Table of Contents Table of Contents Preface ..........................10 Intended Audience......................... 11 Document Conventions ......................... 11 Contacting Allied Telesyn ......................12 Chapter 1.Using the CLI ..................... 14 Overview............................14 CLI Command Modes ..........................14 Introduction ..............................14 User EXEC Mode ............................14 Privileged EXEC Mode ..........................14 Global Configuration Mode ........................15 Interface Configuration and Specific Configuration Modes..............16 Starting the CLI..........................
Page 4
Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide bridge multicast forbidden forward-all....................33 bridge aging-time..........................34 clear bridge............................35 port security ............................35 port security mode ..........................36 port security max ..........................37 port security routed secure-address ....................37 show bridge address-table ........................
Page 5
Table of Contents description............................70 speed ..............................70 duplex..............................71 negotiation............................72 flowcontrol ............................72 mdix..............................73 back-pressure ............................74 clear counters............................74 set interface active ..........................75 show interfaces advertise........................75 show interfaces configuration.......................76 show interfaces status..........................78 show interfaces description........................79 show interfaces counters ........................80 port storm-control include-multicast (GC) ....................82 port storm-control include-multicast (IC) ....................82 port storm-control broadcast enable ....................83 port storm-control broadcast rate ......................84...
Page 6
Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide Chapter 10.Line Commands .................... 106 line ..............................106 speed..............................106 autobaud............................107 exec-timeout ............................108 history ..............................108 history size............................109 terminal history ..........................109 terminal history size........................... 110 show line............................110 Chapter 11.Management ACL Commands ..............
Page 8
Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide show snmp ............................177 show snmp engineid.......................... 178 show snmp views ..........................179 show snmp groups ..........................179 show snmp filters..........................180 show snmp users..........................181 Chapter 20.Spanning-Tree Commands................182 spanning-tree............................. 182 spanning-tree mode...........................
Allied Telesyn AT-8000S Switch Web Browser Interface User’s Guide Preface This guide describes how to configure an AT-8000S Series switch using the command line interface. The commands are grouped by topic into the following chapters: • Chapter 1. "Using the CLI" — Describes the CLI basic structure and command usage.
Preface Intended Audience • Chapter 23. "System Management Commands" — Display and list system, version or Telnet session information. • Chapter 24. "TACACS+ Commands" — Display configuration and statistical information about a Terminal Access Controller Access Control System (TACACS+) server, or specify a TACACS+ host. •...
You can request technical support online by accessing the Allied Telesyn Knowledge Base Online Support from the following web site: www.alliedtelesyn.com/kb. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 1. Using the CLI Overview This chapter describes how to start using the CLI and the CLI command editing features. CLI Command Modes Introduction To assist in configuring the device, the Command Line Interface (CLI) is divided into different command modes.
Using the CLI Overview Enter the password and press <Enter>. The password is displayed as *. The Privileged EXEC mode prompt is displayed. The Privileged EXEC mode prompt consists of the device host name followed by #. Console# To return from the Privileged EXEC mode to the User EXEC mode, use the disable command. The following example illustrates how to access the Privileged EXEC mode and return to the User EXEC mode: Console>...
Allied Telesyn AT-8000S Switch CLI Reference Guide Interface Configuration and Specific Configuration Modes Interface Configuration mode commands modify specific interface operations. The following are the Interface Configuration modes: • Line Interface — Contains commands to configure the management connections. These include commands such as line timeout settings, etc.
Using the CLI Starting the CLI Starting the CLI The device can be managed over a direct connection to the device console port or via a Telnet connection. The device is managed by entering command keywords and parameters at the prompt. Using the device Command Line Interface (CLI) is very similar to entering commands on a UNIX system.
Allied Telesyn AT-8000S Switch CLI Reference Guide Editing Features Entering Commands A CLI command is a series of keywords and arguments. Keywords identify a command, and arguments specify configuration parameters. For example, in the command show interfaces status ethernet 1/e11, show, interfaces and status are keywords, ethernet is an argument that specifies the interface type, and 1/e11 specifies the port.
Using the CLI Editing Features Negating the Effect of Commands For many configuration commands, the prefix keyword no can be entered to cancel the effect of a command or reset the configuration to the default value. This guide describes the negation effect for all applicable commands. Command Completion If the command entered is incomplete, invalid or has missing or invalid parameters, then the appropriate error message is displayed.
CLI Command Conventions When entering commands there are certain command entry standards that apply to all commands. The following table describes the command conventions. Con ve nti on Desc ri pti on In a command line, square brackets indicates an optional entry. In a command line, curly brackets indicate a selection of compulsory parameters separated by the | character.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 2. AAA Commands aaa authentication login The aaa authentication login Global Configuration mode command defines login authentication. To return to the default configuration, use the no form of this command. Syntax aaa authentication login {default | list-name} method1 [method2...]...
AAA Commands User Guidelines The default and optional list names created with the aaa authentication login command are used with the login authentication command. Create a list by entering the aaa authentication login list-name method command for a particular protocol, where list-name is any character string used to name this list.
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Global Configuration mode User Guidelines The default and optional list names created with the aaa authentication enable command are used with the enable authentication command. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.
AAA Commands enable authentication The enable authentication Line Configuration mode command specifies the authentication method list when accessing a higher privilege level from a remote telnet or console. To return to the default configuration specified by the aaa authentication enable command, use the no form of this command. Syntax enable authentication {default | list-name} no enable authentication...
Allied Telesyn AT-8000S Switch CLI Reference Guide radius Uses the list of all RADIUS servers for authentication. tacacs Uses the list of all TACACS+ servers for authentication. Default Configuration The local user database is checked. This has the same effect as the command ip http authentication local.
AAA Commands User Guidelines The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.
Allied Telesyn AT-8000S Switch CLI Reference Guide Line Login Method List Enable Method List -------------- ----------------- ------------------ Console Console_Login Console_Enable Telnet Default Default Default Default http: Radius, Local https: Radius, Local dot1x: Radius password The password Line Configuration mode command specifies a password on a line. To remove the password, use the no form of this command.
Page 31
AAA Commands Syntax username name [password password] [level level] [encrypted] no username name Parameters • name — The name of the user (Range: 1- 20 characters). • password — The authentication password for the user (Range: 1-159 characters). • level — The user level (Range: 1-15). •...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 3. Address Table Commands bridge address The bridge address Interface Configuration (VLAN) mode command adds a MAC-layer station source address to the bridge table. To delete the MAC address, use the no form of this command.
Address Table Commands Syntax bridge multicast filtering no bridge multicast filtering Default Configuration Filtering multicast addresses is disabled. All multicast addresses are flooded to all ports. Command Mode Global Configuration mode User Guidelines If multicast devices exist on the VLAN, do not change the unregistered multicast addresses state to drop on the switch ports.
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Interface configuration (VLAN) mode User Guidelines If the command is executed without add or remove, the command only registers the group in the bridge database. Static multicast addresses can only be defined on static VLANs.
Address Table Commands User Guidelines Before defining forbidden ports, the multicast group should be registered. Examples In this example, MAC address 0100.5e02.0203 is forbidden on port 2/e9 within VLAN 8. Console(config)# interface vlan 8 Console(config-if)# bridge multicast address 0100.5e.02.0203 Console(config-if)# bridge multicast forbidden address 0100.5e02.0203 add ethernet 2/e9 bridge multicast forward-all The bridge multicast forward-all Interface Configuration (VLAN) mode command enables forwarding all multicast packets on a port.
Address Table Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example In this example the bridge aging time is set to 250. Console(config)# bridge aging-time 250 clear bridge The clear bridge Privileged EXEC mode command removes any learned entries from the forwarding database. Syntax clear bridge Default Configuration...
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • forward — Forwards packets with unlearned source addresses, but does not learn the address. • discard — Discards packets with unlearned source addresses. This is the default if no option is indicated.
Address Table Commands Example In this example, port security mode is set to dynamic for Ethernet interface 1/e7. Console(config)# interface ethernet 1/e7 Console(config-if)# port security mode dynamic port security max The port security max Interface Configuration (Ethernet, port-channel) mode command configures the maximum number of addresses that can be learned on the port while the port is in port security mode.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • mac-address — A valid MAC address. Default Configuration No addresses are defined. Command Mode Interface Configuration (Ethernet, port-channel) mode. Cannot be configured for a range of interfaces (range context). User Guidelines The command enables adding secure MAC addresses to a routed port in port security mode.
