-
Enterasys Networks D-Series - page 1
Enterasys ® D-Series Ether net Switches CLI Reference Firmware V ersion 1. 00.01.0005 or Higher P/N 9034394-01 ...
-
Enterasys Networks D-Series - page 2
...
-
Enterasys Networks D-Series - page 3
i Notice Enterasys Networks reserves the right to make changes in specifi cations and other information contained in this do cument and its web si te without prior notice. The reader should in all case s consult Enterasys ...
-
Enterasys Networks D-Series - page 4
ii ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. This document is an agreement (“ Agreement”) betwee n the end user (“Y ou”) and Enterasys Networks, Inc., on behalf of itself ...
-
Enterasys Networks D-Series - page 5
iii If the Program is exported from the United Stat es pursuant to the License Ex ception TSR und er the U.S. Export Administration Regulations, in addition to the restriction on transfer set forth in Section 1 or ...
-
Enterasys Networks D-Series - page 6
iv 10. ENFORCEMENT. You ac knowledge and agree that any breach of Sectio ns 2, 4, or 9 of this Ag reement by You may cause Enterasys irreparable damage for which recovery of money damages would be inadequate, and that ...
-
Enterasys Networks D-Series - page 7
v Contents About This Guide Using This Guide ................ ................ ................ ................ ................ ............. ................ . ............... ................ xxi Structure of This Guide .......... ................ ................ ................ ................. ................ ............ .......... ..... ...
-
Enterasys Networks D-Series - page 8
vi set prompt ..... ................ ................ ................ ............. ................. ................ ................ .. .................... 2-20 show banner motd ........ ................ ................ ............. ................. ................ ................ ......... ............. 2-21 set banner motd ......... ... ...
-
Enterasys Networks D-Series - page 9
vii clear config ...................... ................. ................ ................ ............. ................ ............... ........... ......... 2-46 Using and Configuring WebView ..... ................ ................ ................ ................ .................... ........ ........... ...... 2-47 Purpose ........... ...... ...
-
Enterasys Networks D-Series - page 10
viii show lldp port local-info ................ ................ ................. ................ ................ ............. ........ .............. 5-18 show lldp port remote-info ......... ................ ................ ................. ............ ................. .............. ..... ...... 5-20 set lldp tx-interval ....... ........ ...
-
Enterasys Networks D-Series - page 11
ix Setting Flow Control ........... ... ... ... .... ... ... ... .... ............ .... ... ... ... .... ... ... ... .... ... ... ... ... ............. .. ........ ................ ... 6-19 Purpose ........... ............. ................ ................ ............. ................ ................ ............. ..... .................. ..... ...
-
Enterasys Networks D-Series - page 12
x set port protected name .................... ................ ................ ................ ............. ................ ....... ............ 6-52 show port protected name ...... ................ ................ ................ ................ ................. ................ ......... 6-52 clear port protected name .... .............. ...
-
Enterasys Networks D-Series - page 13
xi Purpose ........... ............. ................ ................ ............. ................ ................ ............. ..... .................. ......... 7-28 Commands ............... ................. ............. ................ ................ ................ ................ ......... ................. ...... 7-29 show newaddr ...
-
Enterasys Networks D-Series - page 14
xii show spantree tctr apsuppres s ...... ................ ................. ................ ................ ................ ............ ....... 8-23 set spantree tctrapsuppress ................ ................ ................ ................ ................ ................ .... ......... 8-23 clear spantree tctrapsuppres s ............... ...
-
Enterasys Networks D-Series - page 15
xiii show spantree nonforwardingreas on ........ ................ ............. ................ ................. ............ ............ .8 - 5 3 Chapter 9: 802.1Q VLAN Configuration VLAN Configuration Summary ........... ................ ............. ................ ................ ............. ............... ........... ........ 9-1 Port ...
-
Enterasys Networks D-Series - page 16
xiv Command .............. ... .... ... ............. ... ... .... ... ... ... ... .... ... ... ............. ... .... ... ... ... ... .... ... ... ........ .................. ...... 10-2 set diffserv adminmode ................ ................ ................. ................ ................ ................ ........ ........... 10-2 Creating D ...
-
Enterasys Networks D-Series - page 17
xv set cos state ................. ................ ............. ................ ................. ................ ............. ...... ................. 11-19 show cos state ........ ................ ................ ............. ................ ................ ................ ............ ........... .... 11-20 clear cos state . .......... ...
-
Enterasys Networks D-Series - page 18
xvi set igmpsnooping interfacemode ...................... ................ ................ ................ ................ ........... ..... 13-3 set igmpsnooping groupmembershipi nterval .... ................ ................ ................ ............. ................ ... 13- 4 set igmpsnooping maxresponse ....... ................ ........ ...
-
Enterasys Networks D-Series - page 19
xvii Configuring Simple Network Time Protocol (SNTP) ..... ................ ................ ................ ................ .......... .... 14-26 Purpose ........... ............. ................ ................ ............. ................ ................ ............. ..... .................. ....... 14-26 Commands ............... ....... ...
-
Enterasys Networks D-Series - page 20
xviii show rmon filter ............... ................. ................ ............. ................ ................ ................ .. ............... 15-19 set rmon filter ............. ............. ................ ................ ................ ................ ................. ..... .................. 1 5-20 clear rmon filter ...... ...
-
Enterasys Networks D-Series - page 21
xix clear dhcp pool dns-server .. ... ... ... .... ... ... ... ... .... ................ ............. ................ ................ ......... ........ 16-23 set dhcp pool domain-name ......................... ................. ................ ................ ................ ............ ..... 16-24 clear dhcp pool domain-name .............. ...
-
Enterasys Networks D-Series - page 22
xx Configuring Multiple Authentication Methods ........ ............. ................ ............. ................ ................ . .......... 17-33 About Multiple Authentication Ty pes ............... ............. ................ ................ ............. ................ .. ......... 1 7-33 Configuring Multi-User Authenticati on (U se ...
-
Enterasys Networks D-Series - page 23
xxi set pwa ipaddress ...... ................ ................ ................ ................. ................ ................ ....... ............. 1 7-67 set pwa protocol ........ ................ ................ ................ ................. ................ ................ ...... .............. 17-67 set pwa guestname ...... ....... ...
-
Enterasys Networks D-Series - page 24
xxii 7-18 show snmp view O utput Details ................ ................ ............. ................ ................. ................ ...... ... 7-20 7-19 show snmp targetparams Output Det ails ..... .... ......... ................. ................ ............. ................ ...... ... 7-23 7-20 show snmp targetaddr Output Details ..... ...
-
Enterasys Networks D-Series - page 25
Enterasys D-Series CLI Reference xxi About This Guide We l c o m e to the Enterasys Networks D ‐ Seri es CLI Reference . This manual explains how to access the device’ s Command Line Interface (CLI) and how to use it to configure Enterasy ...
-
Enterasys Networks D-Series - page 26
Related Documents xxii About This Guide Chapter 7 , SNMP Configuration , describes how to configure SNMP users and user groups, access rights, target addresses, and notification parameters. Chapter 8 , Spanning Tr e e Configur ation , describes how to ? ...
-
Enterasys Networks D-Series - page 27
Conventions Used in This Guide Enterasys D-Series CLI Reference xxiii Conventions Used in This Guide The following conventions are used in the text of this document: The following icons are used in this guide: Getting Help For additional support related to this ...
-
Enterasys Networks D-Series - page 28
Getting Help xxiv About This Guide Before calling Enterasys Networks, have the following information ready: •Y o u r Enterasys Networks service contract number •A description of the failure •A description of any action(s) already take n to ...
-
Enterasys Networks D-Series - page 29
Enterasys D-Series CLI Reference 1-1 1 Introduction This chapter provides an overview of the D ‐ Series’ s unique features and functionality , an overview of the ta sks that may be accomplish ed using the CLI interf ace, an over view of ? ...
-
Enterasys Networks D-Series - page 30
Factory Default Settings 1-2 Introduction • Remotely using We b V i e w ™ , Enterasys Netw orks’ embedded web server application. The Installation Gui de for your D ‐ Series device provides setup instructions for connecting a terminal or modem to ...
-
Enterasys Networks D-Series - page 31
Factory Default Settings Enterasys D-Series CLI Reference 1-3 Link aggregation flow regeneration Disabled. Link aggregation system priority Set to 32768 for all ports. Link aggregation outport algorithm Set to DIP-SIP . Lockout Set to disable Read-Write and Read -Only users, and to lockout the default admin (Super User) account for 15 minutes, afte ...
-
Enterasys Networks D-Series - page 32
Factory Default Settings 1-4 Introduction S panning Tree edge port administrative status Edge port administrative status begins with the value set to fals e initially after the device is powered up. If a S panning T r ee BDPU is not rece ived on the port within a few seconds, the status setting changes to true . S panning Tree edge port delay Enabl ...
-
Enterasys Networks D-Series - page 33
Using the Command Line Interface Enterasys D-Series CLI Reference 1-5 Using the Command Line Interface S t arting a CLI Session Connecting Using th e Console Port Connect a terminal to the local console port as described in your D ‐ Series Installation Guide . The startup screen, ...
-
Enterasys Networks D-Series - page 34
Using the Command Line Interface 1-6 Introduction Refer to the instructions included with the Te l n e t application for information about establishing a Te l n e t session. Logging In By default, the D ‐ Series switch is configured with three user ...
-
Enterasys Networks D-Series - page 35
Using the Command Line Interface Enterasys D-Series CLI Reference 1-7 Figure 1-2 Samp le CLI Default s Description CLI Command Modes Each command description in this guide includes a section entitled “Mode” which states whether the command is executable in Admin (Su ...
-
Enterasys Networks D-Series - page 36
Using the Command Line Interface 1-8 Introduction Displaying Scrolling Screens If the CLI screen length has be en set using the set length command as described on page 3 ‐ 26 , CLI output requiring more than one screen will disp lay --More- ...
-
Enterasys Networks D-Series - page 37
Using the Command Line Interface Enterasys D-Series CLI Reference 1-9 Basic Line Editing Commands The CLI supports EMACs ‐ like line editing commands. Ta b l e 1 ‐ 2 lists some commonly used commands. T able 1-2 Basic Line Editing Commands Key Sequence Command Ctrl+A Move cursor to beginning o ...
-
Enterasys Networks D-Series - page 38
Using the Command Line Interface 1-10 Introduction ...
-
Enterasys Networks D-Series - page 39
Enterasys D-Series CLI Reference 2-1 2 Basic Configuration At startup, the D ‐ Series switch is configured wi th many defaul ts and standard features. This chapter describes how to customize basic system settings to adapt to you r wo rk env ...
-
Enterasys Networks D-Series - page 40
Setting User Accounts and Passwords 2-2 Basic Configuration Setting User Account s and Passwords Purpose To change the switch’ s default user login and password setti ngs, and to add new user accounts and passwords. Commands T able 2-2 Optional CLI Setup Commands T ask CLI comman ...
-
Enterasys Networks D-Series - page 41
show system login Enterasys D-Series CLI Reference 2-3 show system login Use this command to display user login account information. Synt ax show system login Parameters None. Default s None. Mode Switch command, super user . Example This example shows how to display login acco ...
-
Enterasys Networks D-Series - page 42
set system login 2-4 Basic Configuration set system login Use this command to create a new user login account, or to disable or enable an exi sting account. The D ‐ Series switch supports up to 16 user accounts, incl uding the admin ...
-
Enterasys Networks D-Series - page 43
set password Enterasys D-Series CLI Reference 2-5 Mode Switch command, super user . Example This example shows how to remove the “netops” user account: D2(su)->clear system login netops set p assword Use this command to change system default passwords or to ? ...
-
Enterasys Networks D-Series - page 44
set system password length 2-6 Basic Configuration Please enter new password: ******** Please re-enter new password: ****** ** Password changed. D2(su)-> set system p assword length Use this command to set the minimum user login password length. Synt ax set system password length characters Parameters Defa ...
-
Enterasys Networks D-Series - page 45
set system password history Enterasys D-Series CLI Reference 2-7 Example This example shows how to set the system passw ord age time to 45 days: D2(su)->set system password aging 45 set system p assword history Use this command to set the number of previously ...
-
Enterasys Networks D-Series - page 46
set system lockout 2-8 Basic Configuration Example This example shows how to display user lockout settings. In this case, switch defaults have not been changed: D2(su)->show system lockout Lockout attempts: 3 Lockout time: 15 minutes. Ta b l e 2 ‐ 3 provides an exp ...
-
Enterasys Networks D-Series - page 47
Setting Basic Switch Properties Enterasys D-Series CLI Reference 2-9 Setting Basic Switch Properties Purpose To display and set the syste m IP address and other basic system (switch) properties. Commands For information about... Refer to p age... show ip address 2-10 set ip address 2-10 clear ip a ...
-
Enterasys Networks D-Series - page 48
show ip address 2-10 Basic Configuration show ip address Use this command to display the system IP address and subnet mask. Synt ax show ip address Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the system ...
-
Enterasys Networks D-Series - page 49
clear ip address Enterasys D-Series CLI Reference 2-11 Mode Switch command, read ‐ write. Usage Pa r a m te r s must be entered in the order shown (host IP , then mask, then gateway) for the command to be accepted. Example This example shows how ? ...
-
Enterasys Networks D-Series - page 50
set ip protocol 2-12 Basic Configuration Mode Switch command, read ‐ only . Example This example shows how to display the method used to acquire a netw ork IP address: D2(su)->show ip protocol System IP address acquisition method : dhcp set ip protocol Use this command ...
-
Enterasys Networks D-Series - page 51
show system Enterasys D-Series CLI Reference 2-13 Mode Switch command, read ‐ only . Example This example shows how to display system information: D2(su)->show system System contact: System location: System name: PWR1-A Status P WR1-B Status ---------- - --------- Ok N ot Installed and/or Not Operating PWR2- ...
-
Enterasys Networks D-Series - page 52
show system hardware 2-14 Basic Configuration show system hardware Use this command to display the system’ s hardware c onfiguration. Synt ax show system hardware Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the s ...
-
Enterasys Networks D-Series - page 53
show system enhancedbuffermode Enterasys D-Series CLI Reference 2-15 Mode Switch command, read ‐ only . Examples This example shows how to display the system’ s CPU utilization: D2(ro)->show system utilization cpu Total CPU Utilization: Switch CPU 5 sec 1 min 5 min --------------------------------- ...
-
Enterasys Networks D-Series - page 54
set system enhancedbuffermode 2-16 Basic Configuration Mode Switch command, read ‐ write. Example This example shows how to display enhanced buffer mode status: D2(su)->show system enhancedbuffermo de enable Optimized system buffer distribution Disable set system enhancedbuffermode Use this c ...
-
Enterasys Networks D-Series - page 55
set time Enterasys D-Series CLI Reference 2-17 Mode Switch command, read ‐ only . Example This example shows how to display the current time. The output shows the day of the week , month, day , and the time of day in hours, minutes, ...
-
Enterasys Networks D-Series - page 56
set summertim e 2-18 Basic Configuration Mode Switch command, read ‐ only . Example This example shows how to display daylight savings time settings: D2(su)->show summertime Summertime is disabled and set to '' Start : SUN APR 04 02:00:00 2004 End : SUN OCT 31 02:00:00 2004 Offset: 60 minut ...
-
Enterasys Networks D-Series - page 57
set summertime rec urring Enterasys D-Series CLI Reference 2-19 Default s If an offset is not spe cified, none will be applied. Mode Switch command, read ‐ write. Example This example shows how to set a daylight savings time start date of April 4, ...
-
Enterasys Networks D-Series - page 58
clear summertim e 2-20 Basic Configuration Default s If an offset is not spe cified, none will be applied. Mode Switch command, read ‐ write. Example This example shows how set daylight savings time to recur starting on the fi rst Sunday of ...
-
Enterasys Networks D-Series - page 59
show banner motd Enterasys D-Series CLI Reference 2-21 Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the command prompt to Switch 1: D2(su)->set prompt “Switch 1” Switch 1(su)-> show banner mot d Use this command to show th ...
-
Enterasys Networks D-Series - page 60
clear banner motd 2-22 Basic Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the message of the day banner to read: “O Knights of Ni, you are just and fair , and we will ? ...
-
Enterasys Networks D-Series - page 61
set system name Enterasys D-Series CLI Reference 2-23 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display ver si on information. Pl ease note that you may see different information displayed, depending on t ...
-
Enterasys Networks D-Series - page 62
set system location 2-24 Basic Configuration Default s If string is not specif ied, the system name will be cleared. Mode Switch command, read ‐ write. Example This example shows how to set the system name to Information Systems: D2(su)->set system name ...
-
Enterasys Networks D-Series - page 63
set width Enterasys D-Series CLI Reference 2-25 Parameters Default s If string is not specif ied, the contact name will be cleared. Mode Switch command, read ‐ write. Example This example shows how to set the system contact stri ng: D2(su)->set system contact ? ...
-
Enterasys Networks D-Series - page 64
set length 2-26 Basic Configuration set length Use this command to set the number of lines the CLI will display . This command is persistent (written to NV ‐ RAM). Synt ax set length screenlength Parameters Default s None. Mode Switch command, read ‐ write. Exam ...
-
Enterasys Networks D-Series - page 65
set logout Enterasys D-Series CLI Reference 2-27 set logout Use this command to set the time (in minutes) an idle console or Te l n e t CLI session will remain connected before timing out. Synt ax set logout timeout Parameters Default s None. Mode Switch command ...
-
Enterasys Networks D-Series - page 66
set console baud 2-28 Basic Configuration ------ ------- ---- ---------- - ----- 9600 Disable 8 1 n one set console baud Use this command to set the console port baud rate. Synt ax set console baud rate Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows ...
-
Enterasys Networks D-Series - page 67
Downloading a Firmware Image Enterasys D-Series CLI Reference 2-29 Downloading from a TFTP Server To perform a TFTP download, proceed as follows : 1. If you have not already done so, set the switch’ s IP address using the set ip address command as ...
-
Enterasys Networks D-Series - page 68
Downloading a Firmware Image 2-30 Basic Configuration 7 - 57600 8 - 115200 0 - no change 4. T ype 8 to set the switch baud rate to 115200. The following message displays : Setting baud rate to 115200, you mus t change your terminal baud rate. 5. Set the terminal baud rate t ...
-
Enterasys Networks D-Series - page 69
Reviewing and Selecting a Boot Firmware Image Enterasys D-Series CLI Reference 2-31 2. Load you r previous ve rs i on of cod e on the device, as described in “ Downloading a Firmware Image ” (page 2 ‐ 28). 3. Set this older ver s io n of code to be ...
-
Enterasys Networks D-Series - page 70
set boot system 2-32 Basic Configuration set boot system Use this command to set the firmware image the switch loads at startup. Synt ax set boot system filename Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to set th ...
-
Enterasys Networks D-Series - page 71
set telnet Enterasys D-Series CLI Reference 2-33 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display Te l n e t status: D2(su)->show telnet Telnet inbound is currently: ENABLED Telnet outbound is currently: ENABLE D set telnet Use this command to enabl ...
-
Enterasys Networks D-Series - page 72
Managing Switch Configuration and Files 2-34 Basic Configuration Parameters Default s If not specified, the default port number 23 will be use d. Mode Switch command, read ‐ write. Example This example shows how to start a Te l n e t session to a host ...
-
Enterasys Networks D-Series - page 73
show snmp persistmode Enterasys D-Series CLI Reference 2-35 Commands show snmp persistmode Use this command to display the configuration persistence mode setting. Synt ax show snmp persistmode Parameters None. Default s None. Mode Switch command, read ‐ only . Usage By default, the mo de ...
