Allied-telesis AT-8100 Series Manual de usuario

613-001952 Rev. AAT-8100 SeriesFast Ethernet Switches AT-8100L/8 AT-8100L/8POE AT-8100L/8POE-E AT-8100S/24 AT-8100S/24C AT-8100S/24F-LC AT-8100

Contents10Chapter 17: Domain Name System (DNS) ...357Over

Chapter 4: Basic Command Line Management Commands100DISABLESyntaxdisableParametersNoneModePrivileged Exec modeDescriptionUse this command to return to

Chapter 64: MAC Address-based VLANs1000

1001Chapter 65MAC Address-based VLAN CommandsThe MAC address-based VLAN commands are summarized in Table 105 and described in detail within the chapte

Chapter 65: MAC Address-based VLAN Commands1002NO VLANSyntaxno vlan vidParametersvidSpecifies the VID of the VLAN you want to delete. You can specify

AT-8100 Switch Command Line User’s Guide1003NO VLAN MACADDRESS (Global Configuration Mode)Syntaxno vlan vid macaddress|destaddress mac-addressParamete

Chapter 65: MAC Address-based VLAN Commands1004NO VLAN MACADDRESS (Port Interface Mode)Syntaxno vlan vid macaddress|destaddress mac-addressParametersv

AT-8100 Switch Command Line User’s Guide1005This example removes the MAC address 00:30:84:75:11:B2 from the egress port 11 to 14 in a VLAN with the VI

Chapter 65: MAC Address-based VLAN Commands1006SHOW VLAN MACADDRESSSyntaxshow vlan macaddressParametersNoneModePrivileged Exec modeDescriptionUse this

AT-8100 Switch Command Line User’s Guide1007The information is described here.ExampleThe following example displays the MAC addresses and egress ports

Chapter 65: MAC Address-based VLAN Commands1008VLAN MACADDRESSSyntaxvlan vid name name type macaddressParametersvidSpecifies a VLAN identifier in the

AT-8100 Switch Command Line User’s Guide1009ExampleThis example creates a MAC address-based VLAN that has the name Sales and the VID 3:awplus> enab

AT-8100 Switch Command Line User’s Guide101DOSyntaxdo commandParametercommandSpecifies the Privileged Exec mode command to perform. Refer to the Descr

Chapter 65: MAC Address-based VLAN Commands1010VLAN SET MACADDRESS (Global Configuration Mode)Syntaxvlan set vid macaddress|destaddress mac-addressPar

AT-8100 Switch Command Line User’s Guide1011This example adds the MAC address 00:30:84:32:76:1A to a MAC address-based VLAN with the VID 12:awplus>

Chapter 65: MAC Address-based VLAN Commands1012VLAN SET MACADDRESS (Port Interface Mode)Syntaxvlan set vid macaddress|destaddress mac-addressParameter

AT-8100 Switch Command Line User’s Guide1013This example assigns the MAC address 00:30:84:75:11:B2 to ports 11 to 14 in a VLAN that has the VID 24:awp

Chapter 65: MAC Address-based VLAN Commands1014

1015Chapter 66 Private Port VLANsThis chapter provides the following topics: “Overview” on page 1016 “Guidelines” on page 1018 “Creating Private VL

Chapter 66: Private Port VLANs1016OverviewPrivate VLANs (also called private port VLANs) create special broadcast domains in which the traffic of the

AT-8100 Switch Command Line User’s Guide1017Private VLANFunctionalityThe following describes host and uplink port functionality in a private VLAN, and

Chapter 66: Private Port VLANs1018GuidelinesHere are the guidelines to private VLANs: A private VLAN can have any number of host ports, up to all the

AT-8100 Switch Command Line User’s Guide1019Creating Private VLANsThe command to initially create private VLANs is the PRIVATE-VLAN command in the VLA

Chapter 4: Basic Command Line Management Commands102 SHOW SYSTEM  WRITEExamplesThis example performs the SHOW INTERFACE command for port 4 from the

Chapter 66: Private Port VLANs1020Adding Host and Uplink PortsPrivate VLANs have host ports and uplink ports. A private VLAN can have more than one up

AT-8100 Switch Command Line User’s Guide1021Deleting VLANsTo delete private VLANs from the switch, use the NO VLAN command in the VLAN Configuration m

Chapter 66: Private Port VLANs1022Displaying Private VLANsThe SHOW VLAN PRIVATE-VLAN command in the Privileged Exec mode displays the private VLANs cu

1023Chapter 67Private Port VLAN CommandsThe private port VLAN commands are summarized in Table 107 and described in detail within the chapter.Table 10

Chapter 67: Private Port VLAN Commands1024NO VLANSyntaxno vlan vidParametersvidSpecifies the VID of the VLAN you want to delete. You can specify just

AT-8100 Switch Command Line User’s Guide1025PRIVATE-VLANSyntaxprivate-vlan vidParametersvidSpecifies a VLAN identifier. The range is 2 to 4094. The VI

Chapter 67: Private Port VLAN Commands1026SHOW VLAN PRIVATE-VLANSyntaxshow vlan private-vlanParametersNoneModePrivileged Exec modeDescriptionUse this

AT-8100 Switch Command Line User’s Guide1027SWITCHPORT MODE PRIVATE-VLAN HOSTSyntaxswitchport mode private-vlan host vidParametersvidSpecifies the VID

Chapter 67: Private Port VLAN Commands1028SWITCHPORT MODE PRIVATE-VLAN PROMISCUOUSSyntaxswitchport mode private-vlan promiscuous vidParametersvidSpeci

1029Chapter 68Voice VLAN CommandsThe voice VLAN commands are summarized in Table 108 and described in detail within the chapter.Table 108. Voice VLAN

AT-8100 Switch Command Line User’s Guide103ENABLESyntaxenableParametersNoneModeUser Exec mode DescriptionUse this command to move from the User Exec m

Chapter 68: Voice VLAN Commands1030NO SWITCHPORT VOICE VLANSyntaxno switchport voice vlanParametersNoneModePort Interface modeDescriptionUse this comm

AT-8100 Switch Command Line User’s Guide1031SWITCHPORT VOICE DSCPSyntaxswitchport voice dscp valueParametersvalueSpecifies a DSCP value of 0 to 63.Mod

Chapter 68: Voice VLAN Commands1032SWITCHPORT VOICE VLANSyntaxswitchport voice vlan <vid>|priority <value>|dynamicParametersvidSpecifies t

AT-8100 Switch Command Line User’s Guide1033 There is an LLDP-MED device connected to the port.To set the priority value to be advertised for tagged

Chapter 68: Voice VLAN Commands1034accept packet):awplus> enableawplus# configure terminalawplus(config)# interface port1.0.1awplus(config-if)# swi

1035Section IXPort SecurityThis section contains the following chapters: Chapter 69, “MAC Address-based Port Security” on page 1037 Chapter 70, “MAC

1036

1037Chapter 69MAC Address-based Port SecurityThis chapter contains the following topics: “Overview” on page 1038 “Configuring Ports” on page 1040 “

Chapter 69: MAC Address-based Port Security1038OverviewThis feature lets you control access to the ports on the switch based on the source MAC address

AT-8100 Switch Command Line User’s Guide1039after learning three addresses. The switch also sends an SNMP trap.Guidelines Here are the guidelines to M

Chapter 4: Basic Command Line Management Commands104ENDSyntaxendParametersNoneModeAll modes below the Global Configuration mode.DescriptionUse this co

Chapter 69: MAC Address-based Port Security1040Configuring PortsThere are three things you need to decide before you configure MAC address-based port

AT-8100 Switch Command Line User’s Guide1041awplus> enableawplus# configure terminalawplus(config)# interface port1.0.4,port1.0.5awplus(config-if)#

Chapter 69: MAC Address-based Port Security1042Enabling MAC Address-based Security on PortsAfter you have configured a port for MAC address-based secu

AT-8100 Switch Command Line User’s Guide1043Disabling MAC Address-based Security on PortsTo remove MAC address-based security from ports, use the NO S

Chapter 69: MAC Address-based Port Security1044Displaying Port SettingsThere are two commands that display information about the MAC address-based por

AT-8100 Switch Command Line User’s Guide1045Figure 185 is an example of the information.Figure 185. Example of SHOW PORT-SECURITY INTRUSION INTERFACE

Chapter 69: MAC Address-based Port Security1046

1047Chapter 70MAC Address-based Port Security CommandsThe MAC address-based port security commands are summarized in Table 110 and described in detail

Chapter 70: MAC Address-based Port Security Commands1048NO SWITCHPORT PORT-SECURITYSyntaxno switchport port-securityParametersNoneModePort Interface m

AT-8100 Switch Command Line User’s Guide1049NO SWITCHPORT PORT-SECURITY AGINGSyntaxno switchport port-security agingParametersNoneModePort Interface m

AT-8100 Switch Command Line User’s Guide105EXITSyntaxexitParametersNoneModeAll modesDescriptionUse this command to move down one mode in the mode hier

Chapter 70: MAC Address-based Port Security Commands1050SHOW PORT-SECURITY INTERFACESyntaxshow port-security interface portParametersportSpecifies the

AT-8100 Switch Command Line User’s Guide1051Port Status The status of the port. The status can be Enabled or Disabled. A port that has a status of Ena

Chapter 70: MAC Address-based Port Security Commands1052ExampleThis example displays the port security settings for ports 5 to 8:awplus# show port-sec

AT-8100 Switch Command Line User’s Guide1053SHOW PORT-SECURITY INTRUSION INTERFACESyntaxshow port-security intrusion interface portParameterportSpecif

Chapter 70: MAC Address-based Port Security Commands1054Figure 188. Example of SHOW PORT-SECURITY INTRUSION INTERFACE CommandPort Security Intrusion L

AT-8100 Switch Command Line User’s Guide1055SWITCHPORT PORT-SECURITYSyntaxswitchport port-securityParametersNoneModePort Interface modeDescriptionUse

Chapter 70: MAC Address-based Port Security Commands1056SWITCHPORT PORT-SECURITY AGINGSyntaxswitchport port-security agingParametersNoneModePort Inter

AT-8100 Switch Command Line User’s Guide1057SWITCHPORT PORT-SECURITY MAXIMUMSyntaxswitchport port-security maximum valueParametersvalueSpecifies the m