Address Table Commands Example In this example, all classes of entries in the bridge-forwarding database are displayed. Console# show bridge address-table Aging time is 300 sec interface mac address Port Type --------- -------------- ---- ------- 00:60:70:4C:73:FF 5/e8 dynamic 00:60:70:8C:73:FF 5/e8 dynamic 00:10:0D:48:37:FF 5/e9...
Address Table Commands show bridge multicast address-table The show bridge multicast address-table User EXEC mode command displays multicast MAC address or IP address table information. Syntax show bridge multicast address-table [vlan vlan-id] [address mac-multicast-address | ip-multicast-address] [format ip | format mac] Parameters •...
Allied Telesyn AT-8000S Switch CLI Reference Guide Example In this example, multicast MAC address and IP address table information is displayed. Console# show bridge multicast address-table Vlan MAC Address Type Ports ---- -------------- ------- ---------- 01:00:5e:02:02:03 static 1/e1, 2/e2 01:00:5e:02:02:08...
Address Table Commands Syntax show bridge multicast filtering vlan-id Parameters • vlan-id — VLAN ID value. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, the multicast configuration for VLAN 1 is displayed.
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, all classes of entries in the port-lock status are displayed: Console# show ports security...
Page 47
Address Table Commands Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, dynamic addresses in currently locked ports are displayed. Console# show ports security addresses Port Status Learning...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 4. Clock Commands clock set The clock set Privileged EXEC mode command manually sets the system clock. Syntax clock set hh:mm:ss day month year clock set hh:mm:ss month day year Parameters •...
Clock Commands Default Configuration No external clock source Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example configures an external time source for the system clock. Console(config)# clock source sntp clock timezone The clock timezone Global Configuration mode command sets the time zone for display purposes.
Allied Telesyn AT-8000S Switch CLI Reference Guide clock summer-time The clock summer-time Global Configuration mode command configures the system to automatically switch to summer time (daylight saving time). To configure the software not to automatically switch to summer time, use the no form of this command.
Clock Commands User Guidelines In both the date and recurring forms of the command, the first part of the command specifies when summer time begins, and the second part specifies when it ends. All times are relative to the local time zone. The start time is relative to standard time.
Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example defines the authentication key for SNTP. Console(config)# sntp authentication-key 8 md5 ClkKey sntp authenticate The sntp authenticate Global Configuration mode command grants authentication for received Simple Network Time Protocol (SNTP) traffic from servers. To disable the feature, use the no form of this command.
Clock Commands Command Mode Global Configuration mode User Guidelines The command is relevant for both received unicast and broadcast. If there is at least 1 trusted key, then unauthenticated messages will be ignored. Examples The following example authenticates key 8. Console(config)# sntp authentication-key 8 md5 ClkKey Console(config)# sntp trusted-key 8 Console(config)# sntp authenticate...
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax sntp broadcast client enable no sntp broadcast client enable Default Configuration The SNTP broadcast client is disabled. Command Mode Global Configuration mode User Guidelines Use the sntp client enable (Interface) Interface Configuration mode command to enable the SNTP client on a specific interface.
Clock Commands sntp client enable (Interface) The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode command enables the Simple Network Time Protocol (SNTP) client on an interface. This applies to both receive broadcast and anycast updates. To disable the SNTP client, use the no form of this command. Syntax sntp client enable no sntp client enable...
Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example enables the device to use the Simple Network Time Protocol (SNTP) to request and accept SNTP traffic from servers. Console(config)# sntp unicast client enable sntp unicast client poll The sntp unicast client poll Global Configuration mode command enables polling for the Simple Network Time Protocol (SNTP) predefined unicast servers.
Clock Commands Default Configuration No servers are defined. Command Mode Global Configuration mode User Guidelines Up to 8 SNTP servers can be defined. To enable predefined unicast clients globally use the sntp unicast client enable Global Configuration mode command. To enabling global polling use the sntp unicast client poll Global Configuration mode command. The sntp client poll timer Global Configuration mode command determines polling time.
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the time and date from the system clock. Console> show clock 15:29:03 PDT(UTC-7) Jun 17 2002 Time source is SNTP Console> show clock detail 15:29:03 PDT(UTC-7) Jun 17 2002...
Clock Commands Authentication is required for synchronization. Trusted Keys: 8, 9 Unicast Clients: Enabled Unicast Clients Polling: Enabled Server Polling Encryption Key ----------- ------- -------------- 176.1.1.8 Enabled 176.1.8.179 Disabled Disabled Broadcast Clients: Enabled Anycast Clients: Enabled Broadcast and Anycast Interfaces: 1/e1, 1/e3 show sntp status The show sntp status Privileged EXEC mode command shows the status of the Simple Network Time Protocol (SNTP).
Page 60
Allied Telesyn AT-8000S Switch CLI Reference Guide ----------- ------- ---------------------------- ------ ------ 176.1.1.8 19:58:22.289 PDT Feb 19 2002 7.33 117.79 176.1.8.179 Unknown 12:17.17.987 PDT Feb 19 2002 8.98 189.19 Anycast server: Server Interface Status Last response Offset Delay [mSec] [mSec]...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 5. Configuration and Image File Commands copy The copy Privileged EXEC mode command copies files from a source to a destination. Syntax copy source-url destination-url Parameters • source-url — The source file location URL or reserved keyword of the source file to be copied.
Page 63
Configuration and Image File Commands User Guidelines Up to five backup configuration files are supported on the device. The location of a file system dictates the format of the source or destination URL. The entire copying process may take several minutes and differs from protocol to protocol and from network to network.
Allied Telesyn AT-8000S Switch CLI Reference Guide To copy the running configuration file to a backup configuration file, enter the copy running-config file command. To copy the startup configuration file to a backup configuration file, enter the copy startup-config file command.
Configuration and Image File Commands Examples The following example deletes file test from flash memory. Console# delete flash:test Delete flash:test? [confirm] boot system The boot system Privileged EXEC mode command specifies the system image that the device loads at startup. Syntax boot system [unit unit] {image-1 | image-2} Parameters...
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Examples The following example displays the contents of the running configuration file. Console# show running-config software version 1.1 hostname device interface ethernet 1/e1 ip address 176.242.100.100 255.255.255.0...
Configuration and Image File Commands interface ethernet 1/e1 ip address 176.242.100.100 255.255.255.0 duplex full speed 1000 interface ethernet 1/e2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000 show bootvar The show bootvar Privileged EXEC mode command displays the active system image file that is loaded by the device at startup.
Allied Telesyn AT-8000S Switch CLI Reference Guide show backup-config The show backup-config privileged EXEC command displays the backup configuration file contents. Syntax show backup-config Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command.
Page 69
Configuration and Image File Commands Page 67...
Ethernet Configuration Commands Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each active interface in the range. If the command returns an error on one of the active interfaces, it does not stop executing commands on other active interfaces.
Allied Telesyn AT-8000S Switch CLI Reference Guide description The description Interface Configuration (Ethernet, port-channel) mode command adds a description to an interface. To remove the description, use the no form of this command. Syntax description string no description Parameters •...
Ethernet Configuration Commands Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines The no speed command in a port-channel context returns each port in the port-channel to its maximum capability. Example The following example configures the speed operation of Ethernet port 1/e5 to 100 Mbps operation. Console(config)# interface ethernet 1/e5 Console(config-if)# speed 100 duplex...
Allied Telesyn AT-8000S Switch CLI Reference Guide negotiation The negotiation Interface Configuration (Ethernet, port-channel) mode command enables auto-negotiation operation for the speed and duplex parameters of a given interface. To disable auto-negotiation, use the no form of this command. Syntax negotiation [capability1 [capability2…capability5]]...
Ethernet Configuration Commands Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines Negotiation should be enabled for flow control auto. Example In the following example, flow control is enabled on port 1/e5. Console(config)# interface ethernet 1/e5 Console(config-if)# flowcontrol on mdix The mdix Interface Configuration (Ethernet) mode command enables cable crossover on a given interface.