-
Enterasys Networks D-Series - page 74
set snmp persistmode 2-36 Basic Configuration Example This example shows how to display the configuration persistence mode setting. In this case, persistence mode is set to “manual”, which means configur ation changes are not being automa ...
-
Enterasys Networks D-Series - page 75
dir Enterasys D-Series CLI Reference 2-37 Mode Switch command, read ‐ write. Example This example shows how to save the run ning configuration: D2(su)->save config dir Use this command to list configuration and image files stored in the file system. Syn ...
-
Enterasys Networks D-Series - page 76
show file 2-38 Basic Configuration current.log 901 29 show file Use this command to display the contents of a file. Synt ax show file filename Parameters Default s None. Mode Switch command, read ‐ only . Example This example shows how to display a text file named ...
-
Enterasys Networks D-Series - page 77
configure Enterasys D-Series CLI Reference 2-39 Parameters Default s By default, show config will display all non ‐ default configuration information for all facilities. Mode Switch command, read ‐ only . Usage The separate facilities that can be displayed by ? ...
-
Enterasys Networks D-Series - page 78
copy 2-40 Basic Configuration Parameters Default s If append is not spec ified, the current running configuration will be replaced wi th the contents of the configuration file, which will require an automated reset of the chassis. Mode Switch ...
-
Enterasys Networks D-Series - page 79
delete Enterasys D-Series CLI Reference 2-41 delete Use this command to remove an image or a CLI configuration file from the switch. Synt ax delete filename Parameters Default s None. Mode Switch command, read ‐ write. Usage Use the dir command ( page 2 ‐ 37 ) ? ...
-
Enterasys Networks D-Series - page 80
set tftp timeout 2-42 Basic Configuration Example This example shows the output of this command. D2(ro)->show tftp settings TFTP packet timeout (seconds): 2 TFTP max retry: 5 set t ftp timeout Use this command to configure how long TFTP will wait for a reply of e ...
-
Enterasys Networks D-Series - page 81
set tftp retry Enterasys D-Series CLI Reference 2-43 Example This example shows how to clear the timeout va l u e to the default of 2 seconds. D2(rw)-> clear tftp timeout set t ftp retry Use this command to configure how many times TFTP will resend ? ...
-
Enterasys Networks D-Series - page 82
Clearing and Closing the CLI 2-44 Basic Configuration Clearing and Closing the CLI Purpose To clear the CLI screen or to close your CLI session. Commands cls (clear screen) Use this command to clear the screen for the current CLI session. Synt ax cls Parameters None ...
-
Enterasys Networks D-Series - page 83
Resetting the Switch Enterasys D-Series CLI Reference 2-45 Mode Switch command, read ‐ only . Usage By default, switch timeout occurs after 15 minutes of user inactivity , automatically closing yo u r CLI session. Use the set logout command ( page 2 ? ...
-
Enterasys Networks D-Series - page 84
clear config 2-46 Basic Configuration Do you want to continue (y/n) [n]? clear config Use this command to clear the user ‐ defined configuration parameters. Synt ax clear config [ all ] Parameters Default s If all is not specified, stacking configuration parameters will not ? ...
-
Enterasys Networks D-Series - page 85
Using and Configuring WebView Enterasys D-Series CLI Reference 2-47 Using and Configuring W ebV iew Purpose By default, We b V i e w (The Enterasys Networks embedded web server fo r switch configurat ion and management tasks) is enabled on TCP port number 80 on ...
-
Enterasys Networks D-Series - page 86
set webview 2-48 Basic Configuration set webview Use this command to enable or disable We b V i e w on the switch. Synt ax set webview { enable | disable } Parameters Default s None. Mode Switch command, read ‐ write. Usage It is good practice for security reasons to ...
-
Enterasys Networks D-Series - page 87
set ssl Enterasys D-Series CLI Reference 2-49 set ssl Use this command to enable or disable the use of We b V i e w ov er SSL port 443. By defa ult, SSL is disabled on the swi tch. This command can also be used to rei nitialize ? ...
-
Enterasys Networks D-Series - page 88
set ssl 2-50 Basic Configuration ...
-
Enterasys Networks D-Series - page 89
Enterasys D-Series CLI Reference 3-1 3 Activating Licensed Features In order to enable the D2 advanced features, such as Po l i c y , yo u must purchase a license. If you have purchased a li cense, you can proceed to activate you r licens ...
-
Enterasys Networks D-Series - page 90
show license 3-2 Activating Licensed Featu res Usage When you execu te the set license command, you will be prompted to accept the license agreement. If you do not accept the license agreement, the licensed feature will not be ena ...
-
Enterasys Networks D-Series - page 91
clear license Enterasys D-Series CLI Reference 3-3 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear a licensed feature: D2(rw)->clear license featureId D2Po licy featureID feature The name of the feature being cleared. ...
-
Enterasys Networks D-Series - page 92
clear license 3-4 Activating Licensed Featu res ...
-
Enterasys Networks D-Series - page 93
Enterasys D-Series CLI Reference 4-1 4 Configuring System Power and PoE The commands in this chapter allow you to review and set system power and PoE parameters, including the power av ailable to the system, the usage threshold for each m ...
-
Enterasys Networks D-Series - page 94
set inlinepower threshold 4-2 Configuring System Power and PoE Example This example shows how to display system pow er properties: D2(su)->show inlinepower Detection Mode : auto Unit Status Power(W) Consumption(W) U sage(%) Threshold(%) Trap ---- ------ -------- --------- ----- -------- ------------ ---- 1 auto 48 ...
-
Enterasys Networks D-Series - page 95
show port inlinepower Enterasys D-Series CLI Reference 4-3 Example This example shows how to enable inline power trap messaging on module 1: D2(su)->set inlinepower trap enable 1 show port inlinepower Use this command to display all ports supporting Po E . Synt a ...
-
Enterasys Networks D-Series - page 96
set port inlinepower 4-4 Configuring System Power and PoE Mode Switch command, read ‐ write. Example This example shows how to enable Po E on port fe.3.1 with critical priority: D2(su)->set port inlinepower fe . 3.1 admin auto priority critical ...
-
Enterasys Networks D-Series - page 97
Enterasys D-Series CLI Reference 5-1 5 Discovery Protocol Configuration This chapter descri bes how to configure discovery protocols. Configuring CDP Purpose To review and configure the En terasys CDP discovery protocol. This protocol is used to discov er networ ...
-
Enterasys Networks D-Series - page 98
show cdp 5-2 Discovery Protocol C onfiguration show cd p Use this command to display the status of the CDP discov ery protocol and message interval on one or more ports. Synt ax show cdp [ port-string ] Parameters Default s If port ‐ string is not specif i ...
-
Enterasys Networks D-Series - page 99
set cdp state Enterasys D-Series CLI Reference 5-3 set cd p st ate Use this command to enable or disable the CDP discov ery protocol on one or more ports. Synt ax set cdp state { auto | disable | enab le } [port-string] Parameters Default s If port ‐ string is not specif ...
-
Enterasys Networks D-Series - page 100
set cdp auth 5-4 Discovery Protocol C onfiguration set cd p auth Use this command to set a global CDP authentication code. Synt ax set cdp auth auth-code Parameters Default s None. Mode Switch command, read ‐ write. Usage The authentication code va l u e determines a switch’ s ...
-
Enterasys Networks D-Series - page 101
set cdp hold-time Enterasys D-Series CLI Reference 5-5 Example This example shows how to set the CDP interv al frequency to 15 seconds: D2(su)->set cdp interval 15 set cd p hold-time Use this command to set the hold time va l ue for CDP discovery prot ...
-
Enterasys Networks D-Series - page 102
show neighbors 5-6 Discovery Protocol C onfiguration Mode Switch command, read ‐ write. Example This example shows how to reset the CDP state to auto ‐ enabled: D2(su)->clear cdp state show neighbors This command displays Neighbor Discov ery information for either ? ...
-
Enterasys Networks D-Series - page 103
Configuring Cisco Discovery Protocol Enterasys D-Series CLI Reference 5-7 Configuring Cisco Discovery Protocol Purpose To review and configure the Cisco discovery protocol. Discovery pr otocols are used to discov er network topology . When enabled, they allow Cisc o ...
-
Enterasys Networks D-Series - page 104
show ciscodp port info 5-8 Discovery Protocol C onfiguration Device ID : 001188554A60 Last Change : WED NOV 08 13:19:56 20 06 Ta b l e 5 ‐ 2 provides an explanation of the command output. show ciscod p port info Use this command to display summary information about the Cisco disc ...
-
Enterasys Networks D-Series - page 105
set ciscodp status Enterasys D-Series CLI Reference 5-9 set ciscod p st atus Use this command to enable or disable the Cisco discov ery protocol globally on the switch. Synt ax set ciscodp state { auto | disable | enable } Parameters Default s None. Mode Switch command, read ‐ write. ...
-
Enterasys Networks D-Series - page 106
set ciscodp holdtime 5-10 Discovery Protocol Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the Cisco DP timer to 120 seconds. D2(su)->set ciscodp timer 120 set ciscod p hold time Use this command to se ...
-
Enterasys Networks D-Series - page 107
set ciscodp port Enterasys D-Series CLI Reference 5-11 Parameters Default s •S t a t u s : ena bled •V o i c e VLAN: none •T r u s t mode: trusted •C o S va lu e : 0 Mode Switch mode, read ‐ write. Usage The following points describe how the Cisco DP exten ded trust ? ...
-
Enterasys Networks D-Series - page 108
clear ciscodp 5-12 Discovery Protocol Configuration •I f the switch port is configured to a Cisco DP trust state of untrusted ( trusted no ), this setting is communicated to the Cisco IP phone instructing it to ove rwrite the 80 ...
-
Enterasys Networks D-Series - page 109
Configuring Link Layer Disc overy Protocol and LLDP-MED Enterasys D-Series CLI Reference 5-13 Examples This example shows how to clear all the Cisco DP parameters back to the default settings. D2(rw)->clear ciscodp This example shows how to clear the Cisco ? ...
-
Enterasys Networks D-Series - page 110
Configuring Link Layer Disc overy Protocol and LLDP-MED 5-14 Discovery Protocol Configuration Configuration T asks The commands included in this implementation allow you to perform the f ollowing conf iguration tasks: For information about... Refer to p age... show lldp 5-15 show lldp port status ...
-
Enterasys Networks D-Series - page 111
show lldp Enterasys D-Series CLI Reference 5-15 show lld p Use this command to display LLDP configuration information. Synt ax show lldp Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display LLDP configuration information. D ...
-
Enterasys Networks D-Series - page 112
show lldp port trap 5-16 Discovery Protocol Configuration Example This example shows how to display LLDP port status information for all ports. D2(ro)->show lldp port status Tx-Enabled Ports : ge.1.1-60; g e.2.1-24; ge.3.1-30; ge.4.1-12 Rx-Enabled Ports : ge.1.1-60; g e.2.1-24; ge.3.1-30; ge.4.1-12 ...
-
Enterasys Networks D-Series - page 113
show lldp port location-info Enterasys D-Series CLI Reference 5-17 Parameters Default s If port ‐ string is not specif ied, TL V configurat ion information will be display ed for all ports. Mode Switch command, read ‐ only . Example This example shows how to display ...
-
Enterasys Networks D-Series - page 114
show lldp port local-info 5-18 Discovery Protocol Configuration Ports Type Location -------- ------------- ----------------------- -- ge.1.1 ELIN 123456789 0 ge.1.2 ELIN 123456789 0 ge.1.3 ELIN 123456789 0 show lld p port local-info Use this command to display the local system information stored for one ? ...
-
Enterasys Networks D-Series - page 115
show lldp port local-info Enterasys D-Series CLI Reference 5-19 PoE Device : PSE device PoE Power Source : prim ary PoE MDI Supported/Enabled : yes/ yes PoE Pair Controllable/Used : fals e/spare PoE Power Class : 2 PoE Power Limit (mW) : 1540 0 PoE Power Priority : high Ta b l e 5 ‐ 4 describes the information displayed by ...
-
Enterasys Networks D-Series - page 116
show lldp port remote-info 5-20 Discovery Protocol Configuration show lld p port remote-info Use this command to display the remote system information stored for a remote device connected to a local port. Yo u can use this information to detect m ...
-
Enterasys Networks D-Series - page 117
show lldp port remote-info Enterasys D-Series CLI Reference 5-21 Example This example shows how to display the remote system information stored for port ge .3.1. The remote system information was received from an IP phone, which is an LLDP ? ...
-
Enterasys Networks D-Series - page 118
set lldp tx-interval 5-22 Discovery Protocol Configuration set lld p tx-interval Use this command to set the time, in seconds, betw een successive LLDP frame transmissions initiated by changes in the LLDP local sy stem information. Synt ax set lldp tx-interval f ...
-
Enterasys Networks D-Series - page 119
set lldp trap-interval Enterasys D-Series CLI Reference 5-23 set lld p trap-interval Use this command to set the minimum interval betw een LLDP notifications se nt by this device. LLDP notifications are se nt when a remote system change has been ...
-
Enterasys Networks D-Series - page 120
set lldp port status 5-24 Discovery Protocol Configuration Example This example sets the numbe r of fast start LLDPDUs to be sent to 4. D2(rw)->set lldp med-fast-repeat 4 set lld p port st atus Use this command to enable or disable transmitting and processing ...
-
Enterasys Networks D-Series - page 121
set lldp port med-trap Enterasys D-Series CLI Reference 5-25 Default s None. Mode Switch command, read ‐ write. Example This example enables transmitting LLDP traps on ports ge .1.1 through ge .1.6. D2(rw)->set lldp port trap enable ge .1.1-6 set lld p port med-trap Use this command t ...
-
Enterasys Networks D-Series - page 122
set lldp port tx-tlv 5-26 Discovery Protocol Configuration Parameters all Adds all optional TL Vs to transmitte d LLDPDUs. port ‐ desc Po r t Description optional basic LLDP TL V . Va l u e sent is ifDescr object defined in RFC 2863. sys ‐ name Syst em Name ...
-
Enterasys Networks D-Series - page 123
clear lldp Enterasys D-Series CLI Reference 5-27 Default s None. Mode Switch command, read ‐ write. Example This example configures the management address, MED capability , and MED location identification TL Vs to be sent in LLDPDUs by port ge .1.1. D2(rw)- ...
-
Enterasys Networks D-Series - page 124
clear lldp port trap 5-28 Discovery Protocol Configuration Synt ax clear lldp port status port-string Parameters Default s None. Mode Switch command, read ‐ write. Example This example returns port ge .1.1 to the default state of enabled for both transmitting and processing r ...
-
Enterasys Networks D-Series - page 125
clear lldp port tx-tlv Enterasys D-Series CLI Reference 5-29 Parameters Default s None. Mode Switch command, read ‐ write. Example This example returns port ge .1.1 to the default LLDP ‐ MED trap state of disabled. D2(rw)->clear lldp port med-trap ge. 1.1 clear lld p port tx-tlv Use ...
-
Enterasys Networks D-Series - page 126
clear lldp port tx-tlv 5-30 Discovery Protocol Configuration Default s None. Mode Switch command, read ‐ write. Example This example disa bles the management address, MED capability , and MED location identification TL Vs from being sent in LLDPDUs by port ge ...
-
Enterasys Networks D-Series - page 127
Enterasys D-Series CLI Reference 6-1 6 Port Configuration This chapter descri bes the Po r t Configuration set of commands and how to use them. Port Configuration Summary Port String Synt ax Used in the CLI Commands requiring a port ‐ strin g parameter use the followi ...
-
Enterasys Networks D-Series - page 128
Port Configuration Summary 6-2 Port Conf iguration Port Slot/Unit Parameters Used in the CLI The “unit” parameter is often used interchangeably wi th “module” in the standalone switch CLI to indicate a module slot location. Examples This example shows ? ...
-
Enterasys Networks D-Series - page 129
Reviewing Port Status Enterasys D-Series CLI Reference 6-3 Example This example shows how to configure por t ge.2.1 in the D2G124 ‐ 12 to operate with a 100BASE ‐ FX transceiver installed. First, the port status is shown as operating as a ...
-
Enterasys Networks D-Series - page 130
show port 6-4 Port Conf iguration show port Use this command to display whether or not one or more ports are enabled for switching . Synt ax show port [ port-string ] Parameters Default s If port ‐ string is not specif ied, operational status information f ...
-
Enterasys Networks D-Series - page 131
show port counters Enterasys D-Series CLI Reference 6-5 (truncated) Status Status ------------ -------------- ------ - ------- -------- ------- ----------- -- fe .3.14 up up N/A N/A BaseT RJ45 Ta b l e 6 ‐ 6 provides an explanation of the command output. show port counters Use this command to display ? ...
-
Enterasys Networks D-Series - page 132
show port counters 6-6 Port Conf iguration Examples This example shows how to display all counter statistics, including MIB2 network traffic and traffic through the device for fe .3.1: D2(su)->show port counters fe .3.1 Port: fe .3.1 MIB2 Interface: 1 No counter disconti ...
-
Enterasys Networks D-Series - page 133
Disabling / Enabling and Naming Ports Enterasys D-Series CLI Reference 6-7 Disabling / Enabling and Naming Port s Purpose To disable and re ‐ enable one or more ports, and to assign an alias to a port. By default, all ports are enabled at device startu ...
-
Enterasys Networks D-Series - page 134
show port alias 6-8 Port Conf iguration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable fe.1.3: D2(su)->set port enable fe .1.3 show port alias Use this command to display the alias name for one or more po rts. ...
-
Enterasys Networks D-Series - page 135
set port alias Enterasys D-Series CLI Reference 6-9 Parameters Default s If name is not specified, the alias assigned to the port will be cleared. Mode Switch command, read ‐ write. Examples This example shows how to assign the alias “A d m i n ” t ...
-
Enterasys Networks D-Series - page 136
Setting Speed and Duplex Mode 6-10 Port Configur ation Setting S peed and Duplex Mode Purpose To review and set the operational speed in Mbps and the default duplex mode: Half , for half duplex, or Full , for full duplex for one or more ports ...
-
Enterasys Networks D-Series - page 137
set port speed Enterasys D-Series CLI Reference 6-11 set port speed Use this command to set the default speed of one or more ports. Th is setting only takes effect on ports that hav e auto ‐ negotiation disabled. Synt ax set port speed port-string { 10 | 1 ...
-
Enterasys Networks D-Series - page 138
set port duplex 6-12 Port Configur ation Example This example shows how to display the default duplex setting for Ethernet port 14 in slot 3: D2(su)->show port duplex ge.3.14 default duplex mode is full on port ge.3.14. set port duplex Use this command to set the ...
-
Enterasys Networks D-Series - page 139
Enabling / Disabling Jumbo Frame Support Enterasys D-Series CLI Reference 6-13 Enabling / Disabling Jumbo Frame Support Purpose To review , enable, and disable jumbo frame support on one or more ports. This allows Gigabit Ethernet ports to transmit frames up to ...
-
Enterasys Networks D-Series - page 140
set port jumbo 6-14 Port Configur ation set port jumbo Use this command to enable or disable jumbo frame support on one or more ports. Synt ax set port jumbo { enable | disable }[ po rt-string] Parameters Default s If port ‐ string is not specif ied, jumbo frame s ...
-
Enterasys Networks D-Series - page 141
Setting Auto-Negotiation and Advertised Ability Enterasys D-Series CLI Reference 6-15 Setting Auto-Negotiation and Advertised Ability Purpose To review , disable or enable aut o ‐ negotiation, and to configure port adv ertisement for speed and duplex. During auto ‐ negotiation, the ...
