Page 1: Ethernet Switch
Layer 2 Ethernet Switch Allied Telesyn AT-8000S CLI Reference Guide...
Page 2 Allied Telesyn AT-8000S CLI Reference Guide...
Page 3: Table Of Contents
Table of Contents Table of Contents Preface ..........................10 Intended Audience......................... 11 Document Conventions ......................... 11 Contacting Allied Telesyn ......................12 Chapter 1.Using the CLI ..................... 14 Overview............................14 CLI Command Modes ..........................14 Introduction ..............................14 User EXEC Mode ............................14 Privileged EXEC Mode ..........................14 Global Configuration Mode ........................15 Interface Configuration and Specific Configuration Modes..............16 Starting the CLI..........................
Page 4 Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide bridge multicast forbidden forward-all....................33 bridge aging-time..........................34 clear bridge............................35 port security ............................35 port security mode ..........................36 port security max ..........................37 port security routed secure-address ....................37 show bridge address-table ........................
Page 5 Table of Contents description............................70 speed ..............................70 duplex..............................71 negotiation............................72 flowcontrol ............................72 mdix..............................73 back-pressure ............................74 clear counters............................74 set interface active ..........................75 show interfaces advertise........................75 show interfaces configuration.......................76 show interfaces status..........................78 show interfaces description........................79 show interfaces counters ........................80 port storm-control include-multicast (GC) ....................82 port storm-control include-multicast (IC) ....................82 port storm-control broadcast enable ....................83 port storm-control broadcast rate ......................84...
Page 6 Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide Chapter 10.Line Commands .................... 106 line ..............................106 speed..............................106 autobaud............................107 exec-timeout ............................108 history ..............................108 history size............................109 terminal history ..........................109 terminal history size........................... 110 show line............................110 Chapter 11.Management ACL Commands ..............
Page 7 Table of Contents priority-queue out num-of-queues ......................137 rate-limit .............................137 traffic-shape ............................138 show qos interface ..........................138 wrr-queue cos-map ..........................139 qos map dscp-queue..........................140 qos trust (Global)..........................141 qos trust (Interface) ..........................142 qos cos...............................142 show qos map ............................143 Chapter 17.Radius Commands..................146 radius-server host ..........................146 radius-server key..........................147 radius-server retransmit ........................147 radius-server source-ip ........................148...
Page 8 Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide show snmp ............................177 show snmp engineid.......................... 178 show snmp views ..........................179 show snmp groups ..........................179 show snmp filters..........................180 show snmp users..........................181 Chapter 20.Spanning-Tree Commands................182 spanning-tree............................. 182 spanning-tree mode...........................
Page 9 Table of Contents Chapter 22.Syslog Commands ..................220 logging on............................220 logging..............................220 logging console ..........................221 logging buffered ..........................222 logging buffered size ..........................222 clear logging............................223 logging file ............................224 clear logging file ..........................224 aaa logging............................225 file-system logging ..........................225 management logging..........................226 show logging ............................227 show logging file..........................228 show syslog-servers...........................229 Chapter 23.System Management Commands ..............
Page 10 Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide show history............................253 show privilege............................ 253 Chapter 26.VLAN Commands ..................256 vlan database ............................ 256 vlan ..............................256 interface vlan ............................. 257 interface range vlan ........................... 257 name..............................258 switchport protected .......................... 259 switchport mode ..........................
Page 11 Table of Contents dot1x timeout tx-period........................286 dot1x max-req ............................287 dot1x timeout supp-timeout........................287 dot1x timeout server-timeout......................288 show dot1x ............................289 show dot1x users ..........................291 show dot1x statistics ..........................292 dot1x guest-vlan..........................294 dot1x guest-vlan enable ........................295 show dot1x advanced ........................295 Index........................... 298 Page 9...
Page 12: Preface
Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide Preface This guide describes how to configure an AT-8000S Series switch using the command line interface. The commands are grouped by topic into the following chapters: • Chapter 1. "Using the CLI" — Describes the CLI basic structure and command usage.
Page 13: Intended Audience
Preface Intended Audience • Chapter 23. "System Management Commands" — Display and list system, version or Telnet session information. • Chapter 24. "TACACS+ Commands" — Display configuration and statistical information about a Terminal Access Controller Access Control System (TACACS+) server, or specify a TACACS+ host. •...
Page 14: Contacting Allied Telesyn
You can request technical support online by accessing the Allied Telesyn Knowledge Base Online Support from the following web site: www.alliedtelesyn.com/kb. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions.
Page 15 Preface Contacting Allied Telesyn Page 13 Page 13...
Page 16: Chapter 1.Using The Cli
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 1. Using the CLI Overview This chapter describes how to start using the CLI and the CLI command editing features. CLI Command Modes Introduction To assist in configuring the device, the Command Line Interface (CLI) is divided into different command modes.
Page 17: Global Configuration Mode
Using the CLI Overview Enter the password and press <Enter>. The password is displayed as *. The Privileged EXEC mode prompt is displayed. The Privileged EXEC mode prompt consists of the device host name followed by #. Console# To return from the Privileged EXEC mode to the User EXEC mode, use the disable command. The following example illustrates how to access the Privileged EXEC mode and return to the User EXEC mode: Console>...
Page 18: Interface Configuration And Specific Configuration Modes
Allied Telesyn AT-8000S Switch CLI Reference Guide Interface Configuration and Specific Configuration Modes Interface Configuration mode commands modify specific interface operations. The following are the Interface Configuration modes: • Line Interface — Contains commands to configure the management connections. These include commands such as line timeout settings, etc.
Page 19: Starting The Cli
Using the CLI Starting the CLI Starting the CLI The device can be managed over a direct connection to the device console port or via a Telnet connection. The device is managed by entering command keywords and parameters at the prompt. Using the device Command Line Interface (CLI) is very similar to entering commands on a UNIX system.
Page 20: Editing Features
Allied Telesyn AT-8000S Switch CLI Reference Guide Editing Features Entering Commands A CLI command is a series of keywords and arguments. Keywords identify a command, and arguments specify configuration parameters. For example, in the command show interfaces status ethernet 1/e11, show, interfaces and status are keywords, ethernet is an argument that specifies the interface type, and 1/e11 specifies the port.
Page 21: Negating The Effect Of Commands
Using the CLI Editing Features Negating the Effect of Commands For many configuration commands, the prefix keyword no can be entered to cancel the effect of a command or reset the configuration to the default value. This guide describes the negation effect for all applicable commands. Command Completion If the command entered is incomplete, invalid or has missing or invalid parameters, then the appropriate error message is displayed.
Page 22: Cli Command Conventions
CLI Command Conventions When entering commands there are certain command entry standards that apply to all commands. The following table describes the command conventions. Con ve nti on Desc ri pti on In a command line, square brackets indicates an optional entry. In a command line, curly brackets indicate a selection of compulsory parameters separated by the | character.
Page 23 Using the CLI Editing Features Page 21...
Page 24: Chapter 2.Aaa Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 2. AAA Commands aaa authentication login The aaa authentication login Global Configuration mode command defines login authentication. To return to the default configuration, use the no form of this command. Syntax aaa authentication login {default | list-name} method1 [method2...]...
Page 25: Aaa Authentication Enable
AAA Commands User Guidelines The default and optional list names created with the aaa authentication login command are used with the login authentication command. Create a list by entering the aaa authentication login list-name method command for a particular protocol, where list-name is any character string used to name this list.
Page 26: Login Authentication
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Global Configuration mode User Guidelines The default and optional list names created with the aaa authentication enable command are used with the enable authentication command. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.
Page 27: Enable Authentication
AAA Commands enable authentication The enable authentication Line Configuration mode command specifies the authentication method list when accessing a higher privilege level from a remote telnet or console. To return to the default configuration specified by the aaa authentication enable command, use the no form of this command. Syntax enable authentication {default | list-name} no enable authentication...
Page 28: Ip Https Authentication
Allied Telesyn AT-8000S Switch CLI Reference Guide radius Uses the list of all RADIUS servers for authentication. tacacs Uses the list of all TACACS+ servers for authentication. Default Configuration The local user database is checked. This has the same effect as the command ip http authentication local.
Page 29: Show Authentication Methods
AAA Commands User Guidelines The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.
Page 30: Password
Allied Telesyn AT-8000S Switch CLI Reference Guide Line Login Method List Enable Method List -------------- ----------------- ------------------ Console Console_Login Console_Enable Telnet Default Default Default Default http: Radius, Local https: Radius, Local dot1x: Radius password The password Line Configuration mode command specifies a password on a line. To remove the password, use the no form of this command.
Page 31 AAA Commands Syntax username name [password password] [level level] [encrypted] no username name Parameters • name — The name of the user (Range: 1- 20 characters). • password — The authentication password for the user (Range: 1-159 characters). • level — The user level (Range: 1-15). •...
Page 32: Chapter 3.Address Table Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 3. Address Table Commands bridge address The bridge address Interface Configuration (VLAN) mode command adds a MAC-layer station source address to the bridge table. To delete the MAC address, use the no form of this command.