Allied Telesyn AT-8000S Switch CLI Reference Guide back-pressure The back-pressure Interface Configuration (Ethernet, port-channel) mode command enables back pressure on a given interface. To disable back pressure, use the no form of this command. Syntax back-pressure no back-pressure Default Configuration Back pressure is enabled.
Ethernet Configuration Commands Example In the following example, the counters for interface 1/e1 are cleared. Console> clear counters ethernet 1/e1 set interface active The set interface active Privileged EXEC mode command reactivates an interface that was shutdown. Syntax set interface active {ethernet interface | port-channel port-channel-number} Parameters •...
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following examples display autonegotiation information. Console# show interfaces advertise Port Type Operational Link Advertisement ---- -----------...
Page 79
Ethernet Configuration Commands Parameters • interface — Valid Ethernet port. (Full syntax: unit/port) • port-channel-number — Valid port-channel number. Default Configuration This command has no default configuration. Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the configuration of all configured interfaces: Console# show interfaces configuration...
Allied Telesyn AT-8000S Switch CLI Reference Guide show interfaces status The show interfaces status Privileged EXEC mode command displays the status of all configured interfaces. Syntax show interfaces status [ethernet interface| port-channel port-channel-number] Parameters • interface — A valid Ethernet port. (Full syntax: unit/port) •...
Ethernet Configuration Commands 100M-Copper Down 100M-Copper Down 100M-Copper Down 100M-Copper Down 100M-Copper Down show interfaces description The show interfaces description Privileged EXEC mode command displays the description for all configured interfaces. Syntax show interfaces description [ethernet interface | port-channel port-channel-number] Parameters •...
Allied Telesyn AT-8000S Switch CLI Reference Guide Late Collisions Number of times that a collision is detected later than one slotTime into the transmission of a packet. Oversize Packets Counted frames received that exceed the maximum permitted frame size. Internal MAC Rx Errors Counted frames for which reception fails due to an internal MAC sublayer receive error.
Ethernet Configuration Commands Parameters • unknown-unicast — Specifies also counting unknown unicast packets. Default Configuration Multicast packets are not counted. Command Modes Interface Configuration (Ethernet) mode User Guidelines This command is relevant to FE devices only. To control multicasts storms, use the port storm-control broadcast enable and port storm-control broadcast rate commands.
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example enables broadcast storm control on Ethernet port 1/e5 of a FE device. Console(config)# interface ethernet 1/e5 Console(config-if)# port storm-control broadcast enable The following example enables broadcast storm control on port 1/g5 of a GE device.
Ethernet Configuration Commands Example The following example configures the maximum storm control broadcast rate at 900 Kbits/Sec on Ethernet port 1/e5 of a FE device. Console(config)# interface ethernet 1/e5 Console(config-if)# port storm-control broadcast rate 900 show ports storm-control The show ports storm-control User/Privileged EXEC mode command displays the storm control configuration. show ports storm-control [interface] Parameters •...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 7. GVRP Commands gvrp enable (Global) GARP VLAN Registration Protocol (GVRP) is an industry-standard protocol designed to propagate VLAN information from device to device. With GVRP, a single device is manually configured with all desired VLANs for the network, and all other devices on the network learn these VLANs dynamically.
GVRP Commands User Guidelines An access port does not dynamically join a VLAN because it is always a member in only one VLAN. Membership in an untagged VLAN is propagated in the same way as in a tagged VLAN. That is, the PVID is manually defined as the untagged VLAN VID.
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example sets the leave timer for Ethernet port 1/e6 to 900 milliseconds. Console(config)# interface ethernet 1/e6 Console(config-if)# garp timer leave 900 gvrp vlan-creation-forbid The gvrp vlan-creation-forbid Interface Configuration (Ethernet, port-channel) mode command disables dynamic VLAN creation or modification.
GVRP Commands Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example forbids dynamic registration of VLANs on Ethernet port 1/e6. Console(config)# interface ethernet 1/e6 Console(config-if)# gvrp registration-forbid clear gvrp statistics The clear gvrp statistics Privileged EXEC mode command clears all GVRP statistical information.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • interface — A valid Ethernet port. (Full syntax: unit/port) • port-channel-number — A valid port-channel number. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command.
GVRP Commands User Guidelines There are no user guidelines for this command. Example The following example shows GVRP statistical information: Console> show gvrp statistics GVRP Statistics: Legend: Join Empty Received rJIn: Join In Received rEmp : Empty Received rLIn: Leave In Received Leave Empty Received rLA : Leave All Received...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 8. IGMP Snooping Commands ip igmp snooping (Global) The ip igmp snooping Global Configuration mode command enables Internet Group Management Protocol (IGMP) snooping. To disable IGMP snooping, use the no form of this command.
IGMP Snooping Commands Example The following example enables IGMP snooping on VLAN 2. Console(config)# interface vlan 2 Console(config-if)# ip igmp snooping ip igmp snooping mrouter learn-pim-dvmrp The ip igmp snooping mrouter learn-pim-dvmrp Interface Configuration (VLAN) mode command enables automatic learning of multicast device ports in the context of a specific VLAN. To remove automatic learning of multicast device ports, use the no form of this command.
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration The default host-time-out is 260 seconds. Command Mode Interface Configuration (VLAN) mode User Guidelines The timeout should be at least greater than 2*query_interval+max_response_time of the IGMP router. Example The following example configures the host timeout to 300 seconds.
IGMP Snooping Commands ip igmp snooping leave-time-out The ip igmp snooping leave-time-out Interface Configuration (VLAN) mode command configures the leave- time-out. If an IGMP report for a multicast group was not received for a leave-time-out period after an IGMP Leave was received from a specific port, this port is deleted from the member list of that multicast group.To return to the default configuration, use the no form of this command.
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays multicast device interfaces in VLAN 1000. Console> show ip igmp snooping mrouter interface 1000...
IGMP Snooping Commands Example The following example displays IGMP snooping information on VLAN 1000. Console> show ip igmp snooping interface 1000 IGMP Snooping is globaly enabled IGMP Snooping is enabled on VLAN 1000 IGMP host timeout is 300 sec IGMP Immediate leave is disabled. IGMP leave timeout is 10 sec IGMP mrouter timeout is 200 sec Automatic learning of multicast devices ports is enabled show ip igmp snooping groups...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 9. IP Addressing Commands ip address The ip address Interface Configuration (Ethernet, VLAN, port-channel) mode command sets an IP address. To remove an IP address, use the no form of this command.
IP Addressing Commands Parameters • host-name — Specifies the name of the host to be placed in the DHCP option 12 field. This name does not have to be the same as the host name specified in the hostname Global Configuration mode command. (Range: 1-20 characters) Default Configuration This command has no default configuration.
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration No default gateway is defined. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example defines default gateway 192.168.1.1. Console(config)# ip default-gateway 192.168.1.1 show ip interface The show ip interface Privileged EXEC mode command displays the usability status of configured IP interfaces.
Page 107
IP Addressing Commands IP address Interface Type ------------- --------- ------- 10.7.1.192/24 VLAN 1 Static Page 105...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 10.Line Commands line The line Global Configuration mode command identifies a specific line for configuration and enters the Line Configuration command mode. Syntax line {console | telnet | ssh} Parameters • console — Console terminal line.
Line Commands Default Configuration The default speed is 9600 bps. Command Mode Line Configuration (console) mode User Guidelines This command is available only on the line console. The configured speed is applied when Autobaud is disabled. This configuration applies only to the current session.
Allied Telesyn AT-8000S Switch CLI Reference Guide exec-timeout The exec-timeout Line Configuration mode command sets the interval that the system waits until user input is detected. To return to the default configuration, use the no form of this command. Syntax...
Line Commands Example The following example enables the command history function for telnet. Console(config)# line telnet Console(config-line)# history history size The history size Line Configuration mode command configures the command history buffer size for a particular line. To reset the command history buffer size to the default configuration, use the no form of this command. Syntax history size number-of-commands no history size...
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example disables the command history function for the current terminal session. Console# terminal no history...
Page 113
Line Commands Syntax show line [console | telnet | ssh] Parameters • console — Console terminal line. • telnet — Virtual terminal for remote console access (Telnet). • ssh — Virtual terminal for secured remote console access (SSH). Default Configuration If the line is not specified, the default value is console.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 11.Management ACL Commands management access-list The management access-list Global Configuration mode command configures a management access list and enters the Management Access-list Configuration command mode. To delete an access list, use the no form of this command.
