web Java mode.
Page 439 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip http authentication This command specifies the authentication methods for http server users. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.
Page 440 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip http session maxsessions This command restores the number of allowable un-secure HTTP sessions to the default value. Format no ip http session maxsessions Mode Privileged EXEC ip http session soft-timeout This command configures the soft timeout for un-secure HTTP sessions in minutes.
Page 441 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip http secure-session maxsessions This command restores the number of allowable secure HTTP sessions to the default value. Format no ip http secure-session maxsessions Mode Privileged EXEC ip http secure-session soft-timeout This command configures the soft timeout for secure HTTP sessions in minutes.
Page 442 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no ip http secure-session hard-timeout This command resets the hard timeout for secure HTTP sessions to the default value. Format no ip http secure-session hard-timeout Mode Privileged EXEC ip https authentication This command specifies the authentication methods for http server users.
Page 443 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format ip http secure-port <portid> Mode Privileged EXEC no ip http secure-port This command is used to reset the SSL port to the default value. Format no ip http secure-port Mode Privileged EXEC ip http secure-protocol...
Page 444: Access Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Secure Protocol Level(s) The protocol level may have the values of SSL3, TSL1, or both SSL3 and TSL1. Maximum Allowable HTTPS The number of allowable secure http sessions. Sessions HTTPS Session Hard Timeout The hard timeout for secure http sessions in hours.
Page 445: User Account Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition User Name The name the user entered to log on to the system. Connection IP address of the remote client machine or EIA-232 for the serial port connection. From Idle Time Time this session has been idle.
Page 446 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Password The password for the users 8-64 characters. This value can be zero if the no passwords min-length command has been executed. The special characters allowed in the password include: ! # $ % &...
Page 447 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 username snmpv3 accessmode This command specifies the snmpv3 access privileges for the specified login user. The valid accessmode values are readonly or readwrite. The <username> is the login user name for which the specified access mode applies.
Page 448 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no username snmpv3 authentication This command sets the authentication protocol to be used for the specified user to none. The <username> is the user name for which the specified authentication protocol is used. Format no username snmpv3 authentication <username>...
Page 449: Show Users
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show users This command displays the configured user names and their settings. This command is only available for users with Read/Write privileges. The SNMPv3 fields will only be displayed if SNMP is available on the system.
Page 450: Show Users Long
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Password The current password expiration date in date format. Expiration Date show users long This command is used to display the users full name. Format show users long Mode Privileged EXEC Term...
Page 451 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no passwords min-length Use this command to set the minimum password length to the default value. Format no passwords min-length Mode Global Config passwords history Use this command to set the number of previous passwords that shall be stored for each user account.
Page 452 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no passwords aging Use this command to set the password aging to the default value. Format no passwords aging Mode Global Config passwords lock-out Use this command to strengthen the security of the switch by locking user accounts that have failed login due to wrong passwords.
Page 453 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no passwords strength-check Use this command to disable the password strength-check. Format no passwords strength-check Mode Global Config passwords strength minimum uppercase-letters Use this command to enforce a minimum number of uppercase letters that a password should contain.
Page 454 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no passwords strength minimum lowercase-letters Use this command to reset the minimum number of lowercase letters to the default value. Format no passwords strength minimum lowercase-characters Mode Global Config passwords strength minimum numeric-characters Use this command to enforce a minimum number of numeric characters that a password should contain.
Page 455 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no passwords strength minimum special-letters Use this command to reset the minimum number of special letters to the default value. Format no passwords strength minimum special-letters Mode Global Config passwords strength maximum consecutive-characters Use this command to enforce a maximum number of consecutive characters that a password should contain.
Page 456 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no passwords strength maximum repeated-characters Use this command to reset the maximum number of repeated-characters to the default value. Format no passwords strength maximum repeated-characters Mode Global Config passwords strength minimum character-classes Use this command to enforce a minimum number of characters classes that a password should contain.
Page 457: Show Passwords Configuration
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no passwords strength exclude-keyword Use this command to remove the exclude-keyword. Format no passwords strength exclude-keyword Mode Global Config show passwords configuration Use this command to display the configured password management settings. Format show passwords configuration Mode...
Page 458 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show passwords result Use this command to display the last password set result information. Format show passwords result Mode Privileged EXEC Termd Definition Last User Whose Shows the name of the user with the most recently set password. Password Is Set Password Strength Shows whether password strength checking is enabled.