-
Enterasys Networks D-Series - page 142
set port negotiation 6-16 Port Configur ation Example This example shows how to display auto ‐ negotiation status for 1 ‐ Gigabit Ethernet port 14 in sl ot 3: D2(su)->show port negotiation ge.3.1 4 auto-negotiation is enabled on port ge.3.14. set port negotiation Use this comman ...
-
Enterasys Networks D-Series - page 143
set port advertise Enterasys D-Series CLI Reference 6-17 Example This example shows how to display adv ertisement status for Gigabit ports 13 and 14: D2(su)->show port advertise ge.1.13- 14 ge.1.13 capability advertise d remote ------------------------------------ ------------- 10BASE-T yes ...
-
Enterasys Networks D-Series - page 144
clear port advertise 6-18 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to configure port 1 to advertise 1000BASE ‐ T full duplex: D2(su)->set port advertise ge.1.1 10 00tfd clear port advertise Use this command to configure ? ...
-
Enterasys Networks D-Series - page 145
Setting Flow Control Enterasys D-Series CLI Reference 6-19 Setting Flow Control Purpose To review , enable or disable po rt flow control. Flow control is used to manage the transmissi on between tw o devices as specified by IEEE 802.3x to prevent rec ...
-
Enterasys Networks D-Series - page 146
set flowcontrol 6-20 Port Configur ation Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable flow control: D2(su)->set flowcontrol enable ...
-
Enterasys Networks D-Series - page 147
Setting Port Link Traps and Link Flap Detection Enterasys D-Series CLI Reference 6-21 Setting Port Link T rap s and Link Flap Detection Purpose To disable or re ‐ enable link traps, di splay link trap status, and to configure the link flapping detection function. By defau ...
-
Enterasys Networks D-Series - page 148
set port trap 6-22 Port Configur ation Default s If port ‐ string is not specif ied, the trap status for all ports wi ll be display ed. Mode Switch command, read ‐ write. Example This example shows how to display link trap status for fe.3.1 t ...
-
Enterasys Networks D-Series - page 149
show linkflap Enterasys D-Series CLI Reference 6-23 Parameters Default s •I f not specified, information about all link flap detection settings will be display ed. •I f port ‐ string is not specif ied, information for all ports will be displayed. Mode ...
-
Enterasys Networks D-Series - page 150
show linkflap 6-24 Port Configur ation Examples This example shows how to display the global status of the link trap detection function: D2(rw)->show linkflap globalstate Linkflap feature globally disabled This example shows how to display ports disabled by ? ...
-
Enterasys Networks D-Series - page 151
set linkflap globalstate Enterasys D-Series CLI Reference 6-25 set linkflap globalst ate Use this command to globally enable or disable the link flap detection function. Synt ax set linkflap globalstate { disable | enable } Parameters Default s By default, the function is disab ...
-
Enterasys Networks D-Series - page 152
set linkflap interval 6-26 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to enable the link trap monitoring on all ports. D2(rw)->set linkflap portstate enabl e set linkflap interval Use this command to set the time inter ...
-
Enterasys Networks D-Series - page 153
clear linkflap action Enterasys D-Series CLI Reference 6-27 Default s None. Mode Switch mode, read ‐ write. Example This example shows how to set the link flap violation action on port fe.1.4 to generating a Syslog entry . D2(rw)->set linkflap action fe .1 .4 gensy ...
-
Enterasys Networks D-Series - page 154
set linkflap downtime 6-28 Port Configur ation Parameters Default s None. Mode Switch mode, read ‐ write. Example This example shows how to set the link flap threshold on port fe.1.4 to 5. D2(rw)->set linkflap threshold fe .1.4 5 set linkflap downtime Use this command ...
-
Enterasys Networks D-Series - page 155
clear linkflap Enterasys D-Series CLI Reference 6-29 Parameters Default s If port ‐ string is not specif ied, all ports di sabled by a link flap violation will be ma de operational. Mode Switch mode, read ‐ write. Example This example shows how to make ? ...
-
Enterasys Networks D-Series - page 156
Configuring Broadcast Suppression 6-30 Port Configur ation Configuring Broadcast Suppression Purpose To review and set the broadcast suppression threshold for one or more ports. This feature limits the numbe r of received broadcast frames the swit ch wil ...
-
Enterasys Networks D-Series - page 157
set port broadcast Enterasys D-Series CLI Reference 6-31 set port broadcast Use this command to set the broadcast suppression threshold, in packets per se cond, on one or more ports. This sets a threshold on the broadcast traffic that is ...
-
Enterasys Networks D-Series - page 158
clear port broadcast 6-32 Port Configur ation Default s None. Mode Switch command, read ‐ write. Example This example clears the broadcast threshold limit to 14881 pps for ports 1 through 5: D2(su)->clear port broadcast ge.1.1- 5 threshold ...
-
Enterasys Networks D-Series - page 159
Port Mirroring Enterasys D-Series CLI Reference 6-33 Port Mirroring The D ‐ Series device allows you to mirror (or redirect) the traffic being switched on a port for the purposes of netw ork traffic analysis and connection assu rance. When ...
-
Enterasys Networks D-Series - page 160
set port mirroring 6-34 Port Configur ation Default s None. Mode Switch command, read ‐ only . Example This example shows how to display port mirroring information. In this case, fe.1.4 is configured as a source port and fe.1.1 1 is a target an ...
-
Enterasys Networks D-Series - page 161
clear port mirroring Enterasys D-Series CLI Reference 6-35 Usage Note that LAG ports and their underlying physical ports , as described in “ Link Aggregation Control Protocol (LACP) ” on page 6 ‐ 36, cannot be mir rored. Example This example shows ...
-
Enterasys Networks D-Series - page 162
Link Aggregation Control Protocol (LACP) 6-36 Port Configur ation Link Aggregation Control Protocol (LACP) Using multiple links simultaneously to increase bandwidth is a desirable switch feature, which can be accomplished if both sides agree on a set of ...
-
Enterasys Networks D-Series - page 163
Link Aggregation Control Protocol (LACP) Enterasys D-Series CLI Reference 6-37 •A means of identifying the set of capabi lities associated wi th each port and with each aggregator , as understood by a given device. •A means of identifying a L ...
-
Enterasys Networks D-Series - page 164
Link Aggregation Control Protocol (LACP) 6-38 Port Configur ation is, will block redundant paths). For information about build ing static aggregations, refer to set lacp static ( page 6 ‐ 42 ). Each D ‐ Series modu le provides six virtual link aggregator ...
-
Enterasys Networks D-Series - page 165
show lacp Enterasys D-Series CLI Reference 6-39 show lacp Use this command to display information about one or more aggregator ports. Synt ax show lacp [ port-string ] Parameters Default s If port ‐ string is not specif ied, link aggregation information for all ? ...
-
Enterasys Networks D-Series - page 166
set lacp 6-40 Port Configur ation set lacp Use this command to disable or enable the Link Aggregation Control Protocol (LACP) on the device. Synt ax set lacp {disable | enable} Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows ho ...
-
Enterasys Networks D-Series - page 167
set lacp asyspr i Enterasys D-Series CLI Reference 6-41 set lacp asyspri Use this command to set the LACP system priority . Synt ax set lacp asyspri value Parameters Default s None. Mode Switch command, read ‐ write. Usage LACP uses this va l u e to determine aggregation prec ...
-
Enterasys Networks D-Series - page 168
clear lacp 6-42 Port Configur ation Usage LACP will use this va lu e to form an oper key . Only underlying physical ports with oper keys matching th ose of their aggregators will be allowed to aggregate. The default admin key ...
-
Enterasys Networks D-Series - page 169
clear lacp static Enterasys D-Series CLI Reference 6-43 Default s If not specified, a key will be assigned according to the specified aggregator . For example a key of 4 wou ld be assigned to lag.0.4 . Mode Switch command, read ‐ write. Example ...
-
Enterasys Networks D-Series - page 170
set lacp singleportlag 6-44 Port Configur ation set lacp singleportlag Use this command to enable or disable the formation of single port LAGs. Synt ax set lacp singleportlag { enable | dis able } Parameters Default s None. Mode Switch command, read ‐ write. Usage When single por ...
-
Enterasys Networks D-Series - page 171
show port lacp Enterasys D-Series CLI Reference 6-45 Example This example shows how to reset the single port LAG function back to disabled: D2(su)->clear lacp singleportlag show port lacp Use this command to display link aggregation informatio n for one ? ...
-
Enterasys Networks D-Series - page 172
set port lacp 6-46 Port Configur ation Port Instance: fe .1.12 ActorPort: 1411 PartnerAdminPort: 1411 ActorSystemPriority: 32768 PartnerOperPort: 1411 ActorPortPriority: 32768 PartnerAdminSystemPriority: 32768 ActorAdminKey: 32768 PartnerOperSystemPriority: 32768 ActorOperKey: 32768 PartnerAdminPortPriority: 32768 ActorAdminState: -----GlA PartnerO ...
-
Enterasys Networks D-Series - page 173
set port lacp Enterasys D-Series CLI Reference 6-47 Default s At least one parameter must be entered per port ‐ string. If enable or disable are not specified, port(s) will be enabled with the LACP parameters entered. Mode Switch command, read ‐ ...
-
Enterasys Networks D-Series - page 174
clear port lacp 6-48 Port Configur ation Usage LACP commands and parameters beginning with an “a” (such as aadminkey ) set actor val u e s . Corresponding commands and parameters beginning with a “p” (such as padminkey ) set corresponding ...
-
Enterasys Networks D-Series - page 175
clear port lacp Enterasys D-Series CLI Reference 6-49 Default s None. Mode Switch command, read ‐ write. Usage If you set a port to LACP passiv e using the command clear port lacp port < por t ‐ string > aadminstate lacpactive , the command clear p ...
-
Enterasys Networks D-Series - page 176
Configuring Protected Ports 6-50 Port Configur ation Configuring Protected Port s The Protected Por t feature is used to prevent por ts from forw arding traffic to each other , even when they are on the same VLAN. Por t s may be designate d a ...
-
Enterasys Networks D-Series - page 177
show port protected Enterasys D-Series CLI Reference 6-51 Example This example shows how to assign ports ge .1.1 through ge .1.3 to protected port group 1: D2(rw)->set port protected ge.1.1-3 1 show port protected Use this command to display information about ...
-
Enterasys Networks D-Series - page 178
set port protected name 6-52 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to clear protected ports ge .1.1 through ge .1.3: D2(rw)->clear port protected ge.1.1- 3 set port protected name Use this command to assign a name to ...
-
Enterasys Networks D-Series - page 179
clear port protected name Enterasys D-Series CLI Reference 6-53 Example This example shows how to show the name of protected port group 1: D2(ro)->show port protected name 1 Group ID Group Name ----------------------------- 1 group1 clear port protected name Use this command to ...
-
Enterasys Networks D-Series - page 180
clear port protected name 6-54 Port Configur ation ...
-
Enterasys Networks D-Series - page 181
Enterasys D-Series CLI Reference 7-1 7 SNMP Configuration This chapter descri bes the Simple Network Management Protocol (SNMP) set of commands and how to use them. SNMP Configuration Summary SNMP is an application ‐ layer protocol that facilitates the ...
-
Enterasys Networks D-Series - page 182
SNMP Configuration Summary 7-2 SNMP Configuration •S N M P network management applications, such as the Enterasys Ne tSight application, whic h communicate with agents to get statistics and alerts from the managed devices. SNMPv3 SNMPv3 is an i ...
-
Enterasys Networks D-Series - page 183
Reviewing SNMP Statistics Enterasys D-Series CLI Reference 7-3 Using SNMP Context s to Access S pecific MIBs By default, when operating from the switch CLI, D ‐ Series devices allow access to all SNMP MIBs or contexts. A context is a collection of MIB ...
-
Enterasys Networks D-Series - page 184
show snmp engineid 7-4 SNMP Configuration Commands show snmp engineid Use this command to display the SNMP local engine ID. This is the SNMP v3 engine’ s administratively unique identifier . Synt ax show snmp engineid Parameters None. Default s None. Mode Switch comma ...
-
Enterasys Networks D-Series - page 185
show snmp counters Enterasys D-Series CLI Reference 7-5 show snmp counters Use this command to display SNMP traffic counter val u e s . Synt ax show snmp counters Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display SNMP co ...
-
Enterasys Networks D-Series - page 186
show snmp counters 7-6 SNMP Configuration usmStatsUnknownEngineIDs = 0 usmStatsWrongDigests = 0 usmStatsDecryptionErrors = 0 Ta b l e 7 ‐ 14 provides an explanation of the command output. T able 7-14 show snmp counters Out put Det ails Output Field What It Displays... snmpInPkts Number of messages delivered to the SNMP ...
-
Enterasys Networks D-Series - page 187
show snmp counters Enterasys D-Series CLI Reference 7-7 snmpOutBadV alues Number of SNMP PDUs generat ed by the SNMP protocol entity with the value of the error-status field as "badV alue." snmpOutGenErrs N umber of SNMP PDUs generated by the SNMP protocol entity with the value of the error-status field as "genErr ." snmpOutGetR ...
-
Enterasys Networks D-Series - page 188
Configuring SNMP Users, Groups, and Communities 7-8 SNMP Configuration Configuring SNMP Users, Group s, and Communities Purpose To review and configure SNMP users, groups, and v1 and v2 communities. These are defined as follows: •U s e r — A person registered in ...
-
Enterasys Networks D-Series - page 189
set snmp user Enterasys D-Series CLI Reference 7-9 If user is not specified, information about all SNMP users will be disp layed. If remote is not specified , user information about the local SNMP engine will be displayed. If not specifie ...
-
Enterasys Networks D-Series - page 190
clear snmp user 7-10 SNMP Configuration Parameters Default s If remote is not specified , the user will be registered for the local SNMP engine. If authenticat ion is not specified, no authentication wi ll be applied. If privacy is not specif ...
-
Enterasys Networks D-Series - page 191
show snmp group Enterasys D-Series CLI Reference 7-11 Example This example shows how to remove the SNMP user named “bill ” : D2(su)->clear snmp user bill show snmp group Use this command to display an SNMP group configuration. An SNMP group is a c ...
-
Enterasys Networks D-Series - page 192
set snmp group 7-12 SNMP Configuration Ta b l e 7 ‐ 16 provides an explanation of the command output. set snmp group Use this command to create an SNMP group. This associates SNMPv3 users to a group that shares common access privileges. Synt ax ...
-
Enterasys Networks D-Series - page 193
show snmp community Enterasys D-Series CLI Reference 7-13 Parameters Default s If not specified, settings related t o all security models will be cleared. Mode Switch command, read ‐ write. Example This example shows how to clear all se ttings assigned to the “pu blic” user within ? ...
-
Enterasys Networks D-Series - page 194
set snmp community 7-14 SNMP Configuration set snmp community Use this command to configure an SNMP community group. Synt ax set snmp community community [ securi tyname securityname ] [ context context ] [ transport transport ] [ volatile | no nvolatile ] Parameters Default s If securityname is not s ...
-
Enterasys Networks D-Series - page 195
Configuring SNMP Access Rights Enterasys D-Series CLI Reference 7-15 Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete the community name “vip.” D2(su)->clear snmp community vip Configuring SNMP Access Right s Purpose To review and configure ? ...
-
Enterasys Networks D-Series - page 196
show snmp access 7-16 SNMP Configuration Default s If groupname is not specified, access information for all SNMP groups will be displayed. If security ‐ mode l is not specified, access information for all SNMP versions wil l be display ed. If ...
-
Enterasys Networks D-Series - page 197
set snmp access Enterasys D-Series CLI Reference 7-17 set snmp access Use this command to set an SNMP access configuration. Synt ax set snmp access groupname security-m odel { v1 | v2c | usm } [ noauthentication | authentication | privacy ] [ context c ontext ] [ exact | prefix ] [ read read ] [ write write ] [ n ...
-
Enterasys Networks D-Series - page 198
clear snmp access 7-18 SNMP Configuration Default s If security lev el is not specif ied, no authentication will be applied. If context is not specified, access will be enabled for the de fault context. If context is specified without a ? ...
-
Enterasys Networks D-Series - page 199
Configuring SNMP MIB Views Enterasys D-Series CLI Reference 7-19 Example This example shows how to clear SNMP ve rs i on 3 access for the “mis ‐ group” via the authentication protocol: D2(su)->clear snmp access mis-group security-model usm authentication Configuring SNMP MIB V ...
-
Enterasys Networks D-Series - page 200
show snmp cont ext 7-20 SNMP Configuration Example This example shows how to display SNMP MIB view configuration information: D2(su)->show snmp view --- SNMP MIB View information --- View Name = All Subtree OID = 1 Subtree mask = View Type = included Storage type = nonVolatile Row status = active View Name ...
-
Enterasys Networks D-Series - page 201
set snmp view Enterasys D-Series CLI Reference 7-21 Mode Switch command, read ‐ only . Usage An SNMP context is a collection of management information that can be accessed by an SNMP agent or entity . The default context allows al l SNMP ag ...
-
Enterasys Networks D-Series - page 202
clear snmp view 7-22 SNMP Configuration clear snmp view Use this command to delete an SNMP v3 MIB view . Synt ax clear snmp view viewname subtree Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete SNMP MIB view “publi ...
-
Enterasys Networks D-Series - page 203
show snmp targetparams Enterasys D-Series CLI Reference 7-23 Parameters Default s If targetPara ms is not specified, entries associated with all target parameters will be displayed. If not specified, entries of all storage types will be display ed. Mode Swit ...
-
Enterasys Networks D-Series - page 204
set snmp targetparams 7-24 SNMP Configuration set snmp t argetp arams Use this command to set SNMP target parameters, a named set of security/authorization criteria used to generate a message to a target. Synt ax set snmp targetparams paramsname user user securi ...
-
Enterasys Networks D-Series - page 205
Configuring SNMP Target Addresses Enterasys D-Series CLI Reference 7-25 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear SNMP target parameters named “v1ExampleParams”: D2(su)->clear snmp targetparams v1Ex ampleParams Configuring SNMP T arg ...
-
Enterasys Networks D-Series - page 206
set snmp targetaddr 7-26 SNMP Configuration If not specified, entries of all storage types will be display ed for a target address. Mode Switch command, read ‐ only . Example This example shows how to display SNMP target address infor mation: D2(su ...
-
Enterasys Networks D-Series - page 207
set snmp targetaddr Enterasys D-Series CLI Reference 7-27 Parameters Default s If not specified, udpport will be set to 162 . If not specified, mask will be set to 255.255.255.255 If not specified, timeout will be set to 1500 . If not specified, ...
-
Enterasys Networks D-Series - page 208
clear snmp targetaddr 7-28 SNMP Configuration clear snmp t argetaddr Use this command to delete an SNMP target address entry . Synt ax clear snmp targetaddr targetAddr Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear SNMP t ...
-
Enterasys Networks D-Series - page 209
show newaddrtrap Enterasys D-Series CLI Reference 7-29 Commands show newaddrtrap Use this comman d to display the global and port ‐ specif ic status of the SNMP new MAC addresses trap function. Synt ax show newaddrtrap [ port-string ] Parameters Default s If port ‐ string ? ...
-
Enterasys Networks D-Series - page 210
set newaddrtrap 7-30 SNMP Configuration ge.1.1 disabled ge.1.2 disabled ge.1.3 disabled ge.1.4 disabled ge.1.5 disabled set newaddrtrap Use this command to enable or disable SNMP trap messaging, globally or on one or mor e ports, when new source MAC addresses ar ...