Management ACL Commands The following example creates a management access list called mlist, configures all interfaces to be management interfaces except Ethernet interfaces 1/e1 and 2/e9 and makes the new access list the active list. Console(config)# management access-list mlist Console(config-macl)# deny ethernet 1/e1 Console(config-macl)# deny ethernet 2/e9 Console(config-macl)# permit Console(config-macl)# exit...
Management ACL Commands Parameters • console-only — Indicates that the device can be managed only from the console. • name — Specifies the name of the access list to be used. (Range: 1-32 characters) Default Configuration If no access list is specified, an empty access list is used. Command Mode Global Configuration mode User Guidelines...
Allied Telesyn AT-8000S Switch CLI Reference Guide permit ethernet 2/e2 ! (Note: all other access implicitly denied) show management access-class The show management access-class Privileged EXEC mode command displays the active management access list. Syntax show management access-class Default Configuration This command has no default configuration.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 12.PHY Diagnostics Commands test copper-port tdr The test copper-port tdr Privileged EXEC mode command uses Time Domain Reflectometry (TDR) technology to diagnose the quality and characteristics of a copper cable attached to a port.
PHY Diagnostics Commands Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines The maximum length of the cable for the TDR test is 120 meter. Example The following example displays information on the last TDR test performed on all copper ports. Console>...
Page 122
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the estimated copper cable length attached to all ports. Console> show copper-ports cable-length Port Length [meters] ---- --------------------- 1/e1 < 50 1/e2 Copper not active 1/e3 110-140 1/g1...
Port Channel Commands Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each interface in the range. Example The following example groups port-channels 1, 2 and 6 to receive the same command. Console(config)# interface range port-channel 1-2,6 channel-group The channel-group Interface Configuration (Ethernet) mode command associates a port with a port-channel.
Page 126
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • port-channel-number — Valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays information on all port-channels.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 14.Port Monitor Commands port monitor The port monitor Interface Configuration mode command starts a port monitoring session. To stop a port monitoring session, use the no form of this command. Syntax port monitor src-interface [rx | tx]...
Port Monitor Commands port monitor vlan-tagging The port monitor Interface Configuration (Ethernet) mode command transmits tagged ingress mirrored packets. To transmit untagged ingress mirrored packets, use the no form of this command. Syntax port monitor vlan-tagging no port monitor vlan-tagging Default Configuration Ingress mirrored packets are transmitted untagged.
Page 130
Allied Telesyn AT-8000S Switch CLI Reference Guide ----------- ---------------- ----- ------- ------------ 1/e1 1/e8 RX,TX Active 1/e2 1/e8 RX,TX Active 1/e18 1/e8 Active Page 128...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 15.Power over Ethernet Commands Note The PoE commands are operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT- 8000S/48POE devices. power inline The port inline Interface Configuration (Ethernet) mode command configures the administrative mode of inline power on an interface.
Power over Ethernet Commands no power inline powered-device Parameters • pd-type—Specifies the type of powered device attached to the interface. (Range: 1-24 characters) Default Configuration This command has no default configuration. Command Mode Interface Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. Example The following example configures a description to an IP-phone to a powered device connected to Ethernet interface 1/e1.
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example configures the device connected to Ethernet interface 1/e1 as a high-priority powered device. Console(config)# interface ethernet 1/e1 Console(config-if)# power inline priority high power inline usage-threshold The power inline usage-threshold Global Configuration mode command configures the threshold for initiating inline power usage alarms.
Power over Ethernet Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enables inline power traps to be sent when a power usage threshold is exceeded. Console(config)# power inline traps enable show power inline The show power inline User EXEC mode command displays the information about inline power.
Page 136
Allied Telesyn AT-8000S Switch CLI Reference Guide Port Powered Device State Priority Status Classification [w] ---- ---------------- ----- -------- ------ ----------------- 1/e1 IP Phone Model A Auto High 0.44 - 12.95 2/e1 Wireless AP Model Auto 0.44 - 3.84 3/e1 Auto Console>...
Page 137
Power over Ethernet Commands Absent Counter Counts the number of times power has been removed because powered device dropout was detected. Invalid Signature Counter Counts the number of times an invalid signature of a powered device was detected. Page 135...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 16.QoS Commands The qos Global Configuration mode command enables quality of service (QoS) on the device. To disable QoS on the device, use the no form of this command. Syntax no qos Default Configuration QoS is disabled on the device.
QoS Commands Example The following example displays QoS attributes when QoS is disabled on the device. Console> show qos Qos: disable Trust: dscp priority-queue out num-of-queues The priority-queue out num-of-queues Global Configuration mode command configures the number of expedite queues. To return to the default configuration, use the no form of this command. Syntax priority-queue out num-of-queues number-of-queues no priority-queue out num-of-queues...
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration 1000 Kbits/Sec Command Mode Interface Configuration mode User Guidelines The command can be enabled on a specific port only if port storm-control broadcast enable interface configuration command is not enabled on that port.
QoS Commands Syntax show qos interface [ethernet interface-number | vlan vlan-id | port-channel number] [queuing] Parameters • interface-number — Valid Ethernet port number. • vlan-id— Valid VLAN ID. • number — Valid port-channel number. • queuing — Indicates the queue strategy (WRR or EF), the weight for WRR queues, the CoS to queue map and the EF priority.
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax wrr-queue cos-map queue-id cos1...cos8 no wrr-queue cos-map [queue-id] Parameters • queue-id — Specifies the queue number to which the CoS values are mapped. • cos1...cos8 — Specifies CoS values to be mapped to a specific queue. (Range: 0-7)
QoS Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example maps DSCP values 33, 40 and 41 to queue 1. Console(config)# qos map dscp-queue 33 40 41 to 1 qos trust (Global) The qos trust Global Configuration mode command configures the system to the basic mode and trust state.
Allied Telesyn AT-8000S Switch CLI Reference Guide qos trust (Interface) The qos trust Interface Configuration (Ethernet, port-channel) mode command enables each port trust state while the system is in the basic QoS mode. To disable the trust state on each port, use the no form of this command.
QoS Commands Example The following example configures port 1/e15 default CoS value to 3. Console(config)# interface ethernet 1/e15 Console(config-if) qos cos 3 show qos map The show qos map User EXEC mode command displays all QoS maps. Syntax show qos map [dscp-queue] Parameters •...
Page 146
Allied Telesyn AT-8000S Switch CLI Reference Guide The following table describes the significant fields shown above. Column Des cription Decimal Bit 1 of DSCP Decimal Bit 2 of DSCP 01 - 04 Queue numbers Page 144...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 17.Radius Commands radius-server host The radius-server host Global Configuration mode command specifies a RADIUS server host. To delete the specified RADIUS host, use the no form of this command. Syntax radius-server host {ip-address | hostname} [auth-port auth-port-number] [timeout timeout] [retransmit retries]...
Radius Commands Example The following example specifies a RADIUS server host with IP address 192.168.10.1, authentication request port number 20 and a 20-second timeout period. Console(config)# radius-server host 192.168.10.1 auth-port 20 timeout 20 radius-server key The radius-server key Global Configuration mode command sets the authentication and encryption key for all RADIUS communications between the device and the RADIUS daemon.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • retries — Specifies the retransmit value. (Range: 1 - 10) Default Configuration The software searches the list of RADIUS server hosts 3 times. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command.
Radius Commands radius-server timeout The radius-server timeout Global Configuration mode command sets the interval during which the device waits for a server host to reply. To return to the default configuration, use the no form of this command. Syntax radius-server timeout timeout no radius-server timeout Parameters •...
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example sets the deadtime to 10 minutes. Console(config)# radius-server deadtime 10 show radius-servers The show radius-servers Privileged EXEC mode command displays the RADIUS server settings.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 18.RMON Commands show rmon statistics The show rmon statistics User EXEC mode command displays RMON Ethernet statistics. Syntax show rmon statistics {ethernet interface number | port-channel port-channel-number} Parameters • interface number — Valid Ethernet port.