Page 459 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 where: Format aaa authentication login {default | list-name} method1 [method2...] Mode Global Config Default Uses the listed authentication methods that follow this argument as the default list of methods when a user logs in. list-name Character string used to name the list of authentication methods activated when a user logs in.
Page 460 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 aaa authentication enable This command is used to set authentication when the user access higher privilege level, use the command in global configuration mode. aaa authentication enable default The default and optional list names that you create with the aaa authentication command are used with the command.
Page 461 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no aaa authentication enable Note: If the default list is not set, only the enable password is checked. This has the same effect as the following command: aaa authentication enable default enable On the console, the enable password is used if it exists.
Page 462 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no aaa authentication dot1x Use this command to remove the authentication at login. Format no aaa authentication dot1x default Mode Global Config aaa ias-user username The Internal Authentication Server (IAS) database is a dedicated internal database used for local authentication of users for network access through the IEEE 802.1X feature.
Page 463: Snmp Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no password(AAA IAS User Configuration) Use this command to remove a password for a user in the IAS database. Format no password Mode AAA IAS User Config clear aaa ias-users Use this command to remove all users from the IAS database.
Page 464 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format snmp-server {sysname <name> | location <loc> | contact <con>} Mode Global Config snmp-server community This command adds (and names) a new SNMP community. A community <name> is a name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level.
Page 465 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format snmp-server community ipaddr <ipaddr> <name> Mode Global Config no snmp-server community ipaddr This command sets a client IP address for an SNMP community to 0.0.0.0. The name is the applicable community name.
Page 466 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 snmp-server community mode This command activates an SNMP community. If a community is enabled, an SNMP manager associated with this community manages the switch according to its access right. If the community is disabled, no SNMP requests using this community are accepted.
Page 467 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 snmp-server enable traps violation This command enables the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port. Note: For other port security commands, see “Protected Ports Commands”...
Page 468 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 snmp-server enable traps linkmode Note: This command may not be available on all platforms. This command enables Link Up/Down traps for the entire switch. When enabled, link traps are sent only if the Link Trap flag setting associated with the port is enabled. See “snmp trap link- status”...
Page 469 IPv6 global address format. The following shows an example of the CLI command. (Netgear Switch)# snmptrap mytrap ip6addr 3099::2 Note: The <name> parameter does not need to be unique, however; the <name> and <ipaddr | hostname> pair must be unique. Multiple entries can exist with the same <name>, as long as they are associated with a different <ipaddr | hostname>.
Page 470 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no snmptrap This command deletes trap receivers for a community. Format no snmptrap <name> {ipaddr <ipaddr|hostname> | ip6addr <ip6addr| hostname>} Mode Global Config snmptrap snmpversion This command modifies the SNMP version of a trap. The maximum length of <name> is 16 case- sensitive alphanumeric characters.
Page 471 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 snmptrap mode This command activates or deactivates an SNMP trap. Enabled trap receivers are active (able to receive traps). Disabled trap receivers are inactive (not able to receive traps). Format snmptrap mode <name>...
Page 472 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 snmp trap link-status all This command enables link status traps for all interfaces. Note: This command is valid only when the Link Up/Down Flag is enabled. See “snmp- server enable traps linkmode” on page 7-52 Format snmp trap link-status all Mode...
Page 473: Show Snmptrap
The IPv6 address to receive SNMP traps from this device. SNMP Version SNMPv2 Status The receiver's status (enabled or disabled). The following shows an example of the CLI command. (Netgear Switch)#show snmptrap Community Name IpAddress IPv6 Address Snmp Version Mode Mytrap 0.0.0.0...
Page 474: Show Trapflags
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show trapflags This command displays trap conditions. The command’s display shows all the enabled OSPFv2 and OSPFv3 trapflags. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the SNMP agent on the switch sends the trap to all enabled trap receivers.
Page 475: Radius Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 RADIUS Commands This section describes the commands you use to configure the switch to use a Remote Authentication Dial-In User Service (RADIUS) server on your network for authentication and accounting. authorization network radius Use this command to enable the switch to accept VLAN assignment by the radius server.
Page 476 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no radius accounting mode Mode Global Config radius server attribute This command specifies the RADIUS client to use the NAS-IP Address attribute in the RADIUS requests. If the specific IP address is configured while enabling this attribute, the RADIUS client uses that IP address while sending NAS-IP-Address attribute in RADIUS communication.
Page 477 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 the authenticating and accounting servers are configured without a name, the command uses the ‘Default_RADIUS_Auth_Server’ and ‘Default_RADIUS_Acct_Server’ as the default names, respectively. The same name can be configured for more than one authenticating servers and the name should be unique for accounting servers.
Page 478 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Field Description dnsname The DNS name of the server. 0-65535 The port number to use to connect to the specified RADIUS server. servername The alias name to identify the server. no radius server host version of this command deletes the configured server entry from the list of configured RADIUS servers.