-
Enterasys Networks D-Series - page 211
set snmp notify Enterasys D-Series CLI Reference 7-31 Parameters Default s If a notify name is not specified, all entries will be displayed. If volatile , no nvolatile , or read ‐ only are not s pecified, all storage type entries will be di splayed ...
-
Enterasys Networks D-Series - page 212
clear snmp notify 7-32 SNMP Configuration command’ s tag parameter can be used to bind each entry to a target address using the set snmp targetaddr command (“ set snmp targetaddr ” on page 7 ‐ 26). Synt ax set snmp notify notify tag tag [ trap | ...
-
Enterasys Networks D-Series - page 213
show snmp notifyfilter Enterasys D-Series CLI Reference 7-33 Example This example shows how to clear the SNMP notify configuration fo r “hello”: D2(su)->clear snmp notify hello show snmp notifyfilter Use this command to display SNMP notify filter information, ide ...
-
Enterasys Networks D-Series - page 214
set snmp notifyfilter 7-34 SNMP Configuration set snmp notifyfilter Use this command to create an SN MP notify filter configuration. This identifies which management targets should NOT receive notification messages, which is useful for fine ‐ tuning ? ...
-
Enterasys Networks D-Series - page 215
show snmp notifypr ofile Enterasys D-Series CLI Reference 7-35 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete the SNMP notify filter “pilot1”: D2(su)->clear snmp notifyfilter pilo t1 subtree 1.3.6 show snmp notifyprofile Use this ...
-
Enterasys Networks D-Series - page 216
set snmp notifyprofile 7-36 SNMP Configuration Row status = active set snmp notifyprofile Use this command to create an SN MP notify filter profile configuration. This associ ates a notificatio n filter , created with the set snmp notifyfilter command (“ s ...
-
Enterasys Networks D-Series - page 217
Creating a Basic SNMP Trap Configuration Enterasys D-Series CLI Reference 7-37 Mode Switch command, read ‐ write. Example This example shows how to delete SNMP notify profile “area51”: D2(su)->clear snmp notifyprofile are a51 targetparam v3ExampleParams Creating a Basic SNMP T rap Configuration T ...
-
Enterasys Networks D-Series - page 218
Creating a Basic SNMP Trap Configuration 7-38 SNMP Configuration Example This example shows how to: • Create an SNMP community called mgmt . • Configure a trap notification called TrapSink . This trap notification will be sent with the community ...
-
Enterasys Networks D-Series - page 219
Enterasys D-Series CLI Reference 8-1 8 Spanning T ree Configuration This chapter describe s the Spanning Tr e e Configuration set of commands and how to use them. Sp anning T ree Configuration Summary Overview: Single, Rapid, and Mult iple S p anning T ree Protocols The IEEE 802.1D ...
-
Enterasys Networks D-Series - page 220
Spanning Tree Configuration Summary 8-2 Spannin g Tr ee Configuration blocking for all traffic flowing between the tw o switches. The blocking links are effectively used only if the forw arding link goes down. MSTP assigns each VLAN present o ...
-
Enterasys Networks D-Series - page 221
Configuring Spanning Tree Bridge Parameters Enterasys D-Series CLI Reference 8-3 learning and the priorit y vect or is wor s e than that already held by the port. If a disputed BPDU is receiv ed, the port is forced to the li stening state. ? ...
-
Enterasys Networks D-Series - page 222
Configuring Spanning Tree Bridge Parameters 8-4 Spannin g Tr ee Configuration Commands For information about... Refer to p age... show spantree stat s 8-5 set spantree 8-7 show spantree version 8-7 set spantree version 8-8 clear spantree version 8-8 show spantree bpdu-forwarding 8-9 set spantree bpdu-forwarding 8-9 show spantree bridgeprioritymode ...
-
Enterasys Networks D-Series - page 223
show spantree stats Enterasys D-Series CLI Reference 8-5 show sp antree st at s Use this command to display Spanning Tr e e information for one or more ports. Synt ax show spantree stats [ port port-string ] [ sid sid ] [ ac tive ] Parameters Default s If port ‐ string is not specif ...
-
Enterasys Networks D-Series - page 224
show spantree stats 8-6 Spannin g Tr ee Configuration Example This example shows how to display the device’ s Spanning Tr e e configuration: D2(su)->show spantree stats Spanning tree status - enabl ed Spanning tree instance - 0 Designated Root MacAddr - 00-e0 -63-9d-c1-c8 Designated Root Priority - 0 Des ...
-
Enterasys Networks D-Series - page 225
set spantree Enterasys D-Series CLI Reference 8-7 set sp antree Use this command to globally enable or disable the Spanning Tr e e protocol on the switch. Synt ax set spantree { disable | enable } Parameters Default s None. Mode Switch command, read ‐ write. Example This example ...
-
Enterasys Networks D-Series - page 226
set spantree version 8-8 Spannin g Tr ee Configuration Mode Switch command, read ‐ only . Example This example shows how to display Spanning Tr e e ve r si o n information for the device: D2(su)->show spantree version Force Version is mstp set sp antree version Use this command ? ...
-
Enterasys Networks D-Series - page 227
show spantree bpdu-forwarding Enterasys D-Series CLI Reference 8-9 Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the Spanning Tr e e version: D2(su)->clear spantree version show sp antree bpdu-forwarding Use this command to disp lay the Sp ...
-
Enterasys Networks D-Series - page 228
show spantree bridgeprioritymode 8-10 Spanning Tree Configura tion Default s By default BP DU forw arding is disabled . Mode Switch command, read ‐ write. Usage The Spanning Tr e e protocol must be disabled ( set spantree disable ) for this feat ure to take ef ...
-
Enterasys Networks D-Series - page 229
clear spantree bridgeprioritymode Enterasys D-Series CLI Reference 8-11 Parameters Default s None Mode Switch command, read ‐ write. Usage The mode affects the range of priority val u e s used to determine whi ch device is selected as the Spanning Tr e e root ...
-
Enterasys Networks D-Series - page 230
show spantree mstilist 8-12 Spanning Tree Configura tion show sp antree mstilist Use this command to display a list of Multiple Spanning Tr e e (MST) instances configured on the device. Synt ax show spantree mstilist Parameters None. Default s None. Mode Switch command, read ? ...
-
Enterasys Networks D-Series - page 231
clear spantree msti Enterasys D-Series CLI Reference 8-13 clear sp antree msti Use this command to delete one or more Multiple Spanning Tr e e instances. Synt ax clear spantree msti [ sid sid ] Parameters Default s If sid is not specifie d, all MST instances will be ...
-
Enterasys Networks D-Series - page 232
set spantree mstmap 8-14 Spanning Tree Configura tion set sp antree mstmap Use this command to map one or more filtering database IDs (FIDs) to a SID. Since VLANs are mapped to FIDs, this essentially maps one or more VLAN IDs to a ...
-
Enterasys Networks D-Series - page 233
show spantree vlanlist Enterasys D-Series CLI Reference 8-15 D2(su)->clear spantree mstmap 2 show sp antree vlanlist Use this command to display the Spanning Tr e e ID(s) assigned to one or more VLANs. Synt ax show spantree vlanlist [ vlan-list ] Parameters Default s If not specifie ...
-
Enterasys Networks D-Series - page 234
set spantree mstcfgid 8-16 Spanning Tree Configura tion MAC address) have no t been changed. For information on using the set spantree mstcf gid command to change these settings, refer to “ set spantree mstcfgid ” on page 8 ‐ 16: D2(su)->sho ...
-
Enterasys Networks D-Series - page 235
set spantree priority Enterasys D-Series CLI Reference 8-17 Example This example shows how to reset the MST configuration identifier elements to default val u e s : D2(su)->clear spantree mstcfgid set sp antree priority Use this command to set the device’ s Spannin ...
-
Enterasys Networks D-Series - page 236
set spantree hello 8-18 Spanning Tree Configura tion Default s If sid is not specifie d, priority will be reset on Spanning Tr e e 0. Mode Switch command, read ‐ write. Example This example shows how to reset the bridge priority on SID 1: D2(su)-&g ...
-
Enterasys Networks D-Series - page 237
set spantree maxage Enterasys D-Series CLI Reference 8-19 Mode Switch command, read ‐ write. Example This example shows how to globally reset the Spanning Tr e e hello time: D2(su)->clear spantree hello set sp antree maxage Use this command to set the bridge maxim ...
-
Enterasys Networks D-Series - page 238
set spantree fwddelay 8-20 Spanning Tree Configura tion Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to globally reset the maximum aging time: D2(su)->clear spantree maxage set sp antree fwddelay Use this command to set the ...
-
Enterasys Networks D-Series - page 239
clear spantree fwddelay Enterasys D-Series CLI Reference 8-21 clear sp antree fwddelay Use this command to reset the Spanning Tr e e forw ard delay to the default setting of 15 seconds. Synt ax clear spantree fwddelay Parameters None. Default s None. Mode Switch command, re ...
-
Enterasys Networks D-Series - page 240
set spantree backuproot 8-22 Spanning Tree Configura tion set sp antree backuproot Use this command to enable or disable the Spanning Tr e e backup root function on the switch. Synt ax set spantree backuproot sid {disable | enable} Parameters Default s None. Mode Switch command, ? ...
-
Enterasys Networks D-Series - page 241
show spantree tctrapsuppress Enterasys D-Series CLI Reference 8-23 Example This example shows how to reset the backup root function to disabled on SID 2: D2(rw)->clear spantree backuproot 2 show sp antree tctrap suppress Use this command to display the status of ...
-
Enterasys Networks D-Series - page 242
clear spantree tctrapsuppress 8-24 Spanning Tree Configura tion Usage By default, RSTP non ‐ edge (bridge) ports that transition to forw arding or blocking cause the switch to issue a topology change trap. When topology change trap suppression ...
-
Enterasys Networks D-Series - page 243
show spantree spanguard Enterasys D-Series CLI Reference 8-25 Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the protocol state migration machine on port 20: D2(su)->set spantree protomigration ge.1.20 show sp antree sp anguard Use this ...
-
Enterasys Networks D-Series - page 244
clear spantree spanguard 8-26 Spanning Tree Configura tion Mode Switch command, read ‐ write. Usage SpanGuard is designed to disable, or lock out an “edge” port when an unexpected BPDU is receiv ed. The port can be configured to be re ‐ e ...
-
Enterasys Networks D-Series - page 245
show spantree spanguardtimeout Enterasys D-Series CLI Reference 8-27 show sp antree spanguard timeout Use this command to display the Spanning Tr e e SpanGuard timeout setting. Synt ax show spantree spanguardtimeout Parameters None. Default s None. Mode Switch command, read ‐ only . Example This ...
-
Enterasys Networks D-Series - page 246
clear spantree spanguardtimeout 8-28 Spanning Tree Configura tion clear sp antree spanguard timeout Use this command to reset the Spanning Tr e e SpanGuard timeout to the default val ue of 300 seconds. Synt ax clear spantree spanguardtimeout Parameters None. Default s None. Mode Switch ...
-
Enterasys Networks D-Series - page 247
clear / set spantree spanguardlock Enterasys D-Series CLI Reference 8-29 clear / set sp antree spanguardlock Use either of these commands to unlock one or more ports locked by the Spanning Tr e e SpanGuard function. When SpanGuard is enabled, it locks po ...
-
Enterasys Networks D-Series - page 248
set spantree spanguardtrapenable 8-30 Spanning Tree Configura tion set sp antree sp anguard trapenable Use this command to enable or disable the sending of an SNMP trap message when SpanGuard has locked a port. Synt ax set spantree spanguardtrapenable { di sable | enable } ...
-
Enterasys Networks D-Series - page 249
show spantree legacypathcost Enterasys D-Series CLI Reference 8-31 show sp antree legacyp athcost Use this command to display the default Spanning Tr e e path cost setting. Synt ax show spantree legacypathcost Parameters None. Default s None. Mode Switch command, read ‐ only . Example This e ...
-
Enterasys Networks D-Series - page 250
clear spantree legacypathcost 8-32 Spanning Tree Configura tion clear sp antree legacyp athcost Use this command to set the Spanning Tr e e default val u e for legacy path cost to 802.1t val u e s . Synt ax clear spantree legacypathcost Default s None. Mode Switch command, read ...
-
Enterasys Networks D-Series - page 251
Configuring Spanning Tree Port Parameters Enterasys D-Series CLI Reference 8-33 Configuring S p anning T ree Port Parameters Purpose To display and set Spanning Tr e e port parameters. Commands set sp antree port admin Use this command to disable or enable the Spanning Tr e e algor ...
-
Enterasys Networks D-Series - page 252
clear spantree portadmin 8-34 Spanning Tree Configura tion Example This example shows how to disable Spanning Tr e e on fe.1.5: D2(rw)->set spantree portadmin fe .1.5 disable clear sp antree port admin Use this command to reset the default Spanning Tr e e admin status ? ...
-
Enterasys Networks D-Series - page 253
show spantree portpr i Enterasys D-Series CLI Reference 8-35 Example This example shows how to display port admin status for ge .1.1: D2(ro)->show spantree portadmin port ge.1.1 Port ge.1.1 has portadmin set to ena bled show sp antree portpri Use this command to show the Spanning ? ...
-
Enterasys Networks D-Series - page 254
clear spantree portpri 8-36 Spanning Tree Configura tion Parameters Default s If sid is not specifie d, port priority will be set for Spanning Tr e e 0. Mode Switch command, read ‐ write. Example This example shows how to set the priority of fe.1.3 ...
-
Enterasys Networks D-Series - page 255
show spantree adminpathcost Enterasys D-Series CLI Reference 8-37 show sp antree adminpathcost Use this command to display the admin path cost for a port on one or more Spanning Tr e e s . Synt ax show spantree adminpathcost [ port po rt-string ] [ sid sid ] Parameters Default ...
-
Enterasys Networks D-Series - page 256
clear spantree adminpathcost 8-38 Spanning Tree Configura tion Example This example shows how to set the admin path cost to 200 for fe.3 .2 on SID 1: D2(su)->set spantree adminpathcost fe .3.2 200 si d 1 clear sp antree adminp athcost Use this command to reset th ...
-
Enterasys Networks D-Series - page 257
set spantree adminedge Enterasys D-Series CLI Reference 8-39 Mode Switch command, read ‐ only . Example This example shows how to display the edge port status for fe.3.2: D2(su)->show spantree adminedge port fe .3.2 Port fe .3.2 has a Port Admin Edge of Edg e-Port set sp antree adminedge Use ...
-
Enterasys Networks D-Series - page 258
clear spantree adminedge 8-40 Spanning Tree Configura tion Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset fe.1.11 as a non ‐ edge por t: D2(su)->clear spantree adminedge fe .1.11 port ‐ string Specifies port(s) on which to ...
-
Enterasys Networks D-Series - page 259
Configuring Spannin g Tree Loop Protect Parameters Enterasys D-Series CLI Reference 8-41 Configuring S p anning T ree Loop Protect Parameters Purpose To display and set Spanning Tr e e Loop Protect parameters, including the global parameters of Loop Protect threshold, window , ...
-
Enterasys Networks D-Series - page 260
set spantree lp 8-42 Spanning Tree Configura tion set sp antree lp Use this command to enable or disable the Loop Protect feature per port and optionally , per SID. The Loop Protect feature is disabled by default. See “Loop Protect” o ...
-
Enterasys Networks D-Series - page 261
clear spantree lp Enterasys D-Series CLI Reference 8-43 Default s If no port ‐ string is specified, status is displayed for all ports. If no SID is specified, SID 0 is assumed. Mode Switch command, read ‐ only . Example This example shows how to ...
-
Enterasys Networks D-Series - page 262
clear spantree lplock 8-44 Spanning Tree Configura tion Parameters Default s If no port ‐ string is specified, status is displayed for all ports. If no SID is specified, SID 0 is assumed. Mode Switch command, read ‐ only . Example This example shows ...
-
Enterasys Networks D-Series - page 263
set spantree lpcapablepartner Enterasys D-Series CLI Reference 8-45 set sp antree lpcapablep artner Use this command to specify per port whether the link partner is Loop Protect capable. Se e “Loop Protect” on page 2. for more information. Synt ax set sp ...
-
Enterasys Networks D-Series - page 264
clear spantree lpcapablepartner 8-46 Spanning Tree Configura tion Default s If no port ‐ string is specified, Loop Protect capability for link partners is display ed for all ports. Mode Switch command, read ‐ only . Example This example shows how to display ...
-
Enterasys Networks D-Series - page 265
show spantree lpthreshold Enterasys D-Series CLI Reference 8-47 Default s None. The default ev ent threshold is 3. Mode Switch command, read ‐ write. Usage The LoopPr otect event threshold is a global intege r var ia b l e that provides protection in the case ...
-
Enterasys Networks D-Series - page 266
set spantree lpwindow 8-48 Spanning Tree Configura tion Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the Loop Protect ev ent threshold to the default of 3: D2(rw)->clear spantree lpthreshold set sp antree lpwindow Use this ...
-
Enterasys Networks D-Series - page 267
clear spantree lpwindow Enterasys D-Series CLI Reference 8-49 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the current Loop Protect window val u e : D2(rw)->show spantree lpwindow The Loop Protect event window is set to 120 ...
-
Enterasys Networks D-Series - page 268
show spantree lptrapenable 8-50 Spanning Tree Configura tion Default s None. Mode Switch command, read ‐ write. Usage Loop Protect traps are sent when a Loop Protect ev ent occurs, that is, when a port goes to listening due to not receiving BPD ...
-
Enterasys Networks D-Series - page 269
set spantree disputedbpduthreshold Enterasys D-Series CLI Reference 8-51 Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the Loop Protect ev ent notification state to the default of disabled. D2(rw)->clear spantree lptrapenabl ...
-
Enterasys Networks D-Series - page 270
show spantree disputedbpduthreshold 8-52 Spanning Tree Configura tion Example This example shows how to set the disputed BPDU threshold va l u e to 5: D2(rw)->set spantree disputedbpduthr eshold 5 show sp antree disputedbp duthreshold Use this command to display the current ...
-
Enterasys Networks D-Series - page 271
show spantree nonforwardingreason Enterasys D-Series CLI Reference 8-53 show sp antree nonforwardingreason Use this command to display the reason for placing a port in a non ‐ forw arding state du e to an exceptional condition. Synt ax show spantree nonforwardingreaso ...
-
Enterasys Networks D-Series - page 272
show spantree nonforwardingreason 8-54 Spanning Tree Configura tion ...
-
Enterasys Networks D-Series - page 273
Enterasys D-Series CLI Reference 9-1 9 802.1Q VLAN Configuration This chapter descri bes the D ‐ Series system’ s capabilities to implement 802.1Q virtual LANs (VLANs). VLAN Configuration Summary Vi rt u a l LANs allow the netw ork administrator to partition net ...
-
Enterasys Networks D-Series - page 274
Viewing VLANs 9-2 802.1Q VLAN Configuration If the D ‐ Series device is to be configured for multiple VLANs, it may be desirable to configure a management ‐ only VLAN. This allows a station connected to th e management VLAN to ...
-
Enterasys Networks D-Series - page 275
show vlan Enterasys D-Series CLI Reference 9-3 Command show vlan Use this command to display all information related to one or more VLANs. Synt ax show vlan [ static ] [ vlan-list ] [ portinfo [ vlan vlan-list | vlan-name ] [ port port- string ]] Parameters Default s If no options ar e ...