Page 155
RMON Commands The following table describes significant fields shown above: Field De scrip tio n Octets The total number of octets of data (including those in bad packets) received on the network (excluding framing bits but including FCS octets). Packets The total number of packets (including bad packets, broadcast packets, and multicast packets) received.
Allied Telesyn AT-8000S Switch CLI Reference Guide rmon collection history The rmon collection history Interface Configuration (Ethernet, port-channel) mode command enables a Remote Monitoring (RMON) MIB history statistics group on an interface. To remove a specified RMON history statistics group, use the no form of this command.
RMON Commands Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays all RMON history group statistics. Console> show rmon collection history Index Interface Interval...
Page 158
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Examples The following examples displays RMON Ethernet history statistics for index 1.
Page 159
RMON Commands Console> show rmon history 1 other Sample Set: 1 Owner: Me Interface: 1/e1 Interval: 1800 Requested samples: 50 Granted samples: 50 Maximum table size: 500 Time Dropped Collisions -------------------- -------- ---------- Jan 18 2002 21:57:00 Jan 18 2002 21:57:30 The following table describes significant fields shown above: Field D escr ip tio n...
Allied Telesyn AT-8000S Switch CLI Reference Guide Dropped The total number of events in which packets were dropped by the probe due to lack of resources during this sampling interval. This number is not necessarily the number of packets dropped, it is just the number of times this condition has been detected.
RMON Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures the following alarm conditions: • Alarm index — 1000 • Variable identifier — ati • Sample interval — 360000 seconds •...
Allied Telesyn AT-8000S Switch CLI Reference Guide The following table describes significant fields shown above: Field Desc ription Index An index that uniquely identifies the entry. Monitored variable OID. Owner The entity that configured this entry. show rmon alarm The show rmon alarm User EXEC mode command displays alarm configuration.
RMON Commands The following table describes the significant fields shown in the display: Field Desc rip t io n Alarm Alarm index. Monitored variable OID. Last Sample Value The statistic value during the last sampling period. For example, if the sample type is delta, this value is the difference between the samples at the beginning and end of the period.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • index — Specifies the event index. (Range: 1 - 65535) • type — Specifies the type of notification generated by the device about this event. Possible values: none, log, trap, log-trap.
RMON Commands Example The following example displays the RMON event table. Console> show rmon events Index Description Type Community Owner Last time sent ----- -------------- -------- --------- ------- -------------------- Errors Jan 18 2002 23:58:17 High Broadcast Log-Trap device Manager Jan 18 2002 23:59:48 The following table describes significant fields shown above: Field De scr ip tio n...
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the RMON log table. Console> show rmon log Maximum table size: 500 Event Description Time ------- -------------- --------- Errors Jan 18 2002 23:48:19 Errors Jan 18 2002 23:58:17...
Page 167
RMON Commands Command Mode Global Configuration mode User Guidelines The configured table size takes effect after the device is rebooted. Example The following example configures the maximum RMON history table sizes to 100 entries. Console(config)# rmon table-size history 100 Page 165...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 19.SNMP Commands snmp-server community The snmp-server community Global Configuration mode command configures the community access string to permit access to the SNMP protocol. To remove the specified community string, use the no form of this command.
SNMP Commands Examples The following example defines community access string public to permit administrative access to SNMP protocol at an administrative station with IP address 192.168.1.20. Console(config)# snmp-server community public su 192.168.1.20 snmp-server view The snmp-server view Global Configuration mode command creates or updates a Simple Network Management Protocol (SNMP) server view entry.
Allied Telesyn AT-8000S Switch CLI Reference Guide snmp-server group The snmp-server group Global Configuration mode command configures a new Simple Management Protocol (SNMP) group or a table that maps SNMP users to SNMP views. To remove a specified SNMP group, use the no form of this command.
Page 171
SNMP Commands Syntax snmp-server user username groupname [remote engineid-string] [ auth-md5 password | auth-sha password | auth-md5-key md5-des-keys | auth-sha-key sha-des-keys ] no snmp-server user username [remote engineid-string] Parameters • username—Specifies the name of the user on the host that connects to the agent. (Range: 1-30 characters) •...
Allied Telesyn AT-8000S Switch CLI Reference Guide snmp-server engineID local The snmp-server engineID local Global Configuration mode command specifies the Simple Network Management Protocol (SNMP) engineID on the local device. To remove the configured engine ID, use the no form of this command.
SNMP Commands The show running-config Privileged EXEC mode command does not display the SNMP engine ID configuration. To see the SNMP engine ID configuration, enter the snmp-server engineID local Global Configuration mode command. Examples The following example enables SNMPv3 on the device and sets the local engine ID of the device to the default value.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • filter-name—Specifies the label for the filter record that is being updated or created. The name is used to reference the record. (Range: 1-30 characters) • oid-tree—Specifies the object identifier of the ASN.1 subtree to be included or excluded from the view. To identify the subtree, specify a text string consisting of numbers, such as 1.3.6.2.4, or a word, such as system.
SNMP Commands Parameters • ip-address—Specifies the IP address of the host (targeted recipient). • hostname—Specifies the name of the host. (Range:1-158 characters) • community-string—Specifies a password-like community string sent with the notification operation. (Range: 1-20) • traps—Indicates that SNMP traps are sent to this host. If unspecified, SNMPv2 traps are sent to the host. •...
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • ip-address—Specifies the IP address of the host (targeted recipient). • hostname—Specifies the name of the host. (Range:1-158 characters) • username—Specifies the name of the user to use to generate the notification. (Range: 1-25) •...
SNMP Commands Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example enables SNMP failed authentication traps. Console(config)# snmp-server trap authentication snmp-server contact The snmp-server contact Global Configuration mode command configures the system contact (sysContact) string.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • text — Specifies a string that describes system location information. (Range: 0-160 characters) Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines Do not include spaces in the text string or place text that includes spaces inside quotation marks.
SNMP Commands show snmp The show snmp Privileged EXEC mode command displays the SNMP status. Syntax show snmp Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the SNMP communications status.
Allied Telesyn AT-8000S Switch CLI Reference Guide Version 3 notifications Target Address Type Username Security Filter Retries Level Port Name -------------- ----- --------- ------- ---- ------ ------- 192.122.173.42 Inform Priv System Contact: Robert System Location: Marketing The following table describes significant fields shown above.
SNMP Commands show snmp views The show snmp views Privileged EXEC mode command displays the configuration of views. Syntax show snmp views [viewname] Parameters • viewname — Specifies the name of the view. (Range: 1-30) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines...
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example displays the configuration of views. Console# show snmp groups Name Security Views Model Level Read Write Notify -------------- -----...
SNMP Commands User Guidelines There are no user guidelines for this command. Example The following example displays the configuration of filters. Console# show snmp filters Name OID Tree Type ----------- ----------------------- --------- user-filter 1.3.6.1.2.1.1 Included user-filter 1.3.6.1.2.1.1.7 Excluded user-filter 1.3.6.1.2.1.2.2.1.*.1 Included show snmp users The show snmp users Privileged EXEC mode command displays the configuration of users.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 20.Spanning-Tree Commands spanning-tree The spanning-tree Global Configuration mode command enables spanning-tree functionality. To disable spanning-tree functionality, use the no form of this command. Syntax spanning-tree no spanning-tree Default Configuration Spanning-tree is enabled.
Spanning-Tree Commands Command Modes Global Configuration mode User Guidelines In RSTP mode, the device uses STP when the neighbor device uses STP. In MSTP mode, the device uses RSTP when the neighbor device uses RSTP and uses STP when the neighbor device uses STP.
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax spanning-tree hello-time seconds no spanning-tree hello-time Parameters • seconds — Time in seconds. (Range: 1 - 10) Default Configuration The default hello time for IEEE Spanning Tree Protocol (STP) is 2 seconds.
Spanning-Tree Commands Example The following example configures the spanning tree bridge maximum-age to 10 seconds. Console(config)# spanning-tree max-age 10 spanning-tree priority The spanning-tree priority Global Configuration mode command configures the spanning tree priority of the device. The priority value is used to determine which bridge is elected as the root bridge. To return to the default configuration, use the no form of this command.