Page 33: Bridge Multicast Address
Address Table Commands Syntax bridge multicast filtering no bridge multicast filtering Default Configuration Filtering multicast addresses is disabled. All multicast addresses are flooded to all ports. Command Mode Global Configuration mode User Guidelines If multicast devices exist on the VLAN, do not change the unregistered multicast addresses state to drop on the switch ports.
Page 34: Bridge Multicast Forbidden Address
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Interface configuration (VLAN) mode User Guidelines If the command is executed without add or remove, the command only registers the group in the bridge database. Static multicast addresses can only be defined on static VLANs.
Page 35: Bridge Multicast Forward-All
Address Table Commands User Guidelines Before defining forbidden ports, the multicast group should be registered. Examples In this example, MAC address 0100.5e02.0203 is forbidden on port 2/e9 within VLAN 8. Console(config)# interface vlan 8 Console(config-if)# bridge multicast address 0100.5e.02.0203 Console(config-if)# bridge multicast forbidden address 0100.5e02.0203 add ethernet 2/e9 bridge multicast forward-all The bridge multicast forward-all Interface Configuration (VLAN) mode command enables forwarding all multicast packets on a port.
Page 36: Bridge Aging-Time
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax bridge multicast forbidden forward-all {add | remove} {ethernet interface-list | port-channel port-channel- number-list} no bridge multicast forbidden forward-all Parameters • add — Forbids forwarding all multicast packets. • remove — Does not forbid forwarding all multicast packets.
Page 37: Clear Bridge
Address Table Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example In this example the bridge aging time is set to 250. Console(config)# bridge aging-time 250 clear bridge The clear bridge Privileged EXEC mode command removes any learned entries from the forwarding database. Syntax clear bridge Default Configuration...
Page 38: Port Security Mode
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • forward — Forwards packets with unlearned source addresses, but does not learn the address. • discard — Discards packets with unlearned source addresses. This is the default if no option is indicated.
Page 39: Port Security Max
Address Table Commands Example In this example, port security mode is set to dynamic for Ethernet interface 1/e7. Console(config)# interface ethernet 1/e7 Console(config-if)# port security mode dynamic port security max The port security max Interface Configuration (Ethernet, port-channel) mode command configures the maximum number of addresses that can be learned on the port while the port is in port security mode.
Page 40: Show Bridge Address-Table
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • mac-address — A valid MAC address. Default Configuration No addresses are defined. Command Mode Interface Configuration (Ethernet, port-channel) mode. Cannot be configured for a range of interfaces (range context). User Guidelines The command enables adding secure MAC addresses to a routed port in port security mode.
Page 41: Show Bridge Address-Table Static
Address Table Commands Example In this example, all classes of entries in the bridge-forwarding database are displayed. Console# show bridge address-table Aging time is 300 sec interface mac address Port Type --------- -------------- ---- ------- 00:60:70:4C:73:FF 5/e8 dynamic 00:60:70:8C:73:FF 5/e8 dynamic 00:10:0D:48:37:FF 5/e9...
Page 42: Show Bridge Address-Table Count
Allied Telesyn AT-8000S Switch CLI Reference Guide ---- ----------------- ---- ----------------- 00:60:70:4C:73:FF 1/e8 Permanent 00:60.70.8C.73:FF 1/e8 delete-on-timeout 00:10:0D:48:37:FF 1/e9 delete-on-reset show bridge address-table count The show bridge address-table count Privileged EXEC mode command displays the number of addresses present in the Forwarding Database.
Page 43: Show Bridge Multicast Address-Table
Address Table Commands show bridge multicast address-table The show bridge multicast address-table User EXEC mode command displays multicast MAC address or IP address table information. Syntax show bridge multicast address-table [vlan vlan-id] [address mac-multicast-address | ip-multicast-address] [format ip | format mac] Parameters •...
Page 44: Show Bridge Multicast Filtering
Allied Telesyn AT-8000S Switch CLI Reference Guide Example In this example, multicast MAC address and IP address table information is displayed. Console# show bridge multicast address-table Vlan MAC Address Type Ports ---- -------------- ------- ---------- 01:00:5e:02:02:03 static 1/e1, 2/e2 01:00:5e:02:02:08...
Page 45: Show Ports Security
Address Table Commands Syntax show bridge multicast filtering vlan-id Parameters • vlan-id — VLAN ID value. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, the multicast configuration for VLAN 1 is displayed.
Page 46: Show Ports Security Addresses
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, all classes of entries in the port-lock status are displayed: Console# show ports security...
Page 47 Address Table Commands Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, dynamic addresses in currently locked ports are displayed. Console# show ports security addresses Port Status Learning...
Page 48: Chapter 4.Clock Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 4. Clock Commands clock set The clock set Privileged EXEC mode command manually sets the system clock. Syntax clock set hh:mm:ss day month year clock set hh:mm:ss month day year Parameters •...
Page 49: Clock Timezone
Clock Commands Default Configuration No external clock source Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example configures an external time source for the system clock. Console(config)# clock source sntp clock timezone The clock timezone Global Configuration mode command sets the time zone for display purposes.
Page 50: Clock Summer-Time
Allied Telesyn AT-8000S Switch CLI Reference Guide clock summer-time The clock summer-time Global Configuration mode command configures the system to automatically switch to summer time (daylight saving time). To configure the software not to automatically switch to summer time, use the no form of this command.
Page 51: Sntp Authentication-Key
Clock Commands User Guidelines In both the date and recurring forms of the command, the first part of the command specifies when summer time begins, and the second part specifies when it ends. All times are relative to the local time zone. The start time is relative to standard time.
Page 52: Sntp Authenticate
Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example defines the authentication key for SNTP. Console(config)# sntp authentication-key 8 md5 ClkKey sntp authenticate The sntp authenticate Global Configuration mode command grants authentication for received Simple Network Time Protocol (SNTP) traffic from servers. To disable the feature, use the no form of this command.
Page 53: Sntp Client Poll Timer
Clock Commands Command Mode Global Configuration mode User Guidelines The command is relevant for both received unicast and broadcast. If there is at least 1 trusted key, then unauthenticated messages will be ignored. Examples The following example authenticates key 8. Console(config)# sntp authentication-key 8 md5 ClkKey Console(config)# sntp trusted-key 8 Console(config)# sntp authenticate...
Page 54: Sntp Anycast Client Enable
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax sntp broadcast client enable no sntp broadcast client enable Default Configuration The SNTP broadcast client is disabled. Command Mode Global Configuration mode User Guidelines Use the sntp client enable (Interface) Interface Configuration mode command to enable the SNTP client on a specific interface.
Page 55: Sntp Client Enable (Interface)
Clock Commands sntp client enable (Interface) The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode command enables the Simple Network Time Protocol (SNTP) client on an interface. This applies to both receive broadcast and anycast updates. To disable the SNTP client, use the no form of this command. Syntax sntp client enable no sntp client enable...
Page 56: Sntp Unicast Client Poll
Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example enables the device to use the Simple Network Time Protocol (SNTP) to request and accept SNTP traffic from servers. Console(config)# sntp unicast client enable sntp unicast client poll The sntp unicast client poll Global Configuration mode command enables polling for the Simple Network Time Protocol (SNTP) predefined unicast servers.
Page 57: Show Clock
Clock Commands Default Configuration No servers are defined. Command Mode Global Configuration mode User Guidelines Up to 8 SNTP servers can be defined. To enable predefined unicast clients globally use the sntp unicast client enable Global Configuration mode command. To enabling global polling use the sntp unicast client poll Global Configuration mode command. The sntp client poll timer Global Configuration mode command determines polling time.
Page 58: Show Sntp Configuration
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the time and date from the system clock. Console> show clock 15:29:03 PDT(UTC-7) Jun 17 2002 Time source is SNTP Console> show clock detail 15:29:03 PDT(UTC-7) Jun 17 2002...
Page 59: Show Sntp Status
Clock Commands Authentication is required for synchronization. Trusted Keys: 8, 9 Unicast Clients: Enabled Unicast Clients Polling: Enabled Server Polling Encryption Key ----------- ------- -------------- 176.1.1.8 Enabled 176.1.8.179 Disabled Disabled Broadcast Clients: Enabled Anycast Clients: Enabled Broadcast and Anycast Interfaces: 1/e1, 1/e3 show sntp status The show sntp status Privileged EXEC mode command shows the status of the Simple Network Time Protocol (SNTP).
Page 60 Allied Telesyn AT-8000S Switch CLI Reference Guide ----------- ------- ---------------------------- ------ ------ 176.1.1.8 19:58:22.289 PDT Feb 19 2002 7.33 117.79 176.1.8.179 Unknown 12:17.17.987 PDT Feb 19 2002 8.98 189.19 Anycast server: Server Interface Status Last response Offset Delay [mSec] [mSec]...
Page 61 Clock Commands Page 59...
Page 62: Chapter 5.Configuration And Image File Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 5. Configuration and Image File Commands copy The copy Privileged EXEC mode command copies files from a source to a destination. Syntax copy source-url destination-url Parameters • source-url — The source file location URL or reserved keyword of the source file to be copied.
Page 63 Configuration and Image File Commands User Guidelines Up to five backup configuration files are supported on the device. The location of a file system dictates the format of the source or destination URL. The entire copying process may take several minutes and differs from protocol to protocol and from network to network.
Page 64: Delete
Allied Telesyn AT-8000S Switch CLI Reference Guide To copy the running configuration file to a backup configuration file, enter the copy running-config file command. To copy the startup configuration file to a backup configuration file, enter the copy startup-config file command.
Page 65: Boot System
Configuration and Image File Commands Examples The following example deletes file test from flash memory. Console# delete flash:test Delete flash:test? [confirm] boot system The boot system Privileged EXEC mode command specifies the system image that the device loads at startup. Syntax boot system [unit unit] {image-1 | image-2} Parameters...
Page 66: Show Startup-Config
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Examples The following example displays the contents of the running configuration file. Console# show running-config software version 1.1 hostname device interface ethernet 1/e1 ip address 176.242.100.100 255.255.255.0...
Page 67: Show Bootvar
Configuration and Image File Commands interface ethernet 1/e1 ip address 176.242.100.100 255.255.255.0 duplex full speed 1000 interface ethernet 1/e2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000 show bootvar The show bootvar Privileged EXEC mode command displays the active system image file that is loaded by the device at startup.
Page 68: Show Backup-Config
Allied Telesyn AT-8000S Switch CLI Reference Guide show backup-config The show backup-config privileged EXEC command displays the backup configuration file contents. Syntax show backup-config Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command.
Page 69 Configuration and Image File Commands Page 67...
