Force10 Networks S2410s Bedienungsanleitung

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304

Zur Seite of

Richtige Gebrauchsanleitung

Die Vorschriften verpflichten den Verkäufer zur Übertragung der Gebrauchsanleitung Force10 Networks S2410s an den Erwerber, zusammen mit der Ware. Eine fehlende Anleitung oder falsche Informationen, die dem Verbraucher übertragen werden, bilden eine Grundlage für eine Reklamation aufgrund Unstimmigkeit des Geräts mit dem Vertrag. Rechtsmäßig lässt man das Anfügen einer Gebrauchsanleitung in anderer Form als Papierform zu, was letztens sehr oft genutzt wird, indem man eine grafische oder elektronische Anleitung von Force10 Networks S2410s, sowie Anleitungsvideos für Nutzer beifügt. Die Bedingung ist, dass ihre Form leserlich und verständlich ist.

Was ist eine Gebrauchsanleitung?

Das Wort kommt vom lateinischen „instructio”, d.h. ordnen. Demnach kann man in der Anleitung Force10 Networks S2410s die Beschreibung der Etappen der Vorgehensweisen finden. Das Ziel der Anleitung ist die Belehrung, Vereinfachung des Starts, der Nutzung des Geräts oder auch der Ausführung bestimmter Tätigkeiten. Die Anleitung ist eine Sammlung von Informationen über ein Gegenstand/eine Dienstleistung, ein Hinweis.

Leider widmen nicht viele Nutzer ihre Zeit der Gebrauchsanleitung Force10 Networks S2410s. Eine gute Gebrauchsanleitung erlaubt nicht nur eine Reihe zusätzlicher Funktionen des gekauften Geräts kennenzulernen, sondern hilft dabei viele Fehler zu vermeiden.

Was sollte also eine ideale Gebrauchsanleitung beinhalten?

Die Gebrauchsanleitung Force10 Networks S2410s sollte vor allem folgendes enthalten:
- Informationen über technische Daten des Geräts Force10 Networks S2410s
- Den Namen des Produzenten und das Produktionsjahr des Geräts Force10 Networks S2410s
- Grundsätze der Bedienung, Regulierung und Wartung des Geräts Force10 Networks S2410s
- Sicherheitszeichen und Zertifikate, die die Übereinstimmung mit entsprechenden Normen bestätigen

Warum lesen wir keine Gebrauchsanleitungen?

Der Grund dafür ist die fehlende Zeit und die Sicherheit, was die bestimmten Funktionen der gekauften Geräte angeht. Leider ist das Anschließen und Starten von Force10 Networks S2410s zu wenig. Eine Anleitung beinhaltet eine Reihe von Hinweisen bezüglich bestimmter Funktionen, Sicherheitsgrundsätze, Wartungsarten (sogar das, welche Mittel man benutzen sollte), eventueller Fehler von Force10 Networks S2410s und Lösungsarten für Probleme, die während der Nutzung auftreten könnten. Immerhin kann man in der Gebrauchsanleitung die Kontaktnummer zum Service Force10 Networks finden, wenn die vorgeschlagenen Lösungen nicht wirksam sind. Aktuell erfreuen sich Anleitungen in Form von interessanten Animationen oder Videoanleitungen an Popularität, die den Nutzer besser ansprechen als eine Broschüre. Diese Art von Anleitung gibt garantiert, dass der Nutzer sich das ganze Video anschaut, ohne die spezifizierten und komplizierten technischen Beschreibungen von Force10 Networks S2410s zu überspringen, wie es bei der Papierform passiert.

Warum sollte man Gebrauchsanleitungen lesen?

In der Gebrauchsanleitung finden wir vor allem die Antwort über den Bau sowie die Möglichkeiten des Geräts Force10 Networks S2410s, über die Nutzung bestimmter Accessoires und eine Reihe von Informationen, die erlauben, jegliche Funktionen und Bequemlichkeiten zu nutzen.

Nach dem gelungenen Kauf des Geräts, sollte man einige Zeit für das Kennenlernen jedes Teils der Anleitung von Force10 Networks S2410s widmen. Aktuell sind sie genau vorbereitet oder übersetzt, damit sie nicht nur verständlich für die Nutzer sind, aber auch ihre grundliegende Hilfs-Informations-Funktion erfüllen.

Inhaltsverzeichnis der Gebrauchsanleitungen

  • Seite 1

    SFT OS Command Reference for the S2410 V ersion 2.4.1.0 Edition 2 April 2008[...]

  • Seite 2

    Copyright 2008 Force10 Networks All rights reserved. Printe d in the USA. April 2008. Force10 Networks reserves the right to change, modify , revi se this publicati on without notice. T rademarks Force10 Networks® and E-Series® ar e registered trademarks of Force10 Networks, In c. Force10, the Force 10 logo, E1200, E600, E60 0i, E300, EtherScale,[...]

  • Seite 3

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 3 This preface describes SFTOS 2.4.1 by contrasting it to SFT O S 2.3.1.9. Major Changes Most of the differences in SFT OS 2.4.1 reflec t the fact that SFTOS 2.4.1 is dedicated to supporting the S2410 models of the S-Series: • Layer 2 only : The S2410 is limited to Layer 2 functionality , a[...]

  • Seite 4

    4 New Features • The maximum number of LAGs is 12, with a maximum of 12 ports in a LAG (vs. 32 LAGs, with a maximum of eight members each in SFT OS 2.3.1). See Chapter 15, LAG/ Port Channel Commands, on pa ge 249 . • Maximum Jumbo Frame size in creased from 9216 to 1024 0. • IGMP Snooping : The current S2410 hardware does not supp ort IGMP Sn[...]

  • Seite 5

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 5 New Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Major Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Ot[...]

  • Seite 6

    6 Contents Chapter 3 Using the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Command Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Command Format . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Seite 7

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 7 show interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 show interface ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 show inter[...]

  • Seite 8

    8 Contents snmp-server enable traps linkmode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 0 snmp-server enable traps multiuse rs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 0 snmp-server enable traps stpmode . . . . . . . . . . . . . . . . . . . . . . . .[...]

  • Seite 9

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 9 priority (VLAN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126 protocol group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127 protoc[...]

  • Seite 10

    10 Contents Configuration Scripting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146 script apply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147 script delete . . . . . . . . . . . . . . . . . .[...]

  • Seite 11

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 11 port-secur ity ma c- ad d re ss move . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166 show port-security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166 show port-se[...]

  • Seite 12

    12 Contents port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190 priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190 single-connection . . . . . . . . . . . . [...]

  • Seite 13

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 13 lease . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209 network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Seite 14

    14 Contents gvrp interfacemode enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228 gvrp interfacemode enable all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 set gvrp adminmode . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

  • Seite 15

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 15 Chapter 15 LAG/Port Channel Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249 addport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249 deletepor[...]

  • Seite 16

    16 Contents spanning-tree mst priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271 spanning-tree mst vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272 spanning-tre e port mode enable . . . . . . . . . . . . . . . . [...]

  • Seite 17

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 17 Figure 1 Force10 Netw orks iSuppor t Websit e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Figure 2 Examp le of Accessing the Boot Menu with the reload Command . . . . . . . . . . . . . . . . . 32 Figure 3 Example of Configuring the Eth ernet Management [...]

  • Seite 18

    18 Figure 35 Using the copy command to Upload the Event Lo g . . . . . . . . . . . . . . . . . . . . . . . . . . . 141 Figure 36 Using the copy command to Download the CLI Ba nner . . . . . . . . . . . . . . . . . . . . . . . 142 Figure 37 Sample Output from the show logging Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 Figure[...]

  • Seite 19

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 19 T able 1 Boot Menu Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 T able 2 Network Address Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 T able 3 Command Modes . [...]

  • Seite 20

    20[...]

  • Seite 21

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 21 This guide describes configura tion commands for SFTOS 2.4 software, which is dedicate d to the S2410 models of the S-Series line of switc hes. The commands can be accessed from the SFTOS Command Line Interface (CLI), access ed through the console port or through a T elnet connection, and [...]

  • Seite 22

    22 About This Guide Audience This guide assumes you are kn owledgeable in Layer 2 and Laye r 3 networking technolog ies, that you have an understanding of the SFT OS software base and have read the appropriate specification for the relevant switch platform. This document is primarily fo r system administrators config uring and operating a system us[...]

  • Seite 23

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 23 Related Documents and Sour ces of Additional Information The following docu ments prov ide information on using the S2410 switch and SFTOS 2.4 software. All of the docu ments are available on the Documents tab of iS upport (the Force10 Networks support we bsite): http://www .force10network[...]

  • Seite 24

    24 About This Guide Document ation Feedback If appropriate for the issue, pl ease include the following info rmation with your comments: • Document name • Document part number (from the front cover) • Page number • Software release version (from the front cover) The iSupport W e bsite Access to some sections of the iSupport we bsite do not [...]

  • Seite 25

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 25 • Documents : User documentation, F AQs, field no tices, technical tips, and white papers • Support Programs : Information on the complete suite of Force10 support and professional support services. For more on using the iSupport we bsite and accessing services, see the Force10 Service[...]

  • Seite 26

    26 About This Guide[...]

  • Seite 27

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 27 The SFTOS software loaded in every S- Series switch has two purposes: • Assist attached hardware in switching frames, based on Layer 2, 3, or 4 information contained in the frames. • Provide a complete device management portfolio to the network administrator . Switch Management Options[...]

  • Seite 28

    28 SFTOS Overview SFT OS 2.4.1 Features The SFTOS 2.4 .1 so ftware pr ov ides the following features th rough a limited version (no stacking) of its “Layer 2 Package” (also called the “Switching Package”). • BootP (RFC951, 1542) • BootP/DHCP Relay and Server (RFC 2131) • Host Requirements (RFC 1 122) • UDP (RFC 768) • IP (RFC 791)[...]

  • Seite 29

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 29 Multicast Protocols • IGMP Snooping • Layer 2 Multicast Forwarding Security and Packet Control Features • Ingress Rate Limiting • Login Access Control • RADIUS • IEEE 802.1x • SSH2 Server Support • Port Mirroring • Access Profiles on Routing Protocols • DOS Protection ?[...]

  • Seite 30

    30 SFTOS Overview[...]

  • Seite 31

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 31 This chapter summarizes the procedures to star t and operate the switch. For more detail, see the Getting S t arted chapter in the SFTOS Config uration Guide (and the rest of that guide) or the S2410 Quick Refer ence . This chapter covers the following topics: • Starting the S witch • [...]

  • Seite 32

    32 Quick Start 5. Press ENTER two times. The prompt of the User Exec mode of the CLI is displayed. 6. Enter enable to switch to the Privileged Exec mode. Y ou can run all show commands from this mode, while some show commands do not run from User Exec mode. 7. Enter configure to access the Global Config mode to enter config uration commands. 8. Ent[...]

  • Seite 33

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 33 2. At the [Boot Menu] prompt, press the number and Enter of the option that you want. The options are: For details on other Xmodem opt ions, see Uploading from the Switc h through XMODEM on page 37 and Downloading to the Switch through XMODEM on page 37 . In general, for more information o[...]

  • Seite 34

    34 Quick Start Physical Port Data T o get information on the physical port, use the show port all command : User Account Management T o configure switch administrator accounts, use the following commands : Command Syntax Command Mode Purpose show port all Privileged Exec Displays the ports in unit/slot/port format a nd the following data for each p[...]

  • Seite 35

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 35 Management IP Addr ess In addition to logging into the CLI to view and manage network parameters, you can use the following methods: • Simple Network Manage ment Protocol (SNMP) • S S H • T e l n e t • SFTOS W eb User Inte rface (W eb UI) through a W eb browser (See Using the W eb [...]

  • Seite 36

    36 Quick Start Configuring the Management VLAN IP Address T o configure the management VLAN IP address, use the following commands: For details on command syntax for the co mmands liste d above, see General System Management and Information Commands on page 55 . Configuring the Ethernet Management Port T o configure the IP address of the Ethernet M[...]

  • Seite 37

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 37 Example of Configuring the Ethernet Management Port Figure 3 Example of Configuring th e Ethernet M anagement Port Uploading fr om the Switch through XMODEM T o copy to a PC thr ough the co nsole port with XMODEM, use the following command. Downloading to the Switch thr ough XMODEM T o dow[...]