Chapter 70: MAC Address-based Port Security Commands1058SWITCHPORT PORT-SECURITY VIOLATIONSyntaxswitchport port-security violation protect|restrict|sh

AT-8100 Switch Command Line User’s Guide1059This example sets the intrusion action for ports 22 to 24 to restrict. After learning their maximum number

Chapter 4: Basic Command Line Management Commands106LENGTHSyntaxlength valueParametersvalueSpecifies the maximum number of lines that the SHOW command

Chapter 70: MAC Address-based Port Security Commands1060

1061Chapter 71802.1x Port-based Network Access ControlThis chapter contains the following topics: “Overview” on page 1062 “Authentication Process” o

Chapter 71: 802.1x Port-based Network Access Control1062OverviewThis chapter explains 802.1x port-based network access control. This port security fea

AT-8100 Switch Command Line User’s Guide1063Authentication ProcessBelow is a brief overview of the authentication process that occurs between a suppli

Chapter 71: 802.1x Port-based Network Access Control1064Port RolesPart of the task to implementing this feature is specifying the roles of the ports o

AT-8100 Switch Command Line User’s Guide1065Figure 189. Example of the Supplicant Role

Chapter 71: 802.1x Port-based Network Access Control1066Authentication Methods for Authenticator PortsAuthenticator ports support two authentication m

AT-8100 Switch Command Line User’s Guide1067Operational Settings for Authenticator PortsAn authenticator port can have one of three possible operation

Chapter 71: 802.1x Port-based Network Access Control1068Operating Modes for Authenticator PortsAuthenticator ports have three modes: Single-host mode

AT-8100 Switch Command Line User’s Guide1069Note, however, that should the supplicant who performed the initial logon fail to periodically reauthentic

AT-8100 Switch Command Line User’s Guide107This example returns the number of lines to the default setting for local management sessions:awplus> en

Chapter 71: 802.1x Port-based Network Access Control1070As mentioned earlier, should the supplicant who performed the initial logon fail to reauthenti

AT-8100 Switch Command Line User’s Guide1071Figure 192. Multi-Supplicant Mode

Chapter 71: 802.1x Port-based Network Access Control1072Supplicant and VLAN AssociationsOne of the challenges to managing a network is accommodating e

AT-8100 Switch Command Line User’s Guide1073Single-Host Mode Here are the operating characteristics for the switch when an authenticator port is set t

Chapter 71: 802.1x Port-based Network Access Control1074Enabled for multi dynamic VLAN creation - AUTH DYNAMIC-VLAN-CREATION MULTIIf dynamic VLAN crea

AT-8100 Switch Command Line User’s Guide1075Guest VLANAn authenticator port in the unauthorized state typically accepts and transmits only 802.1x pack

Chapter 71: 802.1x Port-based Network Access Control1076GuidelinesHere are the general guidelines to this feature: Ports operating under port-based a

AT-8100 Switch Command Line User’s Guide1077 You cannot change the untagged VLAN assignment of a port after it has been designated as an authenticato

Chapter 71: 802.1x Port-based Network Access Control1078Enabling 802.1x Port-Based Network Access Control on the SwitchTo activate 802.1x Port-based N

AT-8100 Switch Command Line User’s Guide1079Configuring Authenticator PortsDesignatingAuthenticatorPortsYou have to designate ports as authenticator p

Chapter 4: Basic Command Line Management Commands108LOGOUTSyntaxlogoutParametersNoneModeUser Exec and Privileged Exec modesDescriptionUse this command

Chapter 71: 802.1x Port-based Network Access Control1080awplus> enableawplus# configure terminalawplus(config)# interface port1.0.12awplus(config-i

AT-8100 Switch Command Line User’s Guide1081This example configures port 1.0.8 to use the multi-host mode so that it forwards traffic from all supplic

Chapter 71: 802.1x Port-based Network Access Control1082Configuring ReauthenticationTable 112 lists the commands in the Port Interface mode for config

AT-8100 Switch Command Line User’s Guide1083Removing Ports from the Authenticator RoleTo remove ports from the authenticator role so that they forward

Chapter 71: 802.1x Port-based Network Access Control1084Configuring Supplicant PortsThis section reviews the commands for configuring supplicant ports

AT-8100 Switch Command Line User’s Guide1085NotePorts have to be set to the supplicant mode with the DOT1X PORT-CONTROL SUPPLICANT command before you

Chapter 71: 802.1x Port-based Network Access Control1086NoteThe management software does not have a separate SHOW command for displaying the settings

AT-8100 Switch Command Line User’s Guide1087Disabling 802.1x Port-Based Network Access Control on the SwitchTo disable 802.1x port-based network acces

Chapter 71: 802.1x Port-based Network Access Control1088Displaying Authenticator PortsTo view the settings of authenticator ports on the switch, use t

AT-8100 Switch Command Line User’s Guide1089Displaying EAP Packet StatisticsTo display EAP packet statistics of authenticator ports, use the SHOW DOT1

AT-8100 Switch Command Line User’s Guide109QUITSyntaxquitParametersNoneModeAll modes except the User Exec and Privileged Exec modes.DescriptionUse thi

Chapter 71: 802.1x Port-based Network Access Control1090

1091Chapter 72802.1x Port-based Network Access Control CommandsThe 802.1x port-based network access control commands are summarized in Table 115 and d

Chapter 72: 802.1x Port-based Network Access Control Commands1092“AUTH-MAC REAUTH-RELEARNING” on page 1107Port Interface Sets the MAC address learning

AT-8100 Switch Command Line User’s Guide1093“DOT1X SUPPLICANT-PARAMS MAX-START” on page 1120Port Interface Specifies the maximum number of times a sup

Chapter 72: 802.1x Port-based Network Access Control Commands1094“SHOW DOT1X” on page 1135 Privileged Exec Displays whether 802.1x port-based network

AT-8100 Switch Command Line User’s Guide1095AAA AUTHENTICATION DOT1X DEFAULT GROUP RADIUSSyntaxaaa authentication dot1x default group radiusParameters

Chapter 72: 802.1x Port-based Network Access Control Commands1096AUTH DYNAMIC-VLAN-CREATIONSyntaxauth dynamic-vlan-creation single| multiParameterssin

AT-8100 Switch Command Line User’s Guide1097This example activates multiple dynamic VLAN assignment on authenticator port 1.0.4.awplus> enableawplu

Chapter 72: 802.1x Port-based Network Access Control Commands1098AUTH GUEST-VLANSyntaxauth guest-vlan vidParametersvidSpecifies the ID number of a VLA

AT-8100 Switch Command Line User’s Guide1099AUTH HOST-MODESyntaxauth host-mode single-host| multi-host| multi-supplicantParameterssingle-hostSpecifies

AT-8100 Switch Command Line User’s Guide11General Steps...

Chapter 4: Basic Command Line Management Commands110WRITESyntaxwriteParametersNoneModePrivileged Exec modeDescriptionUse this command to update the ac

Chapter 72: 802.1x Port-based Network Access Control Commands1100This example configures authenticator port 1.0.8 to the multi-host operating mode, so

AT-8100 Switch Command Line User’s Guide1101AUTH REAUTHENTICATIONSyntaxauth reauthenticationParametersNoneModePort Interface modeDescriptionUse this c

Chapter 72: 802.1x Port-based Network Access Control Commands1102AUTH TIMEOUT QUIET-PERIODSyntaxauth timeout quiet-period valueParametersquiet-periodS

AT-8100 Switch Command Line User’s Guide1103AUTH TIMEOUT REAUTH-PERIODSyntaxauth timeout reauth-period valueParametersreauth-periodSpecifies the time

Chapter 72: 802.1x Port-based Network Access Control Commands1104AUTH TIMEOUT SERVER-TIMEOUTSyntaxauth timeout server-timeout valueParametersserver-ti

AT-8100 Switch Command Line User’s Guide1105AUTH TIMEOUT SUPP-TIMEOUTSyntaxauth timeout supp-timeout valueParameterssupp-timeoutSets the switch-to-sup

Chapter 72: 802.1x Port-based Network Access Control Commands1106AUTH-MAC ENABLESyntaxauth-mac enableParametersNoneModePort Interface modeDescriptionU

AT-8100 Switch Command Line User’s Guide1107AUTH-MAC REAUTH-RELEARNINGSyntaxauth-mac reauth-relearningParametersNoneModePort Interface modeDescription

Chapter 72: 802.1x Port-based Network Access Control Commands1108DOT1X CONTROL-DIRECTIONSyntaxdot1x control-direction in|bothParametersinDiscard recei

AT-8100 Switch Command Line User’s Guide1109awplus> enableawplus# configure terminalawplus(config)# interface port1.0.2awplus(config-if)# dot1x con

111Chapter 5Temperature and Fan Control Overview “Overview” on page 112 “Displaying the System Environmental Status” on page 113 “Controlling Eco-M

Chapter 72: 802.1x Port-based Network Access Control Commands1110DOT1X EAPSyntaxdot1x eap discard|forward|forward-untagged-vlan|forward-vlanParameters

AT-8100 Switch Command Line User’s Guide1111This example configures the switch to discard all EAP packets when 802.1x authentication is disabled:awplu

Chapter 72: 802.1x Port-based Network Access Control Commands1112DOT1X INITIALIZE INTERFACESyntaxdot1x initialize interface portParametersportSpecifie

AT-8100 Switch Command Line User’s Guide1113DOT1X MAX-REAUTH-REQSyntaxdot1x max-reauth-req valueParametersmax-reauth-reqSpecifies the maximum number o

Chapter 72: 802.1x Port-based Network Access Control Commands1114DOT1X PORT-CONTROL AUTOSyntaxdot1x port-control autoParametersNoneModePort Interface

AT-8100 Switch Command Line User’s Guide1115DOT1X PORT-CONTROL FORCE-AUTHORIZEDSyntaxdot1x port-control force-authorizedParametersNoneModePort Interfa

Chapter 72: 802.1x Port-based Network Access Control Commands1116DOT1X PORT-CONTROL FORCE-UNAUTHORIZEDSyntaxdot1x port-control force-unauthorizedParam

AT-8100 Switch Command Line User’s Guide1117DOT1X PORT-CONTROL SUPPLICANTSyntaxdot1x port-control supplicantParametersNoneModePort Interface modeDescr