-
Enterasys Networks D-Series - page 276
show vlan 9-4 802.1Q VLAN Configuration T able 9-25 show vlan Output Det ails Output Fi eld What It Disp la y s. .. VLAN VLAN ID. NAME Name assigned to the VLAN. S tatus Whether it is enabled or disabled . VLAN T ype Whether i t is perman ent (static) or dynamic . Egress Ports Ports configured to transmit frames for this VLAN. Forbidden Egress Port ...
-
Enterasys Networks D-Series - page 277
Creating and Naming Static VLANs Enterasys D-Series CLI Reference 9-5 Creating and Naming St atic VLANs Purpose To create a new static VLAN, or to enable or disable existi ng VLAN(s). Commands set vlan Use this command to create a new static IEEE 802.1 Q VLAN, ? ...
-
Enterasys Networks D-Series - page 278
set vlan name 9-6 802.1Q VLAN Configuration set vlan name Use this command to set or change the ASCII name for a new or existing VLAN. Synt ax set vlan name vlan-list vlan-name Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows ? ...
-
Enterasys Networks D-Series - page 279
clear vlan name Enterasys D-Series CLI Reference 9-7 clear vlan name Use this command to remove the name of a VLAN from the VLAN list. Synt ax clear vlan name vlan-list Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to cle ...
-
Enterasys Networks D-Series - page 280
Assigning Port VLAN IDs ( PVIDs) and Ingress Filtering 9-8 802.1Q VLAN Configuration Assigning Port VLAN IDs (PVIDs) and Ingress Filtering Purpose To assign default VLAN IDs to untagged frames on one or more ports, to configure VLAN ingress filtering and constraints, an ...
-
Enterasys Networks D-Series - page 281
set port vlan Enterasys D-Series CLI Reference 9-9 fe .2.5 is set to 1 fe .2.6 is set to 1 set port vlan Use this command to configure the PVID (port VLAN identifier) for one or more ports. Synt ax set port vlan port-string pvid [ modi fy-egress | no-modify-egress ] Parameters Default s No ...
-
Enterasys Networks D-Series - page 282
show port ingress filter 9-10 802.1Q VLAN Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset ports fe.1.3 throu gh 11 to a VLAN ID of 1 (Host VLAN): D2(su)->clear port vlan fe .1.3-11 show port ingress filter ...
-
Enterasys Networks D-Series - page 283
set port ingress filter Enterasys D-Series CLI Reference 9 -11 set port ingress filter Use this command to discard all frames received with a VLAN ID that don’ t match the port’ s VLAN egress list. Synt ax set port ingress-filter port-string {disable | enable} Param ...
-
Enterasys Networks D-Series - page 284
set port discard 9-12 802.1Q VLAN Configuration Mode Switch command, read ‐ only . Example This example shows how to display the frame discard mode for fe. 2.7. In this case, the port has been set to discar d all tagged frames: D2(su)->show ...
-
Enterasys Networks D-Series - page 285
Configuring the VLAN Egress List Enterasys D-Series CLI Reference 9 -13 Configuring the VLAN Egress List Purpose To assign or remove ports on the egress list of a particular VLAN. This determines whi ch ports on the switch will be eligible to transmit ? ...
-
Enterasys Networks D-Series - page 286
set vlan forbidden 9-14 802.1Q VLAN Configuration Mode Switch command, read ‐ write. Example This example shows you how to show VLAN egr ess information for fe.1.1 through 3. In this case, all three ports are allow ed to transmit VLAN 1 ...
-
Enterasys Networks D-Series - page 287
set vlan egress Enterasys D-Series CLI Reference 9 -15 set vlan egress Use this command to add ports to the VLAN egress list for the device, or to prevent one or mor e ports from participating in a VLAN. Th is determines which ports ? ...
-
Enterasys Networks D-Series - page 288
show vlan dynamicegress 9-16 802.1Q VLAN Configuration Synt ax clear vlan egress vlan-list port-string [ for bidden ] Parameters Default s If forbidden is not specified, tagged and untagged settings will be cleared. Mode Switch command, read ‐ write. Examples This example shows how ? ...
-
Enterasys Networks D-Series - page 289
set vlan dynamicegress Enterasys D-Series CLI Reference 9 -17 Example This example shows how to display the dynamic egress status for VLANs 50 ‐ 55: D2(rw)->show vlan dynamicegress 50-5 5 VLAN 50 is disabled VLAN 51 is disabled VLAN 52 is disabled VLAN 53 is enabled VLAN 54 is enabled VLAN 55 is ...
-
Enterasys Networks D-Series - page 290
Setting the Host VLAN 9-18 802.1Q VLAN Configuration Setting the Host VLAN Purpose To configure a host VLAN that only select devices are allow ed to access. This se cures the host port for management ‐ only tasks. Commands show host vlan Use this command ? ...
-
Enterasys Networks D-Series - page 291
clear host vlan Enterasys D-Series CLI Reference 9 -19 Parameters Default s None. Mode Switch command, read ‐ write. Usage The host VLAN should be a secure VLAN whe re only designated users ar e allowed access. Fo r example, a host VLAN could be specif ...
-
Enterasys Networks D-Series - page 292
Enabling/Disabling GVRP (GARP VLAN Registration Protocol) 9-20 802.1Q VLAN Configuration Enabling/Disabling GVRP (GARP VLAN Registration Protocol) About GARP VLAN Registration Prot ocol (GVRP) The following sections describe the device operation when its ports are operating under the Generic ? ...
-
Enterasys Networks D-Series - page 293
Enabling/Disabling GVRP (GARP VLAN Registration Protocol) Enterasys D-Series CLI Reference 9 -21 Figure 9-1 Example of VLAN Propagation via GVRP Purpose To dynamically create VLANs acr oss a switched netw ork. The GVRP command set is used to display GVRP conf iguration informat ...
-
Enterasys Networks D-Series - page 294
show gvrp 9-22 802.1Q VLAN Configuration show gvrp Use this command to display GVRP configuration information. Synt ax show gvrp [ port-string ] Parameters Default s If port ‐ string is not specif ied, GVRP configuration information will be displayed for all ports ...
-
Enterasys Networks D-Series - page 295
set gvrp Enterasys D-Series CLI Reference 9 -23 Example This example shows how to display GARP timer information on ports 1 through 10 in slot 1: D2(su)->show garp timer fe .1.1-10 Port based GARP Configuration: (Tim er units are centiseconds) Port Number Join Leave Leaveall ------- ...
-
Enterasys Networks D-Series - page 296
clear gvrp 9-24 802.1Q VLAN Configuration Mode Switch command, read ‐ write. Examples This example shows how to enable GVRP globally on the device: D2(su)->set gvrp enable This example shows how to disable GVRP globally on the device: D2(su)->set gvrp di ...
-
Enterasys Networks D-Series - page 297
set garp timer Enterasys D-Series CLI Reference 9 -25 Default s None. Mode Switch command, read ‐ write. Usage The setting of these timers is critical and should only be changed by personnel familiar with the 802.1Q standards documentation, which is no ...
-
Enterasys Networks D-Series - page 298
set garp timer 9-26 802.1Q VLAN Configuration ...
-
Enterasys Networks D-Series - page 299
Enterasys D-Series CLI Reference 10-1 10 Dif ferentiated Services Configuration This chapter descri bes the Differentiated Services (Diffserv) set of commands and how to use them. D ‐ Series devi ces support Diffserv po licy ‐ base d provisioning of netw ork ...
-
Enterasys Networks D-Series - page 300
Globally Enabling or Disabling Diffserv 10-2 Differentiated Services Configu ration Globally Enabling or Disabling Diffserv Purpose To globally enable or disable Diffserv on the device. Command set diffserv adminmode Use this command to globally enable or disable Diffserv on th ...
-
Enterasys Networks D-Series - page 301
Creating Diffserv Classes and Matching Conditions Enterasys D-Series CLI Reference 10-3 Creating Diffserv Classes and Matching Conditions Purpose To review , create, and configure Diffser v classes and matching conditions. Commands show diffserv info Use this command to display general Dif ...
-
Enterasys Networks D-Series - page 302
show diffserv class 10-4 Differentiated Services Configu ration show diffserv class Use this command to display information about Diffserv classes. Synt ax show diffserv class { summary | detai led classname } Parameters Default s None. Mode Switch command, read ‐ only . Example This example shows ? ...
-
Enterasys Networks D-Series - page 303
set diffserv class delete Enterasys D-Series CLI Reference 10-5 Example This example shows how to create a Diffserv class called “admin”: D2(rw)->set diffserv class create al l admin set diffserv class delete Use this command to delete a Diffserv class and remove ...
-
Enterasys Networks D-Series - page 304
set diffserv class match 10-6 Differentiated Services Configu ration Parameters every classname Matches all packets to a specific class. dstmac | scrmac classname macaddr macmask Matches to a specific class based on dest ination or source MAC address. dstip ...
-
Enterasys Networks D-Series - page 305
set diffserv class match Enterasys D-Series CLI Reference 10-7 Default s None. Mode Switch command, read ‐ write. Usage Any policy that is applied must be com posed of rules that come from only one of the foll owing four groups. •L a y e r 3: – Destination ...
-
Enterasys Networks D-Series - page 306
set diffserv class rename 10-8 Differentiated Services Configu ration – Destination IP addre ss ( dstip ) –V L A N ID ( vlan) Yo u cannot create and add a class to a policy before adding any rules (match conditions) to the class. Once a class ...
-
Enterasys Networks D-Series - page 307
Configuring Diffserv Poli cies and Assigning Classes Enterasys D-Series CLI Reference 10-9 Example This example shows how to rename the Diffserv “a dmin” class to “system”: D2(rw)->set diffserv class rename ad min system Configuring Diffserv Policies and Assigning Classes Purpose To review ...
-
Enterasys Networks D-Series - page 308
set diffserv policy create 10-10 Differentiated Services Config uration Example This example shows how to display a summary of Diffserv policy information. In this case, there is one policy named “admin”, to which members of the “admin” ? ...
-
Enterasys Networks D-Series - page 309
set diffserv policy class Enterasys D-Series CLI Reference 10-11 Mode Switch command, read ‐ write. Usage In order to delete a policy you must first remove the service port(s) assigned to the po licy using the set diffserv service remove command ? ...
-
Enterasys Networks D-Series - page 310
set diffserv policy police style simple 10-12 Differentiated Services Config uration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to mark packets matching the “admin” policy in the “system” class for DSCP expedited ? ...
-
Enterasys Networks D-Series - page 311
set diffserv policy police action conform Enterasys D-Series CLI Reference 10-13 set diffserv policy police action conform Use this command to configure traffic policing actions for pac kets that conform to associated Diffserv classifications. Synt ax set diffserv policy police action co n ...
-
Enterasys Networks D-Series - page 312
set diffserv policy rename 10-14 Differentiated Services Config uration Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the policying action to dr op for packets not conforming to the Diffserv policy “admin,” class ...
-
Enterasys Networks D-Series - page 313
show diffserv service info Enterasys D-Series CLI Reference 10-15 Commands show diffserv service info Use this command to display information about Diffserv service ports. Synt ax show diffserv service info { summary | detailed port-string } { in } Parameters Default s None. Mode Switch command, read ‐ ...
-
Enterasys Networks D-Series - page 314
set diffserv service 10-16 Differentiated Services Config uration Parameters Default s None. Mode Switch command, read ‐ only . Example This example shows how to display a detailed incoming traffic statistics about servic e port ge.1.1: D2(rw)->show diffserv service stats deta ...
-
Enterasys Networks D-Series - page 315
DiffServ Configuration Examples Enterasys D-Series CLI Reference 10-17 DiffServ Configuration Examples Ty p i c a l l y , yo u wo u ld use the Diffserv command set to complete configuration tasks in the following order: 1. Enable DiffServ . 2. Create a Class. 3. Create one ...
-
Enterasys Networks D-Series - page 316
DiffServ Configuration Examples 10-18 Differentiated Services Config uration ...
-
Enterasys Networks D-Series - page 317
Enterasys D-Series CLI Reference 11-1 11 Policy Classification Configuration This chapter descri bes the Po l i c y Classification set of commands and how to use them. Policy Classification Configuration Summary D ‐ Series devi ces support policy profile ‐ based provisionin ...
-
Enterasys Networks D-Series - page 318
show policy profile 11-2 Policy Classifica tion Configuration Commands show policy profile Use this command to display policy profil e information. Synt ax show policy profile { all | profile-i ndex [ consecutive-pids ] [ -verbose ]} Parameters Default s If optional parameters are not specified, ? ...
-
Enterasys Networks D-Series - page 319
set policy profile Enterasys D-Series CLI Reference 11-3 :IPDest(13) ,IPFrag(14),UDPSrcPort(15), :UDPDestPor t(16),TCPSrcPort(17),TCPDestPort(18), :ICMPType(1 9),Unknown(20),IPTOS(21), :IPProto(22 ),Unknown(23),Unknown(24), :Ether(25), Unknown(26),VLANTag(27), :Unknown(28 ),Unknown(29),Unknown(30), :port(31) Admin Profile Usage : none Oper Profile ...
-
Enterasys Networks D-Series - page 320
clear policy profile 11-4 Policy Classifica tion Configuration Parameters Default s If optional parameters are not specified, none will be applied. Mode Switch command, read ‐ write. Example This example shows how to create a policy profile 1 named “netadmin ...
-
Enterasys Networks D-Series - page 321
clear policy profile Enterasys D-Series CLI Reference 11-5 Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete policy profile 8: D2(su)->clear policy profile 8 ...
-
Enterasys Networks D-Series - page 322
Configuring Clas sification Rules 11-6 Policy Classifica tion Configuration Configuring Classification Rules Purpose To review , create, assign, and unassign classification rules to policy profiles. This maps user profiles to protocol ‐ based frame filt ering policies. Co ...
-
Enterasys Networks D-Series - page 323
show policy rule Enterasys D-Series CLI Reference 11-7 Default s If verbose is not s pecified, summary informat ion will be display ed. Mode Switch command, read ‐ only . Example This example shows how to display policy classification information for Ethernet ...
-
Enterasys Networks D-Series - page 324
show policy capability 11-8 Policy Classifica tion Configuration |admin|Port |ge.1.1 |16|ge.1.1 | A|NV| | 1|?| |admin|Port |ge.1.2 |16|ge.1.2 | A|NV| | 1|?| |admin|Port |ge.1.3 |16|ge.1.3 | A|NV| | 1|?| |admin|Port |ge.1.4 |16|ge.1.4 | A|NV| | 1|?| |admin|Port |ge.1.5 |16|ge.1.5 | A|NV| | 1|?| |admin|Port |ge.1.6 |16|ge.1.6 | A|NV| | 1|?| |admin|Po ...
-
Enterasys Networks D-Series - page 325
show policy capability Enterasys D-Series CLI Reference 11-9 Mode Switch command, read ‐ only . Usage Use this command to display de tailed policy classification capabilities supported by you r D ‐ Series device. The output of this command shows a table ...
-
Enterasys Networks D-Series - page 326
set policy ru le 11-10 Policy Classification Configur ation |Ether II packet type | | | X | X | X | X | | | | |LLC DSAP/SSAP/CTRL | | | | | | | | | | |VLAN tag | | | | | | | | | | |Replace tci | | | | | | | | | | |Port string | X | X | X | X | X | X | | | | ==================================== ========================= set policy rule Use this ...
-
Enterasys Networks D-Series - page 327
set policy rule Enterasys D-Series CLI Reference 11-11 Default s None. Mode Switch command, read ‐ write. Usage Ta b l e 1 1 ‐ 30 provides the set policy rule data val ue s that can be entered for a particular classification type, and the mask bits that ...
-
Enterasys Networks D-Series - page 328
clear policy rule 11-12 Policy Classification Configur ation Examples This example shows how to use Ta b l e 1 1 ‐ 30 to assign a rule to policy profile 3 that will filter Ethernet II Ty p e 1526 frames to VLAN 7: D2(su)->set policy rule 3 ether ...
-
Enterasys Networks D-Series - page 329
clear policy rule Enterasys D-Series CLI Reference 11-13 Parameters The following parameters apply to deleting an admin rule. The following parameters apply to deleting a classification rule. Default s When applicable, data and mask must be specified for ...
-
Enterasys Networks D-Series - page 330
clear policy all-rules 11-14 Policy Classification Configur ation clear policy all-rules Use this command to remove all policy classification rules . Synt ax clear policy all-rules Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to remov ...
-
Enterasys Networks D-Series - page 331
Assigning Ports to Policy Profiles Enterasys D-Series CLI Reference 11-15 Assigning Port s to Policy Profiles Purpose To assign and unassign ports to policy profiles. Commands set policy port Use this command to assign ports to a policy profile. Synt ax set policy port port-string prof ...
-
Enterasys Networks D-Series - page 332
clear policy port 11-16 Policy Classification Configur ation clear policy port Use this command to remove a poli cy profile from one or more po rts. Synt ax clear policy port port-string profil e-index Parameters Default s None. Mode Switch command, read ‐ write. Example This example ...
-
Enterasys Networks D-Series - page 333
Configuring Policy Class of Service (CoS) Enterasys D-Series CLI Reference 11-17 Configuring Policy Class of Service (CoS) The D ‐ Series supports Class of Service (CoS), wh ich allows you to assign mission ‐ cr itical data to a higher priority through the device ? ...
-
Enterasys Networks D-Series - page 334
Configuring Policy Clas s of Service (CoS) 11-18 Policy Classification Configur ation ------------------------------------ ---------------------------------- Port Group Name :Users Port Group :1 Port Type :0 Assigned Ports : fe ge.1.1-46 ------------------------------------ ---------------------------------- Port Group Name :Uplink Port Group :2 Po ...
-
Enterasys Networks D-Series - page 335
set cos state Enterasys D-Series CLI Reference 11-19 4. In the CoS settings table, configure a CoS setting for CoS index 1, which has a priority of 0. We enter the IRL refere nce, created in the previous step. D2(su)->set cos settings ...
-
Enterasys Networks D-Series - page 336
show cos state 11-20 Policy Classification Configur ation Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable Class of Service: D2(rw)->set cos state enable show cos st ate Use this command to display the Class of Serv ...
-
Enterasys Networks D-Series - page 337
set cos settings Enterasys D-Series CLI Reference 11-21 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS state back to its default setting of disabled: D2(su)->clear cos state set cos settings Use this command t ...
-
Enterasys Networks D-Series - page 338
clear cos settin g s 11-22 Policy Classification Configur ation •T o S This va l u e can be set per class of service, but is not required. When a frame is assigned to a class of service for which this va l u e is configured, the ...
-
Enterasys Networks D-Series - page 339
set cos port-config Enterasys D-Series CLI Reference 11-23 Parameters Default s If not specified, all CoS entries will be display ed. Mode Switch command, read ‐ only . Example This example shows how to show all CoS settings: D2(su)->show cos settings CoS Index Priority To ...
-
Enterasys Networks D-Series - page 340
show cos port-config 11-24 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Usage CoS IRL port groups are identified by group number and the type of ports in the group, in the form of group#.port ‐ type . The ? ...
-
Enterasys Networks D-Series - page 341
clear cos port-config Enterasys D-Series CLI Reference 11-25 Default s The show cos port ‐ config command by itsel f will show all Po r t Groups. Mode Switch command, read ‐ only . Example This example shows all inbound rate limiting port groups. Note th ...
-
Enterasys Networks D-Series - page 342
set cos port-resource 11-26 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Usage The default port group 0.0 cannot be deleted. Example This example deletes all Por t Groups except for the Default group 0.0: D2(su)->clear cos ...