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example disables spanning-tree on Ethernet port 1/e5. Console(config)# interface ethernet 1/e5 Console(config-if)# spanning-tree disable spanning-tree cost The spanning-tree cost Interface Configuration mode command configures the spanning tree path cost for a port.
Spanning-Tree Commands spanning-tree port-priority The spanning-tree port-priority Interface Configuration mode command configures port priority. To return to the default configuration, use the no form of this command. Syntax spanning-tree port-priority priority no spanning-tree port-priority Parameters • priority — The priority of the port. (Range: 0 - 240 in multiples of 16) Default Configuration The default port priority for IEEE Spanning TreeProtocol (STP) is 128.
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example enables PortFast on Ethernet port 1/e15 Console(config)# interface ethernet 1/e15 Console(config-if)# spanning-tree portfast spanning-tree link-type The spanning-tree link-type Interface Configuration mode command overrides the default link-type setting determined by the duplex mode of the port and enables Rapid Spanning Tree Protocol (RSTP) transitions to the forwarding state.
Spanning-Tree Commands Parameters • long — Specifies port path costs with a range of 1-200,000,000 . • short — Specifies port path costs with a range of 0-65,535. Default Configuration Short path cost method. Command Mode Global Configuration mode User Guidelines This command applies to all spanning tree instances on the device.
Spanning-Tree Commands User Guidelines The device with the lowest priority is selected as the root of the spanning tree. Example The following example configures the spanning tree priority of instance 1 to 4096. Console (config) # spanning-tree mst 1 priority 4096 spanning-tree mst max-hops The spanning-tree mst priority Global Configuration mode command configures the number of hops in an MST region before the BDPU is discarded and the port information is aged out.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • instance-ID—ID of the spanning tree instance. (Range: 1-16) • priority—The port priority. (Range: 0 - 240 in multiples of 16) Default Configuration The default port priority for IEEE Multiple Spanning Tree Protocol (MSTP) is 128.
Spanning-Tree Commands User Guidelines There are no user guidelines for this command. Example The following example configures the MSTP instance 1 path cost for Ethernet port 1/e9 to 4. Console(config) # interface ethernet 1/e9 Console(config-if) # spanning-tree mst 1 cost 4 spanning-tree mst configuration The spanning-tree mst configuration Global Configuration mode command enables configuring an MST region by entering the Multiple Spanning Tree (MST) mode.
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration VLANs are mapped to the common and internal spanning tree (CIST) instance (instance 0). Command Modes MST Configuration mode User Guidelines All VLANs that are not explicitly mapped to an MST instance are mapped to the common and internal spanning tree (CIST) instance (instance 0) and cannot be unmapped from the CIST.
Spanning-Tree Commands revision (mst) The revision MST configuration command defines the configuration revision number. To return to the default configuration, use the no form of this command. Syntax revision value no revision Parameters • value—Configuration revision number (Range: 0-65535). Default Configuration The default configuration revision number is 0.
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines The pending MST region configuration takes effect only after exiting the MST configuration mode. Example The following example displays a pending MST region configuration. Console(config-mst)# show pending Pending MST configuration Name: Region1...
Spanning-Tree Commands Default Configuration This command has no default configuration. Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command. Example The following example exits the MST configuration mode without saving changes. Console(config) # spanning-tree mst configuration Console(config-mst) # abort show spanning-tree The show spanning-tree Privileged EXEC mode command displays spanning-tree configuration.
Page 200
Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example displays spanning-tree information. Console# show spanning-tree Spanning tree enabled mode RSTP Default port cost method: long Root ID Priority 32768 Address 00:01:42:97:e0:00 Path Cost 20000 Root Port 1 (1/e1)
Page 202
Allied Telesyn AT-8000S Switch CLI Reference Guide Console# show spanning-tree active Spanning tree enabled mode RSTP Default port cost method: long Root ID Priority 32768 Address 00:01:42:97:e0:00 Path Cost 20000 Root Port 1 (1/e1) Hello Time 2 sec Max Age 20 sec...
Page 203
Spanning-Tree Commands Name State Prio.Nbr Cost Role PortFast Type ---- ------- -------- ----- ---- -------- ---------- 1/e4 Enabled 128.4 20000 ALTN Shared (STP) Console# show spanning-tree detail Spanning tree enabled mode RSTP Default port cost method: long Root ID Priority 32768 Address 00:01:42:97:e0:00...
Page 204
Allied Telesyn AT-8000S Switch CLI Reference Guide Number of transitions to forwarding state: 1 BPDU: sent 2, received 170638 Port 3 (1/e3) disabled State: N/A Role: N/A Port id: 128.3 Port cost: 20000 Type: N/A (configured: auto) Port Fast: N/A (configured:no)
Page 205
Spanning-Tree Commands Console# show spanning-tree ethernet 1/e1 Port 1 (1/e1) enabled State: Forwarding Role: Root Port id: 128.1 Port cost: 20000 Type: P2p (configured: auto) RSTP Port Fast: No (configured:no) Designated bridge Priority: 32768 Address: 00:01:42:97:e0:00 Designated port id: 128.25 Designated path cost: 0 Number of transitions to forwarding state: 1 BPDU: sent 2, received 120638...
Page 207
Spanning-Tree Commands Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec IST Master ID Priority 32768 Address 00:02:4b:29:7a:00 This switch is the IST master. Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Max hops Number of topology changes 2 last change occurred 2d18h ago Times: hold 1, topology change 35, notification 2...
Page 208
Allied Telesyn AT-8000S Switch CLI Reference Guide Port 4 (1/e4) enabled State: Forwarding Role: Designated Port id: 128.4 Port cost: 20000 Type: Shared (configured: auto) Internal Port Fast: No (configured:no) Designated bridge Priority: 32768 Address: 00:02:4b:29:7a:00 Designated port id: 128.2...
Page 209
Spanning-Tree Commands BPDU: sent 2, received 170638 Port 3 (1/e3) disabled State: Blocking Role: Alternate Port id: 128.3 Port cost: 20000 Type: Shared (configured: auto) Internal Port Fast: No (configured:no) Designated bridge Priority: 32768 Address: 00:02:4b:29:1a:19 Designated port id: 128.78 Designated path cost: 20000 Number of transitions to forwarding state: 1 BPDU: sent 2, received 170638...
Page 210
Allied Telesyn AT-8000S Switch CLI Reference Guide Address 00:02:4b:29:7a:00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Max hops Console# show spanning-tree Spanning tree enabled mode MSTP Default port cost method: long ###### MST 0 Vlans Mapped: 1-9, 21-4094...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 21.SSH Commands ip ssh port The ip ssh port Global Configuration mode command specifies the port to be used by the SSH server. To return to the default configuration, use the no form of this command.
SSH Commands User Guidelines If encryption keys are not generated, the SSH server is in standby until the keys are generated. To generate SSH server keys, use the crypto key generate dsa, and crypto key generate rsa Global Configuration mode commands.
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Global Configuration mode User Guidelines RSA keys are generated in pairs: one public RSA key and one private RSA key. If the device already has RSA keys, a warning and prompt to replace the existing keys with new keys are displayed.
SSH Commands Syntax crypto key pubkey-chain ssh Default Configuration No keys are specified. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enters the SSH Public Key-chain Configuration mode and manually configures the RSA key pair for SSH public key-chain bob.
SSH Commands Use the key-string row SSH Public Key-string Configuration mode command to specify the SSH public key row by row. Each row must begin with a key-string row command. This command is useful for configuration files. Example The following example enters public key strings for SSH public key client bob. Console(config)# crypto key pubkey-chain ssh Console(config-pubkey-chain)# user-key bob rsa Console(config-pubkey-key)# key-string...
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the SSH server configuration. Console# show ip ssh SSH server enabled. Port: 22 RSA key was generated. DSA (DSS) key was generated. SSH Public Key Authentication is enabled.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 22.Syslog Commands logging on The logging on Global Configuration mode command controls error message logging. This command sends debug or error messages to a logging process, which logs messages to designated locations asynchronously to the process that generated the messages.
Syslog Commands Parameters • ip-address — IP address of the host to be used as a syslog server. • hostname — Specifies the host name of the syslog server. (Range: 1-158 characters) • port — Specifies the port number for syslog messages. (Range: 1 - 65535) •...
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example limits logging messages displayed on the console to severity level errors. Console(config)# logging console errors...