Page 70: Chapter 6.Ethernet Configuration Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 6. Ethernet Configuration Commands interface ethernet The interface ethernet Global Configuration mode command enters the interface configuration mode to configure an Ethernet type interface. Syntax interface ethernet interface Parameters • interface — Valid Ethernet port. (Full syntax: unit/port) Default Configuration This command has no default configuration.
Page 71: Shutdown
Ethernet Configuration Commands Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each active interface in the range. If the command returns an error on one of the active interfaces, it does not stop executing commands on other active interfaces.
Page 72: Description
Allied Telesyn AT-8000S Switch CLI Reference Guide description The description Interface Configuration (Ethernet, port-channel) mode command adds a description to an interface. To remove the description, use the no form of this command. Syntax description string no description Parameters •...
Page 73: Duplex
Ethernet Configuration Commands Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines The no speed command in a port-channel context returns each port in the port-channel to its maximum capability. Example The following example configures the speed operation of Ethernet port 1/e5 to 100 Mbps operation. Console(config)# interface ethernet 1/e5 Console(config-if)# speed 100 duplex...
Page 74: Negotiation
Allied Telesyn AT-8000S Switch CLI Reference Guide negotiation The negotiation Interface Configuration (Ethernet, port-channel) mode command enables auto-negotiation operation for the speed and duplex parameters of a given interface. To disable auto-negotiation, use the no form of this command. Syntax negotiation [capability1 [capability2…capability5]]...
Page 75: Mdix
Ethernet Configuration Commands Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines Negotiation should be enabled for flow control auto. Example In the following example, flow control is enabled on port 1/e5. Console(config)# interface ethernet 1/e5 Console(config-if)# flowcontrol on mdix The mdix Interface Configuration (Ethernet) mode command enables cable crossover on a given interface.
Page 76: Back-Pressure
Allied Telesyn AT-8000S Switch CLI Reference Guide back-pressure The back-pressure Interface Configuration (Ethernet, port-channel) mode command enables back pressure on a given interface. To disable back pressure, use the no form of this command. Syntax back-pressure no back-pressure Default Configuration Back pressure is enabled.
Page 77: Set Interface Active
Ethernet Configuration Commands Example In the following example, the counters for interface 1/e1 are cleared. Console> clear counters ethernet 1/e1 set interface active The set interface active Privileged EXEC mode command reactivates an interface that was shutdown. Syntax set interface active {ethernet interface | port-channel port-channel-number} Parameters •...
Page 78: Show Interfaces Configuration
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following examples display autonegotiation information. Console# show interfaces advertise Port Type Operational Link Advertisement ---- -----------...
Page 79 Ethernet Configuration Commands Parameters • interface — Valid Ethernet port. (Full syntax: unit/port) • port-channel-number — Valid port-channel number. Default Configuration This command has no default configuration. Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the configuration of all configured interfaces: Console# show interfaces configuration...
Page 80: Show Interfaces Status
Allied Telesyn AT-8000S Switch CLI Reference Guide show interfaces status The show interfaces status Privileged EXEC mode command displays the status of all configured interfaces. Syntax show interfaces status [ethernet interface| port-channel port-channel-number] Parameters • interface — A valid Ethernet port. (Full syntax: unit/port) •...
Page 81: Show Interfaces Description
Ethernet Configuration Commands 100M-Copper Down 100M-Copper Down 100M-Copper Down 100M-Copper Down 100M-Copper Down show interfaces description The show interfaces description Privileged EXEC mode command displays the description for all configured interfaces. Syntax show interfaces description [ethernet interface | port-channel port-channel-number] Parameters •...
Page 82: Show Interfaces Counters
Allied Telesyn AT-8000S Switch CLI Reference Guide show interfaces counters The show interfaces counters User EXEC mode command displays traffic seen by the physical interface. Syntax show interfaces counters [ethernet interface | port-channel port-channel-number] Parameters • interface — A valid Ethernet port. (Full syntax: unit/port) •...
Page 83 Ethernet Configuration Commands OutOctets OutUcastPkts OutMcastPkts OutBcastPkts --------- ------------ ------------ ------------ 23739 The following example displays counters for Ethernet port 1/e1. Console# show interfaces counters ethernet 1/e1 Port InOctets InUcastPkts InMcastPkts InBcastPkts ------ ----------- -------------- ----------- ----------- 1/e1 183892 Port OutOctets OutUcastPkts OutMcastPkts...
Page 84: Port Storm-Control Include-Multicast (Gc)
Allied Telesyn AT-8000S Switch CLI Reference Guide Late Collisions Number of times that a collision is detected later than one slotTime into the transmission of a packet. Oversize Packets Counted frames received that exceed the maximum permitted frame size. Internal MAC Rx Errors Counted frames for which reception fails due to an internal MAC sublayer receive error.
Page 85: Port Storm-Control Broadcast Enable
Ethernet Configuration Commands Parameters • unknown-unicast — Specifies also counting unknown unicast packets. Default Configuration Multicast packets are not counted. Command Modes Interface Configuration (Ethernet) mode User Guidelines This command is relevant to FE devices only. To control multicasts storms, use the port storm-control broadcast enable and port storm-control broadcast rate commands.
Page 86: Port Storm-Control Broadcast Rate
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example enables broadcast storm control on Ethernet port 1/e5 of a FE device. Console(config)# interface ethernet 1/e5 Console(config-if)# port storm-control broadcast enable The following example enables broadcast storm control on port 1/g5 of a GE device.
Page 87: Show Ports Storm-Control
Ethernet Configuration Commands Example The following example configures the maximum storm control broadcast rate at 900 Kbits/Sec on Ethernet port 1/e5 of a FE device. Console(config)# interface ethernet 1/e5 Console(config-if)# port storm-control broadcast rate 900 show ports storm-control The show ports storm-control User/Privileged EXEC mode command displays the storm control configuration. show ports storm-control [interface] Parameters •...
Page 88: Chapter 7.Gvrp Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 7. GVRP Commands gvrp enable (Global) GARP VLAN Registration Protocol (GVRP) is an industry-standard protocol designed to propagate VLAN information from device to device. With GVRP, a single device is manually configured with all desired VLANs for the network, and all other devices on the network learn these VLANs dynamically.
Page 89: Garp Timer
GVRP Commands User Guidelines An access port does not dynamically join a VLAN because it is always a member in only one VLAN. Membership in an untagged VLAN is propagated in the same way as in a tagged VLAN. That is, the PVID is manually defined as the untagged VLAN VID.
Page 90: Gvrp Vlan-Creation-Forbid
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example sets the leave timer for Ethernet port 1/e6 to 900 milliseconds. Console(config)# interface ethernet 1/e6 Console(config-if)# garp timer leave 900 gvrp vlan-creation-forbid The gvrp vlan-creation-forbid Interface Configuration (Ethernet, port-channel) mode command disables dynamic VLAN creation or modification.
Page 91: Clear Gvrp Statistics
GVRP Commands Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example forbids dynamic registration of VLANs on Ethernet port 1/e6. Console(config)# interface ethernet 1/e6 Console(config-if)# gvrp registration-forbid clear gvrp statistics The clear gvrp statistics Privileged EXEC mode command clears all GVRP statistical information.
Page 92: Show Gvrp Statistics
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • interface — A valid Ethernet port. (Full syntax: unit/port) • port-channel-number — A valid port-channel number. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command.
Page 93: Show Gvrp Error-Statistics
GVRP Commands User Guidelines There are no user guidelines for this command. Example The following example shows GVRP statistical information: Console> show gvrp statistics GVRP Statistics: Legend: Join Empty Received rJIn: Join In Received rEmp : Empty Received rLIn: Leave In Received Leave Empty Received rLA : Leave All Received...
Page 94 Allied Telesyn AT-8000S Switch CLI Reference Guide Legend: INVPROT : Invalid Protocol Id INVALEN : Invalid Attribute Length INVATYP : Invalid Attribute Type INVEVENT: Invalid Event INVAVAL : Invalid Attribute Value Port INVPROT INVATYP INVAVAL INVALEN INVEVENT Page 92...
Page 95 GVRP Commands Page 93...
Page 96: Chapter 8.Igmp Snooping Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 8. IGMP Snooping Commands ip igmp snooping (Global) The ip igmp snooping Global Configuration mode command enables Internet Group Management Protocol (IGMP) snooping. To disable IGMP snooping, use the no form of this command.
Page 97: Ip Igmp Snooping Mrouter Learn-Pim-Dvmrp
IGMP Snooping Commands Example The following example enables IGMP snooping on VLAN 2. Console(config)# interface vlan 2 Console(config-if)# ip igmp snooping ip igmp snooping mrouter learn-pim-dvmrp The ip igmp snooping mrouter learn-pim-dvmrp Interface Configuration (VLAN) mode command enables automatic learning of multicast device ports in the context of a specific VLAN. To remove automatic learning of multicast device ports, use the no form of this command.
Page 98: Ip Igmp Snooping Mrouter-Time-Out
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration The default host-time-out is 260 seconds. Command Mode Interface Configuration (VLAN) mode User Guidelines The timeout should be at least greater than 2*query_interval+max_response_time of the IGMP router. Example The following example configures the host timeout to 300 seconds.
Page 99: Ip Igmp Snooping Leave-Time-Out
IGMP Snooping Commands ip igmp snooping leave-time-out The ip igmp snooping leave-time-out Interface Configuration (VLAN) mode command configures the leave- time-out. If an IGMP report for a multicast group was not received for a leave-time-out period after an IGMP Leave was received from a specific port, this port is deleted from the member list of that multicast group.To return to the default configuration, use the no form of this command.
Page 100: Show Ip Igmp Snooping Interface
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays multicast device interfaces in VLAN 1000. Console> show ip igmp snooping mrouter interface 1000...
Page 101: Show Ip Igmp Snooping Groups
IGMP Snooping Commands Example The following example displays IGMP snooping information on VLAN 1000. Console> show ip igmp snooping interface 1000 IGMP Snooping is globaly enabled IGMP Snooping is enabled on VLAN 1000 IGMP host timeout is 300 sec IGMP Immediate leave is disabled. IGMP leave timeout is 10 sec IGMP mrouter timeout is 200 sec Automatic learning of multicast devices ports is enabled show ip igmp snooping groups...
Page 102 Allied Telesyn AT-8000S Switch CLI Reference Guide --------------------------------------------- Vlan IP Address Ports ---- ----------------- ----- 224-239.130|2.2.3 1/e19 Page 100...
Page 103 IGMP Snooping Commands Page 101...
Page 104: Chapter 9.Ip Addressing Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 9. IP Addressing Commands ip address The ip address Interface Configuration (Ethernet, VLAN, port-channel) mode command sets an IP address. To remove an IP address, use the no form of this command.
Page 105: Ip Default-Gateway
IP Addressing Commands Parameters • host-name — Specifies the name of the host to be placed in the DHCP option 12 field. This name does not have to be the same as the host name specified in the hostname Global Configuration mode command. (Range: 1-20 characters) Default Configuration This command has no default configuration.
Page 106: Show Ip Interface
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration No default gateway is defined. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example defines default gateway 192.168.1.1. Console(config)# ip default-gateway 192.168.1.1 show ip interface The show ip interface Privileged EXEC mode command displays the usability status of configured IP interfaces.
Page 107 IP Addressing Commands IP address Interface Type ------------- --------- ------- 10.7.1.192/24 VLAN 1 Static Page 105...