Page 479 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Text-based configuration supports Radius server’s secrets in encrypted and non-encrypted format. When you save the configuration, these secret keys are stored in encrypted format only. If you want to enter the key in encrypted format, enter the key along with the encrypted keyword. In the show running config command’s display, these secret keys are displayed in encrypted format.
Page 480 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no radius server msgauth version of this command disables the message authenticator attribute to be used for the specified RADIUS Authenticating server. Format no radius server msgauth <ipaddr|dnsname> Mode Global Config radius server primary This command specifies a configured server that should be the primary server in the group of servers which have the same server name.
Page 481 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Field Description retries The maximum number of transmission attempts in the range of 1 to 15. no radius server retransmit The no version of this command sets the value of this global parameter to the default value. Format no radius server retransmit Mode...
Page 482: Show Radius
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show radius This command displays the values configured for the global parameters of the RADIUS client. Format show radius Mode Privileged EXEC Term Definition Number of Configured The number of RADIUS Authentication servers that have been configured. Authentication Servers Number of Configured The number of RADIUS Accounting servers that have been configured.
Page 483: Show Radius Servers
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show radius servers This command displays the summary and details of RADIUS authenticating servers configured for the RADIUS client. Format show radius servers [ { <ipaddr | dnsname> | name [<servername> ] } ] Mode Privileged EXEC Field...
Page 484: Show Radius Accounting
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 rent ---- ------------------------ --------------------------------- ----- ---------- 192.168.37.200 Network1_RADIUS_Server 1813 Primary 192.168.37.201 Network2_RADIUS_Server 1813 Secondary 192.168.37.202 Network3_RADIUS_Server 1813 Primary 192.168.37.203 Network4_RADIUS_Server 1813 Secondary (Switch) #show radius servers name Current Host Address Server Name Type ------------------------ --------------------------------- ----------...
Page 485 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format show radius accounting name [<servername>] Mode Privileged EXEC Field Description servername An alias name to identify the server. RADIUS Accounting A global parameter to indicate whether the accounting mode for all the servers is Mode enabled or not.
Page 486: Show Radius Accounting Statistics
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show radius accounting statistics This command displays a summary of statistics for the configured RADIUS accounting servers. Format show radius accounting statistics {<ipaddr|dnsname> | name <servername>} Mode Privileged EXEC Term Definition ipaddr The IP address of the server.
Page 487 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 The following shows example CLI display output for the command. (Switch) #show radius accounting statistics 192.168.37.200 RADIUS Accounting Server Name....Default_RADIUS_Server Host Address........192.168.37.200 Round Trip Time....... 0.00 Requests........0 Retransmissions.......
Page 488 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition servername The alias name to identify the server. RADIUS Server Name The name of the authenticating server. Server Host Address The IP address of the host. Access Requests The number of RADIUS Access-Request packets sent to this server.
Page 489: Tacacs+ Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Timeouts........0 Unknown Types......... 0 Packets Dropped....... 0 (Switch) #show radius statistics name Default_RADIUS_Server RADIUS Server Name......Default_RADIUS_Server Server Host Address......192.168.37.200 Access Requests....... 0.00 Access Retransmissions......0 Access Accepts........ 0 Access Rejects........
Page 490 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no tacacs-server host Use the no tacacs-server host command to delete the specified hostname or IP address. The <ip-address|hostname> parameter is the IP address of the TACACS+ server. Format no tacacs-server host <ip-address|hostname> Mode Global Config tacacs-server key...
Page 491 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 tacacs-server timeout Use the tacacs-server timeout command to set the timeout value for communication with the TACACS+ servers. The <timeout> parameter has a range of 1-30 and is the timeout value in seconds.
Page 492 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 port Use the port command in TACACS Configuration mode to specify a server port number. The server <port-number> range is 0 - 65535. Default Format port <port-number> Mode TACACS Config priority Use the priority command in TACACS Configuration mode to specify the order in which servers are used, where 0 (zero) is the highest priority.
Page 493: Configuration Scripting Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Host Address The IP address or hostname of the configured TACACS+ server. Port The configured TACACS+ server port number. TimeOut The timeout in seconds for establishing a TCP connection. Priority The preference order in which TACACS+ servers are contacted.
Page 494 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show telnet !Displays the information about remote connections ! Display information about direct connections show serial ! End of the script file! Note: To specify a blank password for a user in the configuration script, you must specify it as a space within quotes.
Page 495: Pre-Login Banner And System Prompt Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Configuration Script Name of the script. Size Privileged EXEC script show This command displays the contents of a script file, which is named <scriptname>. Format script show <scriptname> Mode Privileged EXEC Term...
Page 496: Switch Database Management (Sdm) Templates
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 copy (pre-login banner) The copy command includes the option to upload or download the CLI Banner to or from the switch. You can specify local URLs by using TFTP, Xmodem, Ymodem, or Zmodem. Note: <ip6address>...
Page 497 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 • If you try to configure IPv6 routing without first selecting the dual IPv4-IPv6 routing template, a warning message appears. sdm prefer This command specifies the SDM template to use on the switch. Default ipv4-routing for IPv4 only builds, dual-ipv4-ipv6 for IPv6 builds Format...