  • Seite 38

    38 Quick Start Downloading fr om a TFTP Server 1. Before starting a TFTP server download, c onfigure the management IP address of the switch; see Management IP Address on page 35 . 2. T o download from a TFTP server , use the following command : Using Factory Defaults T o load factory defaults, use either of the following commands : Command Syntax [...]

  • Seite 39

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 39 The SFTOS command line interface (CLI) is one of the three major wa ys to manage the S2410, and is t he most comple te. The SFT OS W eb User Interfa ce (W eb UI) is discussed in Chapter 4, Using the W eb User Interface , and SNMP is addressed in SNMP Management Commands on pa ge 94 in the [...]

  • Seite 40

    40 Using the Command Line Inter face The following conventions apply to the command name: • The command name is displayed in bold fo nt. It must be entered exactly as shown. • When you have entered enough letters of a command name to uniquely identify the command, you can press the space bar or Ta b key to cause the system to complete the word.[...]

  • Seite 41

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 41 W ords in italics (also some times shown in brackets: <param eter> ) indicate that a mandatory parameter mu st be entered in pl ace of the brackets and text inside them . [ parameter ]—square brackets indicate that an optional parameter ma y be entered in place of the brackets and [...]

  • Seite 42

    42 Using the Command Line Inter face unit/slot/port — V alid slot and port number separated by forward slash es. For examp le, 0/1 represents slot number 0 and port number 1. logical unit/ slot/port —Logical unit, slot and port number . This is applicable in the case of a link aggregation group (LAG; also called a port channel). The operator ca[...]

  • Seite 43

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 43 Keyboard Shortcuts The following key combinations (speedkeys, sp ecial characters) speed up use of the CLI : Backspace —delete previous character Ctrl-A —go to beginning of line Ctrl-B —go backward one character Ctrl-D —delete current character Ctrl-E —go to end of line Ctrl-F ?[...]

  • Seite 44

    44 Using the Command Line Inter face • T ype a partial keyword followed by a ? A display of keywords be gin ning with the partial keyword is listed . Figure 4 illustrates the results of entering ? to get a list of possible keywords. Figure 4 Partial Keyword Example Using Command Modes The CLI of SFT OS follows the industry conv ention of mode-bas[...]

  • Seite 45

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 45 The following command-mode tree diagram provi des an overview of the names of the mo des and how they relate to each other . The User Ex ec mode at the top of the tree is the mode you enter when you access the CLI. Mode-based T opology As detailed above, the CLI is bu ilt on a mode concept[...]

  • Seite 46

    46 Using the Command Line Inter face Figure 5 CLI Mode Diagram Access to all commands beyond the User Ex ec mode can be restricted through the en able password, which you set with the enable passwd command. See enable passwd on page 142 . Note: In Release 2.4.1, you acce ss the Interf ace VLAN mode from the Global Config mode with the command inter[...]

  • Seite 47

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 47 The following table shows the relationship of the command mode names to the prompts visible in the mode and the exit method from that mode. The first three rows in the table are organized in the sequence in which you would access the child modes. Beyond the Global Config mode, the modes ar[...]

  • Seite 48

    48 Using the Command Line Inter face Mode-based Command Hierar chy As introduced above, the CLI is divided into va rious modes. Commands in a particular mo de are not available until the operator switches to th at mode, with the exception of the User Exec mode commands. The User Exec mode comman ds may also be executed in the Privileged Exec mode. [...]

  • Seite 49

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 49 In this mode, a physical port is set up fo r a specifi c logical connection operation. The Interface Config mode provides access to the router interface configuration commands. Command Prompt : hostna me (Interface )# The resulting prompt sequence for the interface configuration command en[...]

  • Seite 50

    50 Using the Command Line Inter face T ACACS Config Mode. Use this mode to configure th e connection parameters to a T ACACS + user authentication server . VLAN Mode. (formally called the Interface Vlan Config mode, or more simply , the Interface Vlan mode) This mode groups a ll the commands pertaining to VLANs. Command Prompt : hostna me ( conf-if[...]

  • Seite 51

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 51 This chapter covers the following topics: • Configuring for W eb Access on page 52 • W eb Page Layout on page 5 2 • Start ing the W eb User Interface on page 52 • Command Buttons on page 53 This chapter is a brief introduction to the SFT OS W eb User Interface (W eb UI), enabling y[...]

  • Seite 52

    52 Using the Web User Interface Configuring for W eb Access T o enable W eb browser access to the switch: 1. Configure the switch for in-band connectivity . See Management IP Address on page 35 . 2. Enable HTTP W eb access to the switc h with either the ip http server enable command or ip http secure-server enable (for details, see Hypertext T rans[...]

  • Seite 53

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 53 3. Make your selection by clicking on the appr opriate item in the navigation tree in Frame 2. Command Buttons The following command buttons are used throughout the W eb UI pa nels: Save —Implements and saves the chan ges you just made. Some se ttings may require you t o reset the system[...]

  • Seite 54

    54 Using the Web User Interface[...]

  • Seite 55

    SFTOS Command Reference for the S2410, Version 2.4 . 1.0 55 The comma nds in this chapter either manage the switch in general, configure management interfaces, or show current ma nagement settings. For every conf iguration command, there is a show command that displays the configuration setting. This chapter contains the following major sections: ?[...]

  • Seite 56

    56 System Management Commands dir • network protoc ol on page 62 • protocol on page 63 • serviceport ip on page 63 • serviceport protocol on page 64 • show arp switch on page 64 • show hardware on page 65 • show interface on page 65 • show interface ethernet on pag e 67 • show interface managementethernet o n page 75 • show inte[...]

  • Seite 57

    hostname SFTOS Command Reference for the S2410, Version 2.4 . 1.0 57 Example Figure 7 Example of dir nvram Command Output hostname Change the text that ap pears as part of the CLI prompt. Synt ax ho stname hostname Parameters Default Force10 S50 (For e xample, the User Exec prompt appears as “ (Force10 S50) > ”.) Mode Global Config Command H[...]

  • Seite 58

    58 System Management Commands interface managementethe rnet interface managementethernet This command invokes the Interface ManagementEthernet mode (uses the (Config-if-ma)# prompt), where you can set up a management IP interface. For details on management interfaces, see the Management chapter of the SFTOS Confi guration Guide . Synt ax interface [...]

  • Seite 59

    mac-addr ess SFTOS Command Reference for the S2410, Version 2.4 . 1.0 59 The value for ipaddr is the IP Addres s of the management interface. This is the IP address that you would enter in your W eb browser to access the SFTOS W eb User Interface. The value for subnetmask is a 4-digit dotted-deci mal numb er which represents the subnet mask of the [...]

  • Seite 60

    60 System Management Commands management route de fault Default None Mode Interface ManagementEthernet Command History Related Commands management route default This command sets the IP gate way of the switch. The managemen t IP address (configured with the ip address , above) and the gateway must be on the same subnet. Synt ax man agement route de[...]

  • Seite 61

    mtu SFTOS Command Reference for the S2410, Version 2.4 . 1.0 61 Example Figure 8 Example of Configuring Man agement Address Related Commands mtu This command sets the maximum transmission unit (MTU) size (in bytes) for physical and LAG (port channel) interfaces. Synt ax [ no ] mtu 1518-10240 For the standard implementatio n, the range of the MTU si[...]

  • Seite 62

    62 System Management Commands network ma c-address network mac-address This command is replaced by the mac-address command in V ersion 2.3. Mode Privileged Exec Command History network mac-type This command is replaced by the mac-type command in V ersion 2.3. Mode Privileged Exec Command History network parms Command History network protocol This c[...]

  • Seite 63

    protocol SFTOS Command Reference for the S2410, Version 2.4 . 1.0 63 protocol This command specifies the netw ork configuration protocol t o be used for the management VLAN. Synt ax protocol { none | bootp | dhcp } If you modify this value, the chan ge is effective immediately . The bootp keyword indicates that the switch periodically send s req ue[...]

  • Seite 64

    64 System Management Commands serviceport pr ot oc ol Related Commands serviceport protocol This command specifies the network configuratio n protocol to be used for configuring access to the Ethernet Managemen t port. Synt ax serviceport pro tocol { none | bootp | dhcp } If you modify this value, the ch ange is effective immediately . Use the boot[...]

  • Seite 65

    show hardwa re SFTOS Command Reference for the S2410, Version 2.4 . 1.0 65 MAC Address —A unicast MAC a ddress for which the switch has forwarding and/or fi ltering information. The format is 6 two-digit hexadecimal number s that are separated by colons, for example 01:23:45:67:89:AB IP Address —The IP address assigned to each interface unit/sl[...]

  • Seite 66

    66 System Management Commands show interface Enter the port number of a particular port to query , where unit is the stack member , slot is always 0 (zero), and port is the port numb er . Mode Privileged Exec Web U se r Interface Inventory Information panel, accessed from the System node Usage Information The show interface command accepts oth er k[...]

  • Seite 67

    show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 67 Related Commands show interface ethernet This command displays de tailed statistics for a specific port or for all CPU traffic based upon the ar gument. Synt ax show interface ethernet { switchport | unit/s lot/port | 1-3965 } Parameters Mode Privileged Exec Usage [...]

  • Seite 68

    68 System Management Commands show interface ethernet Example 1 Figure 10 Example of show interface ethern et switchport Output The display fields of show interface ethernet , when the keyword switchport is added, are as follows: Ta b l e 7 Fields in Output of show inte rface ethernet switch port Command Field Description T ota l Packets Received ([...]

  • Seite 69

    show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 69 Example 2 Figure 1 1 Example of show interface ethernet u nit/slot/port Output ( truncated) Broadcast Packets T ran smitted The total number of packets that higher-level protocols requested be transmitted to the Broadcast add ress, including those th at we re disca[...]

  • Seite 70

    70 System Management Commands show interface ethernet The show interface ethe rnet display fields, when the argument is unit/slot/port , are as follows: Ta b l e 8 Fields in Output of show interface ethernet unit/slot/port Command Field Description Packets Received T ype Indicates current type of use of the port, such as “PC Mbr” to indicate p [...]

  • Seite 71

    show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 71 Packets Received 1519-1522 Octets The total number of packets (including bad packets) received that were betw een 1519 and 1 522 octets in length i nclusive (excluding framing bits but including FCS octets). Packets Received > 1522 Octets The total number of pac[...]

  • Seite 72

    72 System Management Commands show interface ethernet Local Traf fic Frames The total number of frames dropped in the forwardin g process because the de st ination add r e ss wa s loca ted off of this port. 802.3x Pause Frames Received A count of MAC Co ntrol frames received on this interface with an opcode indicating the P AUSE operation. This cou[...]

  • Seite 73

    show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 73 Packets T ransmi tted 1024-1518 Octets The total number of p ackets (including bad packets) received that were betw een 1024 and 1 518 octets in length i nclusive (excluding framing bits but including FCS octets) Packets T ransmi tted 1519-1522 Octets The total num[...]

  • Seite 74

    74 System Management Commands show interface ethernet Related Commands VLAN Viable Discards The number of frames discarded on this p ort when a lookup on a particular VLAN occurs while that entry in the VLAN table is being modified, or if the VLAN has no t been configured Protocol S tatistics BPDU's received The count of BPDUs (Bridge Protocol[...]

  • Seite 75

    show interface mana gementethernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 75 show interface managementethernet This command displays info rmation about the management address of the switch. Synt ax show interface managementet hernet Mode Privileged Exec Command History Usage Information The display parameters of the show interface[...]

  • Seite 76

    76 System Management Commands show interface switchport Related Commands show interface switchport This command displays a summary of statistics on Layer 2 interfaces. Synt ax show interface switchport Mode Privileged Exec Usage Information The display parameters of show interface , when the argument is switchport , are as follows: ip address (mana[...]

  • Seite 77

    show interfaces SFTOS Command Reference for the S2410, Version 2.4 . 1.0 77 Related Commands show interfaces This command displays information about a selected interface or VLAN. Synt ax sho w interfaces { description { unit/s lot/port | 1-3965 } | cos-queue [ unit/slot/port ]} Parameters Mode Privileged Exec Command History VLAN Entries Currently [...]