Page 108: Chapter 10.Line Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 10.Line Commands line The line Global Configuration mode command identifies a specific line for configuration and enters the Line Configuration command mode. Syntax line {console | telnet | ssh} Parameters • console — Console terminal line.
Page 109: Autobaud
Line Commands Default Configuration The default speed is 9600 bps. Command Mode Line Configuration (console) mode User Guidelines This command is available only on the line console. The configured speed is applied when Autobaud is disabled. This configuration applies only to the current session.
Page 110: Exec-Timeout
Allied Telesyn AT-8000S Switch CLI Reference Guide exec-timeout The exec-timeout Line Configuration mode command sets the interval that the system waits until user input is detected. To return to the default configuration, use the no form of this command. Syntax...
Page 111: History Size
Line Commands Example The following example enables the command history function for telnet. Console(config)# line telnet Console(config-line)# history history size The history size Line Configuration mode command configures the command history buffer size for a particular line. To reset the command history buffer size to the default configuration, use the no form of this command. Syntax history size number-of-commands no history size...
Page 112: Terminal History Size
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example disables the command history function for the current terminal session. Console# terminal no history...
Page 113 Line Commands Syntax show line [console | telnet | ssh] Parameters • console — Console terminal line. • telnet — Virtual terminal for remote console access (Telnet). • ssh — Virtual terminal for secured remote console access (SSH). Default Configuration If the line is not specified, the default value is console.
Page 114: Chapter 11.Management Acl Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 11.Management ACL Commands management access-list The management access-list Global Configuration mode command configures a management access list and enters the Management Access-list Configuration command mode. To delete an access list, use the no form of this command.
Page 115: Permit (Management)
Management ACL Commands The following example creates a management access list called mlist, configures all interfaces to be management interfaces except Ethernet interfaces 1/e1 and 2/e9 and makes the new access list the active list. Console(config)# management access-list mlist Console(config-macl)# deny ethernet 1/e1 Console(config-macl)# deny ethernet 2/e9 Console(config-macl)# permit Console(config-macl)# exit...
Page 116: Deny (Management)
Allied Telesyn AT-8000S Switch CLI Reference Guide deny (Management) The deny Management Access-List Configuration mode command defines a deny rule. Syntax deny [ethernet interface-number | vlan vlan-id | port-channel port-channel-number] [service service] deny ip-source ip-address [mask mask | prefix-length] [ethernet interface-number | vlan vlan-id | port-channel...
Page 117: Show Management Access-List
Management ACL Commands Parameters • console-only — Indicates that the device can be managed only from the console. • name — Specifies the name of the access list to be used. (Range: 1-32 characters) Default Configuration If no access list is specified, an empty access list is used. Command Mode Global Configuration mode User Guidelines...
Page 118: Show Management Access-Class
Allied Telesyn AT-8000S Switch CLI Reference Guide permit ethernet 2/e2 ! (Note: all other access implicitly denied) show management access-class The show management access-class Privileged EXEC mode command displays the active management access list. Syntax show management access-class Default Configuration This command has no default configuration.
Page 119 Management ACL Commands Page 117...
Page 120: Chapter 12.Phy Diagnostics Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 12.PHY Diagnostics Commands test copper-port tdr The test copper-port tdr Privileged EXEC mode command uses Time Domain Reflectometry (TDR) technology to diagnose the quality and characteristics of a copper cable attached to a port.
Page 121: Show Copper-Ports Cable-Length
PHY Diagnostics Commands Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines The maximum length of the cable for the TDR test is 120 meter. Example The following example displays information on the last TDR test performed on all copper ports. Console>...
Page 122 Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the estimated copper cable length attached to all ports. Console> show copper-ports cable-length Port Length [meters] ---- --------------------- 1/e1 < 50 1/e2 Copper not active 1/e3 110-140 1/g1...
Page 123 PHY Diagnostics Commands Page 121...
Page 124: Chapter 13.Port Channel Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 13.Port Channel Commands interface port-channel The interface port-channel Global Configuration mode command enters the interface configuration mode to configure a specific port-channel. Syntax interface port-channel port-channel-number Parameters • port-channel-number — A valid port-channel number.
Page 125: Channel-Group
Port Channel Commands Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each interface in the range. Example The following example groups port-channels 1, 2 and 6 to receive the same command. Console(config)# interface range port-channel 1-2,6 channel-group The channel-group Interface Configuration (Ethernet) mode command associates a port with a port-channel.
Page 126 Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • port-channel-number — Valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays information on all port-channels.
Page 127 Port Channel Commands Page 125...
Page 128: Chapter 14.Port Monitor Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 14.Port Monitor Commands port monitor The port monitor Interface Configuration mode command starts a port monitoring session. To stop a port monitoring session, use the no form of this command. Syntax port monitor src-interface [rx | tx]...
Page 129: Port Monitor Vlan-Tagging
Port Monitor Commands port monitor vlan-tagging The port monitor Interface Configuration (Ethernet) mode command transmits tagged ingress mirrored packets. To transmit untagged ingress mirrored packets, use the no form of this command. Syntax port monitor vlan-tagging no port monitor vlan-tagging Default Configuration Ingress mirrored packets are transmitted untagged.
Page 130 Allied Telesyn AT-8000S Switch CLI Reference Guide ----------- ---------------- ----- ------- ------------ 1/e1 1/e8 RX,TX Active 1/e2 1/e8 RX,TX Active 1/e18 1/e8 Active Page 128...
Page 131 Port Monitor Commands Page 129...
Page 132: Chapter 15.Power Over Ethernet Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 15.Power over Ethernet Commands Note The PoE commands are operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT- 8000S/48POE devices. power inline The port inline Interface Configuration (Ethernet) mode command configures the administrative mode of inline power on an interface.
Page 133: Power Inline Priority
Power over Ethernet Commands no power inline powered-device Parameters • pd-type—Specifies the type of powered device attached to the interface. (Range: 1-24 characters) Default Configuration This command has no default configuration. Command Mode Interface Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. Example The following example configures a description to an IP-phone to a powered device connected to Ethernet interface 1/e1.
Page 134: Power Inline Usage-Threshold
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example configures the device connected to Ethernet interface 1/e1 as a high-priority powered device. Console(config)# interface ethernet 1/e1 Console(config-if)# power inline priority high power inline usage-threshold The power inline usage-threshold Global Configuration mode command configures the threshold for initiating inline power usage alarms.
Page 135: Show Power Inline
Power over Ethernet Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enables inline power traps to be sent when a power usage threshold is exceeded. Console(config)# power inline traps enable show power inline The show power inline User EXEC mode command displays the information about inline power.
Page 136 Allied Telesyn AT-8000S Switch CLI Reference Guide Port Powered Device State Priority Status Classification [w] ---- ---------------- ----- -------- ------ ----------------- 1/e1 IP Phone Model A Auto High 0.44 - 12.95 2/e1 Wireless AP Model Auto 0.44 - 3.84 3/e1 Auto Console>...
Page 137 Power over Ethernet Commands Absent Counter Counts the number of times power has been removed because powered device dropout was detected. Invalid Signature Counter Counts the number of times an invalid signature of a powered device was detected. Page 135...
Page 138: Chapter 16.Qos Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 16.QoS Commands The qos Global Configuration mode command enables quality of service (QoS) on the device. To disable QoS on the device, use the no form of this command. Syntax no qos Default Configuration QoS is disabled on the device.
Page 139: Priority-Queue Out Num-Of-Queues
QoS Commands Example The following example displays QoS attributes when QoS is disabled on the device. Console> show qos Qos: disable Trust: dscp priority-queue out num-of-queues The priority-queue out num-of-queues Global Configuration mode command configures the number of expedite queues. To return to the default configuration, use the no form of this command. Syntax priority-queue out num-of-queues number-of-queues no priority-queue out num-of-queues...
Page 140: Traffic-Shape
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration 1000 Kbits/Sec Command Mode Interface Configuration mode User Guidelines The command can be enabled on a specific port only if port storm-control broadcast enable interface configuration command is not enabled on that port.
Page 141: Wrr-Queue Cos-Map
QoS Commands Syntax show qos interface [ethernet interface-number | vlan vlan-id | port-channel number] [queuing] Parameters • interface-number — Valid Ethernet port number. • vlan-id— Valid VLAN ID. • number — Valid port-channel number. • queuing — Indicates the queue strategy (WRR or EF), the weight for WRR queues, the CoS to queue map and the EF priority.
Page 142: Qos Map Dscp-Queue
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax wrr-queue cos-map queue-id cos1...cos8 no wrr-queue cos-map [queue-id] Parameters • queue-id — Specifies the queue number to which the CoS values are mapped. • cos1...cos8 — Specifies CoS values to be mapped to a specific queue. (Range: 0-7)
Page 143: Qos Trust (Global)
QoS Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example maps DSCP values 33, 40 and 41 to queue 1. Console(config)# qos map dscp-queue 33 40 41 to 1 qos trust (Global) The qos trust Global Configuration mode command configures the system to the basic mode and trust state.
Page 144: Qos Trust (Interface)
Allied Telesyn AT-8000S Switch CLI Reference Guide qos trust (Interface) The qos trust Interface Configuration (Ethernet, port-channel) mode command enables each port trust state while the system is in the basic QoS mode. To disable the trust state on each port, use the no form of this command.
Page 145: Show Qos Map
QoS Commands Example The following example configures port 1/e15 default CoS value to 3. Console(config)# interface ethernet 1/e15 Console(config-if) qos cos 3 show qos map The show qos map User EXEC mode command displays all QoS maps. Syntax show qos map [dscp-queue] Parameters •...
Page 146 Allied Telesyn AT-8000S Switch CLI Reference Guide The following table describes the significant fields shown above. Column Des cription Decimal Bit 1 of DSCP Decimal Bit 2 of DSCP 01 - 04 Queue numbers Page 144...
Page 147 QoS Commands Page 145...
Page 148: Chapter 17.Radius Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 17.Radius Commands radius-server host The radius-server host Global Configuration mode command specifies a RADIUS server host. To delete the specified RADIUS host, use the no form of this command. Syntax radius-server host {ip-address | hostname} [auth-port auth-port-number] [timeout timeout] [retransmit retries]...
Page 149: Radius-Server Key
Radius Commands Example The following example specifies a RADIUS server host with IP address 192.168.10.1, authentication request port number 20 and a 20-second timeout period. Console(config)# radius-server host 192.168.10.1 auth-port 20 timeout 20 radius-server key The radius-server key Global Configuration mode command sets the authentication and encryption key for all RADIUS communications between the device and the RADIUS daemon.