-
Enterasys Networks D-Series - page 343
show cos port-resource Enterasys D-Series CLI Reference 11-27 Usage CoS port resources are where actual physical rate limiters are configured. Resources map directly to the number of rate limiters supported by the port type. (P ort type 0 ...
-
Enterasys Networks D-Series - page 344
clear cos port-resource 11-28 Policy Classification Configur ation Group Index Resource Type Unit Ra te Rate Limit Type Action ----------- -------- ---- ---- ----- ----- --------------- ------ 2.0 1 irl kbps 10000 drop none clear cos port-resource Use this command to set the inbound rate limit in Kbps. Synt a ...
-
Enterasys Networks D-Series - page 345
show cos referenc e Enterasys D-Series CLI Reference 11-29 Parameters Default s None. Mode Switch command, read ‐ write. Usage The CoS refere nce table maps the user ‐ defined IRL references found in the CoS settings table (see “ set cos settings ” on pa ...
-
Enterasys Networks D-Series - page 346
clear cos reference 11-30 Policy Classification Configur ation Parameters Default s If irl is not specified, all CoS reference information is display ed. If a specific port group is not specified, information for all port groups is display ed. Mode Switc ...
-
Enterasys Networks D-Series - page 347
show cos unit Enterasys D-Series CLI Reference 11-31 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS inbound rate limiting reference configuration for all groups: D2(su)->clear cos reference irl all show cos unit Use this ...
-
Enterasys Networks D-Series - page 348
show cos port-type 11-32 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS configuratio n for all entries except entries 0 ‐ 7: D2(su)->clear cos all-entries show cos port-type Use this ...
-
Enterasys Networks D-Series - page 349
Enterasys D-Series CLI Reference 12-1 12 Port Priority and Rate Limiting Configuration This chapter describes the Po r t Priority and Rate Lim iting set of commands and how to use them. Port Priority Configuration Summary The D ‐ Series device supports Class o ...
-
Enterasys Networks D-Series - page 350
show port priority 12-2 Port Priority and Rate Limiting Configura tion •D i s p l a y the current traffic class m apping ‐ to ‐ priority of each port. •S e t each port to transmit frames according to 802.1D (802.1p) priority set in the frame header . ...
-
Enterasys Networks D-Series - page 351
clear port priority Enterasys D-Series CLI Reference 12-3 Synt ax set port priority port-string priori ty Parameters Default s None. Mode Switch command, read ‐ write. Usage The set port priority command will not change the 802.1p priority tag on tagged traffic with a def ...
-
Enterasys Networks D-Series - page 352
Configuring Priority to Transmit Queue Mapping 12-4 Port Priority and Rate Limiting Configura tion Example This example shows how to reset fe.1.11 to the default priority: D2(rw)->clear port priority fe .1 .11 Configuring Priority to T ransmit Queue Mapping Purpose To perform the following: • ...
-
Enterasys Networks D-Series - page 353
set port priority-queue Enterasys D-Series CLI Reference 12-5 Example This example shows how to dis play priority queue information for ge .1.1. In this case, frames with a priority of 0 are associated wi th transmit queue 1; frames with ...
-
Enterasys Networks D-Series - page 354
clear port priority-queue 12-6 Port Priority and Rate Limiting Configura tion clear port priority-queue Use this command to reset port priority queue setting s back to defaults for one or more ports. Synt ax clear port priority-queue port-strin g Parameters Default s None. Mode Switch ...
-
Enterasys Networks D-Series - page 355
set port txq Enterasys D-Series CLI Reference 12-7 Parameters Default s If the port ‐ string is not specified, the QoS setting of all physical ports will be displayed. Mode Switch command, read ‐ only . Example This example shows how to display the c ...
-
Enterasys Networks D-Series - page 356
clear port txq 12-8 Port Priority and Rate Limiting Configura tion Usage Queues can be set for strict priority (SP) or weig h te d round ‐ robin (WRR). If set for WRR mode, wei gh ts may be assigned to those queues with this command. We i g ...
-
Enterasys Networks D-Series - page 357
clear port txq Enterasys D-Series CLI Reference 12-9 Example This example shows how to clear transmit queue va l u e s on ge .1.1: D2(su)->clear port txq ge.1.1 ...
-
Enterasys Networks D-Series - page 358
Configuring Port Traffic Rate Limiting 12-10 Port Priority and Ra te Limiting Configuration Configuring Port T raffic Rate Limiting Purpose To limit the rate of inbound traffi c on the D ‐ Series device on a per port/priority basis. The allow able range for the ra ...
-
Enterasys Networks D-Series - page 359
show port ratelimit Enterasys D-Series CLI Reference 12-11 Example This example shows how to display the current rate li miting information for fe.2.1: D2(su)-> show port ratelimit fe.2.1 Global Ratelimiting status is disabl ed. Port Threshold Priority Number Index (kB/s) Ac tion Direction List Sta ...
-
Enterasys Networks D-Series - page 360
set port ratelimit 12-12 Port Priority and Ra te Limiting Configuration set port ratelimit Use this command to configure the traffic rate limiting status and threshold (in kilobytes per second) for one or more ports. Synt ax set port ratelimit { disable | enable } | por ...
-
Enterasys Networks D-Series - page 361
clear port ratelimit Enterasys D-Series CLI Reference 12-13 clear port ratelimit Use this command to clear rate limiting parameters for one or more ports. Synt ax clear port ratelimit port-string [ in dex ] Parameters Default s If not specified, all index entries will be ? ...
-
Enterasys Networks D-Series - page 362
clear port ratelimit 12-14 Port Priority and Ra te Limiting Configuration ...
-
Enterasys Networks D-Series - page 363
Enterasys D-Series CLI Reference 13-1 13 IGMP Configuration This chapter descri bes the IGMP Configuration set of commands and how to use them. IGMP Overview About IP Multicast Group Management The Internet Group Management Protocol (IGMP) runs between hosts ...
-
Enterasys Networks D-Series - page 364
Configuring IGMP at Layer 2 13-2 IGMP Config uration multicast switch/router it passes through to ensure that traffic is only passed to the hosts that subscribed to this service. Configuring IGMP at Layer 2 Purpose To configure IGMP snooping from the ...
-
Enterasys Networks D-Series - page 365
set igmpsnooping adminmode Enterasys D-Series CLI Reference 13-3 the system, refer to “ set igmpsnooping adminmode ” on page 13 ‐ 3. For information on enabling IGMP on one or more ports , refer to “ set igmpsnooping interfacemode ” on page ...
-
Enterasys Networks D-Series - page 366
set igmpsnooping groupmembershipinterval 13-4 IGMP Config uration Parameters Default s None. Mode Switch command, read ‐ write. Usage In order for IGMP snooping to be enabled on one or all ports, it must be globally enabled on the device using the ...
-
Enterasys Networks D-Series - page 367
set igmpsnooping maxresponse Enterasys D-Series CLI Reference 13-5 Example This example shows how to set the IGMP group member ship interv al to 250 seconds: D2(su)->set igmpsnooping groupmember shipinterval 250 set igmp snooping maxresponse Use this command to configure the ...
-
Enterasys Networks D-Series - page 368
set igmpsnooping add-static 13-6 IGMP Config uration Default s None. Mode Switch command, read ‐ write. Usage This timer is for expiring the switch from the multicast database. If the timer expires, and the only address left is the multicast switch ...
-
Enterasys Networks D-Series - page 369
set igmpsnooping remove-static Enterasys D-Series CLI Reference 13-7 set igmp snooping remove-st atic This command deletes a static IGMP entry or removes one or mor e new ports from an existing entry . Synt ax set igmpsnooping remove-static group vlan-list [ modify ] [ port-string ...
-
Enterasys Networks D-Series - page 370
show igmpsnooping mfdb 13-8 IGMP Config uration Example This example displays the static IGMP ports for VLAN 20. D2(su)->show igmpsnooping static 20 ------------------------------------ ----------------------------------------- --- Vlan Id = 20 Static Multicast Group Addr ess = 233.11.22.33 Type = IGMP IGMP Po ...
-
Enterasys Networks D-Series - page 371
clear igmpsnooping Enterasys D-Series CLI Reference 13-9 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear all IGMP snooping entries: D2(su)->clear igmpsnooping Are you sure you want to clear all I GMP snooping entries? (y/n) y IGMP Snooping Entries Cleared. ...
-
Enterasys Networks D-Series - page 372
clear igmpsnooping 13-10 IGMP Configuration ...
-
Enterasys Networks D-Series - page 373
Enterasys D-Series CLI Reference 14-1 14 Logging and Network Management This chapter descri bes switch ‐ related logging and netw ork management commands and how to use them. Configuring System Logging Purpose To dis play and configure system logging, including Sy ...
-
Enterasys Networks D-Series - page 374
show logging ser ver 14-2 Logging and Network Manageme nt show logging server Use this command to display the Syslog configuration for a particul ar serv er . Synt ax show logging server [ index] Parameters Default s If index is not specif ied, all Sy slog serv er informati ...
-
Enterasys Networks D-Series - page 375
set logging server Enterasys D-Series CLI Reference 14-3 set logging server Use this command to configure a Syslog server . Synt ax s et logging server index [ ip-addr ip-addr ] [ facility facility ] [ severity severity ] [ descr descr ] [ port por t] [ state { en able | disable }] Parameters Default s If ip ‐ addr ...
-
Enterasys Networks D-Series - page 376
clear logging server 14-4 Logging and Network Manageme nt Example This command shows how to enable a Syslog serv er configuration for index 1, IP address 134.141.89.113, facility local4, severity lev el 3 on port 514: D2(su)->set logging server 1 ip-addr ...
-
Enterasys Networks D-Series - page 377
set logging default Enterasys D-Series CLI Reference 14-5 Example This command shows how to display the Syslog serv er default val u e s. For an explanation of the command output, refer back to Ta b l e 1 4 ‐ 32 on page 14 ‐ 2. D2(su)->show logging de ...
-
Enterasys Networks D-Series - page 378
clear logging default 14-6 Logging and Network Manageme nt clear logging default Use this command to reset logg ing default va lu e s . Synt ax clear logging default {[ facility ] [ severity ] [ port ]} Parameters Default s At least one optional parameter must be enter ed. All three op ...
-
Enterasys Networks D-Series - page 379
set logging application Enterasys D-Series CLI Reference 14-7 Mode Switch command, read ‐ only . Example This example shows how to display system logging information pertaining to the SNMP application. D2(ro)->show logging application SNM P Application Current Severity Level --------- ...
-
Enterasys Networks D-Series - page 380
clear logging application 14-8 Logging and Network Manageme nt Default s If level is not specified, none will be applied. Mode Switch command, read ‐ write. Example This example shows how to set the sev erity leve l for SNMP to 4 so that error ...
-
Enterasys Networks D-Series - page 381
show logging local Enterasys D-Series CLI Reference 14-9 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the logging severity lev el to 6 for SNMP . D2(rw)->clear logging application SN MP show logging local Use this comman ...
-
Enterasys Networks D-Series - page 382
clear logging local 14-10 Logging and Network Manage ment Parameters Default s None. Mode Switch command, read ‐ write. Example This command shows how to enable logging to the console and disable logging to a persistent file: D2(su)->set logging local console en able file ...
-
Enterasys Networks D-Series - page 383
show logging buffer Enterasys D-Series CLI Reference 14-11 Default s None. Mode Switch command, read ‐ only . Example This example shows a porti on of the information display ed with the show logging buffer command: D2(su)->show logging buffer <165>Sep 4 07:43:09 10.42.71.13 ...
-
Enterasys Networks D-Series - page 384
Monitoring Network Events and Status 14-12 Logging and Network Manage ment Monitoring Network Event s and St atus Purpose To display swit ch events and command history , to set the size of the his tory buffer, and to displ ay and disconnect current user sessions ...
-
Enterasys Networks D-Series - page 385
show history Enterasys D-Series CLI Reference 14-13 show history Use this command to display the size (in lines) of the history buffer . Synt ax show history Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display ...
-
Enterasys Networks D-Series - page 386
ping 14-14 Logging and Network Manage ment ping Use this command to send ICMP echo ‐ request packets to another node on the netw ork from the switch CLI. Synt ax ping host Parameters Default s None. Mode Switch command, read ‐ write. Examples This example ? ...
-
Enterasys Networks D-Series - page 387
disconnect Enterasys D-Series CLI Reference 14-15 D2(su)->show users Session User Location -------- ----- ------------------- ------- * telnet rw 134.141.192.119 telnet rw 134.141.192.18 disconnect Use this command to close an active console port or Te l n e t sessio n from the switch C ...
-
Enterasys Networks D-Series - page 388
Managing Switch Network Addresses and Routes 14-16 Logging and Network Manage ment Managing Switch Network Addresses and Routes Purpose To display or delete switch ARP table entries, and to display MAC address information. Commands show arp Use this command to display the s ...
-
Enterasys Networks D-Series - page 389
set arp Enterasys D-Series CLI Reference 14-17 Example This example shows how to display the ARP table: D2(su)->show arp LINK LEVEL ARP TABLE IP Address Phys Address Flags Interface ------------------------------------ ----------------- 10.20.1.1 00-00-5e-00-01-1 S host 134.142.21.194 00-00-5e-00-01-1 S host 1 ...
-
Enterasys Networks D-Series - page 390
clear arp 14-18 Logging and Network Manage ment clear arp Use this command to delete a specific entry or all entries from the switch’ s ARP tab le. Synt ax clear arp { ip-address | all } Parameters Default s None. Mode Switch command, read ‐ write. Example This example ...
-
Enterasys Networks D-Series - page 391
show mac Enterasys D-Series CLI Reference 14-19 Default s If not specified, waittime will be set to 5 seconds. If not specified, first ‐ tt l will be set to 1 second. If not specified, max ‐ ttl will be set to 30 seconds. If not s ...
-
Enterasys Networks D-Series - page 392
show mac agetime 14-20 Logging and Network Manage ment Default s If no parameters are specified, all MAC addresses for the device will be display ed. Mode Switch command, read ‐ only . Example This example shows how to display MAC addre ss information ...
-
Enterasys Networks D-Series - page 393
set mac agetime Enterasys D-Series CLI Reference 14-21 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the MAC timeout period: D2(su)->show mac agetime Aging time: 300 seconds set mac agetime Use This command to set the timeout ...
-
Enterasys Networks D-Series - page 394
set mac algorithm 14-22 Logging and Network Manage ment Mode Switch command, read ‐ only . Example This example shows how to reset the MAC timeout period to the default val u e of 300 seconds. D2(su)->clear mac agetime set mac algorithm Use this command to ...
-
Enterasys Networks D-Series - page 395
clear mac algorithm Enterasys D-Series CLI Reference 14-23 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows the output of this command. D2(su)->show mac algorithm Mac hashing algorithm is mac-crc16-u pperbits. clear mac algorithm Use this command to ? ...
-
Enterasys Networks D-Series - page 396
clear mac address 14-24 Logging and Network Manage ment Parameters Default s If no port ‐ string is defined, the command will apply to all ports. Mode Switch command, read ‐ write. Example This example configures multicast MAC address 01 ‐ 01 ‐ 22 ‐ 33 ‐ 44 ‐ ...
-
Enterasys Networks D-Series - page 397
show mac unreserved-flood Enterasys D-Series CLI Reference 14-25 show mac unreserved-flood Use this command to display the state of multicast flood protection. Synt ax show mac unreserved-flood Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example displays ...
-
Enterasys Networks D-Series - page 398
Configuring Simple Network Time Protocol (SNTP) 14-26 Logging and Network Manage ment Example This example enables multicast flood protection. D2(su)->set mac unreserved-flood ena ble Configuring Simple Network T ime Protocol (SNTP) Purpose To configure the Simple Network Time Protocol (SNTP), ...
-
Enterasys Networks D-Series - page 399
show sntp Enterasys D-Series CLI Reference 14-27 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display SNTP client settings: D2(su)->show sntp SNTP Version: 3 Current Time: TUE SEP 09 16:13:33 20 03 Timezone: 'EST', offset from UTC is -4 hours and 0 minute ...
-
Enterasys Networks D-Series - page 400
set sntp clien t 14-28 Logging and Network Manage ment set sntp client Use this command to set the SNTP operation mode. Synt ax set sntp client { broadcast | unicast | disab le } Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable SN ...
-
Enterasys Networks D-Series - page 401
set sntp server Enterasys D-Series CLI Reference 14-29 Mode Switch command, read ‐ write. Example This example shows how to clear the SNTP client’ s operational mode: D2(su)->clear sntp client set sntp server Use this command to add a serv er from which the ? ...
-
Enterasys Networks D-Series - page 402
set sntp poll-interval 14-30 Logging and Network Manage ment Mode Switch command, read ‐ write. Example This example shows how to remov e the serv er at IP address 10.21.1.100 from the SNTP serv er list: D2(su)->clear sntp server 10.21.1.10 0 set sntp poll-interval Use thi ...
-
Enterasys Networks D-Series - page 403
set sntp poll-retry Enterasys D-Series CLI Reference 14-31 Example This example shows how to clear the SNTP poll interval: D2(su)->clear sntp poll-interval set sntp poll-retry Use this command to set the number of poll retries to a unicast SNTP serv er . ...
-
Enterasys Networks D-Series - page 404
set sntp poll-timeout 14-32 Logging and Network Manage ment set sntp poll-timeout Use this command to set the poll timeout (in seconds) for a response to a unicast SNTP request. Synt ax set sntp poll-timeout timeout Parameters Default s None. Mode Switch command, read ‐ w ...
-
Enterasys Networks D-Series - page 405
set timezone Enterasys D-Series CLI Reference 14-33 Parameters Default s If you enter a timezone name without specifying an offset in hours and minutes, the default is an offset from UTC of 0 hours and 0 minutes. Mode Switch command, read ...
-
Enterasys Networks D-Series - page 406
Configuring Node Aliases 14-34 Logging and Network Manage ment Configuring Node Aliases Purpose To review , disable, and re ‐ enable node (port) alia s functionality , which determines what network protocols are running on one or more ports. Commands show nodealias config ...
-
Enterasys Networks D-Series - page 407
set nodealias Enterasys D-Series CLI Reference 14-35 set nodealias Use this command to enable or disable a node alias agent on one or more ports, or set the maximum number of alias entries per port. Synt ax set nodealias { enable | disable | ma xentr ...
-
Enterasys Networks D-Series - page 408
clear nodealias config 14-36 Logging and Network Manage ment Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the node alias configuration on fe .1.3 : D2(su)->clear nodealias config fe .1.3 port ‐ string Specifies the port(s) ...
-
Enterasys Networks D-Series - page 409
Enterasys D-Series CLI Reference 15-1 15 RMON Configuration This chapter descri bes the commands used to configure RMON on a D ‐ Series switch. RMON Monitoring Group Functions RMON (Remote Network Monitoring) provides comprehensiv e network fault diagnosis, planni ...
-
Enterasys Networks D-Series - page 410
RMON Monitoring Group Functions 15-2 RMON Configuration History Records periodic st atistical samples from a network. Samp le period, number of samples and item(s) sampled. “ show rmon history ” on page 15-6 “ set rmon history ” on page 15-7 “ clear rmon history ” on page 15-7 Alarm Periodically gathers statistical samples from variable ...
-
Enterasys Networks D-Series - page 411
Statistics Group Commands Enterasys D-Series CLI Reference 15-3 S t atistics Group Commands Purpose To display , configure, and clear RMON statistics. Commands show rmon st ats Use this command to display RMON statistics measured for one or more ports. Synt ax show rmon sta ...