  • Seite 78

    78 System Management Commands show loggi ng Usage Information The following examp le shows sample output of the show interfaces descri ption command with an interface specified in the unit/slot/port form: Example Figure 12 Output of the show interfaces descriptio n Command Related Commands show logging Related Commands show mac-addr-table This comm[...]

  • Seite 79

    show mac-addr-t able SFTOS Command Reference for the S2410, Version 2.4 . 1.0 79 Parameters Mode Privileged Exec Example Figure 13 Example of Output from the show mac-ad dr-ta ble a ll Command Field Descriptions Mac Address —A unicast MAC addres s for which the switch has forwa rding and or filtering informati on. The format is 6 or 8 two-digit h[...]

  • Seite 80

    80 System Management Commands show msg log Stat ic —The value of the correspo nding instance was added by the system or a user wh en a static MAC filter was defined. It cannot be relearned. Learned —The value of the correspondi ng instance was learned by o bserving the source MAC addresses of incoming traffic, and is currently in use. Managemen[...]

  • Seite 81

    show netw ork SFTOS Command Reference for the S2410, Version 2.4 . 1.0 81 show network Command History Related Commands show running-config This command is used to disp lay/capture the current setting of dif ferent protocol packages supported on the switch. This c ommand disp lays/captures only commands with settings/ configurations with values tha[...]

  • Seite 82

    82 System Management Commands show serviceport Example Figure 16 Using the show run n ing-config comma nd Note : Usage Information Start ing with Release 2.3, show running- config startup-config provides the user the opportunity to captu re the runnin g-config data to the startup-co nfig file as a text file. If a startup-config file is already pres[...]

  • Seite 83

    show sysinfo SFTOS Command Reference for the S2410, Version 2.4 . 1.0 83 Example Figure 17 show serviceport Comma nd Output Related Commands show sysinfo This command displays switch information. Synt ax sho w sysinfo Ta b l e 1 1 Fields in Output of show serviceport command Field Description IP Address The IP address of the Ethernet Man agement po[...]

  • Seite 84

    84 System Management Commands show version Mode Privileged Exec show version This command displays version details of the software/hardware present on the system, which would be used for trouble-shooting . This co mmand provides the de tails shown with the show hardware and show sysinfo commands, along with Interfa ce information, the u-boot versio[...]

  • Seite 85

    show version SFTOS Command Reference for the S2410, Version 2.4 . 1.0 85 Burned in MAC Address Universally assign ed network address Software V ersion The releas e.version.revision number of the code currently running on the switch Additional Packages This displays the add itional packages that are incorporated into this system, such as SFTOS Multi[...]

  • Seite 86

    86 System Management Commands show tech-s upport Related Commands show tech-support This command displays the output of the commands show hardware , sh ow logging , show port all , show running-config , and show versio n . The output for each is separated by a header , as exe mplified here: ----------------- show version -------------------- [The o[...]

  • Seite 87

    vlan participation (management) SFTOS Command Reference for the S2410, Version 2.4 . 1.0 87 Related Commands vlan participation (management) This command assigns the management VLAN of the switc h. Synt ax [ no ] vlan participation vlan_id The value for vlan_id is the VLAN that you want to u se for the manageme nt interface (By default, VLAN 1 is u[...]

  • Seite 88

    88 System Management Commands ip telnet maxsessions • telnetcon maxsessions on page 91 • telnetcon timeout on page 90 ip telnet maxsessions This command specifies the maximum number of T elnet connection sessions that can be established. Synt ax ip telnet ma xsessions 0-5 A value of 0 indicates that no T elnet connec tion can be estab lish ed. [...]

  • Seite 89

    ip telnet server enable SFTOS Command Reference for the S2410, Version 2.4 . 1.0 89 Command History ip telnet server enable Enable or disable T elnet services. Synt ax [no ] telnet server enable Mode Global Config Command History Related Commands session-limit This command specifies the maximum number of simultaneous outbound telnet sessions. A val[...]

  • Seite 90

    90 System Management Commands show telnet The no version of this command sets the outbou nd T elnet session timeout value to the default. Default 1 (minute) Mode Line Config show telnet This command displays the curre nt outbound telnet settings. Synt ax sho w telnet Modes Privileged Exec and User Exec Outbound T elnet Login Timeout (in minutes)—[...]

  • Seite 91

    telnetcon maxsessions SFTOS Command Reference for the S2410, Version 2.4 . 1.0 91 telnetcon maxsessions Command History Serial Commands This section describes the follo wi ng SFT OS system management commands pertaining to console port connections (s erial connections, EIA-232): • lineconfig on page 91 • serial baudrate on page 91 • serial ti[...]

  • Seite 92

    92 System Management Commands serial timeout The no serial baudrate command sets the communic ation rate of the terminal interface to the 9600 default. Default 9600 Mode Line Config serial timeout This command specifies the maximum connect time (in minutes) without console activity . Synt ax seri al timeout 0-1 60 A value of 0 means no console t im[...]

  • Seite 93

    show serial SFTOS Command Reference for the S2410, Version 2.4 . 1.0 93 Ta b l e 1 4 Fields of show serial Command Output Field Description Serial Port Login Timeout (minut es) S pecifies the time, in minutes, of inactivity on a serial port connection, after which the switch will close the connection. Any numeric value betw een 0 and 160 is allowed[...]

  • Seite 94

    94 System Management Commands show serial SNMP Management Commands This section describes the SNMP system ma nagement command s supported by SFTOS: • show snmpcommun ity on page 95 • show snmptrap on page 95 • show trapflags on page 96 • snmp-server on page 97 • snmp-server community on page 97 • no snmp-server community on page 97 • [...]

  • Seite 95

    show snmpcommunity SFTOS Command Reference for the S2410, Version 2.4 . 1.0 95 show snmpcommunity This command displays SNMP community info rmation. Six communitie s are supported. Y ou can add, change, or delete communities. The switc h does n ot have to be reset for changes to take effect. The SNMP agent of the switch complies with SNMP V ersion [...]

  • Seite 96

    96 System Management Commands show trapflags show trapflags This command displays trap co nditions. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the switch's SNMP agent sends the tr ap to all enabled trap receivers. The switch does no[...]

  • Seite 97

    snmp-server SFTOS Command Reference for the S2410, Version 2.4 . 1.0 97 snmp-server This command sets the name an d the physical location of th e switch, and the organization responsible for the network. The range for name, location, and contact is from 1 to 31 alphanumeric characters. Synt ax snm p-server { sysname name | location loc | contact co[...]

  • Seite 98

    98 System Management Commands snmp-server community ipaddr snmp-server community ipaddr This command sets a client IP address for an SN MP community . The address is the assoc iated community SNMP packet-sen ding address and is used along w ith the client IP mask value to denote a range of IP addresses from which SN MP clients may use that communit[...]

  • Seite 99

    snmp-serve r community ro SFTOS Command Reference for the S2410, Version 2.4 . 1.0 99 status is changed back to Enable.The no version of this comma nd deactivates an SNMP community . If the community is disabled, no SNMP requests using this community are accepted. In this case the SNMP manager associ ated with this commun ity cannot manage the swit[...]

  • Seite 100

    100 System Management Commands snmp-serve r en ab le traps link mode Mode Global Config Command History Related Commands snmp-server enable traps linkmode This command enables Link Up /Down traps for the entire swit c h. When enabled, link traps are sent only if the Link T rap flag setting associated with the po rt is enabled (see ‘snmp trap link[...]

  • Seite 101

    snmp-server enable traps stpmode SFTOS Command Reference for the S2410, Version 2.4.1.0 101 snmp-server enable traps stpmode This command enables the sending of new root traps and topology chan ge notification traps. Synt ax [ no ] snmp-server enable traps stpmode The no version of this command disables the sendi ng of n ew root traps and topolo gy[...]

  • Seite 102

    102 System Management Commands snmptrap Command History snmptrap This command adds an SNMP trap receiver na me and trap receiver IP address. The maximum name length is 16 case-sensitiv e alphanumeric characters. Synt ax [ no ] snmptrap name ip addr The no version of this command deletes the sp ecified trap receiver from the community . Mode Global [...]

  • Seite 103

    snmp trap link-status SFTOS Command Reference for the S2410, Version 2.4.1.0 103 snmp trap link-status This command enables link status traps by interface. Synt ax [ no ] snmp trap link-status The no versi on of this command disabl es link status traps by interface. Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-[...]

  • Seite 104

    104 System Management Commands snmptrap snmpversion[...]

  • Seite 105

    SFTOS Command Reference for the S2410, Version 2.4.1.0 105 This chapter provides a detailed explanation of the system co nfiguration commands in the following major sections: • System Configuration Comman ds • V irtual LAN (V LAN) Commands on page 1 20 • System Utility Commands on page 138 • Configuration Scripting on page 146 System Config[...]

  • Seite 106

    106 System Configuration Commands bridge aging-time • show mac-address-table multicast on page 115 • show mac-address-table stats on page 1 16 • show monitor session on pag e 1 16 • show port on page 117 • show port protocol on page 1 19 • shutdown (Interface) on page 1 19 • shutdown all on page 119 MAC Database Commands T o configure[...]

  • Seite 107

    enable SFTOS Command Reference for the S2410, Version 2.4.1.0 107 Synt ax co nfigure Command Mode s Privileged Exec Usage Information Users executing this command enter the Global Config mode, which provides access to many commands within that mode. Also , this mo de is a gateway t o all other more proto col-specific modes except the VLAN mode. For[...]

  • Seite 108

    108 System Configuration Commands interface interface This command accesses the Interface Config mode for a designated logic al or physical interface. The Interface Config mode pr ovide s access to configura tion commands for th e specified interface. Synt ax interface unit/slot/port The unit/slot/port is a valid physical or logical port number . P[...]

  • Seite 109

    interface range SFTOS Command Reference for the S2410, Version 2.4.1.0 109 Defaults This command has no d efault behavior or values. Mode Global Config Command History Usage Information When creating an interface range, interfaces appear in the order they are entered; they are not sorted. The command verifies that interfa ces are present (physica l[...]

  • Seite 110

    110 System Configuration Commands interface range Range and Port Ch annel Range prompts within that mode are displayed in the Link Aggregation chapter (LAGs) in the SFTOS Command Refer ence . Example Figure 21 Commands A vailable in Ethernet Range Mode SFTOS, in contrast to FT OS, does not allow spaces around commas or hyphens in the range statemen[...]

  • Seite 111

    interface range SFTOS Command Reference for the S2410, Version 2.4.1.0 111 Example Figure 22 Bulk Configuratio n W arning Message Figure 23 is an example of a correctly format ted single range bu lk configuration. Example Figure 23 Single Range Bulk Configuration Figure 24 shows how to use commas to add different interface t ypes to the range enabl[...]

  • Seite 112

    112 System Configuration Commands monitor se ssion monitor session This command adds a mirrored port (source port) or probe port (destination port) to a session identified with the session ID of 1. In all released versions of SFT OS, the se ssion is always 1. Synt ax [ no ] monitor session 1 { d estination interface unit/slot/port | source interfac[...]

  • Seite 113

    monitor session 1 m ode SFTOS Command Reference for the S2410, Version 2.4.1.0 113 monitor session 1 mode This command sets the monitor session (port monitoring) mode to enabled . The probe and monitored ports mu st be configured before port monitoring can be enabled. When enabled, the probe port monitors all traffic received an d transmitted on th[...]

  • Seite 114

    114 System Configuration Commands no monitor session 1 no monitor session 1 This command removes all the source ports an d a destination port of the mirroring session and restore the default va lue for mirroring session mode. The 1 or session-id paramete r is an intege r value used to identify the session. In the current version of the software, th[...]

  • Seite 115

    show mac-address-table multicast SFTOS Command Reference for the S2410, Version 2.4.1.0 115 igmpsnooping —Display IGMP Snooping entries in the MFDB table. multicast —Display Multicast Fo rwarding Database T able informatio n. stats —Display MFDB statistics. Mode Privileged Exec Field Descriptions T otal Entries—This displays the total numbe[...]

  • Seite 116

    116 System Configuration Commands show mac-address-table stats Description—The text description of this multicast table entry . Interfaces—The list of interfaces that are designated for forwarding (Fwd:) and filteri ng (Flt:). Forwarding Interfaces—The resultant forwarding list is d erived from combining all the component’s forwarding inter[...]