Page 498 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Example: (Switch) #show sdm prefer Current Template: Routing Active Template: dual-ipv4-ipv6 default The selected template optimizes the resources in the switch to support maximum IPv4 routes. No of IPv4 routes 6k No of IPV6 routes 0k Management Commands 7-82...
Page 499: Log Messages
There is no specific action that can be taken per message. When there is a problem being diagnosed, a set of these messages in the event log, along with an understanding of the system configuration and details of the problem will assist NETGEAR, Inc. in determining the root cause of such a problem.
Page 500 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-1: BSP Log Messages Component Message Cause Event(0xaaaaaaaa) Switch has restarted. Starting code... BSP initialization complete, starting 7000 series application. Table 8-2: NIM Log Messages Component Message Cause NIM: L7_ATTACH out of order for Interface creation out of order intIfNum(x) unit x slot x port x NIM: Failed to find interface at unit x slot x...
Page 501 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-3: System Log Messages Component Message Cause SYSTEM Configuration file Switch CLI.cfg size is 0 The configuration file could not be read. (zero) bytes This message may occur on a system for which no configuration has ever been saved or for which configuration has been erased.
Page 502: Utilities
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Utilities Table 8-4: Trap Mgr Log Message Component Message Cause Trap Mgr Link Up/Down: unit/slot/port An interface changed link state. Table 8-5: DHCP Filtering Log Messages Component Message Cause DHCP Filtering Unable to create r/w lock for DHCP Filtering Unable to create semaphore used for dhcp filtering configuration structure .
Page 503 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-7: RADIUS Log Messages Component Message Cause RADIUS RADIUS: Invalid data length - xxx The RADIUS Client received an invalid message from the server. RADIUS RADIUS: Failed to send the request A problem communicating with the RADIUS server.
Page 504: Management
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-8: TACACS+ Log Messages Component Message Cause TACACS+ TACACS+: authentication error, no server to TACACS+ request needed, but no servers contact are configured. TACACS+ TACACS+: connection failed to server TACACS+ request sent to server x.x.x.x but x.x.x.x no response was received.
Page 505 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-12: EmWeb Log Messages Component Message Cause EmWeb EMWEB (Telnet): Max number of Telnet A user attempted to connect via telnet when login sessions exceeded the maximum number of telnet sessions were already active.
Page 506 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-14: WEB Log Messages Component Message Cause Max clients exceeded This message is shown when the maximum allowed java client connections to the switch is exceeded. Error on send to sockfd XXXX, closing Failed to send data to the java clients connection through the socket.
Page 507 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-16: SSHD Log Messages Component Message Cause SSHD SSHD: Unknown UI event in message, Failed to dispatch the UI event to the event=XXXX appropriate SSHD function as it’s an invalid event.
Page 508: Switching
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-18: User_Manager Log Messages Component Message Cause User_Manager User Login Failed for XXXX Failed to authenticate user login. XXXX indicates the username to be authenticated. User_Manager Access level for user XXXX could not be Invalid access level specified for the user.
Page 509 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-20: IP Subnet VLANS Log Messages Component Message Cause IPsubnet vlans ERROR vlanIpSubnetSubnetValid :Invalid This occurs when an invalid pair of subnet subnet and netmask has come from the CLI IPsubnet vlans IP Subnet Vlans: failed to save configuration This message appears when save configuration of subnet vlans failed...
Page 510 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-21: Mac-based VLANs Log Messages Component Message Cause Mac based vlanMacVlanChangeCallback: Failed to This appears when a dtl fails to delete an VLANS delete an entry entry for an vlan delete notify event. Table 8-22: 802.1x Log Messages Component Message...
Page 511 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-23: IGMP Snooping Log Messages Component Message Cause IGMP Snooping Failed to set igmp mrouter mode %d for Failed to set VLAN multicast router mode interface xxx on Vlan yyy due to IGMP Snooping message queue being full IGMP Snooping snoopCnfgrInitPhase1Process: Error...
Page 512 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-25: 802.3ad Log Messages Component Message Cause 802.3ad dot3adNimEventCompletionCallback, The event sent to NIM was not completed dot3adNimEventCreateCompletionCallback: successfully DOT3AD: notification failed for event(%d), intf(%d), reason(%d) Table 8-26: FDB Log Message Component Message Cause...
Page 513 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-30: 802.1Q Log Messages Component Message Cause 802.1Q dot1qIssueCmd: Unable to send message dot1qMsgQueue is full. %d to dot1qMsgQueue for vlan %d - %d msgs in queue 802.1Q dot1qVlanCreateProcess: Attempt to create This accommodates for reserved vlan ids.
Page 514: Qos
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-33: Protocol-based VLANs Log Messages Component Message Cause Protocol Based pbVlanCnfgrInitPhase2Process: Unable to Appears when nimRegisterIntfChange fails VLANs register NIM callback to register pbVlan for link state changes. Protocol Based pbVlanCnfgrInitPhase2Process: Unable to Appears when vlanRegisterForChange fails VLANs...
Page 515: Routing/Ipv6 Routing
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-35: CoS Log Message Component Message Cause cosCnfgrInitPhase3Process: Unable to The COS component was unable to apply apply saved config -- using factory defaults the saved configuration and has initialized to the factory default settings.
Page 516 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-38: OSPFv2 Log Messages Component Message Cause OSPFv2 Best route client deregistration failed for OSPFv2 registers with the IPv4 routing table OSPF Redist manager (“RTO”) to be notified of best route changes.
Page 517 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-39: OSPFv3 Log Messages Component Message Cause OSPFv3 Warning: OSPF LSDB is 90% full (15292 OSPFv3 limits the number of Link State LSAs). Advertisements (LSAs) that can be stored in the link state database (LSDB).
Page 518 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-41: VRRP Log Messages Component Message Cause VRRP Changing priority to 255 for virtual router When the router is configured with the with VRID 1 on interface 1/0/1 address being used as the virtual router ID, the router’s priority is automatically set to the maximum value to ensure that the address owner becomes the VRRP master.