Chapter 72: 802.1x Port-based Network Access Control Commands1118DOT1X SUPPLICANT-PARAMS AUTH-PERIODSyntaxdot1x supplicant-params auth-period valuePar

AT-8100 Switch Command Line User’s Guide1119DOT1X SUPPLICANT-PARAMS HELD-PERIODSyntaxdot1x supplicant-params held-period valueParametersvalueSpecifies

Chapter 5: Temperature and Fan Control Overview112OverviewThe switch monitors the environmental status, such as temperature and voltage, and the statu

Chapter 72: 802.1x Port-based Network Access Control Commands1120DOT1X SUPPLICANT-PARAMS MAX-STARTSyntaxdot1x supplicant-params max-start valueParamet

AT-8100 Switch Command Line User’s Guide1121DOT1X SUPPLICANT-PARAMS PASSWORDSyntaxdot1x supplicant-params password valueParametersvalueAssigns passwor

Chapter 72: 802.1x Port-based Network Access Control Commands1122DOT1X SUPPLICANT-PARAMS USERNAMESyntaxdot1x supplicant-params username usernameParame

AT-8100 Switch Command Line User’s Guide1123DOT1X TIMEOUT TX-PERIODSyntaxdot1x timeout tx-period valueParametersvalueSets the number of seconds an aut

Chapter 72: 802.1x Port-based Network Access Control Commands1124NO AAA AUTHENTICATION DOT1X DEFAULT GROUP RADIUSSyntaxno aaa authentication dot1x def

AT-8100 Switch Command Line User’s Guide1125NO AUTH DYNAMIC-VLAN-CREATIONSyntaxno auth dynamic-vlan-creationParametersNoneModePort Interface modeDescr

Chapter 72: 802.1x Port-based Network Access Control Commands1126NO AUTH GUEST-VLANSyntaxno auth guest-vlanParametersNoneModePort Interface modeDescri

AT-8100 Switch Command Line User’s Guide1127NO AUTH REAUTHENTICATIONSyntaxno auth reauthenticationParametersNoneModePort Interface modeDescriptionUse

Chapter 72: 802.1x Port-based Network Access Control Commands1128NO AUTH-MAC ENABLESyntaxno auth-mac enableParametersNoneModePort Interface modeDescri

AT-8100 Switch Command Line User’s Guide1129NO DOT1X PORT-CONTROLSyntaxno dot1x port-controlParametersNoneModePort Interface modeDescriptionUse this c

AT-8100 Switch Command Line User’s Guide113Displaying the System Environmental StatusThe switch monitors the environmental status of the switch and an

Chapter 72: 802.1x Port-based Network Access Control Commands1130NO DOT1X PORT-CONTROL SUPPLICANTSyntaxno dot1x port-control supplicantParametersNoneM

AT-8100 Switch Command Line User’s Guide1131SHOW AUTH-MAC INTERFACESyntaxshow auth-mac interface portParametersportSpecifies a port. You can display m

Chapter 72: 802.1x Port-based Network Access Control Commands1132SHOW AUTH-MAC SESSIONSTATISTICS INTERFACESyntaxshow auth-mac sessionstatistics interf

AT-8100 Switch Command Line User’s Guide1133SHOW AUTH-MAC STATISTICS INTERFACESyntaxshow auth-mac statistics interface portParametersportSpecifies a p

Chapter 72: 802.1x Port-based Network Access Control Commands1134SHOW AUTH-MAC SUPPLICANT INTERFACESyntaxshow auth-mac supplicant interface portParame

AT-8100 Switch Command Line User’s Guide1135SHOW DOT1XSyntaxshow dot1xParametersNoneModePrivileged Exec modeDescriptionUse this command to display whe

Chapter 72: 802.1x Port-based Network Access Control Commands1136SHOW DOT1X INTERFACESyntaxshow dot1x interface portParametersportSpecifies a port. Yo

AT-8100 Switch Command Line User’s Guide1137SHOW DOT1X STATISTICS INTERFACESyntaxshow dot1x statistics interface portParametersportSpecifies a port. Y

Chapter 72: 802.1x Port-based Network Access Control Commands1138SHOW DOT1X SUPPLICANT INTERFACESyntaxshow dot1x supplicant interface port [brief]Para

AT-8100 Switch Command Line User’s Guide1139ExampleThis example displays the supplicant state of the authentication mode on ports 1.0.21 to 1.0.23:awp

Chapter 5: Temperature and Fan Control Overview114Controlling Eco-Mode LEDAlliedWare Plus products provide an Eco-Mode LED control to conserve additio

Chapter 72: 802.1x Port-based Network Access Control Commands1140

1141Section XSimple Network Management ProtocolsThis section contains the following chapters: Chapter 73, “SNMPv1 and SNMPv2c” on page 1143 Chapter

1142

1143Chapter 73SNMPv1 and SNMPv2cThis chapter contains the following topics: “Overview” on page 1144 “Enabling SNMPv1 and SNMPv2c” on page 1146 “Cre

Chapter 73: SNMPv1 and SNMPv2c1144OverviewThe Simple Network Management Protocol (SNMP) is another way for you to monitor and configure the switch. Th

AT-8100 Switch Command Line User’s Guide1145To configure the switch to send trap or inform messages, you have to add to one or more of the community s

Chapter 73: SNMPv1 and SNMPv2c1146Enabling SNMPv1 and SNMPv2cTo enable SNMP on the switch, use the SNMP-SERVER command, found in the Global Configurat

AT-8100 Switch Command Line User’s Guide1147Creating Community StringsTo create SNMPv1 and SNMPv2c community strings, use the SNMP-SERVER COMMUNITY co

Chapter 73: SNMPv1 and SNMPv2c1148Adding or Removing IP Addresses of Trap or Inform ReceiversThe command to add IP addresses of trap or inform receive

AT-8100 Switch Command Line User’s Guide1149This example assigns the IP address 143.154.76.17 as an inform message receiver to the community string “s

115Chapter 6Temperature and Fan Control CommandsThe temperature and fan control commands are summarized in Table 6.Table 6. Temperature and Fan Contro

Chapter 73: SNMPv1 and SNMPv2c1150Deleting Community StringsTo delete community strings, use the NO SNMP-SERVER COMMUNITY command. Here is the format:

AT-8100 Switch Command Line User’s Guide1151Disabling SNMPv1 and SNMPv2cTo disable SNMP on the switch, use the NO SNMP-SERVER command. You cannot remo

Chapter 73: SNMPv1 and SNMPv2c1152Displaying SNMPv1 and SNMPv2cTo learn whether SNMP is enabled or disabled on the switch, go to the Privileged Exec m

AT-8100 Switch Command Line User’s Guide1153To view the trap and inform receivers assigned to the community strings, use the SHOW RUNNING-CONFIG SNMP

Chapter 73: SNMPv1 and SNMPv2c1154

1155Chapter 74SNMPv1 and SNMPv2c CommandsThe SNMPv1 and SNMPv2c commands are summarized in Table 116 and described in detail within the chapter.Table

Chapter 74: SNMPv1 and SNMPv2c Commands1156“SHOW SNMP-SERVER VIEW” on page 1169Privileged Exec Displays the SNMP views.“SNMP-SERVER” on page 1170 Glob

AT-8100 Switch Command Line User’s Guide1157NO SNMP-SERVERSyntaxno snmp-serverParametersNoneModeGlobal Configuration modeDescriptionUse this command t

Chapter 74: SNMPv1 and SNMPv2c Commands1158NO SNMP-SERVER COMMUNITYSyntaxno snmp-server community communityParametercommunitySpecifies an SNMP communi

AT-8100 Switch Command Line User’s Guide1159NO SNMP-SERVER ENABLE TRAPSyntaxno snmp-server enable trapParametersNoneModeGlobal Configuration modeDescr

Chapter 6: Temperature and Fan Control Commands116ECOFRIENDLY LEDSyntaxecofriendly ledParametersNoneModeGlobal Configuration modeDescriptionUse this c

Chapter 74: SNMPv1 and SNMPv2c Commands1160NO SNMP-SERVER ENABLE TRAP AUTHSyntaxno snmp-server enable trap authParametersNoneModeGlobal Configuration

AT-8100 Switch Command Line User’s Guide1161NO SNMP-SERVER HOSTSyntaxno snmp-server host ipaddress traps|informs version 1|2c community_stringParamete

Chapter 74: SNMPv1 and SNMPv2c Commands1162ExamplesThis example removes the IPv4 address 115.124.187.4 of a trap receiver from the private community s

AT-8100 Switch Command Line User’s Guide1163NO SNMP-SERVER VIEWSyntaxno snmp-server view viewname oidParametersviewnameSpecifies the name of the view

Chapter 74: SNMPv1 and SNMPv2c Commands1164NO SNMP TRAP LINK-STATUSSyntaxno snmp trap link-statusParametersNoneModePort Interface modeDescriptionUse t

AT-8100 Switch Command Line User’s Guide1165SHOW RUNNING-CONFIG SNMPSyntaxshow running-config snmpParametersNoneModePrivileged Exec modeDescriptionUse

Chapter 74: SNMPv1 and SNMPv2c Commands1166SHOW SNMP-SERVERSyntaxshow snmp-serverParametersNoneModePrivileged Exec modeDescriptionUse this command to

AT-8100 Switch Command Line User’s Guide1167SHOW SNMP-SERVER COMMUNITYSyntaxshow snmp-server communityParametersNoneModePrivileged Exec modeDescriptio

Chapter 74: SNMPv1 and SNMPv2c Commands1168ExampleThis example displays the SNMPv1 and SNMPv2c community strings:awplus# show snmp-server community

AT-8100 Switch Command Line User’s Guide1169SHOW SNMP-SERVER VIEWSyntaxshow snmp-server viewParametersNoneModePrivileged Exec modeDescriptionUse this

AT-8100 Switch Command Line User’s Guide117NO ECOFRIENDLY LEDSyntaxno ecofriendly ledParametersNoneModeGlobal Configuration modeDescriptionUse this co

Chapter 74: SNMPv1 and SNMPv2c Commands1170SNMP-SERVERSyntaxsnmp-serverParametersNoneModeGlobal Configuration modeDescriptionUse this command to activ