  • Seite 117

    show port SFTOS Command Reference for the S2410, Version 2.4.1.0 117 Synt ax sho w monitor session 1 Mode Privileged Exec Example Figure 27 Command Exampl e: show monitor session 1 Field Descriptions Session ID—In all released versions of SFTOS, the session is always 1. Admin Mode—Indicates whet her the Port Mirroring fe ature is enab led or di[...]

  • Seite 118

    118 System Configuration Commands show port Example Figure 28 show port a ll Command Output Example Interface—V alid unit, slot and port n umber separated by forward slashes.. This field onl y displays in the show port all report. T ype—If not blank, this fiel d indicate s that this port is a special type of port. The possible values are: Mon?[...]

  • Seite 119

    show port protocol SFTOS Command Reference for the S2410, Version 2.4.1.0 119 show port protocol This command displays th e protocol-based VL AN information for either the entire system, or for the indicated group. Synt ax show port protoc ol groupid Mode Privileged Exec Group Name—This field displays th e group name of an entry in the protocol-b[...]

  • Seite 120

    120 System Configuration Commands shutdown a ll Synt ax [ no ] shutdown all Default enabled Mode Global Config V irtual LAN (VLAN) Commands In SFTOS 2.4.1, the interface vlan command is the starting point for VLAN configuration. Executing the command creates a new VLAN and invokes the Interface VLA N mode, where all VLAN configuration commands resi[...]

  • Seite 121

    clear vl an SFTOS Command Reference for the S2410, Version 2.4.1.0 121 • participation (VLAN) on page 126 • priority (VLAN) on page 126 • protocol grou p on page 127 • protocol vlan group on page 127 • protocol vlan grou p all on page 128 • pvid (VLAN) on page 128 • show vlan on page 129 • show vlan port on pag e 130 • tagged on p[...]

  • Seite 122

    122 System Configuration Commands description Mode Privileged Exec Related Commands description Enter a description for the selec ted interface (port or VLAN). Synt ax [no ] description description The descri ption allows spaces if you surround the stat ement with single or double quotes. Default none Mode Interface VLAN, Interface Config Command H[...]

  • Seite 123

    encapsulation (VLAN) SFTOS Command Reference for the S2410, Version 2.4.1.0 123 encapsulation (VLAN) This command configures the link layer encapsula tion type for the packet within the VLAN. Acceptable encapsulation types are Ethernet and SNAP . Synt ax en capsulation { et hernet | snap } Default ethernet Mode Interface VLAN Restrictions—Routed [...]

  • Seite 124

    124 System Configuration Commands makestatic Usage Information After using this command to access the Interf ace VLAN mode (the pr ompt for the Interface VLAN mode is (conf-if-vl-<vlan-id>)# ) , you can configure the selected VLAN. Y ou can also make configuration changes to a VLAN in the Interface Range mode (see interface range on page 108 [...]

  • Seite 125

    mtu (VLAN) SFTOS Command Reference for the S2410, Version 2.4.1.0 125 Mode Interface VLAN Command History Related Commands mtu (VLAN) This command sets the MTU (Maximum T r ansmission Unit) of the selected VLAN. Synt ax [ no ] mtu 576-1500 Default 1500 Mode Interface VLAN Command History Related Commands name (VLAN) This command changes the name of[...]

  • Seite 126

    126 System Configuration Commands network mg mt_vlan Command History Related Commands network mgmt_vlan Command History participation (VLAN) Configure how ports participate in a specific VLAN. Mode Interface VLAN Command History Related Commands priority (VLAN) Configure the priority for untagged frames. Mode Interface VLAN Command History Related [...]

  • Seite 127

    protocol group SFTOS Command Reference for the S2410, Version 2.4.1.0 127 protocol group This command attaches a group ID to the selected VLAN . A group can only be associated with one VLAN at a time. However , the VLAN association can be changed. The referenced VLAN should be created prior to the creation of the protocol-b ased VL AN, except when [...]

  • Seite 128

    128 System Configuration Commands protocol vlan gr ou p all Command History protocol vlan group all This command adds all physical interfaces to the protocol-based VLAN identified by groupid . A group may have more than one interfa ce associated with it. Each inte rface a nd protocol combin ation can only be associated with one group. If adding an [...]

  • Seite 129

    show vlan SFTOS Command Reference for the S2410, Version 2.4.1.0 129 show vlan This command displays informa tion about VLANs, either detaile d information for a specific VLAN or summary information for all config ured VLANs. The ID is a valid VLAN identification number . Synt ax sho w vlan [ brief | id vlanid | name | port ] Mode Privileged Exec a[...]

  • Seite 130

    130 System Configuration Commands show vlan port Q: “T” indicates that the port is tagged; “U” indicates untagged. Ports:”E” for Ethernet, followed by the po rt numbers (unit/slot/port) in the VLAN The output of the show vlan brief command is shown in the following example: Example Figure 32 Output of the show vlan br ief Command Descri[...]

  • Seite 131

    tagged SFTOS Command Reference for the S2410, Version 2.4.1.0 131 Mode Privileged Exec Command History Example Figure 34 Output of th e show vlan po rt Command tagged This command sets tagging to en abled for a specific port (or ra nge of ports ) in the sele cted VLAN. If tagging is enabled, traffi c is transmitted as tagged frames. Synt ax tagged [...]

  • Seite 132

    132 System Configuration Commands untagged Usage Information The tagged command includes the functionality of the participation include command and the acceptframe vlanOnly command. For details , see the VLAN chapter in the SFTOS Configuration Guide . Related Commands untagged This command adds a Layer 2 interface to the selected VLAN as an untagge[...]

  • Seite 133

    vlan acceptframe SFTOS Command Reference for the S2410, Version 2.4.1.0 133 vlan acceptframe This command sets the frame acceptance mode per interface . Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History vlan database Command History vlan ingres[...]

  • Seite 134

    134 System Configuration Commands vlan participation all Command History Related Commands vlan participation all This command configures the degree of participa tion for all int erfaces in a VLAN. The ID is a valid VLAN identification number . Mode Global Config Command History Related Commands vlan port acceptframe This command sets the frame acce[...]

  • Seite 135

    vlan port tagging all SFTOS Command Reference for the S2410, Version 2.4.1.0 135 Mode Global Config Command History Related Commands vlan port tagging all This command sets the tagg ing behavior for all interfaces in a VLAN to enabled. Command History Related Commands vlan port untagging all This command sets the tagging behavior for all interfaces[...]

  • Seite 136

    136 System Configuration Commands vlan protocol gr ou p vlan protocol group This command adds a protocol-based VLAN group to the system. The groupn ame is a character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to id entify the group in su bsequent commands. Synt ax vlan p [...]

  • Seite 137

    vlan pvid SFTOS Command Reference for the S2410, Version 2.4.1.0 137 vlan pvid This command changes the VLAN ID per interface. Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History vlan tagging This command sets tagging to enabled for th e selected[...]

  • Seite 138

    138 System Configuration Commands clear config System Utility Commands This section describes system utilities. The comman ds are divided into two functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands co nfigure featur es and options of the switch. For every configuration command[...]

  • Seite 139

    clear port-channel SFTOS Command Reference for the S2410, Version 2.4.1.0 139 Synt ax clear counters { unit/sl ot/port | all } Mode Privileged Exec clear port-channel This command clears all port-channels (LAGs). Synt ax clear port-channel Mode Privileged Exec clear traplog This command clears the t rap log. Synt ax cl ear traplog Mode Privileged E[...]

  • Seite 140

    140 System Configuration Commands copy • Event log (also called the error l og or the persistent log) ( nvram:errorlog ) • Buffered message log (also called the System log) ( nvram:log ) • startup configuration ( nvram:startup-config ) •t r a p l o g ( nvram:trapl og ) • See also copy (clibanner). Specify a URL for the destination in this[...]

  • Seite 141

    copy (clibanner) SFTOS Command Reference for the S2410, Version 2.4.1.0 141 The following command copies from the swit ch system memory to flash memory: copy system:running-co nfig nvram:startup-config Default None Mode Privileged Exec Command History Example Figure 35 Using the copy co mmand to Upload the Eve nt Log copy (clibanner) This version o[...]

  • Seite 142

    142 System Configuration Commands enable passwd cannot be created on the switch. Instead, create th e banner file using a text editor , put it on your TFTP server , and then download it to the switch. Synt ax co py tftp:// tftp_server_ip_add ress/filepath nvram:clibanner Reversing the sequenc e of the command paramete rs uploads the text file from [...]

  • Seite 143

    logout SFTOS Command Reference for the S2410, Version 2.4.1.0 143 Synt ax en able passwd password Mode Global Config Command History logout Close the curre nt T elnet connectio n or reset the current serial connection. Synt ax logo ut Mode Privileged Exec quit This command duplicates the functionality of the logout command, c losing the cu rrent T [...]

  • Seite 144

    144 System Configuration Commands ping ping This command checks if another computer is on the network and listens for connections. T o use this command, configure the switch for ne twork (in-band) connect ion. The source and target devices must have the ping utility enable d and running on top of TCP/IP . The switch can be pinged from any IP workst[...]

  • Seite 145

    terminal length SFTOS Command Reference for the S2410, Version 2.4.1.0 145 terminal length Configure the number of lines to be displayed on the terminal screen in one page of output of “show” commands. Synt ax termin al length number-of-lines Defaults 24 lines Mode Use Exec or Privileged Exec Command History Usage Information This is a session-[...]

  • Seite 146

    146 System Configuration Commands write write The functionality of this comm and is the same as for the copy system:running-config nvram:startup-config command, to save the running configuration to NVRAM, which would be used while the system is re-booted the next time. The writ e command defaults to write memory . Synt ax write memory Mode Privileg[...]

  • Seite 147

    script apply SFTOS Command Reference for the S2410, Version 2.4.1.0 147 script apply This command applies the commands in the co nfiguration script to the switch. The apply command backs up the running configuration an d then starts applying the commands in the script file. Application of th e comm ands stops at the first failure of a co mmand. The[...]

  • Seite 148

    148 System Configuration Commands script show script show This command displays the contents of a script file. The parameter scriptname is the name of the script file. Synt ax scri pt show scriptname Mode Privileged Exec The format of display is: Line <no>: <Line contents> script validate This command validates a configuration script fi[...]

  • Seite 149

    SFTOS Command Reference for the S2410, Version 2.4.1.0 149 This chapter provides a deta iled explanation of the fo llowing Syslog commands: • logging buffered on page 149 • logging buf fered wrap on page 150 • logging cli-co mmand on page 150 • logging console on page 151 • logging host on page 151 • logging host reconfigure on page 152[...]

  • Seite 150

    150 System Log logging buffered wrap Use no logging buffered to disable logging to the in-memory log. Default disabled; critical Mode Global Config logging buffered wrap This command enables wrapping of in-memory logging when full ca pacity is reached. Otherwise when full capacity is reached, logging stops. Synt ax loggin g buffered wrap Use no log[...]

  • Seite 151

    logging console SFTOS Command Reference for the S2410, Version 2.4.1.0 151 logging console This command enables logging of Sy stem log messages to the console. Synt ax logging console [ severitylevel ] The severitylevel value is specified through on e of the following keywords or the ke yword’ s representative integer , as shown here: emergency ([...]

  • Seite 152

    152 System Log logging host reconfigu re logging host reconfigure This command enables you to revise the IP address of a configured syslog host. Synt ax loggin g host reconfigure host-id hostadd ress Use show logging hosts to learn association of host-id wit h ho staddress . Mode Global Config Command History logging host remove This command remove[...]

  • Seite 153

    logging syslog SFTOS Command Reference for the S2410, Version 2.4.1.0 153 logging syslog This command enables logging to any configured syslog server . Synt ax loggin g syslog Use no logging syslog to disable syslog logging. Default disabled; local0 Mode Global Config show logging This comma nd displays a comb ination of the system log and event lo[...]

  • Seite 154

    154 System Log show logging buffered Fields in the report include : Logging Client Local Port—The port on the collector/relay to which syslog m essages are sent CLI Command Logging—The mode for logging CLI comma nds, whether enabled or disabled Console Logging—Th e mode for console logging, whether ena bled or disabled Console Logging Severit[...]