-
Enterasys Networks D-Series - page 412
set rmon stats 15-4 RMON Configuration Multicast Pkts = 0 128 - 25 5 Octets = 0 CRC Errors = 0 256 - 51 1 Octets = 0 Undersize Pkts = 0 512 - 102 3 Octets = 0 Oversize Pkts = 0 1024 - 151 8 Octets = 0 Fragments = 0 Ta b l e 1 5 ‐ 40 provides an explanation of the command output. set rmon st at s Use this comman ...
-
Enterasys Networks D-Series - page 413
clear rmon stats Enterasys D-Series CLI Reference 15-5 Mode Switch command, read ‐ write. Example This example shows how to delete RMON statistics entry 2: D2(rw)->clear rmon stats 2 ...
-
Enterasys Networks D-Series - page 414
History Group Commands 15-6 RMON Configuration History Group Commands Purpose To display , configure, and clear RMON history properties and statistics. Commands show rmon history Use this command to display RMON history properties and statistics. The RMON history ? ...
-
Enterasys Networks D-Series - page 415
set rmon history Enterasys D-Series CLI Reference 15-7 Sample 2779 Interval Start: 1 days 0 hours 2 minutes 22 seconds Drop Events = 0 Undersiz e Pkts = 0 Octets = 0 Oversize Pkts = 0 Packets = 0 Fragment s = 0 Broadcast Pkts = 0 Jabbers = 0 Multicast Pkts = 0 Collisio ns = 0 CRC Align Errors = 0 Utilizat ion(%) = 0 set rmon history Use this ? ...
-
Enterasys Networks D-Series - page 416
clear rmon history 15-8 RMON Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete RMON history entry 1: D2(rw)->clear rmon history 1 index ‐ list Specifies one or more history entries to be delete d, ...
-
Enterasys Networks D-Series - page 417
Alarm Group Commands Enterasys D-Series CLI Reference 15-9 Alarm Group Commands Purpose To display , configure, and clear RMON alarm entries and properties. Commands show rmon alarm Use this command to display RMON alarm entrie s. The RMON alarm group periodically ? ...
-
Enterasys Networks D-Series - page 418
set rmon alarm properties 15-10 RMON Configuration set rmon alarm properties Use this command to configure an RMON alarm entr y , or to create a new alarm entry with an unused alarm index number . Synt ax set rmon alarm properties index [ int erval interval ] [ ...
-
Enterasys Networks D-Series - page 419
set rmon alarm status Enterasys D-Series CLI Reference 15-11 Default s interval ‐ 3600 seconds type ‐ absolute startup ‐ rising rthresh ‐ 0 fthresh ‐ 0 revent ‐ 0 fevent ‐ 0 owner ‐ monitor Mode Switch command, read ‐ write. Example This example shows how ? ...
-
Enterasys Networks D-Series - page 420
clear rmon alarm 15-12 RMON Configuration Parameters Default s None. Mode Switch command, read ‐ write. Usage An RMON alarm entry can be created using this command, configured using the set rmon alarm properties command (“ set rmon alarm properties ” ? ...
-
Enterasys Networks D-Series - page 421
Event Group Commands Enterasys D-Series CLI Reference 15-13 Event Group Commands Purpose To display and clear RMON ev ents, and to configure RMON event properties. Commands show rmon event Use this command to display RMON event entry properties. Synt ax show rmon event [ in ...
-
Enterasys Networks D-Series - page 422
set rmon event properties 15-14 RMON Configuration set rmon event properties Use this command to configure an RMON event entry , or to create a new eve nt entry with an unused event index number . Synt ax set rmon event properties index [ description description ...
-
Enterasys Networks D-Series - page 423
set rmon event status Enterasys D-Series CLI Reference 15-15 Example This example shows how to create and enable an RMON event entry called “STP topology change” that will send both a log entry and an SNMP trap message to the ...
-
Enterasys Networks D-Series - page 424
clear rmon event 15-16 RMON Configuration Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear RMON event 1: D2(rw)->clear rmon event 1 ...
-
Enterasys Networks D-Series - page 425
Filter Group Commands Enterasys D-Series CLI Reference 15-17 Filter Group Commands The packet capture and filter function is di sabled by default. Only one interface can be configured for capturing and filtering at a time. When packet capture is ...
-
Enterasys Networks D-Series - page 426
set rmon channel 15-18 RMON Configuration Example This example shows how to display RMON channel information for fe .2.12: D2(rw)->show rmon channel fe .2.12 Port fe .2.12 Channel index= 628 EntryStatus= valid ------------------------------------ ---------------------- Control off Accept Type matched OnEve ...
-
Enterasys Networks D-Series - page 427
clear rmon channel Enterasys D-Series CLI Reference 15-19 Example This example shows how to create an RMON channel entry: D2(rw)->set rmon channel 54313 fe .2.12 accept failed control on descripti on "capture all" clear rmon channel Use this command to clear an RMON channe ...
-
Enterasys Networks D-Series - page 428
set rmon filter 15-20 RMON Configuration D2(rw)->show rmon filter Index= 55508 Channel Index= 628 EntryStatus= valid ------------------------------------ ---------------------- Data Offset 0 PktSta tus 0 PktStatusMask 0 PktSta tusNotMask 0 Owner ETS,NAC-D ----------------------------- Data ff ff ff ff ff ff ----------------------------- DataMask ...
-
Enterasys Networks D-Series - page 429
clear rmon filter Enterasys D-Series CLI Reference 15-21 Mode Switch command, read ‐ write. Example This example shows how to create RMON filter 1 and apply it to channel 9: D2(rw)->set rmon filter 1 9 offset 3 0 data 0a154305 dmask ffffffff clear rmon filter Use this comm ...
-
Enterasys Networks D-Series - page 430
Packet Capture Commands 15-22 RMON Configuration Packet Capture Commands Note that packet capture filter is sampling only and does not guarantee receipt of back ‐ to ‐ back packets. Purpose To display RMON capture entries, configure, enable, or disable ? ...
-
Enterasys Networks D-Series - page 431
set rmon capture Enterasys D-Series CLI Reference 15-23 Owner monitor captureEntry= 1 Buff.control= 28062 ------------------------------------ -------- Pkt ID 9 Pkt time 1 days 0 hours 51 minutes 15 seconds Pkt Length 93 Pkt status 0 Data: 00 00 5e 00 01 01 00 01 f4 00 7d ce 08 00 45 00 00 4b b4 b9 00 00 40 11 32 5c 0a 15 43 05 86 8d bf e5 00 a1 0e ...
-
Enterasys Networks D-Series - page 432
clear rmon capture 15-24 RMON Configuration Mode Switch command, read ‐ write. Example This example shows how to create RMON capture entry 1 to “listen” on channel 628: D2(rw)->set rmon capture 1 628 clear rmon capture Use this command to clears an RMON ...
-
Enterasys Networks D-Series - page 433
Enterasys D-Series CLI Reference 16-1 16 DHCP Server Configuration This chapter descri bes the commands to configure the IPv4 DHCP serv er functionality on a D ‐ Series switch. DHCP Overview Dynamic Host Configuration Protocol (DHCP) for IPv4 is a netw ...
-
Enterasys Networks D-Series - page 434
DHCP Overview 16-2 DHCP Server Configura tion • Boot file •D H C P options as defined by RFC 2132 Configuring a DHCP Server For DHCP to function on D ‐ Series systems, the system has to “know about” the IP netw ork for which the DHCP ? ...
-
Enterasys Networks D-Series - page 435
Configuring General DHCP Server Parameters Enterasys D-Series CLI Reference 16-3 Configuring General DH CP Server Parame ters Purpose To configure DHCP server parameters, and to display and clear address binding information, server statistics, and conflict information. Commands set ...
-
Enterasys Networks D-Series - page 436
set dhcp bootp 16-4 DHCP Server Configura tion Example This example enables DHCP server functionality . D2(rw)->set dhcp enable set dhcp bootp Use this command to enable or disable automatic address allocation for BOOTP clients. By default, address allocation ...
-
Enterasys Networks D-Series - page 437
show dhcp conflict Enterasys D-Series CLI Reference 16-5 Example This example enables DHCP conflict logging. D2(rw)->set dhcp conflict logging show dhcp conflict Use this command to display conflict information, for one address or al l addresses. Synt ax show dhcp conflict [ ...
-
Enterasys Networks D-Series - page 438
set dhcp exclude 16-6 DHCP Server Configura tion Default s None. Mode Switch command, read ‐ write. Examples This example disables DHCP conflict logging. D2(rw)->clear dhcp conflict logging This example clears the conflict information for the IP address 192.0.0.2. D2(rw)-& ...
-
Enterasys Networks D-Series - page 439
clear dhcp exclude Enterasys D-Series CLI Reference 16-7 clear dhcp exclude Use this command to clear the configured IP addresses that the DHCP serv er sh ould not assign to DHCP clients. Synt ax clear dhcp exclude low-ipaddr [ high- ipaddr ] Parameters Default s None. Mode Swi ...
-
Enterasys Networks D-Series - page 440
clear dhcp ping 16-8 DHCP Server Configura tion clear dhcp ping Use this command to reset the number of ping packets sent by the DHCP server back to the default val u e of 2. Synt ax clear dhcp ping packets Parameters None. Default s None. Mode Switch command, ? ...
-
Enterasys Networks D-Series - page 441
clear dhcp binding Enterasys D-Series CLI Reference 16-9 192.0.0.13 00:33:44:56:22:37 infinite Manual 192.0.0.14 00:33:44:56: 22:38 infinite Manual clear dhcp binding Use this command to clear (delete) one or all DHCP address bindings. Synt ax cle ...
-
Enterasys Networks D-Series - page 442
clear dhcp server st atistics 16-10 DHCP Server Configur ation Messages Received ---------- ---------- DHCP DISCOVER 382 DHCP REQUEST 3855 DHCP DECLINE 0 DHCP RELEASE 67 DHCP INFORM 1 Messages Sent ---------- ------ DHCP OFFER 381 DHCP ACK 727 DHCP NACK 2 clear dhcp server st atistics Use this command to clear all DHCP s ...
-
Enterasys Networks D-Series - page 443
Configuring IP Address Pools Enterasys D-Series CLI Reference 16-11 Configuring IP Address Pools Manual Pool Configuration Considerations •T h e subnet of the IP address being is sued should be on the same subnet as the ingres s interface (that is, the subnet ...
-
Enterasys Networks D-Series - page 444
set dhcp pool 16-12 DHCP Server Configur ation set dhcp pool Use this command to create and assign a name to a DHCP serv er pool of addres ses. Up to 16 address pools may be configured on a D ‐ Series. Not e that entering this ? ...
-
Enterasys Networks D-Series - page 445
clear dhcp pool Enterasys D-Series CLI Reference 16-13 clear dhcp pool Use this command to delete a DHCP server pool of addresses. Synt ax clear dhcp pool poolname Parameters Default s None. Mode Switch command, read ‐ write. Example This example deletes the address pool ...
-
Enterasys Networks D-Series - page 446
clear dhcp pool network 16-14 DHCP Server Configur ation Examples This example configures the IP subnet 172.20.28.0 with a prefix length of 24 for the aut omatic DHCP pool named “auto1.” Alternativ ely , the mask could hav e been specified ? ...
-
Enterasys Networks D-Series - page 447
clear dhcp pool hardware-addr ess Enterasys D-Series CLI Reference 16-15 Default s If no type is specified, Ethernet is assumed. Mode Switch command, read ‐ write. Example This example specifies 0001.f401.2710 as the Ethernet MAC address for the manual address ...
-
Enterasys Networks D-Series - page 448
clear dhcp pool host 16-16 DHCP Server Configur ation Default s If a mask or prefix is not specified, the class A, B, or C natural mask will be used. Mode Switch command, read ‐ write. Example This example shows how to configure the minimum ...
-
Enterasys Networks D-Series - page 449
clear dhcp pool client-identifier Enterasys D-Series CLI Reference 16-17 Parameters Default s None. Mode Switch command, read ‐ write. Usage The client identifier is formed by conca tenating the media type and the MAC address. For example, if the client hardw are ...
-
Enterasys Networks D-Series - page 450
set dhcp pool client-name 16-18 DHCP Server Configur ation set dhcp pool client-name Use this command to assign a name to a DHCP client when creating an address pool for manual binding. Synt ax set dhcp pool poolname client-name n ame Parameters Default s None. Mode Switch ...
-
Enterasys Networks D-Series - page 451
set dhcp pool bootfile Enterasys D-Series CLI Reference 16-19 set dhcp pool boot file Use this command to specify a default boot image for the DHCP clients who wil l be serv ed by the address pool being configured. Synt ax set dhcp pool poolname bootfile file na ...
-
Enterasys Networks D-Series - page 452
set dhcp pool next- server 16-20 DHCP Server Configur ation set dhcp pool next-server Use this command to specify the file server from which the de fault boot image is to be loaded by the client. Synt ax set dhcp pool poolname next-server i p-address Parameters Defa ...
-
Enterasys Networks D-Series - page 453
set dhcp pool lease Enterasys D-Series CLI Reference 16-21 set dhcp pool lease Use this command to specify the duration of the lease for an IP address assigned by the DHCP server from the ad dress pool being configured. Synt ax set dhcp pool poolname lea ...
-
Enterasys Networks D-Series - page 454
set dhcp pool default-rou ter 16-22 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example restores the default le ase duration of one day for address pool “a uto1.” D2(rw)->clear dhcp pool auto1 lease set dhcp pool default-router Use this c ...
-
Enterasys Networks D-Series - page 455
set dhcp pool dns-server Enterasys D-Series CLI Reference 16-23 Mode Switch command, read ‐ write. Example This example removes the default router from the addres s pool “auto1.” D2(rw)->clear dhcp pool auto1 defaul t-router set dhcp pool dns-server Use this command to specify ...
-
Enterasys Networks D-Series - page 456
set dhcp pool domain- name 16-24 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example removes the DNS serv er list from the address pool “a uto1.” D2(rw)->clear dhcp pool auto1 dns-se rver set dhcp pool domain-name Use this command to specify ...
-
Enterasys Networks D-Series - page 457
set dhcp pool netbios-name-server Enterasys D-Series CLI Reference 16-25 Mode Switch command, read ‐ write. Example This example removes the domain name from the address pool “auto1.” D2(rw)->clear dhcp pool auto1 domain -name set dhcp pool netbios-name-server Use this command to ...
-
Enterasys Networks D-Series - page 458
set dhcp pool netbio s-node-type 16-26 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example removes the NetBIOS name serv er lis t from the address pool auto1. D2(rw)->clear dhcp pool auto1 netbio s-name-server set dhcp pool netbios-node-type Use this ...
-
Enterasys Networks D-Series - page 459
set dhcp pool option Enterasys D-Series CLI Reference 16-27 Default s None. Mode Switch command, read ‐ write. Example This example removes the NetBIOS node type from the address pool “auto1.” D2(rw)->clear dhcp pool auto1 netbio s-node-type set dhcp pool option Use this command ? ...
-
Enterasys Networks D-Series - page 460
clear dhcp pool option 16-28 DHCP Server Configur ation clear dhcp pool option Use this command to remove a DHCP option from the address pool being configured. Synt ax clear dhcp pool poolname option code Parameters Default s None. Mode Switch command, read ‐ write. Example This exam ...
-
Enterasys Networks D-Series - page 461
show dhcp pool configuration Enterasys D-Series CLI Reference 16-29 Network 192.0.0.0 255.255.255.0 Lease Time 1 days 0 hrs 0 mins Default Routers 192.0.0.1 Pool: static1 Pool Type Manual Client Name appsvr1 Client Identifier 01:00:01:f4:01:27:10 Host 10.1.1.1 255.0.0.0 Lease Time infinite Option 19 hex 01 Pool: static2 Pool Type Manual Hardware Ad ...
-
Enterasys Networks D-Series - page 462
show dhcp pool configuration 16-30 DHCP Server Configur ation ...
-
Enterasys Networks D-Series - page 463
Enterasys D-Series CLI Reference 17-1 17 Security Configuration This chapter descri bes the Security Configuration set of commands and how to use them. Overview of Security Methods The following security methods are av ailable for controlling which users are ...
-
Enterasys Networks D-Series - page 464
Overview of Security Methods 17-2 Security Con figuration on using CLI commands to configure 802 .1X, refer to “ Configuring 802.1X Authentication ” on page 17 ‐ 11. •M A C Authentication – provides a mechanism for administrators to securely authen ...
-
Enterasys Networks D-Series - page 465
Configuring RADIUS Enterasys D-Series CLI Reference 17-3 configured on the switch, the swi tch then dynamically applies the policy profile to the physical port the user/device is authenticati ng on. Filter-ID Attribute Format s Enterasys Netw orks supports ? ...
-
Enterasys Networks D-Series - page 466
show radius 17-4 Security Con figuration show radius Use this command to display the current RADIUS client/server configuration. Synt ax show radius [ status | retries | timeout | server [ in dex | all] ] Parameters Default s If no parameters are specified, all RA DIUS configuration ? ...
-
Enterasys Networks D-Series - page 467
set radius Enterasys D-Series CLI Reference 17-5 set radius Use this command to enable, disable, or configure RADIUS authentication. Synt ax set radius { enable | disable } | { retries number-of-retries } | { timeout timeout } | { server index ip-address port [ secre t-value ] [ realm { management-access | any | ...
-
Enterasys Networks D-Series - page 468
set radius 17-6 Security Con figuration Default s If secr et ‐ value is not specified, none will be applied. If realm is not specified, the any access realm will be used. Mode Switch command, read ‐ write. Usage The D ‐ Series device allows up ...
-
Enterasys Networks D-Series - page 469
clear radius Enterasys D-Series CLI Reference 17-7 This example shows how to force any management ‐ access to the switch (T elnet, web , SS H) to authenticate through a RADIUS serv er . The all parameter at the end of the command me ...
-
Enterasys Networks D-Series - page 470
set radius accounting 17-8 Security Con figuration Parameters Mode Switch command, read ‐ only . Default s If no parameters are specified, all RA DIUS accounting configuration information will be display ed. Example This example shows how to display RADIUS account ...
-
Enterasys Networks D-Series - page 471
clear radius accounting Enterasys D-Series CLI Reference 17-9 Mode Switch command, read ‐ write. Default s None. Examples This example shows how to enable the RADIUS accounting client for authenticating with the accounting server at IP address 10.2.4.12, UDP ? ...
-
Enterasys Networks D-Series - page 472
clear radius accounting 17-10 Securit y Configuration Default s None. Example This example shows how to reset the RADIUS accounting timeout to 5 seconds. D2(su)->clear radius accounting time out ...
-
Enterasys Networks D-Series - page 473
Configuring 802.1X Authentication Enterasys D-Series CLI Reference 17-11 Configuring 802.1X Authentication Purpose To review and configure 802.1X authe ntication for one or more ports us ing EAPOL (Extensibl e Authentication Protocol). 802.1X controls network access by ...
-
Enterasys Networks D-Series - page 474
show dot1x 17-12 Securit y Configuration If port ‐ string is not specif ied, information for all ports will be displayed. Mode Switch command, read ‐ only . Examples This example shows how to display 802.1X status: D2(su)->show dot1x DOT1X is disabled. This ? ...
-
Enterasys Networks D-Series - page 475
show dot1x auth-config Enterasys D-Series CLI Reference 17-13 show dot1x auth-config Use this command to display 802.1X authentication configuration settings for one or more ports. Synt ax show dot1x auth-config [ authcontroll ed-portcontrol ] [ maxreq ] [ quietperiod ] [ reauthenabled ] [ reauthp ...