AT-8100 Switch Command Line User’s Guide1171SNMP-SERVER COMMUNITYSyntaxsnmp-server community community rw|roParameterscommunitySpecifies a new communi

Chapter 74: SNMPv1 and SNMPv2c Commands1172SNMP-SERVER ENABLE TRAPSyntaxsnmp-server enable trapParametersNoneModeGlobal Configuration modeDescriptionU

AT-8100 Switch Command Line User’s Guide1173SNMP-SERVER ENABLE TRAP AUTHSyntaxsnmp-server enable trap authParametersNoneModeGlobal Configuration modeD

Chapter 74: SNMPv1 and SNMPv2c Commands1174SNMP-SERVER HOSTSyntaxsnmp-server host ipaddress traps|informs version 1|2c communityParametersipaddressSpe

AT-8100 Switch Command Line User’s Guide1175ExamplesThis example assigns the IPv4 address 149.44.12.44 of a trap receiver to the private community str

Chapter 74: SNMPv1 and SNMPv2c Commands1176SNMP-SERVER VIEWSyntaxsnmp-server view viewname oid excluded|includedParametersviewnameSpecifies the name o

AT-8100 Switch Command Line User’s Guide1177This example creates the new view “AlliedTelesis” that limits the available MIB objects to those in the OI

Chapter 74: SNMPv1 and SNMPv2c Commands1178SNMP TRAP LINK-STATUSSyntaxsnmp trap link-statusParametersNoneModePort Interface modeDescriptionUse this co

1179Chapter 75SNMPv3 CommandsThe SNMPv3 commands are summarized in Table 119 and described in detail within the chapter.Table 119. SNMPv3 CommandsComm

Chapter 6: Temperature and Fan Control Commands118SHOW ECOFRIENDLYSyntaxshow ecofriendlyParametersNoneModePrivileged Exec modeDescriptionUse this comm

Chapter 75: SNMPv3 Commands1180“SNMP-SERVER GROUP” on page 1195Global ConfigurationCreates SNMPv3 groups.“SNMP-SERVER HOST” on page 1197Global Configu

AT-8100 Switch Command Line User’s Guide1181NO SNMP-SERVERSyntaxno snmp-serverParametersNoneModeGlobal Configuration modeDescriptionUse this command t

Chapter 75: SNMPv3 Commands1182NO SNMP-SERVER ENGINEID LOCALSyntaxno snmp-server engineid localParametersNoneModeGlobal Configuration modeDescriptionU

AT-8100 Switch Command Line User’s Guide1183NO SNMP-SERVER GROUPSyntaxno snmp-server group name noauth|auth|privParametersnameSpecifies the name of a

Chapter 75: SNMPv3 Commands1184NO SNMP-SERVER HOSTSyntaxno snmp-server host ipaddress informs|traps v3 auth|noauth|priv usernameParametersipaddressSpe

AT-8100 Switch Command Line User’s Guide1185ExampleThis example deletes the host entry with the IPv4 address 187.87.165.12. The user name associated w

Chapter 75: SNMPv3 Commands1186NO SNMP-SERVER USERSyntaxno snmp-server user userParametersuserSpecifies the name of a user you want to delete from the

AT-8100 Switch Command Line User’s Guide1187NO SNMP-SERVER VIEWSyntaxno snmp-server view view OIDParametersviewSpecifies the name of a view to be dele

Chapter 75: SNMPv3 Commands1188SHOW SNMP-SERVERSyntaxshow snmp-serverParametersNoneModePrivileged Exec modeDescriptionUse this command to display the

AT-8100 Switch Command Line User’s Guide1189SHOW SNMP-SERVER GROUPSyntaxshow snmp-server groupParametersNoneModePrivileged Exec modeDescriptionUse thi

AT-8100 Switch Command Line User’s Guide119SHOW SYSTEM ENVIRONMENTSyntaxshow system environmentParametersNoneModePrivileged Exec modeDescriptionUse th

Chapter 75: SNMPv3 Commands1190SHOW SNMP-SERVER HOSTSyntaxshow snmp-server hostParametersNoneModePrivileged Exec modeDescriptionUse this command to di

AT-8100 Switch Command Line User’s Guide1191SHOW SNMP-SERVER USERSyntaxshow snmp-server userParametersNoneModePrivileged Exec modeDescriptionUse this

Chapter 75: SNMPv3 Commands1192SHOW SNMP-SERVER VIEWSyntaxshow snmp-server viewParameterNoneModePrivileged Exec modeDescriptionUse this command to dis

AT-8100 Switch Command Line User’s Guide1193SNMP-SERVERSyntaxsnmp-serverParametersNoneModeGlobal Configuration modeDescriptionUse this command to acti

Chapter 75: SNMPv3 Commands1194SNMP-SERVER ENGINEID LOCALSyntaxsnmp-server engineid local engine-id|defaultParametersengine-idSpecifies the SNMPv3 eng

AT-8100 Switch Command Line User’s Guide1195SNMP-SERVER GROUPSyntaxsnmp-server group name auth|noauth|priv read readview|write writeviewParametersname

Chapter 75: SNMPv3 Commands1196ExamplesThis example creates a group called “sta5west” with a minimum security level of privacy. The group has a read v

AT-8100 Switch Command Line User’s Guide1197SNMP-SERVER HOSTSyntaxsnmp-server host ipaddress informs|traps version 3 auth|noauth|priv usernameParamete

Chapter 75: SNMPv3 Commands1198ExampleThis example configures SNMPv3 to send trap messages to an end node with the IPv4 address 149.157.192.12. The us

AT-8100 Switch Command Line User’s Guide1199SNMP-SERVER USERSyntaxsnmp-server user username groupname [auth sha|md5 auth_password] [priv des priv_pass

Contents12Configuring the Maximum Hop Count...491Activati

Chapter 6: Temperature and Fan Control Commands120Figure 34 shows an example of the information that the command displays when the switch is a stack m

Chapter 75: SNMPv3 Commands1200 To create a user that has authentication but not privacy, include the AUTH keyword but not the PRIV keyword. To crea

AT-8100 Switch Command Line User’s Guide1201SNMP-SERVER VIEWSyntaxsnmp-server view viewname oid excluded|includedParametersviewnameSpecifies the name

Chapter 75: SNMPv3 Commands1202This example creates the new view “AlliedTelesis” that limits the available MIB objects to those in the OID 1.3.6.1.4.1

1203Section XINetwork ManagementThis section contains the following chapters: Chapter 76, “sFlow Agent” on page 1205 Chapter 77, “sFlow Agent Comman

1204

1205Chapter 76sFlow AgentThis chapter contains the following topics: “Overview” on page 1206 “Configuring the sFlow Agent” on page 1208 “Configurin

Chapter 76: sFlow Agent1206OverviewThe sFlow agent allows the switch to gather data about the traffic on the ports and to send the data to an sFlow co

AT-8100 Switch Command Line User’s Guide1207 Number of ingress and egress packets with errors Number of ingress packets with unknown protocolsTo con

Chapter 76: sFlow Agent1208Configuring the sFlow AgentThe command for defining the IP address of the sFlow collector is the SFLOW COLLECTOR IP command

AT-8100 Switch Command Line User’s Guide1209Configuring the PortsTo configure the ports so that their performance data is collected by the sFlow agent

AT-8100 Switch Command Line User’s Guide121awplus# show system environment

Chapter 76: sFlow Agent1210Configuring thePolling IntervalThe polling interval determines how frequently the agent queries the packet counters of the

AT-8100 Switch Command Line User’s Guide1211Enabling the sFlow AgentUse the SFLOW ENABLE command in the Global Configuration mode to activate the sFlo

Chapter 76: sFlow Agent1212Disabling the sFlow AgentTo stop the sFlow agent from collecting performance data on the ports on the switch and from sendi

AT-8100 Switch Command Line User’s Guide1213Displaying the sFlow AgentTo view the IP addresses and UDP port settings of the collectors as defined in t

Chapter 76: sFlow Agent1214Configuration ExampleHere is an example of how to configure the sFlow agent. The IP address of the sFlow collector is 152.2

AT-8100 Switch Command Line User’s Guide1215This last command activates the sFlow agent on the switch.Depending on the amount of traffic on the ports

Chapter 76: sFlow Agent1216

1217Chapter 77sFlow Agent CommandsThe sFlow agent commands are summarized in Table 120 and described in detail within the chapter.Table 120. sFlow Age

Chapter 77: sFlow Agent Commands1218NO SFLOW COLLECTOR IPSyntaxno sflow collector ip ipaddressParametersipaddressSpecifies the IP address of an sFlow

AT-8100 Switch Command Line User’s Guide1219NO SFLOW ENABLESyntaxno sflow enableParametersNoneModeGlobal Configuration modeDescriptionUse this command

Chapter 6: Temperature and Fan Control Commands122

Chapter 77: sFlow Agent Commands1220SFLOW COLLECTOR IPSyntaxsflow collector ip ipaddress [port udp_port]ParametersipaddressSpecifies the IP address of

AT-8100 Switch Command Line User’s Guide1221SFLOW ENABLESyntaxsflow enableParametersNoneModeGlobal Configuration modeDescriptionUse this command to ac

Chapter 77: sFlow Agent Commands1222SFLOW POLLING-INTERVALSyntaxsflow polling-interval polling-intervalParameterspolling-intervalSpecifies the maximum

AT-8100 Switch Command Line User’s Guide1223This example removes sFlow monitoring on port 21 using the NO form of the command:awplus> enableawplus#

Chapter 77: sFlow Agent Commands1224SFLOW SAMPLING-RATESyntaxsflow sampling-rate sampling-rateParameterssampling-rateSpecifies the sampling rate on a

AT-8100 Switch Command Line User’s Guide1225This example disables packet sampling on port 7:awplus> enableawplus# configure terminalawplus(config)#

Chapter 77: sFlow Agent Commands1226SHOW SFLOWSyntaxshow sflow [database]ParametersNoneModePrivileged Exec modeDescriptionUse this command to display

AT-8100 Switch Command Line User’s Guide1227The fields are described in Table 121.Table 121. SHOW SFLOW CommandParameter DescriptionNumber of Collecto

Chapter 77: sFlow Agent Commands1228ExampleThis example displays the settings of the sFlow agent:awplus> enableawplus# show sflow