Page 519: Multicast
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Multicast Table 8-45: Cache Log Messages Component Message Cause Cache Out of memory when creating entry. When we run out of memory while creating a new cache (MFC) entry Cache Out of memory when creating cache.
Page 520 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-48: PIM-SM Log Messages Component Message Cause PIM-SM PIM-SM not initialized This message arises when trying to activate pimsm interfaces or receiving pimsm packets when pimsm component is not initialized.
Page 521: Stacking
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-49: PIM-DM Log Messages Component Message Cause PIM-DM Error creating PIM-DM pipe This message is logged when the PIM-DM Pipe (that receives control messages) creation fails. Table 8-50: DVMRP Log Messages Component Message Cause...
Page 522 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-52: System General Error Messages Component Message Cause In hapiBroadSystemMacAddress call to Failed to add an L2 address to the MAC 'bcm_l2_addr_add' - FAILED : x table. This should only happen when a hash collision occurs or the table is full.
Page 523 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-52: System General Error Messages Component Message Cause USL: A Trunk being set doesn't exist in USL Possible synchronization issue between the application, hardware, and sync layer. USL: failed to sync trunk table on unit=x Could not synchronize unit x due to a transport failure or API issue on remote unit.
Page 524: O/S Support
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-52: System General Error Messages Component Message Cause USL: failed to sync initiator table on unit=x Could not synchronize unit x due to a transport failure or API issue on remote unit. A synchronization retry will be issued USL: failed to sync terminator table on Could not synchronize unit x due to a...
Page 525 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Table 8-53: OSAPI Log Messages (continued) Component Message Cause OSAPI osapiCleanupIf: NetIPGet During the call to remove the interface from the route table, the attempt to get an ipv4 interface address from the stack failed. OSAPI osapiCleanupIf: NetMaskGet During the call to remove the interface from...
Page 526: Captive Portal Commands
Chapter 9 Captive Portal Commands The Captive Portal feature is a software implementation that blocks clients from accessing the network until user verification has been established. Verification can be configured to allow access for both guest and authenticated users. Authenticated users must be validated against a database of authorized Captive Portal users before access is granted.
Page 527 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no enable Use this command to globally disable captive portal. Default disabled Format no enable Mode Captive Portal Configuration mode http port Use this command to configure an additional HTTP port for captive portal to monitor. The valid range is from 0 to 65535.
Page 528 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no https port Use this command to reset the HTTPs port to the default HTTPS port 443. Format no https port Mode Captive Portal Configuration mode authentication timeout Use this command to configure the authentication timeout. If the user does not enter valid credentials within this time limit, the authentication page needs to be served again in order for the client to gain access to the network.
Page 529: Show Captive-Portal Status
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Administrative The administrative mode is enabled or disabled. Mode Operational Status The Operational status is enabled or disabled. If the operational status is disabled. This field shows the reason why the operational is Disable Reason disabled.
Page 530: Captive Portal Configuration Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition The number of active captive portal instances. Active Captive Portals The maximum number of user can be authenticated. System Supported Users The maximum number of local user can be created. Local Supported Users The number of the authenticated users.
Page 531 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no configuration Use this command to delete a CP configuration. The default configuration cannot be deleted. Format no configuration <1-10> Mode Captive Portal Configuration mode enable (Instance) Use this command to enable a captive portal configuration. Default enable Format...
Page 532 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no name Use this command to remove a configuration name. Format no name Mode Captive Portal Instance mode protocol Use this command to configure the protocol mode for a captive portal configuration. The default protocol is http.
Page 533 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 group Use this command to configure a group ID for this captive portal configuration. If a group number is configured, the user entry (Local or RADIUS) must be configured with the same name and the group to authenticate to this captive portal instance.
Page 534 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no redirect Mode Captive Portal Instance mode redirect-url Use this command to configure the redirect URL for a captive portal configuration. The url is the URL for redirection which can be up to 512 characters in length. Format redirect-url url Mode...
Page 535 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default Format max-bandwidth-up <0-536870911> Mode Captive Portal Instance mode no max-bandwidth-up Use this command to reset the maximum rate to the default Format no max-bandwidth-up Mode Captive Portal Instance mode max-input-octets Use this command to configure the maximum number of octets the user is allowed to transmit.
Page 536 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 max-output-octets Use this command to configure the maximum number of octets the user is allowed to receive. After this limit has been reached the user will be disconnected. The number of octets is in bytes. 0 indicates limit not enforced Use the “no”.
Page 537 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format max-total-octets <0-4294967295> Mode Captive Portal Instance mode session-timeout (Captive Portal) Use this command to configure the session timeout for a captive portal configuration. After this limit has been reached, the user will be disconnected. Timeout is time in seconds.
Page 538 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no idle-timeout Mode Captive Portal Instance mode locale This command is not intended to be a user command. The administrator must use the WEB UI to create and customize captive portal web content. This command is primarily used by the show running-config command and process as it provides the ability to save and restore configurations using a text based format.