  • Seite 155

    show logging hosts SFTOS Command Reference for the S2410, Version 2.4.1.0 155 Buffered Logging Wrapping Behavior—The behavior of the in-memory log when faced with a log-ful l situation. “On” when wrapping is enabled, “Off” when not. Buffered Log Count—The count of valid entries in the buffered log The System log messages follow the summ[...]

  • Seite 156

    156 System Log show logging traplogs Fields in the report include : Index—An integer from 1 to 8, used for removing the associated syslog host IP Address—IP Address of the configured syslog host Severity—The minimum severity to log to the specified address Port—Server Port Number .This is the port on the local host from which syslog message[...]

  • Seite 157

    SFTOS Command Reference for the S2410, Version 2.4.1.0 157 Commands in this chapter manage user accoun ts. The commands are are comprised of two functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands co nfigure featur es and options of the switch. For every configuration command ,[...]

  • Seite 158

    158 User A ccount Comma nds disconnect disconnect This command closes the designated remote session or all sessions. Synt ax dis connect { sessionID | all } Mode Privileged Exec show loginsession This command displays curre nt telnet and seri al port connections to the switch. It also displays SSH sessions. Synt ax sho w loginsession Mode Privilege[...]

  • Seite 159

    username passwd SFTOS Command Reference for the S2410, Version 2.4.1.0 159 User Access Mode—Shows whether t he operator is able to change parameters on the switch (Read/ Write) or is only able to view them (Read Only). As a factory default, the ‘admin’ user h as Read/Write access. There can only be one Read/Write us er and up to five Read Onl[...]

  • Seite 160

    160 User A ccount Comma nds users snmpv3 accessmode users snmpv3 accessmode This command specifies the SNMP v3 acc ess priv ileges for the spec ified login user . The valid accessmode values are readonly or readwrite . The usernam e is the login user name for which the specified access mode applies. The default is readwr ite for ‘admin’ user; r[...]

  • Seite 161

    users snmpv3 encryption SFTOS Command Reference for the S2410, Version 2.4.1.0 161 If des is specified, the required key ma y b e specified on the comman d line. The ke y may be up to 16 characters long. If the des protocol is specified but a key is not provided, the user will be prompted for the key . When using the de s protocol, the user lo gin [...]

  • Seite 162

    162 User A ccount Comma nds users snmpv3 encryption[...]

  • Seite 163

    SFTOS Command Reference for the S2410, Version 2.4.1.0 163 This chapter provides a detaile d explanation of the security commands available in the SFTOS software, presented in the following sections: • Port Security Commands • Port-Based Network Access Control (IEEE 802.1X) on page 168 • RADIUS Commands on page 180 • T ACACS+ Commands on pa[...]

  • Seite 164

    164 Security Commands port-secur ity Implement ation Notes • If port security is enabled on a port, and th en an ACL is applied to the port, the ACL is given precedence and port security is ignored. For example, if port security is applied, and then an ACL with a permit rule for a partic ular source address is applied, frames with that source add[...]

  • Seite 165

    port-security max-static SFTOS Command Reference for the S2410, Version 2.4.1.0 165 Synt ax po rt-security max-dynamic maxvalue no port-security max-dyn amic Default 600 Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History port-security max-static[...]

  • Seite 166

    166 Security Commands port-secur ity ma c-address move no port-security mac-address mac-address vid Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History port-security mac-address move This command converts dynamically locked MA C addresses to stat[...]

  • Seite 167

    show port-security dynamic SFTOS Command Reference for the S2410, Version 2.4.1.0 167 Example Figure 39 Example of show port- s ec ur ity all Co mm a nd Out pu t • • show port-security dynamic This command displays the dynami cally locked MAC addres ses for port. Synt ax sho w port-security dyn amic unit/slot/port Mode Privileged Exec The one r[...]

  • Seite 168

    168 Security Commands show port-s ecurity static show port-security static This command displays the statically locked MAC addres ses for port. Synt ax sho w port-security static unit/slot/port Mode Privileged Exec The one report field is: MAC Address—MAC Address of statically locked MAC show port-security violation This command displays the sour[...]

  • Seite 169

    authentication login SFTOS Command Reference for the S2410, Version 2.4.1.0 169 • dot1x timeout on page 174 • dot1x user on page 1 75 • show authentication on page 175 • show authentication users on page 176 • show dot1x on pag e 176 • show dot1x users on page 179 • show users authentication on page 179 • users defaultlogin on page [...]

  • Seite 170

    170 Security Commands clear dot1x statistics The no version of this command deletes the specif ied authentication login list. The attempt to delete fails if any of the following conditions are true: • The login list name is invalid or does no t match an existing au thentication login list • The specified authentication l ogin list is assigned t[...]

  • Seite 171

    dot1x initialize SFTOS Command Reference for the S2410, Version 2.4.1.0 171 Synt ax do t1x defaultlogin listname Mode Global Config dot1x initialize This command begins the initializ ation sequence on the specifie d port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto[...]

  • Seite 172

    172 Security Commands dot1x port-co n tro l Default 2 Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History dot1x port-control This command sets the authentic ation mode to be used on th e specified port . The control mode may be one of th e follow[...]

  • Seite 173

    dot1x re-authe nticate SFTOS Command Reference for the S2410, Version 2.4.1.0 173 Force-unauthorized—The authenticator P AE un conditionally sets the controlled port to unauthorized. Force-authorized—The authenticator P AE un conditionally sets the controlled port to authorized. Auto—The authenticator P AE sets the controlle d port mode to re[...]

  • Seite 174

    174 Security Commands dot1x system-auth-control Command History dot1x system-auth-control This command is used to enable the dot1x authentication suppor t on the switch. By default, the authentication support is disa bled. While disabled, the dot1x configuration is retained and can be changed, but is not activated. The no version of this command is[...]

  • Seite 175

    dot1x user SFTOS Command Reference for the S2410, Version 2.4.1.0 175 tx-period—Sets the value, in seconds, of the time r used by the authenticator state machine on this port to determine when to send an EAPOL EAP Request/Identity frame to the supplicant. T he quiet-period must be a value in the range 1 - 65535. supp-timeout—Sets the value, in [...]

  • Seite 176

    176 Security Commands show authentication users Synt ax show authentication Mode Privileged Exec Authentication Login List—Thi s displays the authentication login listna me. Method 1—This displays the first method in th e specified authentication login list, if any . Method 2—This displays the second method in the specified authe ntication lo[...]

  • Seite 177

    show dot1x SFTOS Command Reference for the S2410, Version 2.4.1.0 177 If the optional parameter summary { unit/slot/p ort | all } is used, t he dot1x configuration for the specified port or all ports are displayed. Port—The interface whose c onfiguration is displayed. Control Mode—The configured control mode for this port. Possible values are f[...]

  • Seite 178

    178 Security Commands show dot1x Example Figure 40 Example of Outpu t fro m the sh ow do t1 x de tail Command If the optional parameter statistics unit/slot/port is used, the dot1x statistics for the specified port are displayed. Port—The interface whose statistics are displayed. EAPOL Frames Received—The number of valid EAPOL fr ames of any ty[...]

  • Seite 179

    show dot1x users SFTOS Command Reference for the S2410, Version 2.4.1.0 179 show dot1x users This command displa ys 8 02.1x port security us er information for locally configured users. Synt ax show dot1x users unit/slot/port Mode Privileged Exec Example Figure 41 Example of Outpu t fro m the sh ow do t1 x use r s Comm an d User—Users configured [...]

  • Seite 180

    180 Security Commands users defaultlogin users defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is conf igured locally . If this value is not configured, users wi[...]

  • Seite 181

    radius accounting mode SFTOS Command Reference for the S2410, Version 2.4.1.0 181 radius accounting mode This command is used to enable the RADIUS accounting function. The no version of this command is used to set the RADIUS accounting fu nction to the default value - i.e. the RADIUS accounting function is disabled. Synt ax radiu s accounting mode [...]

  • Seite 182

    182 Security Commands radius server key If the acct keyword is used, the comma nd config ures the IP addr ess to use for the RADIUS accounting server . Only a single accounting serve r can be config ured. If an accountin g server is currently configured, it must be re moved from th e configuration usi ng the no form of the command before this comma[...]

  • Seite 183

    radius server msgauth SFTOS Command Reference for the S2410, Version 2.4.1.0 183 radius server msgauth This command enables the message authen ticator attribute for a specified server . Synt ax radiu s server msgauth ipaddr Mode Global Config radius server primary This command is used to co nfigure the primary RADIUS au thentication server for this[...]

  • Seite 184

    184 Security Commands radius server time out radius server timeout This command sets the timeout value (in seconds) after which a request must be retransmitted to the RADIUS server if no res ponse is received . The timeout va lue is an int eger in the range of 1 to 30. Synt ax radiu s server timeout seconds The no radius server timeout command sets[...]

  • Seite 185

    show radius accounting statistics SFTOS Command Reference for the S2410, Version 2.4.1.0 185 show radius accounting statistics This command is used to display the conf igured RADIUS accounting mode, accounting server , and the statistic s for the configured accounting server . Synt ax sho w radius accounting [ statistics IP address ] Mode Privilege[...]

  • Seite 186

    186 Security Commands show radius statistics (authentication) show radius statistics (authentication) This command is used to displa y the statistics for RADIUS or configured server . T o show the configured RADIUS server statistic, the IP Addr ess specified must match that of a previously configured RADIUS server . On executi on, the following fie[...]

  • Seite 187

    show radius statistics (authentication) SFTOS Command Reference for the S2410, Version 2.4.1.0 187 Round Tr ip T ime—The time interval, in hundredths of a secon d, between the most rece nt Access-Reply | Access-Challenge and the Access-Request th at ma tched it from the RADIUS authentication server . Access Requests—The number of RADIUS Access-[...]

  • Seite 188

    188 Security Commands tacacs-server host tacacs-server host Configure a T ACACS+ server and ente r into T ACACS+ Configuration mode. Synt ax tacacs -server host ip-address T o remove a T ACACS+ server host, use the no tacacs-server host { hostname | ip-address } command. Default Not configured Mode CONFIGURA TION Usage Information In CONFIGURA TION[...]

  • Seite 189

    tacacs-server timeout SFTOS Command Reference for the S2410, Version 2.4.1.0 189 Default Not configured. Command Mode s CONFIGUR A TION Usage Information The key configured with this command must match the key configured on the T ACACS+ daemon. tacacs-server timeout Specify a global timeout va lue for all T ACACS+ hosts. Synt ax tac acs-server time[...]

  • Seite 190

    190 Security Commands port Default If unspecified, the key-string defaults to the global value. Command Mode T ACACS Configuration port Specify a server port number for a particular T ACACS host. Synt ax po rt port-number Default If unspecified, the port number defaults to 49. Command Mode T ACACS Configuration priority Use the priority command to [...]

  • Seite 191

    single-connection SFTOS Command Reference for the S2410, Version 2.4.1.0 191 single-connection Configure the client to maintain a single open connection with the T ACACS server . Synt ax [ no ] single-connection Default Use multiple connections. In other words, the c lient will use a separate connection for each authentication session. Command Mode[...]

  • Seite 192

    192 Security Commands ip ssh maxsessions Secure Shell (SSH) Commands The commands in this section are: • ip ssh maxsessions on page 192 • ip ssh protoc ol o n page 193 • ip ssh server enable on page 193 • ip ssh timeout on page 194 • show ip ssh on page 194 • sshcon maxsessions on page 195 • sshcon timeout on page 195 This section pro[...]

  • Seite 193

    ip ssh prot ocol SFTOS Command Reference for the S2410, Version 2.4.1.0 193 ip ssh protocol This command is used to set or remove protoc ol levels (or versions ) for SSH. Either SSH1 (1), SSH2 (2), or bot h SSH 1 and SSH 2 (1 and 2) can be set. Synt ax ip ssh protocol [1] [2] Default 1 and 2 Mode Global Config Command History ip ssh server enable E[...]

  • Seite 194

    194 Security Commands ip ssh timeout ip ssh timeout This command sets the SSH connection session tim eout value, in minutes. A session is active as long as the session has been idle for the value set. Changing the timeout value for active sessions does not become effectiv e until the session is reaccessed. Any keystroke will also activate the new t[...]