1229Chapter 78LLDP and LLDP-MEDThis chapter contains the following topics “Overview” on page 1230 “Enabling LLDP and LLDP-MED on the Switch” on page

123Section IIBasic OperationsThis section contains the following chapters: Chapter 7, “Basic Switch Management” on page 125 Chapter 8, “Basic Switch

Chapter 78: LLDP and LLDP-MED1230OverviewLink Layer Discovery Protocol (LLDP) and Link Layer Discovery Protocol for Media Endpoint Devices (LLDP-MED)

AT-8100 Switch Command Line User’s Guide1231MandatoryLLDP TLVsMandatory LLDP TLVs are sent by default on ports that send TLVs. The TLVs are defined in

Chapter 78: LLDP and LLDP-MED1232System capabilities The device’s router and bridge functions, and whether or not these functions are currently enable

AT-8100 Switch Command Line User’s Guide1233The switch does not verify whether a device connected to a port is LLDP-compatible prior to sending mandat

Chapter 78: LLDP and LLDP-MED1234Extended power managementThe following PoE information: Power Type field: Power Sourcing Entity (PSE). Power Source

AT-8100 Switch Command Line User’s Guide1235Enabling LLDP and LLDP-MED on the SwitchTo enable LLDP and LLDP-MED on the switch, use the LLDP RUN comman

Chapter 78: LLDP and LLDP-MED1236Configuring Ports to Only Receive LLDP and LLDP-MED TLVsThis is the first in a series of examples that show how to co

AT-8100 Switch Command Line User’s Guide1237Configuring Ports to Send Only Mandatory LLDP TLVsThis example illustrates how to configure the ports to r

Chapter 78: LLDP and LLDP-MED1238Configuring Ports to Send Optional LLDP TLVsThis example illustrates how to configure the ports to send optional LLDP

AT-8100 Switch Command Line User’s Guide1239Here are the commands to configure the ports to send the TLVs:awplus> enableEnter the Privileged Execut

124Chapter 30, “DHCP Relay Commands” on page 493 Chapter 31, “Group Link Control” on page 511 Chapter 32, “Group Link Control Commands” on page 525

Chapter 78: LLDP and LLDP-MED1240Configuring Ports to Send Optional LLDP-MED TLVsThis section explains how to configure the ports to send these option

AT-8100 Switch Command Line User’s Guide1241awplus# show lldp interface port1.0.3,port1.0.4Use the SHOW LLDP INTERFACE command to confirm the configur

Chapter 78: LLDP and LLDP-MED1242Configuring Ports to Send LLDP-MED Civic Location TLVsCivic location TLVs specify the physical addresses of network d

AT-8100 Switch Command Line User’s Guide12433. Move to the Port Interface mode of the ports to which the entry is to be assigned. (A civic location en

Chapter 78: LLDP and LLDP-MED1244This series of commands adds the new location entry to port 14 and configures the port to include the location TLV in

AT-8100 Switch Command Line User’s Guide1245Configuring Ports to Send LLDP-MED Coordinate Location TLVsCoordinate location TLVs specify the locations

Chapter 78: LLDP and LLDP-MED12463. Move to the Port Interface mode of the ports to which the entry is to be assigned. (A coordinate location entry ca

AT-8100 Switch Command Line User’s Guide1247This series of commands adds the entry to port 15 and configures the port to include the TLV in its advert

Chapter 78: LLDP and LLDP-MED1248awplus# show location coord-location interface port1.0.15Use the SHOW LOCATION command to confirm the configuration.a

AT-8100 Switch Command Line User’s Guide1249Configuring Ports to Send LLDP-MED ELIN Location TLVsThis type of TLV specifies the location of a network

125Chapter 7Basic Switch ManagementThis chapter contains the following: “Adding a Name to the Switch” on page 126 “Adding Contact and Location Infor

Chapter 78: LLDP and LLDP-MED1250This series of commands adds the entry to port 5 and configures the port to include the TLV in its advertisements:awp

AT-8100 Switch Command Line User’s Guide1251Removing LLDP TLVs from PortsTo stop ports from sending optional LLDP TLVs, use this command:no lldp tlv-s

Chapter 78: LLDP and LLDP-MED1252Removing LLDP-MED TLVs from PortsTo remove optional LLDP-MED TLVs from ports, use the NO LLDP MED-TLV-SELECT command:

AT-8100 Switch Command Line User’s Guide1253Deleting LLDP-MED Location EntriesThe command for deleting LLDP-MED location entries from the switch is:no

Chapter 78: LLDP and LLDP-MED1254Disabling LLDP and LLDP-MED on the SwitchTo disable LLDP and LLDP-MED on the switch, use the NO LLDP RUN command in t

AT-8100 Switch Command Line User’s Guide1255Displaying General LLDP SettingsTo view the timers and other general LLDP and LLDP-MED settings, use the S

Chapter 78: LLDP and LLDP-MED1256Displaying Port SettingsTo view the LLDP and LLDP-MED settings of the individual ports on the switch, use the SHOW LL

AT-8100 Switch Command Line User’s Guide1257Displaying or Clearing Neighbor InformationThere are two commands for displaying the information the switc

Chapter 78: LLDP and LLDP-MED1258This example clears the information the switch has received from all the neighbors:awplus> enableawplus# clear lld

AT-8100 Switch Command Line User’s Guide1259Displaying Port TLVsTo view the TLVs of the individual ports on the switch, use the SHOW LLDP LOCAL-INFO I

Chapter 7: Basic Switch Management126Adding a Name to the SwitchThe switch will be easier to identify if you assign it a name. The switch displays its

Chapter 78: LLDP and LLDP-MED1260Displaying and Clearing StatisticsThe switch maintains LLDP and LLDP-MED performance statistics for the the individua

1261Chapter 79LLDP and LLDP-MED CommandsThe Link Layer Discovery Protocol commands are summarized in Table 128 and described in detail within the chap

Chapter 79: LLDP and LLDP-MED Commands1262“LLDP NOTIFICATION-INTERVAL” on page 1276Global ConfigurationSets the notification interval, which is the mi

AT-8100 Switch Command Line User’s Guide1263“NO LLDP MED-TLV-SELECT” on page 1293Port Interface Stops ports from transmitting specified LLDP-MED TLVs.

Chapter 79: LLDP and LLDP-MED Commands1264CLEAR LLDP STATISTICSSyntaxclear lldp statistics [interface port]ParametersportSpecifies a port. You can spe

AT-8100 Switch Command Line User’s Guide1265CLEAR LLDP TABLESyntaxclear lldp table [interface port]ParametersportSpecifies a port. You can specify mor

Chapter 79: LLDP and LLDP-MED Commands1266LLDP HOLDTIME-MULTIPLIERSyntaxlldp holdtime-multiplier holdtime-multiplierParametersholdtime-multiplierSpeci

AT-8100 Switch Command Line User’s Guide1267LLDP LOCATIONSyntaxlldp location civic-location-id|coord-location-id|elin-location-id location_idParameter

Chapter 79: LLDP and LLDP-MED Commands1268This example adds the coordinate location ID 11 to port 2:awplus> enableawplus# configure terminalawplus(

AT-8100 Switch Command Line User’s Guide1269LLDP MANAGEMENT-ADDRESSSyntaxlldp management-address ipaddressParametersipaddressSpecifies an IP address.M

AT-8100 Switch Command Line User’s Guide127Adding Contact and Location InformationThe commands for assigning the switch contact and location informati

Chapter 79: LLDP and LLDP-MED Commands1270ExamplesThis example configures port 2 to transmit the IP address 149.122.54.2 as its management IP address

AT-8100 Switch Command Line User’s Guide1271LLDP MED-NOTIFICATIONSSyntaxlldp med-notificationsParametersNoneModePort Interface modeDescriptionUse this

Chapter 79: LLDP and LLDP-MED Commands1272LLDP MED-TLV-SELECTSyntaxlldp med-tlv-select capabilities|network-policy|location|power-management-ext|inven

AT-8100 Switch Command Line User’s Guide1273ExamplesThis example configures ports 3 to 8 to send the inventory management TLV to their neighbors:awplu

Chapter 79: LLDP and LLDP-MED Commands1274LLDP NON-STRICT-MED-TLV-ORDER-CHECKSyntaxlldp non-strict-med-tlv-order-checkParametersNoneModeGlobal Configu

AT-8100 Switch Command Line User’s Guide1275LLDP NOTIFICATIONSSyntaxlldp notificationsParametersNoneModePort Interface modeDescriptionUse this command

Chapter 79: LLDP and LLDP-MED Commands1276LLDP NOTIFICATION-INTERVALSyntaxlldp notification-interval intervalParametersintervalSpecifies the notificat

AT-8100 Switch Command Line User’s Guide1277LLDP REINITSyntaxlldp reinit delayParametersdelaySpecifies the re-initialization delay value. The range is

Chapter 79: LLDP and LLDP-MED Commands1278LLDP RUNSyntaxlldp runParametersNoneModeGlobal Configuration modeDescriptionUse this command to activate LLD

AT-8100 Switch Command Line User’s Guide1279LLDP TIMERSyntaxlldp timer intervalParametersintervalSpecifies the transmit interval. The range is 5 to 32

Chapter 7: Basic Switch Management128Displaying Parameter SettingsTo display the current parameter settings on the switch, use the SHOW RUNNING-CONFIG

Chapter 79: LLDP and LLDP-MED Commands1280LLDP TLV-SELECTSyntaxlldp tlv-select all|tlvParametersallConfigures a port to send all optional TLVs.tlvSpec

AT-8100 Switch Command Line User’s Guide1281To remove optional TLVs from ports, refer to “NO LLDP TLV-SELECT” on page 1297.Confirmation Command“SHOW L

Chapter 79: LLDP and LLDP-MED Commands1282ExamplesThis example configures ports 3 to 5 to transmit all the optional LLDP TLVs:awplus> enableawplus#

AT-8100 Switch Command Line User’s Guide1283LLDP TRANSMIT RECEIVESyntaxlldp transmit receive|transmitParameterstransmitConfigures ports to send LLDP a

Chapter 79: LLDP and LLDP-MED Commands1284LLDP TX-DELAYSyntaxlldp tx-delay tx-delayParameterstx-delaySpecifies the transmission delay timer in seconds