Page 150: Radius-Server Source-Ip
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • retries — Specifies the retransmit value. (Range: 1 - 10) Default Configuration The software searches the list of RADIUS server hosts 3 times. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command.
Page 151: Radius-Server Timeout
Radius Commands radius-server timeout The radius-server timeout Global Configuration mode command sets the interval during which the device waits for a server host to reply. To return to the default configuration, use the no form of this command. Syntax radius-server timeout timeout no radius-server timeout Parameters •...
Page 152: Show Radius-Servers
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example sets the deadtime to 10 minutes. Console(config)# radius-server deadtime 10 show radius-servers The show radius-servers Privileged EXEC mode command displays the RADIUS server settings.
Page 153 Radius Commands Page 151...
Page 154: Chapter 18.Rmon Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 18.RMON Commands show rmon statistics The show rmon statistics User EXEC mode command displays RMON Ethernet statistics. Syntax show rmon statistics {ethernet interface number | port-channel port-channel-number} Parameters • interface number — Valid Ethernet port.
Page 155 RMON Commands The following table describes significant fields shown above: Field De scrip tio n Octets The total number of octets of data (including those in bad packets) received on the network (excluding framing bits but including FCS octets). Packets The total number of packets (including bad packets, broadcast packets, and multicast packets) received.
Page 156: Rmon Collection History
Allied Telesyn AT-8000S Switch CLI Reference Guide rmon collection history The rmon collection history Interface Configuration (Ethernet, port-channel) mode command enables a Remote Monitoring (RMON) MIB history statistics group on an interface. To remove a specified RMON history statistics group, use the no form of this command.
Page 157: Show Rmon History
RMON Commands Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays all RMON history group statistics. Console> show rmon collection history Index Interface Interval...
Page 158 Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Examples The following examples displays RMON Ethernet history statistics for index 1.
Page 159 RMON Commands Console> show rmon history 1 other Sample Set: 1 Owner: Me Interface: 1/e1 Interval: 1800 Requested samples: 50 Granted samples: 50 Maximum table size: 500 Time Dropped Collisions -------------------- -------- ---------- Jan 18 2002 21:57:00 Jan 18 2002 21:57:30 The following table describes significant fields shown above: Field D escr ip tio n...
Page 160: Rmon Alarm
Allied Telesyn AT-8000S Switch CLI Reference Guide Dropped The total number of events in which packets were dropped by the probe due to lack of resources during this sampling interval. This number is not necessarily the number of packets dropped, it is just the number of times this condition has been detected.
Page 161: Show Rmon Alarm-Table
RMON Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures the following alarm conditions: • Alarm index — 1000 • Variable identifier — ati • Sample interval — 360000 seconds •...
Page 162: Show Rmon Alarm
Allied Telesyn AT-8000S Switch CLI Reference Guide The following table describes significant fields shown above: Field Desc ription Index An index that uniquely identifies the entry. Monitored variable OID. Owner The entity that configured this entry. show rmon alarm The show rmon alarm User EXEC mode command displays alarm configuration.
Page 163: Rmon Event
RMON Commands The following table describes the significant fields shown in the display: Field Desc rip t io n Alarm Alarm index. Monitored variable OID. Last Sample Value The statistic value during the last sampling period. For example, if the sample type is delta, this value is the difference between the samples at the beginning and end of the period.
Page 164: Show Rmon Events
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • index — Specifies the event index. (Range: 1 - 65535) • type — Specifies the type of notification generated by the device about this event. Possible values: none, log, trap, log-trap.
Page 165: Show Rmon Log
RMON Commands Example The following example displays the RMON event table. Console> show rmon events Index Description Type Community Owner Last time sent ----- -------------- -------- --------- ------- -------------------- Errors Jan 18 2002 23:58:17 High Broadcast Log-Trap device Manager Jan 18 2002 23:59:48 The following table describes significant fields shown above: Field De scr ip tio n...
Page 166: Rmon Table-Size
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the RMON log table. Console> show rmon log Maximum table size: 500 Event Description Time ------- -------------- --------- Errors Jan 18 2002 23:48:19 Errors Jan 18 2002 23:58:17...
Page 167 RMON Commands Command Mode Global Configuration mode User Guidelines The configured table size takes effect after the device is rebooted. Example The following example configures the maximum RMON history table sizes to 100 entries. Console(config)# rmon table-size history 100 Page 165...
Page 168: Chapter 19.Snmp Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 19.SNMP Commands snmp-server community The snmp-server community Global Configuration mode command configures the community access string to permit access to the SNMP protocol. To remove the specified community string, use the no form of this command.
Page 169: Snmp-Server View
SNMP Commands Examples The following example defines community access string public to permit administrative access to SNMP protocol at an administrative station with IP address 192.168.1.20. Console(config)# snmp-server community public su 192.168.1.20 snmp-server view The snmp-server view Global Configuration mode command creates or updates a Simple Network Management Protocol (SNMP) server view entry.
Page 170: Snmp-Server Group
Allied Telesyn AT-8000S Switch CLI Reference Guide snmp-server group The snmp-server group Global Configuration mode command configures a new Simple Management Protocol (SNMP) group or a table that maps SNMP users to SNMP views. To remove a specified SNMP group, use the no form of this command.
Page 171 SNMP Commands Syntax snmp-server user username groupname [remote engineid-string] [ auth-md5 password | auth-sha password | auth-md5-key md5-des-keys | auth-sha-key sha-des-keys ] no snmp-server user username [remote engineid-string] Parameters • username—Specifies the name of the user on the host that connects to the agent. (Range: 1-30 characters) •...
Page 172: Snmp-Server Engineid Local
Allied Telesyn AT-8000S Switch CLI Reference Guide snmp-server engineID local The snmp-server engineID local Global Configuration mode command specifies the Simple Network Management Protocol (SNMP) engineID on the local device. To remove the configured engine ID, use the no form of this command.
Page 173: Snmp-Server Enable Traps
SNMP Commands The show running-config Privileged EXEC mode command does not display the SNMP engine ID configuration. To see the SNMP engine ID configuration, enter the snmp-server engineID local Global Configuration mode command. Examples The following example enables SNMPv3 on the device and sets the local engine ID of the device to the default value.
Page 174: Snmp-Server Host
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • filter-name—Specifies the label for the filter record that is being updated or created. The name is used to reference the record. (Range: 1-30 characters) • oid-tree—Specifies the object identifier of the ASN.1 subtree to be included or excluded from the view. To identify the subtree, specify a text string consisting of numbers, such as 1.3.6.2.4, or a word, such as system.
Page 175: Snmp-Server V3-Host
SNMP Commands Parameters • ip-address—Specifies the IP address of the host (targeted recipient). • hostname—Specifies the name of the host. (Range:1-158 characters) • community-string—Specifies a password-like community string sent with the notification operation. (Range: 1-20) • traps—Indicates that SNMP traps are sent to this host. If unspecified, SNMPv2 traps are sent to the host. •...
Page 176: Snmp-Server Trap Authentication
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • ip-address—Specifies the IP address of the host (targeted recipient). • hostname—Specifies the name of the host. (Range:1-158 characters) • username—Specifies the name of the user to use to generate the notification. (Range: 1-25) •...
Page 177: Snmp-Server Contact
SNMP Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example enables SNMP failed authentication traps. Console(config)# snmp-server trap authentication snmp-server contact The snmp-server contact Global Configuration mode command configures the system contact (sysContact) string.
Page 178: Snmp-Server Set
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • text — Specifies a string that describes system location information. (Range: 0-160 characters) Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines Do not include spaces in the text string or place text that includes spaces inside quotation marks.
Page 179: Show Snmp
SNMP Commands show snmp The show snmp Privileged EXEC mode command displays the SNMP status. Syntax show snmp Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the SNMP communications status.
Page 180: Show Snmp Engineid
Allied Telesyn AT-8000S Switch CLI Reference Guide Version 3 notifications Target Address Type Username Security Filter Retries Level Port Name -------------- ----- --------- ------- ---- ------ ------- 192.122.173.42 Inform Priv System Contact: Robert System Location: Marketing The following table describes significant fields shown above.
Page 181: Show Snmp Views
SNMP Commands show snmp views The show snmp views Privileged EXEC mode command displays the configuration of views. Syntax show snmp views [viewname] Parameters • viewname — Specifies the name of the view. (Range: 1-30) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines...
Page 182: Show Snmp Filters
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example displays the configuration of views. Console# show snmp groups Name Security Views Model Level Read Write Notify -------------- -----...
Page 183: Show Snmp Users
SNMP Commands User Guidelines There are no user guidelines for this command. Example The following example displays the configuration of filters. Console# show snmp filters Name OID Tree Type ----------- ----------------------- --------- user-filter 1.3.6.1.2.1.1 Included user-filter 1.3.6.1.2.1.1.7 Excluded user-filter 1.3.6.1.2.1.2.2.1.*.1 Included show snmp users The show snmp users Privileged EXEC mode command displays the configuration of users.
Page 184: Chapter 20.Spanning-Tree Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 20.Spanning-Tree Commands spanning-tree The spanning-tree Global Configuration mode command enables spanning-tree functionality. To disable spanning-tree functionality, use the no form of this command. Syntax spanning-tree no spanning-tree Default Configuration Spanning-tree is enabled.
Page 185: Spanning-Tree Forward-Time
Spanning-Tree Commands Command Modes Global Configuration mode User Guidelines In RSTP mode, the device uses STP when the neighbor device uses STP. In MSTP mode, the device uses RSTP when the neighbor device uses RSTP and uses STP when the neighbor device uses STP.
Page 186: Spanning-Tree Max-Age
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax spanning-tree hello-time seconds no spanning-tree hello-time Parameters • seconds — Time in seconds. (Range: 1 - 10) Default Configuration The default hello time for IEEE Spanning Tree Protocol (STP) is 2 seconds.
Page 187: Spanning-Tree Priority
Spanning-Tree Commands Example The following example configures the spanning tree bridge maximum-age to 10 seconds. Console(config)# spanning-tree max-age 10 spanning-tree priority The spanning-tree priority Global Configuration mode command configures the spanning tree priority of the device. The priority value is used to determine which bridge is elected as the root bridge. To return to the default configuration, use the no form of this command.
Page 188: Spanning-Tree Cost
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example disables spanning-tree on Ethernet port 1/e5. Console(config)# interface ethernet 1/e5 Console(config-if)# spanning-tree disable spanning-tree cost The spanning-tree cost Interface Configuration mode command configures the spanning tree path cost for a port.
Page 189: Spanning-Tree Port-Priority