Page 539: Captive Portal Status Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format no interface <unit/slot/port> Mode Captive Portal Instance Config mode block Use this command to block all traffic for a captive portal configuration. The administrator can block access to a captive portal configuration. When an instance is blocked no client traffic is allowed through any interfaces associated with that captive portal configuration.
Page 540: Show Captive-Portal Configuration Interface
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format show captive-portal configuration <1-10> Mode Privileged EXEC mode Term Definition CP ID The captive portal ID CP Name The captive portal instance name Operational Status The operational status is enabled or disabled. Disable Reason If the operational status is disabled, this field shows the reason.
Page 541 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition CP ID The captive portal ID. CP Name The captive portal name. Interface The interface associated with the CP ID Interface The interface description Description Operational Status The operational status is enabled or disabled. Disable Reason The reason if the operational status is disabled.
Page 542: Show Captive-Portal Configuration Status
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show captive-portal configuration status Use this command to display information about all configured captive portal configurations or about a specific captive portal configuration. The <1-10> is captive portal ID. If <1-10> is not entered, all the configurations are displayed.
Page 543: Show Captive-Portal Configuration Locales
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Example (switch)#show captive-portal configuration status CP ID CP Name Mode Protocol Verification ----- ---------- -------- -------- ------------ Enable https Guest Enable http Local Disable https Guest (switch)#show captive-portal configuration 1 status CP ID..........
Page 544: Captive Portal Client Connection Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show captive-portal trapflags Use this command to display which captive portal traps are enabled. Format show captive-portal trapflags Mode Privileged EXEC mode Example (switch)#show captive-portal trapflags Client Authentication Failure Traps.... Disable Client Connection Traps......
Page 545: Show Captive-Portal Client Statistics
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 If the macaddr is specified, the following terms are displayed. Term Definition CP ID The captive portal ID associated with the client CP Name The captive portal name associated with the client Interface The interface on which the client authenticated.
Page 546: Show Captive-Portal Interface Client Status
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Client MAC The MAC address of the authenticated client address Bytes Received The number of bytes received from the client Bytes Transmitted The number of bytes transmitted to the client Packets Received The number of packets received from the client Packets The number of packets transmitted from the client...
Page 547: Show Captive-Portal Configuration Client Status
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Term Definition Verification The user verification mode Example (switch) #show captive-portal interface client status Client Client Intf Intf Description MAC Address IP Address ------ ----------------------------------- ----------------- -------------- 1/0/1 Unit: 1 Slot: 0 Port: 1 Gigabit 0002.BC00.1290 10.254.96.47 1/0/2...
Page 548: Captive Portal Interface Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 If the CP ID is specified, the following terms are displayed. Term Definition Interface The description of the interface Description Example (switch)#show captive-portal configuration client status CP ID CP Name Client MAC Address Client IP Address Interface...
Page 549: Captive Portal Local User Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format show captive-portal interface configuration [ <1-10>] status Mode Privileged EXEC mode Term Definition CP ID The captive portal ID CP Name The captive portal name Interface The interface associated with the CP ID. Interface The description of the interface Description...
Page 550 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format user user-id password { password | encrypted enc-password } Mode Captive Portal Configuration mode no user Use this command to delete a user from the local user database. If the user has an existing session, it is disconnected.
Page 551 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no user group Use this command to dis-associate a group and user. Format no user <1-128> group <1-10> Mode Captive Portal Configuration mode user session-timeout Use this command to set the session timeout value for a captive portal user. Use the “no” form of this command to reset the session timeout to the default.
Page 552 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no user idle-timeout Use this command to reset the idle timeout to the default value. Format no user <1-128> idle-timeout timeout Mode Captive Portal Configuration mode user max-bandwidth-down Use this command to configure the bandwidth at which the client can receive data from the network.
Page 553 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no user max-bandwidth-up Use this command to reset the limit to the default. Format user <1-128> max-bandwidth-up Mode Captive Portal Configuration mode user max-input-octets Use this command to limit the number of octets the user is allowed to transmit. After this limit has been reached the user will be disconnected.
Page 554 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 no user max-output-octets Use this command to reset the limit to the default. Default Format no user <1-128> max-output-octets Mode Captive Portal Configuration mode user max-total-octets Use this command to limit the number of bytes the user is allowed to transmit and receive. The maximum number of octets is the sum of octets transmitted and received.
Page 555 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Format show captive-portal user [ <1-128> ] Mode Privileged EXEC mode Term Definition User ID The user ID User Name The user name Session Timeout Logout once session timeout is reached (seconds). If the value is 0 then use the value configured for the captive portal.
Page 556: Captive Portal User Group Commands
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Session Idle User ID User Name Timeout Timeout Group ID Group Name ------- -------------- -------- -------- -------- ----------- user123 Default user234 Default (switch)#show captive-portal user 1 User ID........1 User Name........user123 Password Configured......