  • Seite 195

    sshcon maxsessions SFTOS Command Reference for the S2410, Version 2.4.1.0 195 SSH Sessions Currently Active Max SSH Sessions Allowed SSH T i meout—SSH login timeout confi gured by ip ssh timeout command sshcon maxsessions Command History sshcon timeout Command History Hypertext T ransfer Protocol (HTTP) Commands The commands in this section are: [...]

  • Seite 196

    196 Security Commands ip http javamode enable ip http javamode enable Enable Java mode for th e W eb interface to SFT OS. Synt ax ip http javamo de enable Use no ip http jav amode enable to disable Java mode. Default disabled Mode Global Config Command History ip http secure-port This command is used to set the SSL T port. Synt ax ip http secure-po[...]

  • Seite 197

    ip http secure-ser ve r enable SFTOS Command Reference for the S2410, Version 2.4.1.0 197 ip http secure-server enable This command is used to enable the secure socket layer for secure HTTP . The no version of this command is used to disable the secure socket layer for secure HTTP . Synt ax [ no ] ip http secure-server enable Default disabled Mode [...]

  • Seite 198

    198 Security Commands show ip http show ip http This command displays the HTTP settings for the switch. Synt ax show ip http Mode Privileged Exec The report fields are: HTTP Mode (Unsecure) — This field indica tes whether basic HTTP is enabled or disabled on the switch. HTTP Mode (Secure) — This field indicates whether the administrative mode o[...]

  • Seite 199

    show storm-control SFTOS Command Reference for the S2410, Version 2.4.1.0 199 Broadcast S t orm Control Commands This section contains the following commands: • show storm-control • storm-control broadcast o n pa ge 200 • storm-control flowcontrol on p age 200 show storm-control This command displays switch configuration information. Synt ax [...]

  • Seite 200

    200 Security Commands storm-control broadcast Related Commands storm-control broadcast This command enables broa dcast storm recovery mode . If the mode is enabled, broa dcast storm recovery with high and low thresholds is implemented. The threshold implementation fo llows a percentage pattern. If th e broadcast traffic o n any Ethernet port exceed[...]

  • Seite 201

    storm-control flowcontrol SFTOS Command Reference for the S2410, Version 2.4.1.0 201 The no version of this command disables 802.3x flow control for th e switch. Default disabled Mode Global Config Note: This command only applies to full-duplex mode port s. Note: 802.3x flow control works by pausing a port when the port becomes oversubscribed and d[...]

  • Seite 202

    202 Security Commands storm-control flowcontrol[...]

  • Seite 203

    SFTOS Command Reference for the S2410, Version 2.4.1.0 203 These commands configure th e Dynamic Ho st Configuration Protocol (DHCP) Server parameters and address pools. The following comm a nd s are covered in this chapter: • bootfile on page 204 • clear ip dhcp binding on page 204 • clear ip dhcp server statistics on page 204 • clear ip d[...]

  • Seite 204

    204 DHCP Server Commands bootfile bootfile The command specifies the name of the defau lt boot image for a DHCP client. The filename specifies the boot image file. The no version of this command deletes the boot image name. Synt ax bo otfile filename no bootfile Default none Mode DHCP Pool Config clear ip dhcp binding This command deletes an automa[...]

  • Seite 205

    clear ip dhcp conflict SFTOS Command Reference for the S2410, Version 2.4.1.0 205 clear ip dhcp conflict The command is used to clear an address co nflict from the DHCP Server database. The server detects conflicts using a ping. DHCP server clear s all conflicts If the asterisk (*) character is used as the address parameter . Synt ax cl ear ip dhcp[...]

  • Seite 206

    206 DHCP Server Commands default-router default-router This command specifies the default router list for a DHCP client. { address1 , addres s2 … address8 } are va lid IP addresses, each made up of fo ur decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. The no version of this command remo ves the default router list. Synt ax def[...]

  • Seite 207

    hardware-add ress SFTOS Command Reference for the S2410, Version 2.4.1.0 207 hardware-address This command specifies the hardware address of a DHCP client. The hardware-address is the MAC address of the hard ware platform of the client consisting of 6 bytes in dotted hexadecimal format. The type indicates the protocol of the hardware plat form. It [...]

  • Seite 208

    208 DHCP Server Commands ip dhcp bootp automatic ip dhcp bootp automatic This command enables the allocation of the ad dresses to the bootp client. The addresses are from the automatic address pool. The no version of this command disables the allocation of the addresses to the bootp client. The address are from the automatic address pool. Synt ax i[...]

  • Seite 209

    ip dhcp ping packets SFTOS Command Reference for the S2410, Version 2.4.1.0 209 ip dhcp ping packets This command is used to spec ify the number in a range from 2-10, of packets a DHCP server sends to a pool address as part of a ping operation. Setting the nu mber of ping packets to 0 is the same as ‘no ip dhcp ping packets’ an d will prevent t[...]

  • Seite 210

    210 DHCP Server Commands network network This command is used to conf igure the subnet number and mask for a DHCP address pool on the server . Network-number is a vali d IP addre ss, made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. Mask is the IP subnet mask for the specified address pool. The prefix-length is an [...]

  • Seite 211

    next-server SFTOS Command Reference for the S2410, Version 2.4.1.0 211 • h-node—Hybrid (recommend ed) The no version of this command re moves the NetBIOS node type. Synt ax netb ios-node-type type Default none Mode DHCP Pool Config next-server This command configures the next server in the boot process of a DHCP client. Address is the IP addres[...]

  • Seite 212

    212 DHCP Server Commands service dhcp no option code Default none Mode DHCP Pool Config service dhcp This command enables the DHCP server and relay agent features on the router . The no version of this command disables the DHCP server and relay agent features. Synt ax service dh cp Default disabled Mode Global Config show ip dhcp binding This comma[...]

  • Seite 213

    show ip dhcp global co nfiguration SFTOS Command Reference for the S2410, Version 2.4.1.0 213 show ip dhcp global configuration This command displays address bindings for th e specific IP address on the DHCP server . If no IP address is specified, the bindings corr esponding to all the addresses are displayed. Synt ax sho w ip dhcp global configura[...]

  • Seite 214

    214 DHCP Server Commands show ip dhc p server statisti cs show ip dhcp server statistics This command displays DHCP server statistics. Synt ax sho w ip dhcp server statistics Mode Privileged Exec and User Exec Address Pool—The number of configured address pools in the DHCP server . Automatic Bindings—The number of IP addresses that have been au[...]

  • Seite 215

    SFTOS Command Reference for the S2410, Version 2.4.1.0 215 This section provides a detailed explanation of the Simple Network T ime Protocol (SNTP) commands. The commands are comp rised of two functional groups: • Configuration Commands confi gure f eatures and options of the switch. • Show commands display settings, statistic s, and other i nf[...]

  • Seite 216

    216 SNTP Commands sntp client mode sntp client mode This command enables the Simple Network T ime Protocol (SNT P) client, and optionally sets the mode to either broadcast or unicast. Synt ax sntp client m ode [ broadcast | unicast ] Use the no sntp client mode command to disable SNTP client mode. Default Disabled (No SNTP requests are sent from th[...]

  • Seite 217

    sntp unicast client poll-interval SFTOS Command Reference for the S2410, Version 2.4.1.0 217 sntp unicast client poll-interval This command sets the poll inte rval for SNTP unicast clients in seconds as a power of two where poll-interval can be a value from 6 to 16. Synt ax sntp u nicast client poll-interval po ll-interval Use the no sntp unicast c[...]

  • Seite 218

    218 SNTP Commands sntp server Default 1 retry Mode Global Config sntp server This command configures an SNTP server connection (with a maximum of th ree). Synt ax sntp s erver ipaddress [ priority [ version [ portid ]]] Use the no sntp server remove ipaddress command to delete the server from the list of SNTP servers. Mode Global Config show sntp T[...]

  • Seite 219

    show sntp client SFTOS Command Reference for the S2410, Version 2.4.1.0 219 Field Descriptions Last Update T ime—Time of last clock update Last Attempt T ime —Time of last transmit query (in unicast mode). Last Attempt S tatus—S tatus of the last SNTP requ est (in unicast mode) or unsolicited me ssage (in broadcast mode). Broadcast Count—Cu[...]

  • Seite 220

    220 SNTP Commands show sntp server show sntp server This command is used to display SNTP server settings and configured servers. Synt ax sho w sntp server Mode Privileged Exec Example Figure 49 show sntp ser ver Command Example Field Descriptions Server IP Address—IP address of configured SNTP server Server T ype—Address type of server Server S[...]

  • Seite 221

    SFTOS Command Reference for the S2410, Version 2.4.1.0 221 VLAN-Stack commands, also called Double VLAN tagging , QinQ , and VLAN tunneling . W ith this feature, you can “stack” VLANs in to one tunnel and switch them through the network. The commands in th is chapter , in order, are: • dvlan-tunnel ethertyp e on page 221 • mode dot1q-tunnel[...]

  • Seite 222

    222 VLAN-Stack Commands mode dot1q-tunn el mode dot1q-tunnel This command is used to enable Double VL AN T unneling on the sp ecified interface. By default, Double VLAN T unneling is disabled. This command performs the same function as mode dvlan-tunn el . The no version of this command is used to disa ble Double VLAN T unneling on the specified in[...]

  • Seite 223

    show dot1q-tunne l SFTOS Command Reference for the S2410, Version 2.4.1.0 223 show dot1q-tunnel This command displays whether an interface is enabled for Double VLAN Tunnelin g, along with the system-configured etherT ype and detailed information about Double VLAN T unneling for the specified interface, or a list of interfaces and their tunneling s[...]

  • Seite 224

    224 VLAN-Stack Commands show dvlan-tunnel show dvlan-tunnel This command displays whether an interface is enabled for Double VLAN Tunnelin g, along with the system-configured etherT ype and detailed information about Double VLAN T unneling for the specified interface, or a list of interfaces and their tunneling status. This command performs the sam[...]

  • Seite 225

    SFTOS Command Reference for the S2410, Version 2.4.1.0 225 This chapter provides a detailed explanation of the General Attribu te Registration Protocol (GARP) commands, including GVRP and GMRP commands. The commands are divided into two functional groups: • Show commands display switch settings, statistics, and other information. • Configuratio[...]

  • Seite 226

    226 GARP, GVRP, and GMRP Commands set garp timer leave This command has an effect only when GVRP is enabled. The time is from 10 to 100 (centiseconds). the value 20 centiseconds is 0.2 seconds. Synt ax set garp timer join 10-100 no set garp timer join The no version of this command sets the GVRP join time per port and per GARP to 20 centiseconds (0[...]

  • Seite 227

    set garp timer leaveall SFTOS Command Reference for the S2410, Version 2.4.1.0 227 set garp timer leaveall This command sets how frequently Leave All PDUs are generated per port. A Leave All PDU indicates that all registrations w ill be unregistered. Participants would need to rejoin in order to maintain registration. Th e value applies p er port a[...]

  • Seite 228

    228 GARP, GVRP, and GMRP Commands gvrp adminmode enable GARP VLAN Registration Pr otocol (GVRP) Commands This section provides a detailed ex planation of the GVRP commands: • gvrp adminm ode enable o n page 228 • gvrp interfacemode enable on p age 228 ] • gvrp interfacemode enable all on page 229 • set gvrp adminmod e on page 229 • set gv[...]

  • Seite 229

    gvrp interfacemode enable all SFTOS Command Reference for the S2410, Version 2.4.1.0 229 gvrp interfacemode enable all This command enables GVRP (GARP VLAN Registration Protocol) for all ports. Synt ax se t gvrp interfac emode enable all Use no set gvrp interfacemode enable all to disable GVRP for all ports. If GVRP is disabled, Join T ime, Leave T[...]

  • Seite 230

    230 GARP, GVRP, and GMRP Commands show gvrp c onfiguration Example Figure 50 show gvrp configur ation Command Output Example Interface V alid unit, slot and port number separated by forward slashes. Join T imer—S pecifies the int erv al be tw e en th e tra ns m i ssio n of GARP PDU s re gi st ering (or re-registering) membership for an a ttri but[...]

  • Seite 231

    gmrp adminmode SFTOS Command Reference for the S2410, Version 2.4.1.0 231 GARP Multicast Registration Pr otocol (GMRP) Commands This section provides details on GMRP comma nds. The commands in this sections are: • gmrp adminmode on pa ge 231 • set gmrp adminmod e on page 232 • gmrp interfacemode en able all on page 232 • set gmrp interfacem[...]