Spanning-Tree Commands spanning-tree port-priority The spanning-tree port-priority Interface Configuration mode command configures port priority. To return to the default configuration, use the no form of this command. Syntax spanning-tree port-priority priority no spanning-tree port-priority Parameters • priority — The priority of the port. (Range: 0 - 240 in multiples of 16) Default Configuration The default port priority for IEEE Spanning TreeProtocol (STP) is 128.
Page 190: Spanning-Tree Link-Type
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example enables PortFast on Ethernet port 1/e15 Console(config)# interface ethernet 1/e15 Console(config-if)# spanning-tree portfast spanning-tree link-type The spanning-tree link-type Interface Configuration mode command overrides the default link-type setting determined by the duplex mode of the port and enables Rapid Spanning Tree Protocol (RSTP) transitions to the forwarding state.
Page 191: Spanning-Tree Bpdu
Spanning-Tree Commands Parameters • long — Specifies port path costs with a range of 1-200,000,000 . • short — Specifies port path costs with a range of 0-65,535. Default Configuration Short path cost method. Command Mode Global Configuration mode User Guidelines This command applies to all spanning tree instances on the device.
Page 192: Clear Spanning-Tree Detected-Protocols
Allied Telesyn AT-8000S Switch CLI Reference Guide clear spanning-tree detected-protocols The clear spanning-tree detected-protocols Privileged EXEC mode command restarts the protocol migration process (forces renegotiation with neighboring devices) on all interfaces or on a specified interface. Syntax clear spanning-tree detected-protocols [ethernet interface | port-channel port-channel-number] Parameters •...
Page 193: Spanning-Tree Mst Max-Hops
Spanning-Tree Commands User Guidelines The device with the lowest priority is selected as the root of the spanning tree. Example The following example configures the spanning tree priority of instance 1 to 4096. Console (config) # spanning-tree mst 1 priority 4096 spanning-tree mst max-hops The spanning-tree mst priority Global Configuration mode command configures the number of hops in an MST region before the BDPU is discarded and the port information is aged out.
Page 194: Spanning-Tree Mst Cost
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • instance-ID—ID of the spanning tree instance. (Range: 1-16) • priority—The port priority. (Range: 0 - 240 in multiples of 16) Default Configuration The default port priority for IEEE Multiple Spanning Tree Protocol (MSTP) is 128.
Page 195: Spanning-Tree Mst Configuration
Spanning-Tree Commands User Guidelines There are no user guidelines for this command. Example The following example configures the MSTP instance 1 path cost for Ethernet port 1/e9 to 4. Console(config) # interface ethernet 1/e9 Console(config-if) # spanning-tree mst 1 cost 4 spanning-tree mst configuration The spanning-tree mst configuration Global Configuration mode command enables configuring an MST region by entering the Multiple Spanning Tree (MST) mode.
Page 196: Name (Mst)
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration VLANs are mapped to the common and internal spanning tree (CIST) instance (instance 0). Command Modes MST Configuration mode User Guidelines All VLANs that are not explicitly mapped to an MST instance are mapped to the common and internal spanning tree (CIST) instance (instance 0) and cannot be unmapped from the CIST.
Page 197: Revision (Mst)
Spanning-Tree Commands revision (mst) The revision MST configuration command defines the configuration revision number. To return to the default configuration, use the no form of this command. Syntax revision value no revision Parameters • value—Configuration revision number (Range: 0-65535). Default Configuration The default configuration revision number is 0.
Page 198: Exit (Mst)
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines The pending MST region configuration takes effect only after exiting the MST configuration mode. Example The following example displays a pending MST region configuration. Console(config-mst)# show pending Pending MST configuration Name: Region1...
Page 199: Show Spanning-Tree
Spanning-Tree Commands Default Configuration This command has no default configuration. Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command. Example The following example exits the MST configuration mode without saving changes. Console(config) # spanning-tree mst configuration Console(config-mst) # abort show spanning-tree The show spanning-tree Privileged EXEC mode command displays spanning-tree configuration.
Page 200 Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example displays spanning-tree information. Console# show spanning-tree Spanning tree enabled mode RSTP Default port cost method: long Root ID Priority 32768 Address 00:01:42:97:e0:00 Path Cost 20000 Root Port 1 (1/e1)
Page 201 Spanning-Tree Commands ---- ------- -------- ----- ---- -------- ---------- 1/e1 Enabled 128.1 20000 Desg P2p (RSTP) 1/e2 Enabled 128.2 20000 Desg Shared (STP) 1/e3 Disabled 128.3 20000 1/e4 Enabled 128.4 20000 Desg Shared (STP) 1/e5 Enabled 128.5 20000 Console# show spanning-tree Spanning tree disabled (BPDU filtering) mode RSTP Default port cost method: long Root ID...
Page 202 Allied Telesyn AT-8000S Switch CLI Reference Guide Console# show spanning-tree active Spanning tree enabled mode RSTP Default port cost method: long Root ID Priority 32768 Address 00:01:42:97:e0:00 Path Cost 20000 Root Port 1 (1/e1) Hello Time 2 sec Max Age 20 sec...
Page 203 Spanning-Tree Commands Name State Prio.Nbr Cost Role PortFast Type ---- ------- -------- ----- ---- -------- ---------- 1/e4 Enabled 128.4 20000 ALTN Shared (STP) Console# show spanning-tree detail Spanning tree enabled mode RSTP Default port cost method: long Root ID Priority 32768 Address 00:01:42:97:e0:00...
Page 204 Allied Telesyn AT-8000S Switch CLI Reference Guide Number of transitions to forwarding state: 1 BPDU: sent 2, received 170638 Port 3 (1/e3) disabled State: N/A Role: N/A Port id: 128.3 Port cost: 20000 Type: N/A (configured: auto) Port Fast: N/A (configured:no)
Page 205 Spanning-Tree Commands Console# show spanning-tree ethernet 1/e1 Port 1 (1/e1) enabled State: Forwarding Role: Root Port id: 128.1 Port cost: 20000 Type: P2p (configured: auto) RSTP Port Fast: No (configured:no) Designated bridge Priority: 32768 Address: 00:01:42:97:e0:00 Designated port id: 128.25 Designated path cost: 0 Number of transitions to forwarding state: 1 BPDU: sent 2, received 120638...
Page 206 Allied Telesyn AT-8000S Switch CLI Reference Guide Name State Prio.Nbr Cost Role PortFast Type ---- ------- -------- ----- ---- -------- ---------- 1/e1 Enabled 128.1 20000 Root P2p Bound (RSTP) 1/e2 Enabled 128.2 20000 Desg Shared Bound (STP) 1/e3 Enabled 128.3...
Page 207 Spanning-Tree Commands Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec IST Master ID Priority 32768 Address 00:02:4b:29:7a:00 This switch is the IST master. Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Max hops Number of topology changes 2 last change occurred 2d18h ago Times: hold 1, topology change 35, notification 2...
Page 208 Allied Telesyn AT-8000S Switch CLI Reference Guide Port 4 (1/e4) enabled State: Forwarding Role: Designated Port id: 128.4 Port cost: 20000 Type: Shared (configured: auto) Internal Port Fast: No (configured:no) Designated bridge Priority: 32768 Address: 00:02:4b:29:7a:00 Designated port id: 128.2...
Page 209 Spanning-Tree Commands BPDU: sent 2, received 170638 Port 3 (1/e3) disabled State: Blocking Role: Alternate Port id: 128.3 Port cost: 20000 Type: Shared (configured: auto) Internal Port Fast: No (configured:no) Designated bridge Priority: 32768 Address: 00:02:4b:29:1a:19 Designated port id: 128.78 Designated path cost: 20000 Number of transitions to forwarding state: 1 BPDU: sent 2, received 170638...
Page 210 Allied Telesyn AT-8000S Switch CLI Reference Guide Address 00:02:4b:29:7a:00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Max hops Console# show spanning-tree Spanning tree enabled mode MSTP Default port cost method: long ###### MST 0 Vlans Mapped: 1-9, 21-4094...
Page 211 Spanning-Tree Commands Page 209...
Page 212: Chapter 21.Ssh Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 21.SSH Commands ip ssh port The ip ssh port Global Configuration mode command specifies the port to be used by the SSH server. To return to the default configuration, use the no form of this command.
Page 213: Crypto Key Generate Dsa
SSH Commands User Guidelines If encryption keys are not generated, the SSH server is in standby until the keys are generated. To generate SSH server keys, use the crypto key generate dsa, and crypto key generate rsa Global Configuration mode commands.
Page 214: Ip Ssh Pubkey-Auth
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Global Configuration mode User Guidelines RSA keys are generated in pairs: one public RSA key and one private RSA key. If the device already has RSA keys, a warning and prompt to replace the existing keys with new keys are displayed.
Page 215: User-Key
SSH Commands Syntax crypto key pubkey-chain ssh Default Configuration No keys are specified. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enters the SSH Public Key-chain Configuration mode and manually configures the RSA key pair for SSH public key-chain bob.
Page 216: Key-String
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • username — Specifies the username of the remote SSH client. (Range: 1-48 characters) • rsa — Indicates the RSA key pair. • dsa — Indicates the DSA key pair. Default Configuration No SSH public keys exist.
Page 217: Show Ip Ssh
SSH Commands Use the key-string row SSH Public Key-string Configuration mode command to specify the SSH public key row by row. Each row must begin with a key-string row command. This command is useful for configuration files. Example The following example enters public key strings for SSH public key client bob. Console(config)# crypto key pubkey-chain ssh Console(config-pubkey-chain)# user-key bob rsa Console(config-pubkey-key)# key-string...
Page 218: Show Crypto Key Mypubkey
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the SSH server configuration. Console# show ip ssh SSH server enabled. Port: 22 RSA key was generated. DSA (DSS) key was generated. SSH Public Key Authentication is enabled.
Page 219: Show Crypto Key Pubkey-Chain Ssh
SSH Commands Example The following example displays the SSH public RSA keys on the device. Console# show crypto key mypubkey rsa RSA key data: 005C300D 06092A86 4886F70D 01010105 00034B00 30480241 00C5E23B 55D6AB22 04AEF1BA A54028A6 9ACC01C5 129D99E4 64CAB820 847EDAD9 DF0B4E4C 73A05DD2 BD62A8A9 FA603DD2 E2A8A6F8 98F76E28 D58AD221 B583D7A4 71020301 87685768 Fingerprint(Hex): 77:C7:19:85:98:19:27:96:C9:CC:83:C5:78:89:F8:86 Fingerprint(Bubble Babble): yteriuwt jgkljhglk yewiury hdskjfryt gfhkjglk...
Page 220 Allied Telesyn AT-8000S Switch CLI Reference Guide Key: 005C300D 06092A86 4886F70D 01010105 00034B00 30480241 00C5E23B 55D6AB22 04AEF1BA A54028A6 9ACC01C5 129D99E4 Fingerprint: 9A:CC:01:C5:78:39:27:86:79:CC:23:C5:98:59:F1:86 Page 218...
Page 221 SSH Commands Page 219...
Page 222: Chapter 22.Syslog Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 22.Syslog Commands logging on The logging on Global Configuration mode command controls error message logging. This command sends debug or error messages to a logging process, which logs messages to designated locations asynchronously to the process that generated the messages.
Page 223: Logging Console
Syslog Commands Parameters • ip-address — IP address of the host to be used as a syslog server. • hostname — Specifies the host name of the syslog server. (Range: 1-158 characters) • port — Specifies the port number for syslog messages. (Range: 1 - 65535) •...
Page 224: Logging Buffered
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example limits logging messages displayed on the console to severity level errors. Console(config)# logging console errors...
Page 225: Clear Logging
Syslog Commands Syntax logging buffered size number no logging buffered size Parameters • number — Specifies the maximum number of messages stored in the history table. (Range: 20 - 400) Default Configuration The default number of messages is 200. Command Mode Global Configuration mode User Guidelines This command takes effect only after Reset.
Page 226: Logging File
Allied Telesyn AT-8000S Switch CLI Reference Guide logging file The logging file Global Configuration mode command limits syslog messages sent to the logging file based on severity. To cancel using the buffer, use the no form of this command. Syntax...
Page 227: Aaa Logging