Syslog Commands Syntax logging buffered size number no logging buffered size Parameters • number — Specifies the maximum number of messages stored in the history table. (Range: 20 - 400) Default Configuration The default number of messages is 200. Command Mode Global Configuration mode User Guidelines This command takes effect only after Reset.
Allied Telesyn AT-8000S Switch CLI Reference Guide logging file The logging file Global Configuration mode command limits syslog messages sent to the logging file based on severity. To cancel using the buffer, use the no form of this command. Syntax...
Syslog Commands Example The following example clears messages from the logging file. Console# clear logging file Clear Logging File [confirm] aaa logging The aaa logging Global Configuration mode command enables logging AAA login events. To disable logging AAA login events, use the no form of this command. Syntax aaa logging login no aaa logging login...
Syslog Commands show logging The show logging Privileged EXEC mode command displays the state of logging and the syslog messages stored in the internal buffer. Syntax show logging Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command.
Allied Telesyn AT-8000S Switch CLI Reference Guide 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/2, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/3, changed state to up 11-Aug-2004 15:41:43: %SYS-5-CONFIG_I: Configured from memory by console 11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0,...
Syslog Commands ----------- ----- ------ Login Enabled File system Copy Enabled File system Delete-Rename Enabled Management ACL Deny Enabled Buffer log: 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/0, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/1, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/2, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/3, changed state to up 11-Aug-2004 15:41:43: %SYS-5-CONFIG_I: Configured from memory by console...
Page 232
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays the settings of the syslog servers. Console# show syslog-servers Device Configuration IP address Port Severity Facility Description ------------ ---- ------------- -------- ----------- 192.180.2.27 Informational local7 192.180.2.28 Warning local7...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 23.System Management Commands ping The ping User EXEC mode command sends ICMP echo request packets to another node on the network. Syntax ping {ip-address | hostname }[size packet_size] [count packet_count] [timeout time_out] Parameters •...
Page 235
System Management Commands Examples The following example displays pinging results: Console> ping 10.1.1.1 Pinging 10.1.1.1 with 64 bytes of data: 64 bytes from 10.1.1.1: icmp_seq=0. time=11 ms 64 bytes from 10.1.1.1: icmp_seq=1. time=8 ms 64 bytes from 10.1.1.1: icmp_seq=2. time=8 ms 64 bytes from 10.1.1.1: icmp_seq=3.
Allied Telesyn AT-8000S Switch CLI Reference Guide reload The reload Privileged EXEC mode command reloads the operating system. Syntax reload Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines Caution should be exercised when resetting the device, to ensure that no other activity is being performed. In particular, the user should verify that no configuration files are being downloaded at the time of reset.
Marvell(config)# stack master Note This command is operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT-8000S/ 48POE devices. The stack master Global Configuration mode command enables forcing the selection of a stack master. To return to the default configuration, use the no form of this command.
Console(config)# stack display-order top 6 bottom 1 stack change unit-id Note This command is operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT-8000S/ 48POE devices. The stack change unit-id Global Configuration mode command is used to change the Unit ID of a specific unit.
Console# config Console(config)# stack change unit-id 6 to 5 show stack Note This command is operational in the AT-8000S/24, AT-8000S/24POE, AT-8000S/48 and AT-8000S/ 48POE devices. The show stack User EXEC mode command displays information about the status of a stack. Syntax...
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays information about the active users. Console show users Username Protocol Location ---------- ----------- ------------ Serial John 172.16.0.1 Robert HTTP 172.16.0.8 Betty Telnet 172.16.1.7 show sessions The show sessions User EXEC mode command lists open Telnet sessions.
System Management Commands Field D escr ip tio n Address IP address of the remote host. Port Telnet TCP port number Byte Number of unread bytes for the user to see on the connection. show system The show system User EXEC mode command displays system information. Syntax show system [unit unit] Parameters...
Page 244
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax show version [unit unit] Parameters • unit— Specifies the number of the unit. (Range: 1-6) Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command.
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 24.TACACS+ Commands tacacs-server host The tacacs-server host Global Configuration mode command specifies a TACACS+ host. To delete the specified name or address, use the no form of this command. Syntax tacacs-server host {ip-address | hostname} [single-connection] [port port-number] [timeout timeout] [key key-...
TACACS+ Commands Example The following example specifies a TACACS+ host. Console(config)# tacacs-server host 172.16.1.1 tacacs-server key The tacacs-server key Global Configuration mode command sets the authentication encryption key used for all TACACS+ communications between the device and the TACACS+ daemon. To disable the key, use the no form of this command.
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration 5 seconds Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example sets the timeout value to 30. Console(config)# tacacs-server timeout 30...
Page 249
TACACS+ Commands Syntax show tacacs [ip-address] Parameters • ip-address — Name or IP address of the TACACS+ server. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example displays configuration and statistical information about a TACACS+ server.
User Interface Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example return to Users EXEC mode. Console# disable Console> login The login User EXEC mode command changes a login username. Syntax login Default Configuration...
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example enters Global Configuration mode. Console# configure Console(config)# exit (Configuration) The exit command exits any configuration mode to the next highest mode in the CLI mode hierarchy.
User Interface Commands Command Mode Privileged and User EXEC modes User Guidelines There are no user guidelines for this command. Example The following example closes an active terminal session. Console> exit The end command ends the current configuration session and returns to the Privileged EXEC mode. Syntax Default Configuration This command has no default configuration.
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example describes the help system Console# help Help may be requested at any point in a command by entering a question mark '?'. If nothing matches the currently entered incomplete command, the help list is empty.
User Interface Commands show history The show history User EXEC mode command lists the commands entered in the current session. Syntax show history Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines The buffer includes executed and unexecuted commands. Commands are listed from the first to the most recent command.
Page 256
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example displays the current privilege level for the Privileged EXEC mode. Console# show privilege Current privilege level is 15 Page 254...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 26.VLAN Commands vlan database The vlan database Global Configuration mode command enters the VLAN Configuration mode. Syntax vlan database Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command.
VLAN Commands User Guidelines There are no user guidelines for this command. Example The following example VLAN number 1972 is created. Console(config)# vlan database Console(config-vlan)# vlan 1972 interface vlan The interface vlan Global Configuration mode command enters the Interface Configuration (VLAN) mode. Syntax interface vlan vlan-id Parameters...
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each interface in the range. If the command returns an error on one of the interfaces, an error message is displayed and execution of the command continues on the other interfaces.
VLAN Commands switchport protected The switchport protected Interface Configuration mode command enables Private VLAN Edge, by overriding the FDB decision, and sends all Unicast, Multicast and Broadcast traffic to an uplink port. To disable overriding the FDB decision, use the no form of this command. Syntax switchport protected {ethernet port | port-channel port-channel-number } no switchport protected...
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • access — Indicates an untagged layer 2 VLAN port. • trunk — Indicates a trunking layer 2 VLAN port. • general — Indicates a full 802-1q supported VLAN port. Default Configuration All ports are in access mode, and belong to the default VLAN (whose VID=1).
VLAN Commands Example The following example configures a VLAN ID of 23 to the untagged layer 2 VLAN Ethernet port 1/e16. Console(config)# interface ethernet 1/e16 Console(config-if)# switchport access vlan 23 switchport trunk allowed vlan The switchport trunk allowed vlan Interface Configuration mode command adds or removes VLANs to or from a trunk port.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • vlan-id— Specifies the ID of the native VLAN. Default Configuration VID=1. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines The command adds the port as a member in the VLAN. If the port is already a member in the VLAN (not as a native), it should be first removed from the VLAN.
VLAN Commands Example The following example adds VLANs 2, 5, and 6 to the allowed list of Ethernet port 1/e16 . Console(config)# interface ethernet 1/e16 Console(config-if)# switchport general allowed vlan add 2,5-6 tagged switchport general pvid The switchport general pvid Interface Configuration mode command configures the PVID when the interface is in general mode.
Allied Telesyn AT-8000S Switch CLI Reference Guide Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example configures Ethernet port 1/e16 to discard untagged frames at ingress. Console(config)# interface ethernet 1/e16...