Page 557 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 Default Format user group <1-10> Mode Captive Portal Configuration mode no user group Use this command to delete a user group. The default user group (1) cannot be deleted. Format user group <1-10>...
Page 558: Command List
Chapter 10 Command List clear checkpoint statistics ..........................2-14 {deny | permit} (IP ACL) ...........................5-41 {deny | permit} (IPv6) ............................5-46 {deny | permit} (MAC ACL) ..........................5-34 aaa authentication dot1x .............................7-45 aaa authentication enable ............................7-43 aaa authentication login ............................7-42 aaa ias-user username ............................7-46 access-list .................................5-38...
Page 559 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 boot system ................................6-5 bootfile ..................................6-44 bootpdhcprelay cidoptmode ..........................4-21 bootpdhcprelay maxhopcount ...........................4-22 bootpdhcprelay minwaittime ..........................4-22 bridge aging-time ..............................3-195 cablestatus ................................6-82 captive-portal client deauthenticate .........................9-23 captive-portal ................................9-1 capture wrap ................................6-61 class ....................................5-22 class-map ..................................5-12 class-map rename...
Page 560 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 clear pass ..................................6-27 clear port-channel ..............................6-27 clear radius statistics .............................3-66 clear traplog ................................6-27 clear vlan ..................................6-27 client-identifier ...............................6-40 client-name ................................6-41 clock timezone ................................6-36 configuration ................................7-8 configuration (Captive Portal) ..........................9-5 conform-color .................................5-22 copy ....................................6-31...
Page 561 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 debug isdp packet ..............................3-203 debug lacp packet ..............................6-73 debug mldsnooping packet ..........................6-73 debug ospf packet ..............................6-74 debug ospfv3 packet .............................6-76 debug ping packet ..............................6-77 debug rip packet ..............................6-78 debug sflow packet ...............................6-79 debug spanning-tree bpdu ..........................6-79...
Page 562 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dot1x initialize ................................3-67 dot1x max-req .................................3-67 dot1x max-users ..............................3-68 dot1x port-control ..............................3-68 dot1x port-control all ............................3-69 dot1x re-authenticate ............................3-70 dot1x re-authentication ............................3-70 dot1x system-auth-control ..........................3-70 dot1x system-auth-control monitor .........................3-74 dot1x timeout ................................3-71 dot1x unauthenticated-vlan ..........................3-72...
Page 563 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip arp inspection trust ............................3-136 ip arp inspection validate ..........................3-135 ip arp inspection vlan ............................3-134 ip arp inspection vlan logging .........................3-135 ip dhcp bootp automatic ............................6-49 ip dhcp conflict logging ............................6-50 ip dhcp excluded-address ............................6-47...
Page 564 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 ip icmp echo-reply ..............................4-27 ip icmp error-interval ............................4-28 ip igmpsnooping unknown-multicast ......................3-148 ip mtu ..................................4-12 ip name server ................................6-56 ip netdirbcast ................................4-11 ip proxy-arp ................................4-2 ip redirects ................................4-27 ip route ..................................4-9 ip route default ...............................4-10...
Page 565 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 lacp partner admin state longtimeout ......................3-102 lacp partner admin state passive ........................3-103 lacp partner port id ..............................3-104 lacp partner port priority ...........................3-104 lacp partner system id ............................3-105 lacp partner system priority ..........................3-106 lease ....................................6-43...
Page 566 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 macfilter addsrc ..............................3-120 macfilter addsrc all ..............................3-121 mark cos ...................................5-23 mark ip-precedence ...............................5-24 match any .................................5-13 match class-map ..............................5-14 match cos ..................................5-15 match destination-address mac .........................5-15 match dstip ................................5-16 match dstip6 ................................5-16 match dstl4port ...............................5-16...
Page 567 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 network mgmt_vlan ..............................3-32 network parms ................................7-4 network protocol ..............................7-5 next-server ................................6-46 no boot auto-copy-sw ............................2-15 no boot auto-copy-sw allow-downgrade .......................2-16 no boot auto-copy-sw trap ..........................2-16 no llpf ..................................6-91 no monitor ................................3-116 no nsf ..................................2-13...
Page 568 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 port-channel name ...............................3-111 port-channel static ...............................3-106 port-channel system priority ..........................3-112 port-security ................................3-157 port-security mac-address ..........................3-159 port-security mac-address move ........................3-159 port-security max-dynamic ..........................3-158 port-security max-static .............................3-158 priority ..................................7-76 private-group name ...............................3-57 protocol group ................................3-40 protocol vlan group...