AT-8100 Switch Command Line User’s Guide1285LOCATION CIVIC-LOCATIONSyntaxlocation civic-location identifier id_numberParametersid_numberSpecifies an I

Chapter 79: LLDP and LLDP-MED Commands1286Here are the guidelines to using the location parameters: The country parameter must be two uppercase chara

AT-8100 Switch Command Line User’s Guide1287After you create a location entry, use “LLDP LOCATION” on page 1267 to assign the location entry to a port

Chapter 79: LLDP and LLDP-MED Commands1288LOCATION COORD-LOCATIONSyntaxlocation coordinate-location identifier id_numberParametersid_numberSpecifies a

AT-8100 Switch Command Line User’s Guide1289This command is also used to remove parameter values from existing LLDP-MED coordinate location entries. T

AT-8100 Switch Command Line User’s Guide129Manually Setting the Date and TimeTo manually set the date and time on the switch, use the CLOCK SET comman

Chapter 79: LLDP and LLDP-MED Commands1290ExamplesThis example creates a new coordinate location entry with these specifications.ID number: 16Latitud

AT-8100 Switch Command Line User’s Guide1291LOCATION ELIN-LOCATIONSyntaxlocation elin-location elin_id identifier id_numberParameterselin_idSpecifies

Chapter 79: LLDP and LLDP-MED Commands1292NO LLDP MED-NOTIFICATIONSSyntaxno lldp med-notificationsParametersNoneModePort Interface modeDescriptionUse

AT-8100 Switch Command Line User’s Guide1293NO LLDP MED-TLV-SELECTSyntaxno lldp med-tlv-select capabilities|network-policy|location|power-management-e

Chapter 79: LLDP and LLDP-MED Commands1294ExamplesThis example stops port 8 from transmitting all LLDP-MED TLVs:awplus> enableawplus# configure ter

AT-8100 Switch Command Line User’s Guide1295NO LLDP NOTIFICATIONSSyntaxno lldp notificationsParametersNoneModePort Interface modeDescriptionUse this c

Chapter 79: LLDP and LLDP-MED Commands1296NO LLDP RUNSyntaxno lldp runParametersNoneModeGlobal Configuration modeDescriptionUse this command to disabl

AT-8100 Switch Command Line User’s Guide1297NO LLDP TLV-SELECTSyntaxno lldp tlv-select all|tlvParametersallRemoves all optional LLDP TLVs from a port.

Chapter 79: LLDP and LLDP-MED Commands1298NO LLDP TRANSMIT RECEIVESyntaxno lldp transmit|receiveParameterstransmitStops ports from sending LLDP and LL

AT-8100 Switch Command Line User’s Guide1299NO LOCATIONSyntaxno location civic-location|coord-location|elin-location identifier id_numberParametersciv

AT-8100 Switch Command Line User’s Guide13Chapter 36: Boot Configuration Files ...

Chapter 7: Basic Switch Management130Pinging Network DevicesIf the switch is unable to communicate with a network device, such as a syslog server or a

Chapter 79: LLDP and LLDP-MED Commands1300This example removes the ELIN location IDs 3 and 4:awplus> enableawplus# configure terminalawplus(config)

AT-8100 Switch Command Line User’s Guide1301SHOW LLDPSyntaxshow lldpParametersNone.ModePrivileged Exec modeDescriptionUse this command to display gene

Chapter 79: LLDP and LLDP-MED Commands1302ExampleThe following example displays general LLDP settings:awplus# show lldpHold-time Multiplier The holdti

AT-8100 Switch Command Line User’s Guide1303SHOW LLDP INTERFACESyntaxshow lldp interface [port]ParametersportSpecifies a port, You can specify more th

Chapter 79: LLDP and LLDP-MED Commands1304ExamplesThis example displays the LLDP settings for all the ports on the switch:awplus# show lldp interfaceT

AT-8100 Switch Command Line User’s Guide1305SHOW LLDP LOCAL-INFO INTERFACESyntaxshow lldp local-info [interface port]ParametersportSpecifies a port, Y

Chapter 79: LLDP and LLDP-MED Commands1306Figure 219. SHOW LLDP LOCAL-INFO INTERFACE Command (continued)The fields are defined in Table 133 on page 13

AT-8100 Switch Command Line User’s Guide1307SHOW LLDP NEIGHBORS DETAILSyntaxshow lldp neighbors detail [interface port]ParametersportSpecifies a port.

Chapter 79: LLDP and LLDP-MED Commands1308Figure 221. SHOW LLDP NEIGHBORS DETAIL Command (continued)The information is explained in Table 133.LLDP-MED

AT-8100 Switch Command Line User’s Guide1309System Capabilities (Enabled)The device’s functions, and whether or not these functions are currently enab

AT-8100 Switch Command Line User’s Guide131Resetting the SwitchTo reset the switch, use either the REBOOT or RELOAD command in the Privileged Exec mod

Chapter 79: LLDP and LLDP-MED Commands1310Network Policy The network policy information configured on the port for connected media endpoint devices. T

AT-8100 Switch Command Line User’s Guide1311ExamplesThis example displays the information from all of the neighbors on the switch:awplus# show lldp ne

Chapter 79: LLDP and LLDP-MED Commands1312SHOW LLDP NEIGHBORS INTERFACESyntaxshow lldp neighbors interface [port]ParametersportSpecifies a port. You c

AT-8100 Switch Command Line User’s Guide1313ExamplesThis example displays a summary of the information from all the neighbors connected to the switch:

Chapter 79: LLDP and LLDP-MED Commands1314SHOW LLDP STATISTICSSyntaxshow lldp statisticsParametersNoneModeUser Exec mode and Privileged Exec modeDescr

AT-8100 Switch Command Line User’s Guide1315ExampleThe following example displays LLDP statistics for the switch:awplus# show lldp statisticsTLVs Unre

Chapter 79: LLDP and LLDP-MED Commands1316SHOW LLDP STATISTICS INTERFACESyntaxshow lldp statistics interface [port]ParametersportSpecifies a port. You

AT-8100 Switch Command Line User’s Guide1317ExamplesThis example displays the statistics for all the ports:awplus# show lldp statistics interfaceThis

Chapter 79: LLDP and LLDP-MED Commands1318SHOW LOCATIONSyntaxshow location civic-location|coord-location|elin-location [identifier id-number|interface

AT-8100 Switch Command Line User’s Guide1319ExamplesThe following example displays all the civic location entries on the switch:awplus# show location

Chapter 7: Basic Switch Management132Restoring the Default Settings to the SwitchTo restore the default settings to the switch, delete or rename the a

Chapter 79: LLDP and LLDP-MED Commands1320

1321Chapter 80Address Resolution Protocol (ARP)This chapter contains the following topics: “Overview” on page 1322 “Adding Static ARP Entries” on pa

Chapter 80: Address Resolution Protocol (ARP)1322OverviewThe Address Resolution Protocol (ARP) is used to associate an IPv4 address with a MAC address

AT-8100 Switch Command Line User’s Guide1323Adding Static ARP EntriesIn most cases, the ARP table can be populated dynamically; however, the switch al

Chapter 80: Address Resolution Protocol (ARP)1324Deleting Static and Dynamic ARP EntriesThe ARP cache contains two types of ARP entries: dynamic and s

AT-8100 Switch Command Line User’s Guide1325Displaying the ARP TableTo display the ARP table on the switch, use the SHOW ARP command in the User Exec

Chapter 80: Address Resolution Protocol (ARP)1326

1327Chapter 81Address Resolution Protocol (ARP) CommandsThe ARP commands are summarized in Table 139 and described in detail within the chapter.Table

Chapter 81: Address Resolution Protocol (ARP) Commands1328ARP Syntaxarp ipaddress macaddress port_numberParametersipaddressSpecifies the IP address of

AT-8100 Switch Command Line User’s Guide1329ExampleThe following example creates an ARP entry for the IP address 192.168.1.3 and the MAC address 7a:54

AT-8100 Switch Command Line User’s Guide133Another way to delete the file is with the ERASE STARTUP-CONFIG command, also in the Privileged Exec mode.

Chapter 81: Address Resolution Protocol (ARP) Commands1330CLEAR ARP-CACHESyntaxclear arp-cacheParametersNoneModesUser Exec mode and Privileged Exec mo

AT-8100 Switch Command Line User’s Guide1331NO ARP (IP ADDRESS)Syntaxno arp ipaddressParametersipaddressSpecifies the IP address of a static ARP entry

Chapter 81: Address Resolution Protocol (ARP) Commands1332SHOW ARPSyntaxshow arpParametersNoneModesUser Exec mode and Privileged Exec modeDescriptionU

AT-8100 Switch Command Line User’s Guide1333ExampleThe following example displays the ARP entries in the ARP cache on the switch:awplus# show arpType

Chapter 81: Address Resolution Protocol (ARP) Commands1334

1335Chapter 82RMONThis chapter contains the following topics: “Overview” on page 1336 “RMON Port Statistics” on page 1337 “RMON Histories” on page

Chapter 82: RMON1336OverviewThe RMON (Remote MONitoring) MIB is used with SNMP applications to monitor the operations of network devices. The switch s

AT-8100 Switch Command Line User’s Guide1337RMON Port StatisticsTo view port statistics using an SNMP program and the RMON section in the MIB, you mus

Chapter 82: RMON1338awplus(config-if)# rmon collection stats 16awplus(config-if)# exitawplus(config)# interface port1.0.20awplus(config-if)# rmon coll

AT-8100 Switch Command Line User’s Guide1339RMON HistoriesRMON histories are snapshots of port statistics. They are taken by the switch at predefined

Chapter 7: Basic Switch Management134Setting the Baud Rate of the Console PortThe Console port is used for local management of the switch. To set its

Chapter 82: RMON1340snapshot every minute for five minutes on a port, you specify five buckets (one bucket for each minute) and an interval of sixty s

AT-8100 Switch Command Line User’s Guide1341Here is an example of the information.Figure 229. SHOW RMON HISTORY CommandThe fields are defined in Table

Chapter 82: RMON1342RMON AlarmsRMON alarms are used to generate alert messages when packet activity on designated ports rises above or falls below spe

AT-8100 Switch Command Line User’s Guide1343The following sections explain how to create and manage the various elements of an alarm: “Creating RMON

Chapter 82: RMON1344The owner parameter is useful in situations where more than one person is managing the switch. You can use it to identify who crea

AT-8100 Switch Command Line User’s Guide1345The range is 1 to 65535 seconds.The DELTA and ABSOLUTE parameters define the type of change that has to oc

Chapter 82: RMON1346The next series of steps creates the event, which enters a message in the event log whenever the thresholds are crossed:Here are t

AT-8100 Switch Command Line User’s Guide1347Here are the steps to creating the alarm:Creating anAlarm - Example2This example creates an alarm that mon

Chapter 82: RMON1348Phase 2: Adding the RMON Statistics Group to the PortThe steps here add a statistics group to port 20 so that the port statistics

AT-8100 Switch Command Line User’s Guide1349Phase 3: Creating the EventThe event in this example is to send an SNMP trap and to log a message in the e

AT-8100 Switch Command Line User’s Guide135NoteThe baud rate is the only adjustable parameter on the Console port.For reference information, refer to

Chapter 82: RMON1350awplus# show rmon alarmUse the SHOW RMON ALARM command to verify the new alarm.