  • Seite 232

    232 GARP, GVRP, and GMRP Commands set gmrp adminmode Use no gmrp adminmod e enable to disable GARP Multicast Registration Protocol (GMRP) on the system. Mode Global Config Command History set gmrp adminmode Command History gmrp interfacemode enable all This command enables GARP Multicast Regist ration Protocol on all interfaces. If an interface whi[...]

  • Seite 233

    set gmrp interfacem ode SFTOS Command Reference for the S2410, Version 2.4.1.0 233 set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a selected interface. If an interface which has GARP enable d is enabled for routing or is enlisted as a member of a port-channel (LAG), GARP functionality w ill be disabl ed on that [...]

  • Seite 234

    234 GARP, GVRP, and GMRP Commands show mac-address- table gmrp Leave T imer—S pecifies the period of time to wait af ter receiving an unregister request for an attribu te before deleting the attribute. Current attributes are a VLAN or multic ast group. This may be considered a buffer time for another station to assert registra tion for the same a[...]

  • Seite 235

    SFTOS Command Reference for the S2410, Version 2.4.1.0 235 This chapter provides a detaile d explanation of the following IGMP Snoopin g c ommands: • igmp enable (interface) on page 236 • igmp enable (globa l) on page 236 • igmp fast-leav e (interface) on page 237 • igmp groupmem bership-interval (interface) on p age 2 37 • igmp interface[...]

  • Seite 236

    236 IGMP Snooping Commands igmp enable (interface) igmp enable (interface) This command enables IGMP Snooping on a sel ected interfac e. If an interface that has IGMP Snooping enabled is en abled for routing or is enlisted as a member of a LAG (port channel), IGMP Snooping functionality will be disabled on that interface. IGMP Snooping functionalit[...]

  • Seite 237

    igmp fast-leave (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 237 igmp fast-leave (interface) This command enables or disables IGMP Snoo ping fast-leave admin mode on a selected interface. Enabling fast-leave allows the switch to immedi ately remove the Layer 2 LAN interface from its forwarding table entry upon receiving an IGM[...]

  • Seite 238

    238 IGMP Snooping Commands igmp interfacemode enab le all Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range- vlan 10-20)#; Interface VLAN. Command History igmp interfacemode enable all This command enables IGMP Snooping on all interfaces. If an inte rface that has IGMP Snoo[...]

  • Seite 239

    igmp mcrtexpiretime (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 239 Synt ax igmp maxresponse 1-3599 The variable must be less than the IGMP query interval time value. Th e range is 1 to 3599 seconds. The no igmp maxresponse command sets the IGMP Ma ximum Response time on the interface to the default value. Default 10 secon ds[...]

  • Seite 240

    240 IGMP Snooping Commands igmp mrouter (interface) igmp mrouter (interface) This command configures the VLAN ID ( vlanId ) that has the multicast router mode enabled. Synt ax [ no ] igmp mrouter vlanId The no version of this command disables multicas t router mode for a particular VLAN ID ( vlanId ). Mode Interface Config; Interface Range, which i[...]

  • Seite 241

    set igmp (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 241 Related Commands set igmp (interface) Command History Related Commands set igmp (system) Command History Related Commands set igmp fast-leave Command History Related Commands set igmp groupmembership-interval (global) This command sets the IGMP Group Membership Inter v [...]

  • Seite 242

    242 IGMP Snooping Commands set igmp groupmemb ership-interval ( interface) The variable must be greate r than the IGMPv3 maximum response time value. The range is 2 to 3600 seconds. The no igmp gr oupmembership-inte rval command sets the IGMP v3 group membership interval time glob ally to the default value. Default 260 seconds Mode Global Config Re[...]

  • Seite 243

    set igmp maxresponse ( global) SFTOS Command Reference for the S2410, Version 2.4.1.0 243 Related Commands set igmp maxresponse (global) This command sets the IGMP maxi mum respon se time on the system . Synt ax [ no ] set igmp max response 1-3599 The variable is the amount of time in seconds that a switch will wait after sending a query on an inte[...]

  • Seite 244

    244 IGMP Snooping Commands set igmp mcrte xpiretime ( global) set igmp mcrtexpiretime (global) This command sets the Multicast router present expiration time for all routers. Synt ax [ no ] set igmp mcr texpiretime 0-3600 The variable is the amount of time in seconds th at a switch will wait for a query to be received on an interface before the int[...]

  • Seite 245

    set igmp mrouter SFTOS Command Reference for the S2410, Version 2.4.1.0 245 set igmp mrouter Command History Related Commands show igmpsnooping This command displays IGMP Sn ooping inform ation. Configured info rmation is displayed whether or not IGMP Snooping is en abled. Synt ax sho w igmpsnooping [ unit/ slot/port | 1-3965 ] Mode Privileged Exec[...]

  • Seite 246

    246 IGMP Snooping Commands show igmpsnooping fast-leave Max Response T i me—Thi s displays the amount of time the switch will wait after sending a query on an interface because it did not receive a report for a pa rticular group on that interfa ce. T his value may be configured. Multicast Router Present Expiration Time—If a query is not receive[...]

  • Seite 247

    show mac-address-tabl e igmpsnooping SFTOS Command Reference for the S2410, Version 2.4.1.0 247 show mac-address-table igmpsnooping This command displays the IGMP Snooping en tries in the Multicast Forwarding Database (MFDB) table. Synt ax show mac-address-t able igmpsnoo ping Mode Privileged Exec Report Fields Mac Address—A multicast MAC address[...]

  • Seite 248

    248 IGMP Snooping Commands show mac-address- table igmpsnooping[...]

  • Seite 249

    SFTOS Command Reference for the S2410, Version 2.4.1.0 249 This section provides syntax details of the Link Aggreg ation Group (LAG) commands (802.3ad), also called port channel, port tr unking, and other terms. The commands in this chapter are: • addport • deleteport (interface config) on page 250 • deleteport (global config ) on page 251 ?[...]

  • Seite 250

    250 LAG/Port Channel Commands deleteport (interface config) In Ethernet Range mode (Interface Range mode for the selected range of physical ports), this command adds the selected ports to the designated LAG . Synt ax addport unit/slot/po rt Specify the LAG ID in its logical slot/port format (e.g., 1/4). Mode Interface Config; Interface Range (speci[...]

  • Seite 251

    deleteport (g lobal config) SFTOS Command Reference for the S2410, Version 2.4.1.0 251 deleteport (global config) This command deletes a ll configured ports from the LAG (port channel). Synt ax deletepo rt { unit/slot/port } all Mode Global Config Related Commands port-channel This command creates a new LAG (port channel) and generates a logical un[...]

  • Seite 252

    252 LAG/Port Channel Commands port-channel enable all (g loba l) port-channel enable all (global) This command enables the administrativ e mode for all LAGs (port channels). The no version of this command disables all LAG s. Synt ax [ no ] port-channel enable all Mode Global Config Command History port-channel enable (interface) This command enable[...]

  • Seite 253

    port-channel name SFTOS Command Reference for the S2410, Version 2.4.1.0 253 Parameters Default enabled Mode Global Config port-channel name This command renames a LAG (port channel) or all LAGs. Synt ax po rt-channel name { unit/slot/port | all } name Parameters Mode Global Config Related Commands port-channel staticcapability Enable/Disable stati[...]

  • Seite 254

    254 LAG/Port Channel Commands port lacpmo de Mode Global Config port lacpmode This command enables Link Aggregation Co ntrol Protocol (LACP) on a p ort. The no version of this command disables Link Aggre gation Control Protocol (LACP) on a port. Synt ax [ no ] port lacpmode Default disabled Mode Interface Config; Interface Range, which is in dicate[...]

  • Seite 255

    port lacptimeout (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 255 The no version of this command removes the Link Aggregation Co ntro l Protocol (LACP) timeout on all ports. Synt ax [ no ] port lacptimeout { short all | lo ng all } Parameters Mode Global Config Related Commands port lacptimeout (interface) This command sets th[...]

  • Seite 256

    256 LAG/Port Channel Commands show port-channel Synt ax sho w port-channel brief Mode Privileged Exec and User Exec Example Figure 51 Example of show port-chann el br ief Command Output S tatic Capability—This field displays whether or not the device has static capability enabled. For each LAG, the following information is displayed: Logical Inte[...]

  • Seite 257

    show port-channel summary SFTOS Command Reference for the S2410, Version 2.4.1.0 257 Admin Mode—May be enabled or disabled . Th e factory default is enabled. Link T rap Mode—This object determines whether or not to send a trap when link status changes. The factory default i s enabled. STP Mode—The Sp anning T ree Protocol Administrative Mo de[...]

  • Seite 258

    258 LAG/Port Channel Commands shutdown shutdown This command disables the selected LAG (port channel). The no version of this command enables the selected LAG . Synt ax [ no ] shutdown Default disabled Mode Interface Config; Interface Range (Port Chan nel Range), which is indicated by the (conf-if-range-interface)# prompt, such as (conf-if-range-po[...]

  • Seite 259

    SFTOS Command Reference for the S2410, Version 2.4.1.0 259 This chapter provides a detailed explanation of the Spanning T ree commands. The commands are divided into two functional g roups: • Show commands display switch settings, statistics, and other information. • Configuration commands co nfigure featur es and options of the switch. For eve[...]

  • Seite 260

    260 Spanning Tree (STP) Co mmands show spann ing-tree • spanning-tree max-age on page 269 • spanning-tree max-hops on page 269 • spanning-tree mst on page 269 • no spanning-tree mst on page 270 • spanning-tree mst instance on page 271 • spanning-tree mst priority on pa ge 271 • spanning-tree mst vlan on pa ge 272 • spanning-tree por[...]

  • Seite 261

    show spanning-tree interface SFTOS Command Reference for the S2410, Version 2.4.1.0 261 Bridge Hold T ime—Mini mum time between transmission of Configuration Bridge Protoc ol Data Units (BPDUs) CST Regional Root—Bridge Identifier of the common sp anning tree regional root. It is derived usin g the bridge priority and the base MAC address of the[...]

  • Seite 262

    262 Spanning Tree (STP) Co mmands show spanning-tree mst detailed RST BPDUs Received—Rapid S panning T ree Protoc ol Bridge Protocol Data Units received. MSTP BPDUs T ran smitted—Multiple S panning T r ee Protocol Bridge Protocol Data Units sent MSTP BPDUs Received—Mu ltiple S panning Tree Pr otocol Bridge Protocol Data Units received. show s[...]

  • Seite 263

    show spann ing-tree m st port deta iled SFTOS Command Reference for the S2410, Version 2.4.1.0 263 Mode Privileged Exec and User Exec MST Instance ID—The ID of the MST instance. Port Identifier—The port identifier for t he specified port within the spanning tree. Port Priority—The priority fo r a particular port within the selected MST instan[...]

  • Seite 264

    264 Spanning Tree (STP) Co mmands show spann ing-tree mst port su mmary show spanning-tree mst port summary This command displays the settings of one or a ll ports within the specif ied multiple spanning tree instance. The parameter mstid indicates a particular MST instance. The parameter { unit/slot/port | all } indicates the desired switch port o[...]

  • Seite 265

    show spanning-tre e summary SFTOS Command Reference for the S2410, Version 2.4.1.0 265 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command. Synt ax sho w spanning-tree sum mary Mode Privileged Exec and User Exec S panning Tree Adminmod[...]

  • Seite 266

    266 Spanning Tree (STP) Co mmands spanning-t ree bpdum igr a tion c h e ck Default disabled Mode Global Config spanning-tree bpdumigrationcheck This command enables BPDU migration check on a given interface, by using unit/slot/port , or all interfaces, by using the all keyword. The no version of this command disables BPDU migration check on all int[...]

  • Seite 267

    spanning-t ree edgep or t SFTOS Command Reference for the S2410, Version 2.4.1.0 267 The no version of this command set s the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using to the default value, in other words, 0. Synt ax span ning-tree configuratio n revision 0-65535 Default 0 M[...]

  • Seite 268

    268 Spanning Tree (STP) Co mmands spanning-t re e fo rwa rd-time Synt ax [ no ] spanning-tree forceversio n 802.1d | 802.1w | 802. 1s Default 802.1s Mode Global Config spanning-tree forward-time This command sets the Bridge Forward Delay parameter to a new value for the common and internal spanning tree. The forward-time value is in seconds within [...]