Page 569 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 service dhcp ................................6-49 service-policy ................................5-26 session-limit ................................7-13 session-timeout ...............................7-13 session-timeout (Captive Portal) ........................9-12 set garp timer join ..............................3-58 set garp timer leave ...............................3-59 set garp timer leaveall ............................3-60 set gmrp adminmode ............................3-63 set gmrp interfacemode ............................3-64...
Page 570 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show autoinstall ...............................6-2 show auto-voip ...............................5-50 show bootpdhcprelay ............................4-23 show bootvar ................................6-5 show captive-portal client statistics ........................9-20 show captive-portal client status ........................9-19 show captive-portal configuration client status ...................9-22 show captive-portal configuration interface ....................9-15 show captive-portal configuration locales ....................9-18...
Page 571 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show gvrp configuration .............................3-62 show hardware ................................6-7 show hosts ................................6-59 show igmpsnooping ............................3-148 show igmpsnooping mrouter interface ......................3-150 show igmpsnooping mrouter vlan .........................3-150 show igmpsnooping querier ..........................3-154 show interface ................................6-8 show interface ethernet ............................6-10 show interfaces cos-queue...
Page 572 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show isdp entry ..............................3-200 show isdp interface .............................3-200 show isdp neighbors ............................3-201 show isdp traffic ..............................3-202 show lacp actor ..............................3-112 show lacp partner ..............................3-113 show license ................................6-89 show license features ............................6-89 show lldp ................................3-166...
Page 573 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show policy-map ..............................5-29 show policy-map interface ..........................5-32 show port ..................................3-8 show port description .............................3-9 show port protocol ..............................3-8 show port status ................................3-9 show port-channel ...............................3-114 show port-channel ...............................3-114 show port-channel brief .............................3-113 show port-channel system priority ........................3-115...
Page 574 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 show spanning-tree mst port summary ......................3-29 show spanning-tree mst port summary active .....................3-29 show spanning-tree mst summary ........................3-30 show spanning-tree summary ..........................3-31 show spanning-tree vlan .............................3-31 show stack-port ..............................2-11 show stack-port counters ............................2-11 show stack-port diag .............................2-12...
Page 575 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 snmp-server community ipmask ........................7-49 snmp-server community mode ..........................7-50 snmp-server community ro ..........................7-50 snmp-server community rw ..........................7-50 snmp-server enable traps ............................7-51 snmp-server enable traps linkmode .........................7-52 snmp-server enable traps multiusers .......................7-52 snmp-server enable traps stpmode ........................7-53 snmp-server enable traps violation...
Page 576 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 spanning-tree port mode all ..........................3-22 spanning-tree tcnguard ............................3-16 speed ....................................3-7 speed all ..................................3-7 sshcon maxsessions ..............................7-17 sshcon timeout ................................7-18 stack .....................................2-1 stack-port ..................................2-10 storm-control broadcast ............................3-82 storm-control broadcast (Global) ........................3-84 storm-control broadcast level ..........................3-83 storm-control broadcast level (Global)
Page 577 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 traceroute ..................................6-24 traceroute ipv6 ................................6-25 traffic-shape ................................5-6 transport input telnet .............................7-12 transport output telnet ............................7-12 update bootcode ...............................6-6 user group (Create) ...............................9-31 user group name ..............................9-32 user group rename ..............................9-32 user group .................................9-25 user idle-timeout...
Page 578 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 vlan port tagging all ..............................3-38 vlan priority ................................3-53 vlan protocol group ...............................3-38 vlan protocol group add protocol ........................3-39 vlan protocol group name ...........................3-39 vlan pvid ...................................3-42 vlan routing ................................4-20 vlan tagging ................................3-42 voice vlan (Global Config) ..........................3-50...
Page 579 ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 10-22 Command List v1.0, November 2010...

This manual is also suitable for:

Prosafe xsm7224s

NETGEAR XSM7224S - ProSafe 10 Gigabit Stackable Manual

About this Manual

Chapter 1 Using the Command-Line Interface

Chapter 2 Stacking Commands

Chapter 3 Switching Commands

Chapter 4 Routing Commands

Chapter 5 Quality of Service (Qos) Commands

Chapter 6 Utility Commands

Chapter 7 Management Commands

Chapter 8 Log Messages

Chapter 9 Captive Portal Commands

Chapter 10

Command List

Quick Links

Related Manuals for NETGEAR XSM7224S - ProSafe 10 Gigabit Stackable

Summary of Contents for NETGEAR XSM7224S - ProSafe 10 Gigabit Stackable