VLAN Commands map mac macs-group The map mac macs-group VLAN Configuration mode command maps a MAC address or a range of MAC addresses to a group of MAC addresses. Use the no form of this command to delete a map. Syntax map mac mac-address {prefix-mask | host} macs-group group no map mac mac-address {prefix-mask | host}...
Allied Telesyn AT-8000S Switch CLI Reference Guide Example Console# show vlan macs-groups MAC Address Mask Group ID -------------- -------------- -------- 0060.704C.73FF FFFF.FFFF.0000 0060.704D.73FF FFFF.FFFF.0000 switchport forbidden vlan The switchport forbidden vlan Interface Configuration mode command forbids adding specific VLANs to a port.
VLAN Commands Parameters • vlan-id — Specifies the ID of the internal usage VLAN. Default Configuration The software reserves a VLAN as the internal usage VLAN of an interface. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines An internal usage VLAN is required when an IP interface is configured on an Ethernet port or port-channel. This command enables the user to configure the internal usage VLAN of a port.
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example displays all VLAN information. Console# show vlan VLAN Name Ports Type Authorization ---- ------- -------- ---- ------------- default 1/e1-e2, 2/e1-e4 other Required VLAN0010 1/e3-e4 dynamic Required VLAN0011 1/e1-e2 static...
VLAN Commands 1008 Eth 1/e22 Inactive 1009 Eth 1/e23 Active show interfaces switchport The show interfaces switchport Privileged EXEC mode command displays the switchport configuration. Syntax show interfaces switchport {ethernet interface | port-channel port-channel-number} Parameters • interface — A valid Ethernet port number. •...
Page 272
Allied Telesyn AT-8000S Switch CLI Reference Guide VLAN011 tagged Static IPv6 VLAN untagged Static VLAN0072 untagged Static Static configuration: PVID: 1 (default) Ingress Filtering: Enabled Acceptable Frame Type: All Port 1/e1 is statically configured to: Vlan Name Egress rule ----...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 27.Web Server Commands ip http server The ip http server Global Configuration mode command enables configuring the device from a browser. To disable this function, use the no form of this command.
Web Server Commands User Guidelines Use the crypto certificate generate Global Configuration mode command to generate an HTTPS certificate. Specifying 0 as the port number effectively disables HTTP access to the device. Example The following example configures the http port number to 100. Console(config)# ip http port 100 ip https server The ip https server Global Configuration mode command enables configuring the device from a secured...
Allied Telesyn AT-8000S Switch CLI Reference Guide Default Configuration The default port number is 443. Command Mode Global Configuration mode User Guidelines Specifying 0 as the port number effectively disables HTTP access to the device. Example The following example configures the https port number to 100.
Web Server Commands Command Mode Global Configuration mode User Guidelines The command is not saved in the device configuration; however, the certificate and keys generated by this command are saved in the private configuration (which is never displayed to the user or backed up to another device).
Allied Telesyn AT-8000S Switch CLI Reference Guide After receiving the certificate from the Certification Authority, use the crypto certificate import Global Configuration mode command to import the certificate into the device. This certificate replaces the self-signed certificate. Examples The following example generates and displays a certificate request for HTTPS.
Web Server Commands If the public key found in the certificate does not match the device's SSL RSA key, the command fails. This command is not saved in the device configuration; however, the certificate imported by this command is saved in the private configuration (which is never displayed to the user or backed up to another device). Examples The following example imports a certificate signed by Certification Authority for HTTPS.
Allied Telesyn AT-8000S Switch CLI Reference Guide Example The following example configures the active certificate for HTTPS. Console(config)# ip https certificate 1 show crypto certificate mycertificate The show crypto certificate mycertificate Privileged EXEC mode command displays the SSH certificates of the device.
Web Server Commands Syntax show ip http Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the HTTP server configuration. Console# show ip http HTTP server enabled.
Page 282
Allied Telesyn AT-8000S Switch CLI Reference Guide Certificate 2 is inactive Issued by: self-signed Valid from: 8/9/2004 to 8/9/2005 Subject: CN= router.gm.com, 0= General Motors, C= US Finger print: 1873B936 88DC3411 BC8932EF 782134BA Page 280...
Allied Telesyn AT-8000S Switch CLI Reference Guide Chapter 28.802.1x Commands aaa authentication dot1x The aaa authentication dot1x Global Configuration mode command specifies one or more authentication, authorization, and accounting (AAA) methods for use on interfaces running IEEE 802.1X. To return to the default configuration, use the no form of this command.
802.1x Commands no dot1x system-auth-control Default Configuration 802.1x is disabled globally. Command Modes Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example enables 802.1x globally. Console(config)# dot1x system-auth-control dot1x port-control The dot1x port-control Interface Configuration mode command enables manually controlling the authorization state of the port.
Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example enables 802.1X authentication on Ethernet port 1/e16. Console(config)# interface ethernet 1/e16 Console(config-if)# dot1x port-control auto dot1x re-authentication The dot1x re-authentication Interface Configuration mode command enables periodic re-authentication of the client.
802.1x Commands Command Mode Interface Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. Examples The following example sets the number of seconds between re-authentication attempts, to 300. Console(config)# interface ethernet 1/e16 Console(config-if)# dot1x timeout re-authperiod 300 dot1x re-authenticate The dot1x re-authenticate Privileged EXEC mode command manually initiates a re-authentication of all 802.1X- enabled ports or the specified 802.1X-enabled port.
Allied Telesyn AT-8000S Switch CLI Reference Guide Parameters • seconds — Specifies the time in seconds that the device remains in the quiet state following a failed authentication exchange with the client. (Range: 0 - 65535 seconds) Default Configuration Quiet period is 60 seconds.
802.1x Commands User Guidelines The default value of this command should be changed only to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with certain clients. and authentication servers Examples The following command sets the number of seconds that the device waits for a response to an EAP-request/ identity frame, to 3600 seconds.
Allied Telesyn AT-8000S Switch CLI Reference Guide Syntax dot1x timeout supp-timeout seconds no dot1x timeout supp-timeout Parameters • seconds — Time in seconds that the device waits for a response to an EAP-request frame from the client before resending the request. (Range: 1- 65535 seconds) Default Configuration Default timeout period is 30 seconds.
802.1x Commands User Guidelines The actual timeout can be determined by comparing the dot1x timeout server-timeout value and the result of multiplying the radius-server retransmit value with the radius-server timeout value and selecting the lower of the two values. Examples The following example sets the time for the retransmission of packets to the authentication server to 3600 seconds.
Page 292
Allied Telesyn AT-8000S Switch CLI Reference Guide 1/e5 Force-auth Unauthorized* 3600 * Port is down or not present. Console# show dot1x ethernet 1/e3 802.1x is enabled. Port Admin Mode Oper Mode Reauth Reauth Username Control Period ---- ---------- --------- -------...
802.1x Commands Username The username representing the identity of the Supplicant. This field shows the username in case the port control is auto. If the port is Authorized, it shows the username of the current user. If the port is unauthorized it shows the last user that was authenticated successfully.
Allied Telesyn AT-8000S Switch CLI Reference Guide User Guidelines There are no user guidelines for this command. Example The following example displays 802.1X users. Console# show dot1x users Port Username Session Time Auth Method MAC Address ----- -------- ------------ -----------...
Page 295
802.1x Commands Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example displays 802.1X statistics for the specified interface. Console# show dot1x statistics ethernet 1/e1 EapolFramesRx: 11 EapolFramesTx: 12 EapolStartFramesRx: 12 EapolLogoffFramesRx: 1 EapolRespIdFramesRx: 3 EapolRespFramesRx: 6...
Allied Telesyn AT-8000S Switch CLI Reference Guide EapolReqFramesTx The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator. InvalidEapolFramesRx The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.
802.1x Commands dot1x guest-vlan enable The dot1x vlans guest-vlan enable Interface Configuration mode command enables unauthorized users on the interface access to the Guest VLAN. To disable access, use the no form of this command Syntax dot1x guest-vlan enable no dot1x guest-vlan enable Default Configuration Disabled.
Page 298
Allied Telesyn AT-8000S Switch CLI Reference Guide Examples The following example displays 802.1X advanced features for the device. Console# show dot1x advanced Guest VLAN: 2 Page 296...
Need help?
Do you have a question about the AT-8000S and is the answer not in the manual?
Questions and answers