1351Chapter 83RMON CommandsThe RMON commands are summarized in Table 142 and described in detail within the chapter.Table 142. RMON CommandsCommand Mo

Chapter 83: RMON Commands1352“SHOW RMON HISTORY” on page 1372Privileged Exec Displays the RMON history groups that are assigned to the ports on the sw

AT-8100 Switch Command Line User’s Guide1353NO RMON ALARMSyntaxno rmon alarm alarm_idParametersalarm_idSpecifies the ID number of the alarm you want t

Chapter 83: RMON Commands1354NO RMON COLLECTION HISTORYSyntaxno rmon collection history collection_idParameterscollection_idSpecifies the ID number of

AT-8100 Switch Command Line User’s Guide1355NO RMON COLLECTION STATSSyntaxno rmon collection stats stats_idParametersstats_idSpecifies the ID number o

Chapter 83: RMON Commands1356NO RMON EVENTSyntaxno rmon event event_idParametersevent_idSpecifies the ID number of the event you want to delete from t

AT-8100 Switch Command Line User’s Guide1357RMON ALARMSyntaxrmon alarm alarm_id oid.stats_id interval interval delta|absolute rising-threshold rising-

Chapter 83: RMON Commands1358rising_event_idSpecifies the ID number of the event the switch is to perform when the falling threshold is crossed. The e

AT-8100 Switch Command Line User’s Guide1359Confirmation Command“SHOW RMON ALARM” on page 1368ExampleThis example creates an RMON alarm that monitors

Chapter 7: Basic Switch Management136Configuring the Management Session TimersYou should always conclude a management session by logging off so that i

Chapter 83: RMON Commands1360RMON COLLECTION HISTORYSyntaxrmon collection history history_id [buckets buckets] [interval interval] [owner owner]Parame

AT-8100 Switch Command Line User’s Guide1361RMON statistics histories are only viewable from an SNMP application program. There are no commands in the

Chapter 83: RMON Commands1362RMON COLLECTION STATSSyntaxrmon collection stats stats_id [owner owner]Parametersstats_idSpecifies the ID number of a new

AT-8100 Switch Command Line User’s Guide1363RMON EVENT LOGSyntaxrmon event event_id log description description [owner owner]Parametersevent_idSpecifi

Chapter 83: RMON Commands1364RMON EVENT LOG TRAPSyntaxrmon event event_id log trap community_string [description description] [owner owner]Parameterse

AT-8100 Switch Command Line User’s Guide1365ExampleThis example creates an event for RMON alarms with an ID of 2, a community string of “station43a,”

Chapter 83: RMON Commands1366RMON EVENT TRAPSyntaxrmon event event_id trap community_string [description description] [owner owner]Parametersevent_idS

AT-8100 Switch Command Line User’s Guide1367ExampleThe following example creates an event with an ID of 4, a community string of “st_west8,” and a des

Chapter 83: RMON Commands1368SHOW RMON ALARMSyntaxshow rmon alarmParametersNoneModePrivileged Exec modeDescriptionUse this command to display the RMON

AT-8100 Switch Command Line User’s Guide1369The fields are described in Table 144.ExampleThe following example displays the RMON alarms on the switch:

AT-8100 Switch Command Line User’s Guide137Both the first_line_id and the last_line_id parameters have value of 0 to 9. You can specify one VTY line o

Chapter 83: RMON Commands1370SHOW RMON EVENTSyntaxshow rmon eventParametersNoneModePrivileged Exec modeDescriptionUse this command to display the RMON

AT-8100 Switch Command Line User’s Guide1371ExampleThe following example displays the RMON events on the switch:awplus# show rmon eventEvent type (con

Chapter 83: RMON Commands1372SHOW RMON HISTORYSyntaxshow rmon historyParametersNoneModePrivileged Exec modeDescriptionUse this command to display the

AT-8100 Switch Command Line User’s Guide1373ExampleThe following example displays the history groups that are assigned to the ports on the switch:awpl

Chapter 83: RMON Commands1374SHOW RMON STATISTICSSyntaxshow rmon statisticsParametersNoneModePrivileged Exec modeDescriptionUse this command to displa

1375Section XIIManagement SecurityThis section contains the following chapters: Chapter 84, “Local Manager Accounts” on page 1377 Chapter 85, “Local

1376

1377Chapter 84Local Manager AccountsThis chapter provides the following topics: “Overview” on page 1378 “Creating Local Manager Accounts” on page 13

Chapter 84: Local Manager Accounts1378OverviewEach AT-8100 Series switch is pre-configured at the factory with one default manager account. The factor

AT-8100 Switch Command Line User’s Guide1379Figure 234. Password Prompt for Command Mode RestrictionIf the manager enters the correct password, the Pr

Chapter 7: Basic Switch Management138Setting the Maximum Number of Manager SessionsThe switch supports up to three manager sessions simultaneously so

Chapter 84: Local Manager Accounts1380Password encryption is activated with the SERVICE PASSWORD-ENCRYPTION command and deactivated with the NO SERVIC

AT-8100 Switch Command Line User’s Guide1381Creating Local Manager AccountsThe command for creating local manager accounts is the USERNAME command in

Chapter 84: Local Manager Accounts1382Passwords entered in encrypted form remain encrypted in the running configuration even if you disable password e

AT-8100 Switch Command Line User’s Guide1383Deleting Local Manager AccountsTo delete local manager accounts from the switch, use the NO USERNAME comma

Chapter 84: Local Manager Accounts1384Activating Command Mode Restriction and Creating the Special PasswordCommand mode restriction is a security feat

AT-8100 Switch Command Line User’s Guide1385Deactivating Command Mode Restriction and Deleting the Special PasswordThe command for deactivating comman

Chapter 84: Local Manager Accounts1386Activating or Deactivating Password EncryptionPassword encryption controls the manner in which the switch stores

AT-8100 Switch Command Line User’s Guide1387Displaying the Local Manager AccountsTo view the local accounts on the switch, use “SHOW RUNNING-CONFIG” o

Chapter 84: Local Manager Accounts1388

1389Chapter 85Local Manager Account CommandsThe local manager account commands are summarized in Table 148 and described in detail within the chapter.

AT-8100 Switch Command Line User’s Guide139Configuring the BannersThe switch has banner messages you may use to identify the switch or to display othe

Chapter 85: Local Manager Account Commands1390ENABLE PASSWORDSyntaxenable password [8] passwordParameters8Specifies that the password is encrypted.pas

AT-8100 Switch Command Line User’s Guide1391awplus> enableawplus# configure terminalawplus(config)# enable password 8 1255bbf963118fcf750aca356d35f

Chapter 85: Local Manager Account Commands1392NO ENABLE PASSWORDSyntaxno enable passwordParametersNoneModeGlobal Configuration modeDescriptionUse this

AT-8100 Switch Command Line User’s Guide1393NO SERVICE PASSWORD-ENCRYPTIONSyntaxno service password-encryptionParametersNoneModeGlobal Configuration m

Chapter 85: Local Manager Account Commands1394NO USERNAMESyntaxno username nameParametersnameSpecifies the name of the manager account you want to del

AT-8100 Switch Command Line User’s Guide1395SERVICE PASSWORD-ENCRYPTIONSyntaxservice password-encryptionParametersNoneModeGlobal Configuration modeDes

Chapter 85: Local Manager Account Commands1396USERNAMESyntaxusername name privilege level password [8] passwordParametersnameSpecifies the name of a n

AT-8100 Switch Command Line User’s Guide1397ExamplesThis example creates a manager account for the user, allen. The privilege level is 15 to give the

Chapter 85: Local Manager Account Commands1398

1399Chapter 86Telnet ServerThis chapter provides the following topics: “Overview” on page 1400 “Enabling the Telnet Server” on page 1401 “Disabling

Contents14NO IP IGMP SNOOPING MROUTER ...619SHOW IP

Chapter 7: Basic Switch Management140The commands for setting the banners are located in the Global Configuration mode with the exception of the SHOW

Chapter 86: Telnet Server1400OverviewThe switch comes with a Telnet server so that you can remotely manage the device from Telnet clients on your netw

AT-8100 Switch Command Line User’s Guide1401Enabling the Telnet ServerTo enable the server, go to the Global Configuration mode and issue the SERVICE

Chapter 86: Telnet Server1402Disabling the Telnet ServerTo disable the Telnet server, use the NO SERVICE TELNET command in the Global Configuration mo

AT-8100 Switch Command Line User’s Guide1403Displaying the Telnet ServerTo display the status of the Telnet server, use the SHOW TELNET command in the

Chapter 86: Telnet Server1404

1405Chapter 87Telnet Server CommandsThe Telnet server commands are summarized in Table 149 and described in detail within the chapter.Table 149. Telne

Chapter 87: Telnet Server Commands1406NO SERVICE TELNETSyntaxno service telnetParametersNoneModeGlobal Configuration modeDescriptionUse this command t

AT-8100 Switch Command Line User’s Guide1407SERVICE TELNETSyntaxservice telnetParametersNoneModeGlobal Configuration modeDescriptionUse this command t

Chapter 87: Telnet Server Commands1408SHOW TELNETSyntaxshow telnetParametersNoneModeUser Exec mode and Privileged Exec modeDescriptionUse this command

1409Chapter 88Telnet ClientThis chapter provides the following topics: “Overview” on page 1410 “Starting a Remote Management Session with the Telnet

AT-8100 Switch Command Line User’s Guide141To remove messages without assigning new messages, use the NO versions of the commands. This example remove

Chapter 88: Telnet Client1410OverviewThe switch has a Telnet client. You may use the client to remotely manage other network devices from the switch.