  • Seite 269

    spanning-tree max- age SFTOS Command Reference for the S2410, Version 2.4.1.0 269 spanning-tree max-age This command sets the Bridge Max Age para meter to a new va lue for the common and internal spanning tree. The max-age value is in seconds within a range of 6 to 40, with the value being less than or equal to "2 times (Bridge Forward Delay -[...]

  • Seite 270

    270 Spanning Tree (STP) Co mmands no spanning-tre e mst If the “cost” token is specified, this command sets the path cost for this port within a multiple spanning tree instance or the co mmon and internal spanning tree instance, depending on the mstid parameter . The pathcost can be specified as a number in the range of 1 to 20 0000000 or auto.[...]

  • Seite 271

    spanning-tree mst instance SFTOS Command Reference for the S2410, Version 2.4.1.0 271 If the “port-priority” token is specified, this co mmand sets the priority for this port within a specific multiple spanning tree in stance or the common and inte rnal spanning tree instance, depending o n the mstid parameter, to the default value, in other wo[...]

  • Seite 272

    272 Spanning Tree (STP) Co mmands spanning-t ree mst vlan If 0 (defined as the default CIST ID) is passed as the mstid , then this co mmand sets the Bridge Priority parameter for th e common and internal spanning tree to the default value, in other words, 32768. Synt ax span ning-tree mst priority mstid 0-614 40 no spanning-tree mst prio rity mstid[...]

  • Seite 273

    spanning-tree port mode en able all SFTOS Command Reference for the S2410, Version 2.4.1.0 273 Synt ax [ no ] spanning-tree port mo de enable Default disabled Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History spanning-tree port mode enable all [...]

  • Seite 274

    274 Spanning Tree (STP) Co mmands spanning-tree port mode e nable all[...]

  • Seite 275

    SFTOS Command Reference for the S2410, Version 2.4.1.0 275 This chapter provides a deta iled explanation of available Quality of Service (QoS) commands. The chapter is divide d into the following sections: • Class of Service (CoS) Commands • Differentiated Services (Dif fS erv) Com ma nds on page 285 • Provisioning (IEEE 802.1p) Commands on p[...]

  • Seite 276

    276 Quality of Service (QoS) Commands classofservice dot1p-mapping By default, SFTOS 2.4.1 co nfig ures all egress queues in weighted round robin mode with equal minimum bandwidths. This means that no egress queue will be given priority over any other . T o change this, in weighted round robin mo de, use the co s-queue min -bandwidt h command to as[...]

  • Seite 277

    classofservice trust SFTOS Command Reference for the S2410, Version 2.4.1.0 277 Command History classofservice trust This command sets the class of service trust m ode of an interface to Dot1p (802.1p). (The ip-precedence and ip-dscp options, for IP Precedence and IP DSCP packet markings, are not available in SFTOS 2.4.1.) Synt ax cl assofservice t[...]

  • Seite 278

    278 Quality of Service (QoS) Commands cos-queue min-bandwidth The no cos-queue max- bandwidth command restores the de fault for each queue's maximum bandwidth value. Modes Global Config Command History cos-queue min-bandwidth This command specifies the minimum transmi ssion bandwidth guarantee for each interface queue. The total number of queu[...]

  • Seite 279

    cos-queue strict SFTOS Command Reference for the S2410, Version 2.4.1.0 279 Usage Specific WRED parameters are configured using the random-detect queue-parms and random-detect exponential-weighting-constant commands. Command History cos-queue strict This command activates the stri ct priority scheduler mode fo r each specified queue (up to four in [...]

  • Seite 280

    280 Quality of Service (QoS) Commands random-dete ct queue-parms random-detect queue-parms This command sets the WRED parameters for each drop precede nce level supported by a queue. The actual number of queue drop prece dence le vels is platfo rm-specific (S2410 has four). Use the no form of this command to restore the default values for the queue[...]

  • Seite 281

    show classofservi ce dot1p-mapping SFTOS Command Reference for the S2410, Version 2.4.1.0 281 show classofservice dot1p-mapping This command displays the curre nt Dot1p (802.1p) priority mapp ing to internal traffic classes for a specific interface. Synt ax sho w classofservice dot1 p-mapping [ unit/s lot/port ] The unit/slot/port parameter is opti[...]

  • Seite 282

    282 Quality of Service (QoS) Commands show interfaces cos-qu eu e Report Fields Non-IP T raffic: Class—The traffic class used for non-IP traffic. This is only displayed when the COS trust mode is set to either 'trust ip-dscp' or 'trust ip-precedence'. Untrusted T raffic Class—The traffic class used for all untrusted traffic.[...]

  • Seite 283

    show interfaces tail-drop-threshold SFTOS Command Reference for the S2410, Version 2.4.1.0 283 Synt ax show interfaces random-detect slot/port The slot/port parameter is optional. If specified , the class-of-service WRED configuration of the interface is displayed. If omitted, the most recent glob al configuration settings are displayed. Mode Privi[...]

  • Seite 284

    284 Quality of Service (QoS) Commands tail-drop queu e-parms Mode Privileged Exec Report Fields Interface — This displays the slot/port of the interface. If displ aying the global configuration, this output line is replaced w ith a Global Confi g indication. The following informatio n is repeated for each queue on the interface. Queue IdQueue ide[...]

  • Seite 285

    traffic-shape SFTOS Command Reference for the S2410, Version 2.4.1.0 285 traf fic-shape This command specifies the maximum transmi ssion bandwidth limit for the interface as a whole. Also known as rate shaping, this has th e ef fect of smoothing temporary traffic bursts over time so that the transmitte d traf fic rate is bounded. Synt ax traffic-sh[...]

  • Seite 286

    286 Quality of Service (QoS) Commands show classofservice dot1pmapping show classofservice dot1pmapping This command displays the current 802.1p prior ity mapping to internal traffic classes for all or specific interfaces. Synt ax sho w classofservice dot1 pmapping [ unit/ slot/port ] Mode Privileged Exec and User Exec vlan port priority all This c[...]

  • Seite 287

    SFTOS Command Reference for the S2410, Version 2.4.1.0 287 This chapter covers th e following commands: • {deny|permit} on page 288 • mac access-list extended on page 290 • mac access-list extended rename on page 291 • mac access-group on page 292 • show mac access-lists on page 292 An Access Control List (A CL) ensures that only au thori[...]

  • Seite 288

    288 ACL Comma nd s {deny|permit} Implement ation Notes • If the CPU MA table (This MAC address ta ble is separate from the software MAC address table) is filled so that the ACL logic cannot create another MA table entry , all frames from that source address will be dropped. • If the ACL rules are changed or ACLs are unap plied to the port, all [...]

  • Seite 289

    {deny|permit} SFTOS Command Reference for the S2410, Version 2.4.1.0 289 Usage A rule may either deny or permit traffic acco rding to the specified classification fields. At a minimum, the source and destination MAC value must be specified, each of which may be substituted using the keyword any to indicate a match on a ny value in that field. The r[...]

  • Seite 290

    290 ACL Comma nd s mac access-list extended The assign-queue and redirec t parameters are only valid for a permit rule. Mode Mac Access List Config Related Commands mac access-list extended This command creates a MAC Access Control List (ACL) identified by name , consisting of classification fields defined for the La yer 2 header of an Ethernet fra[...]

  • Seite 291

    mac access- list extended r ename SFTOS Command Reference for the S2410, Version 2.4.1.0 291 mac access-list extended rename This comman d changes the name of an existing MAC ACL. The name parameter is the name of an existing MAC ACL. The newname parameter is a case-sen sitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC[...]

  • Seite 292

    292 ACL Comma nd s mac access-group mac access-group This command attaches a specific MAC Ac cess Control List (ACL) identified by name to an interface in the ingress directio n. This command, when used in Interface Config mode, only affects a single interface, whereas the Global Config mode setting is applied to all interfaces. Synt ax mac access-[...]

  • Seite 293

    show mac acce ss-list s SFTOS Command Reference for the S2410, Version 2.4.1.0 293 When the comman d is used with the nam e option, the report displays details for the identified MAC access list, in the following fields: Field Descriptions Rule Number—The ordered rule num ber identifier defi ned within the ACL. Action—Displays the action associ[...]

  • Seite 294

    294 ACL Comma nd s show mac access-lists[...]

  • Seite 295

    SFTOS Command Reference for the S2410, Version 2.4.1.0 295 Index Symbols {deny|permit} 288 Numerics 10/100 Ethernet por t 3, 79 802.3ad 28 802.3x flow control 200 A Access Control Lists (ACLs) 287 accessing DHCP Pool Config mode 209 ACL wildcard masks 287 ACLs 287 addport 249 Address Aging T imeout 114 areaid 41 ARP aging 204–214 audience 22 auth[...]

  • Seite 296

    296 Index config vlan p orts ingressfilte r 134–135 configuration gu id e 23 configuration reset 138 Configuration Scripting 146 configure 106 configure comma nd 47 configuring a range 108 Contact and Patents Informa ti on 23 control characters 43 copy 37–38, 139 copy (clibanner) 141 copy system 34 Copyright 2 CoS Queue Prioritization 276 cos-q[...]

  • Seite 297

    SFTOS Command Reference for the S2410, Version 2.4.1.0 297 HTML 51 HTTP 51 I IEEE 802.1Q 133–134 IfIndex 79 igmp enable 236 igmp enable (interface) 236 igmp fast-leave (inter face) 237 igmp groupmembership -interval 237 igmp igmp maxresponse (i nter face) 243 igmp interfacemode enab le all 238 igmp maxresponse 239 igmp mcrtexpiretime 239 igmp mro[...]

  • Seite 298

    298 Index deleting ports from 251 enabling or disablin g 251–252 link traps 252 logical ID 256 name 253 summary information 256 user-assigned name 256 lease 209 leave time 226–227 Line Config mode 47, 49 lineconfig command 47 link aggregate group (LAG) 249 Link Aggregation (IEEE 802.3ad) 28 link aggregations. See LAGs link traps interface 103 L[...]

  • Seite 299

    SFTOS Command Reference for the S2410, Version 2.4.1.0 299 setting user 34, 159 user 159 patents 23 PDUs 225, 227 ping 144 p-node (pe er-to-peer) 210 Policy Clas s Mode 49 policy map command 49 Policy Map Mode 49 port (for TACACS+) 190 port channel 249 Port Channel mod e 47 Port Channel Range 109, 252, 257 Port ID format 3 port lacpmo de 253 port l[...]

  • Seite 300

    300 Index script show 148 script validate 148 serial baudrate 91 serial timeout 92 service dhcp 212 service port 79 serviceport commands 3 serviceport ip 37, 63 serviceport pr ot oc ol 64 session-limit 89 sessions closing 143, 158 displaying 158 session-timeout 89 set garp timer join 225 set garp timer leave 226 set garp timer leaveall 227 set gmrp[...]

  • Seite 301

    SFTOS Command Reference for the S2410, Version 2.4.1.0 301 show port-channel brief 255 show port-channel summary 257 show port-s ecurity 166 show port-s ecurity dyna mic 167 show port-s ecurity static 168 show port-s ecurity violatio n 168 show radi us 184 show radius accounting statistics 185 show radius statistics (authentication) 186 show runnin[...]

  • Seite 302

    302 Index resetting 144 statistics, related 201 commands 66, 68, 70, 75–77 switch navigation icon in Web UI 53 syntax conventions 39 syslog servers 78, 80 system information and statistics command s 201 commands 97 system utilities 138–144 System Utility Commands 138 T Tab 43 TACACS key 189 port 190 priority 190 show tacacs 191 single-connectio[...]

  • Seite 303

    SFTOS Command Reference for the S2410, Version 2.4.1.0 303 VLAN Range mode 47 vlan tagging 137 vlan tagging co mmand 4 VLAN tunneling 221 vlan untagging 137 vlan untagging com m a nd 4 VLANs adding 108 changing the name of 125 deleting 108, 123 details 77, 129, 280, 282–284 frame acce ptance mode 133–134 GVRP 228–229 IDs 134, 137 ingress filt[...]

  • Seite 304

    304 Index[...]