Syslog Commands Example The following example clears messages from the logging file. Console# clear logging file Clear Logging File [confirm] aaa logging The aaa logging Global Configuration mode command enables logging AAA login events. To disable logging AAA login events, use the no form of this command. Syntax aaa logging login no aaa logging login...
Page 228: Management Logging
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • copy — Indicates logging messages related to file copy operations. • delete-rename — Indicates logging messages related to file deletion and renaming operations. Default Configuration Logging file system events is enabled.
Page 229: Show Logging
Syslog Commands show logging The show logging Privileged EXEC mode command displays the state of logging and the syslog messages stored in the internal buffer. Syntax show logging Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command.
Page 230: Show Logging File
Allied Telesyn AT-8000S Switch CLI Reference Guide 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/2, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/3, changed state to up 11-Aug-2004 15:41:43: %SYS-5-CONFIG_I: Configured from memory by console 11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0,...
Page 231: Show Syslog-Servers
Syslog Commands ----------- ----- ------ Login Enabled File system Copy Enabled File system Delete-Rename Enabled Management ACL Deny Enabled Buffer log: 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/0, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/1, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/2, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/3, changed state to up 11-Aug-2004 15:41:43: %SYS-5-CONFIG_I: Configured from memory by console...
Page 232 Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the settings of the syslog servers. Console# show syslog-servers Device Configuration IP address Port Severity Facility Description ------------ ---- ------------- -------- ----------- 192.180.2.27 Informational local7 192.180.2.28 Warning local7...
Page 233 Syslog Commands Page 231...
Page 234: Chapter 23.System Management Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 23.System Management Commands ping The ping User EXEC mode command sends ICMP echo request packets to another node on the network. Syntax ping {ip-address | hostname }[size packet_size] [count packet_count] [timeout time_out] Parameters •...
Page 235 System Management Commands Examples The following example displays pinging results: Console> ping 10.1.1.1 Pinging 10.1.1.1 with 64 bytes of data: 64 bytes from 10.1.1.1: icmp_seq=0. time=11 ms 64 bytes from 10.1.1.1: icmp_seq=1. time=8 ms 64 bytes from 10.1.1.1: icmp_seq=2. time=8 ms 64 bytes from 10.1.1.1: icmp_seq=3.
Page 236: Reload
Allied Telesyn AT-8000S Switch CLI Reference Guide reload The reload Privileged EXEC mode command reloads the operating system. Syntax reload Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines Caution should be exercised when resetting the device, to ensure that no other activity is being performed. In particular, the user should verify that no configuration files are being downloaded at the time of reset.
Page 237: Stack Master
Marvell(config)# stack master Note This command is operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT-8000S/ 48POE devices. The stack master Global Configuration mode command enables forcing the selection of a stack master. To return to the default configuration, use the no form of this command.
Page 238: Stack Reload
Allied Telesyn AT-8000S Switch CLI Reference Guide stack reload Note This command is operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT-8000S/ 48POE devices. The stack reload Privileged EXEC mode command reloads stack members. Syntax stack reload [unit unit] Parameters •...
Page 239: Stack Change Unit-Id
Console(config)# stack display-order top 6 bottom 1 stack change unit-id Note This command is operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT-8000S/ 48POE devices. The stack change unit-id Global Configuration mode command is used to change the Unit ID of a specific unit.
Page 240: Show Stack
Console# config Console(config)# stack change unit-id 6 to 5 show stack Note This command is operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT-8000S/ 48POE devices. The show stack User EXEC mode command displays information about the status of a stack. Syntax...
Page 241: Show Users
System Management Commands Console> show stack Unit Address Software Master Uplink Downlink Status ---- ----------------- -------- ------ ------ -------- ------ 00:00:b0:87:12:13 1.0.0.0 Slave 00:00:b0:87:12:14 1.0.0.0 Slave 00:00:b0:87:12:15 1.0.0.0 Slave 00:00:b0:87:12:16 1.0.0.0 Slave 00:00:b0:87:12:12 1.0.0.0 Forced Master 00:00:b0:87:12:11 1.0.0.0 Enabled Slave Configured order: Unit 1 at Top, Unit 6 at bottom Can’t display order as requested.
Page 242: Show Sessions
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays information about the active users. Console show users Username Protocol Location ---------- ----------- ------------ Serial John 172.16.0.1 Robert HTTP 172.16.0.8 Betty Telnet 172.16.1.7 show sessions The show sessions User EXEC mode command lists open Telnet sessions.
Page 243: Show System
System Management Commands Field D escr ip tio n Address IP address of the remote host. Port Telnet TCP port number Byte Number of unread bytes for the user to see on the connection. show system The show system User EXEC mode command displays system information. Syntax show system [unit unit] Parameters...
Page 244 Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax show version [unit unit] Parameters • unit— Specifies the number of the unit. (Range: 1-6) Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command.
Page 245 System Management Commands Page 243...
Page 246: Chapter 24.Tacacs+ Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 24.TACACS+ Commands tacacs-server host The tacacs-server host Global Configuration mode command specifies a TACACS+ host. To delete the specified name or address, use the no form of this command. Syntax tacacs-server host {ip-address | hostname} [single-connection] [port port-number] [timeout timeout] [key key-...
Page 247: Tacacs-Server Key
TACACS+ Commands Example The following example specifies a TACACS+ host. Console(config)# tacacs-server host 172.16.1.1 tacacs-server key The tacacs-server key Global Configuration mode command sets the authentication encryption key used for all TACACS+ communications between the device and the TACACS+ daemon. To disable the key, use the no form of this command.
Page 248: Tacacs-Server Source-Ip
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration 5 seconds Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example sets the timeout value to 30. Console(config)# tacacs-server timeout 30...
Page 249 TACACS+ Commands Syntax show tacacs [ip-address] Parameters • ip-address — Name or IP address of the TACACS+ server. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example displays configuration and statistical information about a TACACS+ server.
Page 250: Chapter 25.User Interface Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 25.User Interface Commands enable The enable User EXEC mode command enters the Privileged EXEC mode. Syntax enable [privilege-level] Parameters • privilege-level — Privilege level to enter the system. (Range: 1 - 15) Default Configuration The default privilege level is 15.
Page 251: Login
User Interface Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example return to Users EXEC mode. Console# disable Console> login The login User EXEC mode command changes a login username. Syntax login Default Configuration...
Page 252: Exit (Configuration)
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example enters Global Configuration mode. Console# configure Console(config)# exit (Configuration) The exit command exits any configuration mode to the next highest mode in the CLI mode hierarchy.
Page 253: End
User Interface Commands Command Mode Privileged and User EXEC modes User Guidelines There are no user guidelines for this command. Example The following example closes an active terminal session. Console> exit The end command ends the current configuration session and returns to the Privileged EXEC mode. Syntax Default Configuration This command has no default configuration.
Page 254: Terminal Data-Dump
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example describes the help system Console# help Help may be requested at any point in a command by entering a question mark '?'. If nothing matches the currently entered incomplete command, the help list is empty.
Page 255: Show History
User Interface Commands show history The show history User EXEC mode command lists the commands entered in the current session. Syntax show history Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines The buffer includes executed and unexecuted commands. Commands are listed from the first to the most recent command.
Page 256 Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example displays the current privilege level for the Privileged EXEC mode. Console# show privilege Current privilege level is 15 Page 254...
Page 257 User Interface Commands Page 255...
Page 258: Chapter 26.Vlan Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 26.VLAN Commands vlan database The vlan database Global Configuration mode command enters the VLAN Configuration mode. Syntax vlan database Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command.
Page 259: Interface Vlan
VLAN Commands User Guidelines There are no user guidelines for this command. Example The following example VLAN number 1972 is created. Console(config)# vlan database Console(config-vlan)# vlan 1972 interface vlan The interface vlan Global Configuration mode command enters the Interface Configuration (VLAN) mode. Syntax interface vlan vlan-id Parameters...
Page 260: Name
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each interface in the range. If the command returns an error on one of the interfaces, an error message is displayed and execution of the command continues on the other interfaces.
Page 261: Switchport Protected
VLAN Commands switchport protected The switchport protected Interface Configuration mode command enables Private VLAN Edge, by overriding the FDB decision, and sends all Unicast, Multicast and Broadcast traffic to an uplink port. To disable overriding the FDB decision, use the no form of this command. Syntax switchport protected {ethernet port | port-channel port-channel-number } no switchport protected...
Page 262: Switchport Access Vlan
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • access — Indicates an untagged layer 2 VLAN port. • trunk — Indicates a trunking layer 2 VLAN port. • general — Indicates a full 802-1q supported VLAN port. Default Configuration All ports are in access mode, and belong to the default VLAN (whose VID=1).
Page 263: Switchport Trunk Allowed Vlan
VLAN Commands Example The following example configures a VLAN ID of 23 to the untagged layer 2 VLAN Ethernet port 1/e16. Console(config)# interface ethernet 1/e16 Console(config-if)# switchport access vlan 23 switchport trunk allowed vlan The switchport trunk allowed vlan Interface Configuration mode command adds or removes VLANs to or from a trunk port.
Page 264: Switchport General Allowed Vlan
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • vlan-id— Specifies the ID of the native VLAN. Default Configuration VID=1. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines The command adds the port as a member in the VLAN. If the port is already a member in the VLAN (not as a native), it should be first removed from the VLAN.
Page 265: Switchport General Pvid
VLAN Commands Example The following example adds VLANs 2, 5, and 6 to the allowed list of Ethernet port 1/e16 . Console(config)# interface ethernet 1/e16 Console(config-if)# switchport general allowed vlan add 2,5-6 tagged switchport general pvid The switchport general pvid Interface Configuration mode command configures the PVID when the interface is in general mode.
Page 266: Switchport General Map Macs-Group Vlan
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example configures Ethernet port 1/e16 to discard untagged frames at ingress. Console(config)# interface ethernet 1/e16...
Page 267: Map Mac Macs-Group
VLAN Commands map mac macs-group The map mac macs-group VLAN Configuration mode command maps a MAC address or a range of MAC addresses to a group of MAC addresses. Use the no form of this command to delete a map. Syntax map mac mac-address {prefix-mask | host} macs-group group no map mac mac-address {prefix-mask | host}...
Page 268: Switchport Forbidden Vlan