-
Enterasys Networks D-Series - page 476
set dot1x 17-14 Securit y Configuration Port : 1 Auth-Config PAE state: Initialize Backend auth state: Initialize Admin controlled directions: Both Oper controlled directions: Both Auth controlled port status: Authorized Auth controlled port control: Auto Quiet period: 60 Transmission period: 30 Supplicant timeout: 30 Server timeout: 30 Maximum req ...
-
Enterasys Networks D-Series - page 477
set dot1x auth-config Enterasys D-Series CLI Reference 17-15 set dot1x auth-config Use this command to configure 802.1X authentica tion. Synt ax set dot1x auth-config {[ authcontroll ed-portcontrol { auto | forced-auth | forced-unauth }] [ maxreq value ] [ quietperiod value ] [ reauthenabled { false | true }] [ reauthperiod ...
-
Enterasys Networks D-Series - page 478
clear dot1x auth-config 17-16 Securit y Configuration Examples This example shows how to enable reauthenti cation control on ports fe.1.1 ‐ 3: D2(su)->set dot1x auth-config reauth enabled true fe .1.1-3 This example shows how to set the 802.1X quiet period to 1 ...
-
Enterasys Networks D-Series - page 479
show eapol Enterasys D-Series CLI Reference 17-17 This example shows how to reset the 802.1X quiet period to 60 seconds on ports fe.1.1 ‐ 3: D2(su)->clear dot1x auth-config quie tperiod fe .1.1-3 show eapol Use this command to display EAPOL status or se ...
-
Enterasys Networks D-Series - page 480
show eapol 17-18 Securit y Configuration T able 17-43 show eapol Output Det ails Output Fi eld What It Disp la y s. .. Port Port designa tion. For a detailed description of possible port-string values, refer to “ Port S tring Synt ax Used in the C LI ” on page 6-1. Authentication St ate Current EAPOL authentication state for each po rt. Possibl ...
-
Enterasys Networks D-Series - page 481
set eapol Enterasys D-Series CLI Reference 17-19 set eapol Use this command to enable or disable EAPOL port ‐ based user authentication with the RADIUS server and to set the authentication mode for one or more ports . Synt ax set eapol [ enable | d ...
-
Enterasys Networks D-Series - page 482
clear eapol 17-20 Securit y Configuration Parameters Default s If auth ‐ mode is not specif ied, all EAPOL settings will be cleared. If port ‐ string is not specif ied, settings will be cleared for all ports. Mode Switch command, read ‐ write. Example ...
-
Enterasys Networks D-Series - page 483
Configuring MAC Authentication Enterasys D-Series CLI Reference 17-21 Configuring MAC Authentication Purpose To review , disable, enable and configure MAC authentication. This authentication method allows the device to authentica te source MAC addresses in an exchan ...
-
Enterasys Networks D-Series - page 484
show macauthentication 17-22 Securit y Configuration Parameters Default s If port ‐ string is not specif ied, MAC authentication informatio n will be display ed for all ports. Mode Switch command, read ‐ only . Example This example shows how to display MAC a ...
-
Enterasys Networks D-Series - page 485
show macauthentication session Enterasys D-Series CLI Reference 17-23 show macauthentication session Use this command to display the active MAC authe nticated se ssions. Synt ax show macauthentication session Parameters None. Default s If port ‐ string is not specif ied, MAC sessio n ...
-
Enterasys Networks D-Series - page 486
set macauthentication 17-24 Securit y Configuration set macauthentication Use this command to globally enable or disable MAC authentica tion. Synt ax set macauthentication { enable | disa ble } Parameters Mode Switch command, read ‐ write. Default s None. Example This example shows how t ...
-
Enterasys Networks D-Series - page 487
clear macauthentication password Enterasys D-Series CLI Reference 17-25 Example This example shows how to set the MAC authentication password to “macauth”: D2(su)->set macauthentication passwo rd macauth clear macauthentication p assword Use this command to clear the MAC ...
-
Enterasys Networks D-Series - page 488
set macauthentication portinitialize 17-26 Securit y Configuration Usage Enabling port(s) for MAC authentication requires globally enabling MAC authentication on the switch as described in “ set macauthentication ” on page 17 ‐ 24, and then enabling it ...
-
Enterasys Networks D-Series - page 489
clear macauthentication portquietperiod Enterasys D-Series CLI Reference 17-27 Default s None. Mode Switch command, read ‐ write. Example This example sets port 1 to wai t 5 seconds after a failed authentication attempt before a new attempt can be made: D2(su) ...
-
Enterasys Networks D-Series - page 490
set macauthentication reauthenticat ion 17-28 Securit y Configuration Mode Switch command, read ‐ write. Default s None. Example This example shows how to force the MAC authentication session for address 00 ‐ 60 ‐ 97 ‐ b5 ‐ 4c ‐ 07 to re ‐ initialize: D2(su)->set macauthen ...
-
Enterasys Networks D-Series - page 491
set macauthentication macreauthenticate Enterasys D-Series CLI Reference 17-29 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to force ge .2.1 though 5 to reauthenticate: D2(su)->set macauthentication portre authentication ge.2.1-5 set macauthenticati ...
-
Enterasys Networks D-Series - page 492
clear macauthentication reauthperiod 17-30 Securit y Configuration Parameters Default s None. Mode Switch command, read ‐ write. Usage Changing the Reauth Pe r i o d with the set macauthentication reauthperiod command does not affect current sessions. New sessions will ? ...
-
Enterasys Networks D-Series - page 493
set macauthentication significant-bits Enterasys D-Series CLI Reference 17-31 set macauthentication significant-bit s Use this command to set the number of significant bits of the MAC address to use for authentication. Synt ax set macauthentication significant-bi ts number Paramete ...
-
Enterasys Networks D-Series - page 494
clear macauthentication significant-bits 17-32 Securit y Configuration Mode Switch command, read ‐ write. Example This example resets the MAC authentication significant bits to 48. D2(su)->clear macauthentication sign ificant-bits ...
-
Enterasys Networks D-Series - page 495
Configuring Multiple Authentication Methods Enterasys D-Series CLI Reference 17-33 Configuring Multiple Authentication Methods About Multiple Authentication T ypes When enabled, multiple authentication types allow users to authenticate using more than one method on the same port. ? ...
-
Enterasys Networks D-Series - page 496
show multiauth 17-34 Securit y Configuration show multiauth Use this command to display multiple authenticati on system configuration. Synt ax show multiauth Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display multiple aut ...
-
Enterasys Networks D-Series - page 497
set multiauth mode Enterasys D-Series CLI Reference 17-35 set multiauth mode Use this command to set the system authentication mode to allow multi ple authenticators simultaneously (802.1x, PW A, and MAC Authentica tion) on a single port, or to stric ...
-
Enterasys Networks D-Series - page 498
set multiauth precedence 17-36 Securit y Configuration Example This example shows how to clear the system authentication mode : D2(rw)->clear multiauth mode set multiauth precedence Use this command to set the system’ s multi ple authentication administrative precedenc ...
-
Enterasys Networks D-Series - page 499
show multiauth port Enterasys D-Series CLI Reference 17-37 Example This example shows how to clear the multiple authenti cation precedence: D2(rw)->clear multiauth precedence show multiauth port Use this command to display multiple authenticati on properties for one or ? ...
-
Enterasys Networks D-Series - page 500
clear multiauth port 17-38 Securit y Configuration Parameters Default s None. Mode Switch command, read ‐ write. Examples This example shows how to set the port multipl e authenticati on mode to required on ge .3.14: D2(rw)->set multiauth port mode auth -reqd ge.3.14 This exam ...
-
Enterasys Networks D-Series - page 501
show multiauth station Enterasys D-Series CLI Reference 17-39 Mode Switch command, read ‐ write. Examples This example shows how to clear the port mult iple authentication mode on port ge .3.1 4: D2(rw)->clear multiauth port mode ge .3.14 This example shows how to ...
-
Enterasys Networks D-Series - page 502
show multiauth idle-timeout 17-40 Securit y Configuration Parameters Default s If no options are specified, multiple au thentication session entries will be displayed for all sessions, authentication types, MAC addresses, and ports. Mode Switch command, read ‐ ...
-
Enterasys Networks D-Series - page 503
set multiauth idle-timeout Enterasys D-Series CLI Reference 17-41 Example This example shows how to display timeout val u e s for an idle session for all authentication types. D2(su)->show multiauth idle-timeout Authentication type Timeout (sec) ------------------- ------------- dot1x 0 ...
-
Enterasys Networks D-Series - page 504
clear multiauth idle-timeout 17-42 Securit y Configuration clear multiauth idle-timeout Use this command to re set th e maximum number of consecutiv e seconds an authenticated sessi on may be idle before termination of the session to its default va l ...
-
Enterasys Networks D-Series - page 505
set multiauth session-timeout Enterasys D-Series CLI Reference 17-43 Example This example displays the session timeout val u es for all authentication methods. D2(su)->show multiauth session-timeo ut Authentication type Timeout (sec) ------------------- ------------- dot1x 0 pwa 0 mac 0 set multiauth sessi ...
-
Enterasys Networks D-Series - page 506
clear multiauth session-timeout 17-44 Securit y Configuration clear multiauth session-timeout Use this command to re set th e maximum number of consecutiv e seconds an authenticated sessi on may last before termination of the sessi on to its default val ...
-
Enterasys Networks D-Series - page 507
Configuring VLAN Authorization (RFC 3580) Enterasys D-Series CLI Reference 17-45 Configuring VLAN Authorization (RFC 3580) Purpose RFC 3580 T unnel Attributes provide a mechanism to contain an 802.1X authentica ted or a MAC authenticated user to a VLAN regardless of ...
-
Enterasys Networks D-Series - page 508
set policy maptable response 17-46 Securit y Configuration multiauth port command (page 17 ‐ 37) to set the number of RFC 3580 users (numusers ) allowed per Gigabit port. Up to two users can be configured per Gigabit port. Synt ax show ...
-
Enterasys Networks D-Series - page 509
set vlanauthorization Enterasys D-Series CLI Reference 17-47 When a user successfully authenticates to the network, the RADI US serv er returns an Access ‐ Accept frame. This frame can have many attributes, two of whi ch are a Filter ID ...
-
Enterasys Networks D-Series - page 510
set vlanauthorization egress 17-48 Securit y Configuration set vlanauthorization egress Controls the modification of the current VLAN egress list of 802.1x authenticated ports for the VLANs returned in the RADIUS authorization filter id string. Synt ax set v ...
-
Enterasys Networks D-Series - page 511
show vlanauthorization Enterasys D-Series CLI Reference 17-49 Mode Switch command, read ‐ write. Example This example show how to clear VLAN authorization for all ports on slots 3, 4, and 5: D2(rw)->clear vlanauthorization ge.3 -5.* show vlanauthorization Displays the ...
-
Enterasys Networks D-Series - page 512
show vlanauthorization 17-50 Securit y Configuration authenticated ma c address If authentication has succeeded, displays the MAC addre ss assig ned for egress. vlan id If authentication has succeeded, displays the assig ned VLAN id for ing ress. T able 17-46 show vlanauthorization Ou tput Det ails (Continued) Output Fi eld What It Disp la y s. .. ...
-
Enterasys Networks D-Series - page 513
Configuring MAC Locking Enterasys D-Series CLI Reference 17-51 Configuring MAC Locking This feature locks a MAC address to one or more ports, preventing connection of unauthorized devices through the port(s). When source MAC addresses are receiv ed o ...
-
Enterasys Networks D-Series - page 514
show maclock 17-52 Securit y Configuration show maclock Use this command to display the status of MAC locking on one or more port s. Synt ax show maclock [ port-string ] Parameters Default s If port ‐ string is not specif ied, MAC locking status will be ? ...
-
Enterasys Networks D-Series - page 515
show maclock stations Enterasys D-Series CLI Reference 17-53 show maclock st ations Use this command to display MAC locking information about end stations connected to the switch. Synt ax show maclock stations [firstarrival | static] [ port-string ] Parameters Default s If no parameter ...
-
Enterasys Networks D-Series - page 516
set maclock enable 17-54 Securit y Configuration set maclock enable Use this command to enable MAC locking globally or on one or more ports. Synt ax set maclock enable [ port ‐ string ] Parameters Default s If port ‐ string is not specif ied, MAC locking ...
-
Enterasys Networks D-Series - page 517
set maclock disable Enterasys D-Series CLI Reference 17-55 set maclock disable Use this command to disable MAC locking globally or on one or more ports. Synt ax set maclock disable [ port-string ] Parameters Default s If port ‐ string is not specif ied, MAC locking ? ...
-
Enterasys Networks D-Series - page 518
clear maclock 17-56 Securit y Configuration Mode Switch command, read ‐ write. Usage Configuring a port for MAC locking requires globally enabling it on the swi tch first using the set maclock enable command as described in “ set maclock ...
-
Enterasys Networks D-Series - page 519
set maclock static Enterasys D-Series CLI Reference 17-57 Example This example shows how to remove a MAC from the list of static MACs allow ed to communicate on port ge .3.2: D2(rw)->clear maclock 0e-03-ef-d8-44 -55 ge.3.2 set maclock st atic Use this command ...
-
Enterasys Networks D-Series - page 520
set maclock firs tarrival 17-58 Securit y Configuration Mode Switch command, read ‐ write. Example This example shows how to reset the number of allow able static MACs on fe.2.3: D2(rw)->clear maclock static fe . 2.3 set maclock first arrival Use this command to re ...
-
Enterasys Networks D-Series - page 521
clear maclock firs tarrival Enterasys D-Series CLI Reference 17-59 clear maclock first arrival Use this command to reset the number of first arrival MAC address es allowed per port to the default val u e of 6 00. Synt ax clear maclock firstarrival port-stri ng Param ...
-
Enterasys Networks D-Series - page 522
clear maclock agefirstarrival 17-60 Securit y Configuration Example This example enables first arrival ag ing on port ge .1.1. D2(su)-> set maclock agefirstarrival ge.1.1 enable clear maclock agefirst arrival Use this command to reset first arriv a l aging on one or more ...
-
Enterasys Networks D-Series - page 523
set maclock trap Enterasys D-Series CLI Reference 17-61 Usage If there are more first arrival MACs than the allow ed maximum static MACs, then only the latest first arriv al MACs wil l be mov ed to static entries. For example, if you ...
-
Enterasys Networks D-Series - page 524
Configuring Port Web Authentication (PWA) 17-62 Securit y Configuration Configuring Port W eb Authentication (PW A) About PW A PW A provides a wa y of authenticating users before allowing general access to the netw ork To log on using PW A, the user makes a ...
-
Enterasys Networks D-Series - page 525
show pwa Enterasys D-Series CLI Reference 17-63 show pwa Use this command to display port web authentication information for one or more ports. Synt ax show pwa [ port-string ] Parameters Default s If port ‐ string is not specif ied, PW A information w ill be ...
-
Enterasys Networks D-Series - page 526
set pwa 17-64 Securit y Configuration set pwa Use this command to enable or disable port web authentication. Synt ax set pwa { enable | disable } Parameters Default s None. Mode Switch command, read ‐ write. PW A Enhanced Mode Whether PWA enhanced mode is enabled or disabled. Default state of disabled c ...
-
Enterasys Networks D-Series - page 527
show pwa banner Enterasys D-Series CLI Reference 17-65 Example This example shows how to enable port web authentication: D2(su)->set pwa enable show pwa banner Use this command to display the port web a uthentication login banner string. Synt ax show pwa banner Param ...
-
Enterasys Networks D-Series - page 528
clear pwa banner 17-66 Securit y Configuration clear pwa banner Use this command to reset the PW A log in banner to a blank string. Synt ax clear pwa banner Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the ...
-
Enterasys Networks D-Series - page 529
set pwa ipaddress Enterasys D-Series CLI Reference 17-67 set pwa ip address Use this command to set the PW A IP address. This is the IP addres s of the end statio n from which PW A will prevent network access until the user is authent ...
-
Enterasys Networks D-Series - page 530
set pwa guestname 17-68 Securit y Configuration set pwa guestname Use this command to set a guest user name for PW A netw orking. PW A will use this name to grant network access to guests without established login names and passw ords. Sy ...
-
Enterasys Networks D-Series - page 531
set pwa guestpassword Enterasys D-Series CLI Reference 17-69 set pwa guestp assword Use this command to set the guest user password for PW A networking. Synt ax set pwa guestpassword Parameters None. Default s None. Mode Switch command, read ‐ write. Usage PW A will use this ...
-
Enterasys Networks D-Series - page 532
set pwa initialize 17-70 Securit y Configuration Usage PW A will use a guest passw ord and guest user name to grant network access with default policy privileges to users without establishe d login names and passwords. Example This example sh ...
-
Enterasys Networks D-Series - page 533
set pwa maxrequest Enterasys D-Series CLI Reference 17-71 Default s If port ‐ string is not specif ied, quiet period will be set for all ports. Mode Switch command, read ‐ write. Example This example shows how to set the PW A quiet period to 30 ? ...
-
Enterasys Networks D-Series - page 534
show pwa session 17-72 Securit y Configuration Parameters Default s If port ‐ string is not specif ied, PW A will enabled on all ports. Mode Switch command, read ‐ write. Example This example shows how to enable PW A on ports 1 ‐ 22: D2(su)->set pwa portcon ...
-
Enterasys Networks D-Series - page 535
set pwa enhancedmode Enterasys D-Series CLI Reference 17-73 set pwa enhancedmode This command enables PW A URL redirection. The switch intercepts all HTTP packets on port 80 from the end user , and sends the end user a refresh page destined ? ...
-
Enterasys Networks D-Series - page 536
Configuring Secure Shell (SSH) 17-74 Securit y Configuration Configuring Secure Shell (SSH) Purpose To review , enable, disable, and configure the Secure Shell (SSH) protocol, which provides secure Te l n e t . Commands show ssh st atus Use this command to display the ? ...
-
Enterasys Networks D-Series - page 537
set ssh hostkey Enterasys D-Series CLI Reference 17-75 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to disable SSH: D2(su)->set ssh disable set ssh hostkey Use this command to set or reinitialize new SSH authenticati on k ...
-
Enterasys Networks D-Series - page 538
set ssh hostkey 17-76 Securit y Configuration ...
-
Enterasys Networks D-Series - page 539
Index-1 Index Numerics 802.1D 8-1 802.1p 11 -1 7 , 12-1 802.1Q 9-1 802.1s 8-1 802.1w 8-1 802.1x 17-5 , 17-19 A Advertised Ability 6-15 Alias node 14-34 Authentication EAPOL 17-19 MAC 17-21 Port web 17-62 RADIUS server 17-5 , 17-8 SSH 17-75 Auto-negotiation 6-15 B banner motd 2-21 Baud Rate 2-28 Broadcast suppression, enabling on ports 6-30 C CDP Di ...
-
Enterasys Networks D-Series - page 540
Index- 2 profiles 11 -1 , 11 -1 7 Port Mirroring 6-33 Port Priority configuring 12-1 Port String syntax used in the CLI 6-1 Port Trunking 6-36 Port web authenti cation configuring 17-62 Port(s) alias 6-8 assignment scheme 6-1 auto-negotiation and adverti s ed ability 6-15 broadcast suppression 6-30 counters, reviewing statistics 6-5 duplex mode, se ...
Do you have a question concerning Enterasys Networks D-Series?
Use the form below
If you did not solve your problem by using a manual Enterasys Networks D-Series, ask a question using the form below. If a user had a similar problem with Enterasys Networks D-Series it is likely that he will want to share the way to solve it.