Allied Telesyn AT-8000S Switch CLI Reference Guide Example Console# show vlan macs-groups MAC Address Mask Group ID -------------- -------------- -------- 0060.704C.73FF FFFF.FFFF.0000 0060.704D.73FF FFFF.FFFF.0000 switchport forbidden vlan The switchport forbidden vlan Interface Configuration mode command forbids adding specific VLANs to a port.
Page 269: Show Vlan
VLAN Commands Parameters • vlan-id — Specifies the ID of the internal usage VLAN. Default Configuration The software reserves a VLAN as the internal usage VLAN of an interface. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines An internal usage VLAN is required when an IP interface is configured on an Ethernet port or port-channel. This command enables the user to configure the internal usage VLAN of a port.
Page 270: Show Vlan Internal Usage
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays all VLAN information. Console# show vlan VLAN Name Ports Type Authorization ---- ------- -------- ---- ------------- default 1/e1-e2, 2/e1-e4 other Required VLAN0010 1/e3-e4 dynamic Required VLAN0011 1/e1-e2 static...
Page 271: Show Interfaces Switchport
VLAN Commands 1008 Eth 1/e22 Inactive 1009 Eth 1/e23 Active show interfaces switchport The show interfaces switchport Privileged EXEC mode command displays the switchport configuration. Syntax show interfaces switchport {ethernet interface | port-channel port-channel-number} Parameters • interface — A valid Ethernet port number. •...
Page 272 Allied Telesyn AT-8000S Switch CLI Reference Guide VLAN011 tagged Static IPv6 VLAN untagged Static VLAN0072 untagged Static Static configuration: PVID: 1 (default) Ingress Filtering: Enabled Acceptable Frame Type: All Port 1/e1 is statically configured to: Vlan Name Egress rule ----...
Page 273: Vlan Commands
VLAN Commands Ingress Filtering: Disabled Acceptable Frame Type: All Port 1/e2 is statically confgiured to: Vlan Name Egress rule ---- ------------ ----------- VLAN0072 untagged IP Telephony tagged Forbidden VLANS: VLAN Name ---- ---- Port 2/e19 Static configuration: PVID: 2922 Ingress Filtering: Enabled Acceptable Frame Type: Untagged GVRP status: Disabled Page 271...
Page 274: Chapter 27.Web Server Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 27.Web Server Commands ip http server The ip http server Global Configuration mode command enables configuring the device from a browser. To disable this function, use the no form of this command.
Page 275: Ip Https Server
Web Server Commands User Guidelines Use the crypto certificate generate Global Configuration mode command to generate an HTTPS certificate. Specifying 0 as the port number effectively disables HTTP access to the device. Example The following example configures the http port number to 100. Console(config)# ip http port 100 ip https server The ip https server Global Configuration mode command enables configuring the device from a secured...
Page 276: Crypto Certificate Generate
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration The default port number is 443. Command Mode Global Configuration mode User Guidelines Specifying 0 as the port number effectively disables HTTP access to the device. Example The following example configures the https port number to 100.
Page 277: Crypto Certificate Request
Web Server Commands Command Mode Global Configuration mode User Guidelines The command is not saved in the device configuration; however, the certificate and keys generated by this command are saved in the private configuration (which is never displayed to the user or backed up to another device).
Page 278: Crypto Certificate Import
Allied Telesyn AT-8000S Switch CLI Reference Guide After receiving the certificate from the Certification Authority, use the crypto certificate import Global Configuration mode command to import the certificate into the device. This certificate replaces the self-signed certificate. Examples The following example generates and displays a certificate request for HTTPS.
Page 279: Ip Https Certificate
Web Server Commands If the public key found in the certificate does not match the device's SSL RSA key, the command fails. This command is not saved in the device configuration; however, the certificate imported by this command is saved in the private configuration (which is never displayed to the user or backed up to another device). Examples The following example imports a certificate signed by Certification Authority for HTTPS.
Page 280: Show Crypto Certificate Mycertificate
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example configures the active certificate for HTTPS. Console(config)# ip https certificate 1 show crypto certificate mycertificate The show crypto certificate mycertificate Privileged EXEC mode command displays the SSH certificates of the device.
Page 281: Show Ip Https
Web Server Commands Syntax show ip http Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the HTTP server configuration. Console# show ip http HTTP server enabled.
Page 282 Allied Telesyn AT-8000S Switch CLI Reference Guide Certificate 2 is inactive Issued by: self-signed Valid from: 8/9/2004 to 8/9/2005 Subject: CN= router.gm.com, 0= General Motors, C= US Finger print: 1873B936 88DC3411 BC8932EF 782134BA Page 280...
Page 283 Web Server Commands Page 281...
Page 284: Chapter 28.802.1X Commands
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 28.802.1x Commands aaa authentication dot1x The aaa authentication dot1x Global Configuration mode command specifies one or more authentication, authorization, and accounting (AAA) methods for use on interfaces running IEEE 802.1X. To return to the default configuration, use the no form of this command.
Page 285: Dot1X Port-Control
802.1x Commands no dot1x system-auth-control Default Configuration 802.1x is disabled globally. Command Modes Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example enables 802.1x globally. Console(config)# dot1x system-auth-control dot1x port-control The dot1x port-control Interface Configuration mode command enables manually controlling the authorization state of the port.
Page 286: Dot1X Re-Authentication
Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example enables 802.1X authentication on Ethernet port 1/e16. Console(config)# interface ethernet 1/e16 Console(config-if)# dot1x port-control auto dot1x re-authentication The dot1x re-authentication Interface Configuration mode command enables periodic re-authentication of the client.
Page 287: Dot1X Re-Authenticate
802.1x Commands Command Mode Interface Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. Examples The following example sets the number of seconds between re-authentication attempts, to 300. Console(config)# interface ethernet 1/e16 Console(config-if)# dot1x timeout re-authperiod 300 dot1x re-authenticate The dot1x re-authenticate Privileged EXEC mode command manually initiates a re-authentication of all 802.1X- enabled ports or the specified 802.1X-enabled port.
Page 288: Dot1X Timeout Tx-Period
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • seconds — Specifies the time in seconds that the device remains in the quiet state following a failed authentication exchange with the client. (Range: 0 - 65535 seconds) Default Configuration Quiet period is 60 seconds.
Page 289: Dot1X Max-Req
802.1x Commands User Guidelines The default value of this command should be changed only to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with certain clients. and authentication servers Examples The following command sets the number of seconds that the device waits for a response to an EAP-request/ identity frame, to 3600 seconds.
Page 290: Dot1X Timeout Server-Timeout
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax dot1x timeout supp-timeout seconds no dot1x timeout supp-timeout Parameters • seconds — Time in seconds that the device waits for a response to an EAP-request frame from the client before resending the request. (Range: 1- 65535 seconds) Default Configuration Default timeout period is 30 seconds.
Page 291: Show Dot1X
802.1x Commands User Guidelines The actual timeout can be determined by comparing the dot1x timeout server-timeout value and the result of multiplying the radius-server retransmit value with the radius-server timeout value and selecting the lower of the two values. Examples The following example sets the time for the retransmission of packets to the authentication server to 3600 seconds.
Page 292 Allied Telesyn AT-8000S Switch CLI Reference Guide 1/e5 Force-auth Unauthorized* 3600 * Port is down or not present. Console# show dot1x ethernet 1/e3 802.1x is enabled. Port Admin Mode Oper Mode Reauth Reauth Username Control Period ---- ---------- --------- -------...
Page 293: Show Dot1X Users
802.1x Commands Username The username representing the identity of the Supplicant. This field shows the username in case the port control is auto. If the port is Authorized, it shows the username of the current user. If the port is unauthorized it shows the last user that was authenticated successfully.
Page 294: Show Dot1X Statistics
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example displays 802.1X users. Console# show dot1x users Port Username Session Time Auth Method MAC Address ----- -------- ------------ -----------...
Page 295 802.1x Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example displays 802.1X statistics for the specified interface. Console# show dot1x statistics ethernet 1/e1 EapolFramesRx: 11 EapolFramesTx: 12 EapolStartFramesRx: 12 EapolLogoffFramesRx: 1 EapolRespIdFramesRx: 3 EapolRespFramesRx: 6...
Page 296: Dot1X Guest-Vlan
Allied Telesyn AT-8000S Switch CLI Reference Guide EapolReqFramesTx The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator. InvalidEapolFramesRx The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.
Page 297: Dot1X Guest-Vlan Enable
802.1x Commands dot1x guest-vlan enable The dot1x vlans guest-vlan enable Interface Configuration mode command enables unauthorized users on the interface access to the Guest VLAN. To disable access, use the no form of this command Syntax dot1x guest-vlan enable no dot1x guest-vlan enable Default Configuration Disabled.
Page 298 Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example displays 802.1X advanced features for the device. Console# show dot1x advanced Guest VLAN: 2 Page 296...
Page 299 802.1x Commands Page 297...
Page 300: Index
Allied Telesyn AT-8000S Switch CLI Reference Guide Index crypto certificate import 276 crypto certificate request 275 crypto key generate dsa 211 crypto key generate rsa 211 crypto key pubkey-chain ssh 212 aaa authentication dot1x 282 aaa authentication dot1x default 282...
Page 301 gvrp enable (Interface) 86 gvrp registration-forbid 88 Keyboard Shortcuts 19 gvrp vlan-creation-forbid 88 key-string 214 help 251 line 106 history 108 logging 220 history size 109 logging buffered 222 hostname 234 logging buffered size 222 how bootvar 65 logging console 221 logging file 224 instance (mst) 193 logging on 220...
Page 302 Allied Telesyn AT-8000S Switch CLI Reference Guide power inline usage-threshold 132 show dot1x advanced 295 Preface 10 show dot1x statistics 292 priority-queue out num-of-queues 137 show dot1x users 291 Privileged EXEC Mode 14 show gvrp configuration 89 show gvrp error-statistics 91...
Page 303 show rmon statistics 152 sntp client poll timer 51 show running-config 63 sntp server 54 show sessions 240 sntp trusted-key 50 show snmp 177 sntp unicast client enable 53 show snmp engineID 178 sntp unicast client poll 54 show snmp filters 180 spanning-tree 182 show snmp groups 179 spanning-tree bpdu 189...
Page 304 Allied Telesyn AT-8000S Switch CLI Reference Guide tacacs-server host 244 tacacs-server key 245 tacacs-server source-ip 246 tacacs-server timeout 245 Terminal Command Buffer 18 terminal history 109 terminal history size 110 test copper-port tdr 118 traffic-shape 138 User EXEC Mode 14...

Allied Telesis AT-8000S Cli Reference Manual

Preface

Chapter 1.Using The CLI

Chapter 2.AAA Commands

Chapter 3.Address Table Commands

Chapter 4.Clock Commands

Chapter 5.Configuration And Image File Commands

Chapter 6.Ethernet Configuration Commands

Chapter 7.GVRP Commands

Chapter 8.IGMP Snooping Commands

Chapter 9.IP Addressing Commands

Chapter 10.Line Commands

Chapter 11.Management ACL Commands

Chapter 12.PHY Diagnostics Commands

Chapter 13.Port Channel Commands

Chapter 14.Port Monitor Commands

Chapter 15.Power Over Ethernet Commands

Chapter 16.Qos Commands

Chapter 17.Radius Commands

Chapter 18.RMON Commands

Chapter 19.SNMP Commands

Chapter 20.Spanning-Tree Commands

Chapter 21.SSH Commands

Chapter 22.Syslog Commands

Chapter 23.System Management Commands

Chapter 24.TACACS+ Commands

Chapter 25.User Interface Commands

Quick Links

Ethernet Switch

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Allied Telesis AT-8000S

Summary of Contents for Allied Telesis AT-8000S