AT-8100 Switch Command Line User’s Guide1411Starting a Remote Management Session with the Telnet ClientHere are the steps to using the Telnet client o

Chapter 88: Telnet Client1412

1413Chapter 89Telnet Client CommandsThe Telnet client commands are summarized in Table 150 and described in detail within the chapter.Table 150. Telne

Chapter 89: Telnet Client Commands1414TELNETSyntaxtelnet ipv4_address [port]Parametersipv4_addressSpecifies the IPv4 address of a remote device you wa

AT-8100 Switch Command Line User’s Guide1415TELNET IPV6Syntaxtelnet ipv6 ipv6_address [port]Parametersipv6_addressSpecifies the IPv6 address of a remo

Chapter 89: Telnet Client Commands1416

1417Chapter 90Secure Shell (SSH) ServerThis chapter provides the following topics: “Overview” on page 1418 “Support for SSH” on page 1419 “SSH and

Chapter 90: Secure Shell (SSH) Server1418OverviewThe Secure Shell (SSH) protocol is an alternative to the Telnet protocol for remote management of the

AT-8100 Switch Command Line User’s Guide1419Support for SSHThe implementation of the SSH protocol on the switch is compliant with the SSH protocol ver

Chapter 7: Basic Switch Management142

Chapter 90: Secure Shell (SSH) Server1420 The SSH server uses protocol port 22. This parameter cannot be changed. If you are using the enhanced stac

AT-8100 Switch Command Line User’s Guide1421SSH and Enhanced StackingThe switch allows for encrypted SSH management sessions between a management stat

Chapter 90: Secure Shell (SSH) Server1422Because enhanced stacking does not allow for SSH encrypted management sessions between a management station a

AT-8100 Switch Command Line User’s Guide1423Creating the Encryption Key PairThe first step to using the SSH server on the switch for remote management

Chapter 90: Secure Shell (SSH) Server1424Enabling the SSH ServerThe switch does not allow you to enable the SSH server and begin remote management unt

AT-8100 Switch Command Line User’s Guide1425Disabling the SSH ServerIf you decide that you want to disable the server because you do not want to remot

Chapter 90: Secure Shell (SSH) Server1426Deleting Encryption KeysTo delete encryption keys from the switch, use the CRYPTO KEY DESTROY HOSTKEY command

AT-8100 Switch Command Line User’s Guide1427Displaying the SSH ServerTo display the current settings of the server, enter this command in the Privileg

Chapter 90: Secure Shell (SSH) Server1428

1429Chapter 91SSH Server CommandsThe SSH server commands are summarized in Table 151 and described in detail within the chapter.Table 151. Secure Shel

143Chapter 8Basic Switch Management CommandsThe basic switch management commands are summarized in Table 8.Table 8. Basic Switch Management CommandsCo

Chapter 91: SSH Server Commands1430CRYPTO KEY DESTROY HOSTKEYSyntaxcrypto key destroy hostkey dsa|rsa|rsa1ParametersdsaDeletes the DSA key.rsaDeletes

AT-8100 Switch Command Line User’s Guide1431This example deletes the RSA1 key:awplus> enableawplus# configure terminalawplus(config)# crypto key de

Chapter 91: SSH Server Commands1432CRYPTO KEY GENERATE HOSTKEYSyntaxcrypto key generate hostkey dsa|rsa|rsa1 [value]ParametersdsaCreates a DSA key tha

AT-8100 Switch Command Line User’s Guide1433NoteCreating a key is a very CPU intensive process for the switch. The switch does not stop forwarding net

Chapter 91: SSH Server Commands1434NO SERVICE SSHSyntaxno service sshParametersNoneModeGlobal Configuration modeDescriptionUse this command to disable

AT-8100 Switch Command Line User’s Guide1435SERVICE SSHSyntaxservice sshParametersNoneModeGlobal Configuration modeDescriptionUse this command to enab

Chapter 91: SSH Server Commands1436SHOW CRYPTO KEY HOSTKEYSyntaxshow crypto key hostkey [dsa|rsa|rsa1]ParametersdsaDisplays the DSA key.rsaDisplays th

AT-8100 Switch Command Line User’s Guide1437SHOW SSH SERVERSyntaxshow ssh serverParametersNoneModesPrivileged Exec and Global Configuration modesDescr

Chapter 91: SSH Server Commands1438

1439Chapter 92Non-secure HTTP Web Browser ServerThis chapter describes the following topics: “Overview” on page 1440 “Enabling the Web Browser Serve

Chapter 8: Basic Switch Management Commands144“REBOOT” on page 164 Privileged Exec Resets the switch.“RELOAD” on page 165 Privileged Exec Resets the s

Chapter 92: Non-secure HTTP Web Browser Server1440OverviewThe switch has a web browser server. The server is used to remotely manage the unit over the

AT-8100 Switch Command Line User’s Guide1441Enabling the Web Browser ServerThe command to activate the web browser server for non-secure HTTP operatio

Chapter 92: Non-secure HTTP Web Browser Server1442Setting the Protocol Port NumberThe default setting of port 80 for the protocol port of the HTTP web

AT-8100 Switch Command Line User’s Guide1443Disabling the Web Browser ServerThe command to disable the HTTP server is the NO SERVICE HTTP command in t

Chapter 92: Non-secure HTTP Web Browser Server1444Displaying the Web Browser ServerTo display whether the HTTP web server is enabled or disabled on th

1445Chapter 93Non-secure HTTP Web Browser Server CommandsThe non-secure HTTP web browser server commands are summarized in Table 152 and described in

Chapter 93: Non-secure HTTP Web Browser Server Commands1446SERVICE HTTPSyntaxservice httpParametersNoneModeGlobal Configuration modeDescriptionUse thi

AT-8100 Switch Command Line User’s Guide1447IP HTTP PORTSyntaxip http port portParametersportSpecifies the TCP port number the HTTP web server listens

Chapter 93: Non-secure HTTP Web Browser Server Commands1448NO SERVICE HTTPSyntaxno http serverParametersNoneModeGlobal Configuration modeDescriptionUs

AT-8100 Switch Command Line User’s Guide1449SHOW IP HTTPSyntaxshow ip httpParametersNoneModePrivileged Exec modeDescriptionUse this command to display

AT-8100 Switch Command Line User’s Guide145BANNER EXECSyntaxbanner execParametersNoneModeGlobal Configuration modeDescriptionUse this command to creat

Chapter 93: Non-secure HTTP Web Browser Server Commands1450

1451Chapter 94Secure HTTPS Web Browser ServerThis chapter describes the following topics: “Overview” on page 1452 “Creating a Self-signed Certificat

Chapter 94: Secure HTTPS Web Browser Server1452OverviewThe switch has a web browser server for remote management of the unit with a web browser applic

AT-8100 Switch Command Line User’s Guide1453Private CAs allow companies to keep track of the certificates and control access to various network device

Chapter 94: Secure HTTPS Web Browser Server1454NoteIf the certificate will be issued by a private or public CA, you should check with the CA to see if

AT-8100 Switch Command Line User’s Guide1455Creating a Self-signed CertificateHere are the main steps to configuring the switch for a self-signed cert

Chapter 94: Secure HTTPS Web Browser Server1456At this point, the switch, if it has a management IP address, is ready for remote management with a web

AT-8100 Switch Command Line User’s Guide1457The switch is now ready for remote web browser management with HTTPS, provided that it has a management IP

Chapter 94: Secure HTTPS Web Browser Server1458Configuring the HTTPS Web Server for a Certificate Issued by a CAHere are the main steps to configuring

AT-8100 Switch Command Line User’s Guide14597. Designate the new certificate from the CA as the active certificate on the switch with “IP HTTPS CERTIF

Chapter 8: Basic Switch Management Commands146This example deletes the banner:awplus> enableawplus# configure terminalawplus(config)# no banner exe

Chapter 94: Secure HTTPS Web Browser Server1460awplus(config)# crypto certificate 1 request 124.201.76.54 Production ABC_Industries San_Jose Californi

AT-8100 Switch Command Line User’s Guide1461The switch, if it has a management IP address, is now ready for remote HTTPS web browser management. To st

Chapter 94: Secure HTTPS Web Browser Server1462Enabling the Web Browser ServerThe command to activate the web browser server for secure HTTPS operatio

AT-8100 Switch Command Line User’s Guide1463Disabling the Web Browser ServerThe command to disable the HTTPS mode is the NO SERVICE HTTPS command in t

Chapter 94: Secure HTTPS Web Browser Server1464Displaying the Web Browser ServerTo display whether the HTTPS web server is enabled or disabled on the

1465Chapter 95Secure HTTPS Web Browser Server CommandsThe secure HTTPS web browser server commands are summarized in Table 153 and described in detail

Chapter 95: Secure HTTPS Web Browser Server Commands1466CRYPTO CERTIFICATE DESTROYSyntaxcrypto certificate id_number destroyParametersid_numberSpecifi

AT-8100 Switch Command Line User’s Guide1467CRYPTO CERTIFICATE GENERATESyntaxcrypto certificate id_number generate length passphrase common_name organ

Chapter 95: Secure HTTPS Web Browser Server Commands1468countrySpecifies the ISO 3166-1 initials of a country. This parameter must be two uppercase ch

AT-8100 Switch Command Line User’s Guide1469 Organizational unit: Sales Organization: Jones_Industries Location: San_Jose State: California Count

AT-8100 Switch Command Line User’s Guide147BANNER LOGINSyntaxbanner loginParametersNoneModeGlobal Configuration modeDescriptionUse this command to con

Chapter 95: Secure HTTPS Web Browser Server Commands1470CRYPTO CERTIFICATE IMPORTSyntaxcrypto certificate id_number importParametersid_numberSpecifies

AT-8100 Switch Command Line User’s Guide1471CRYPTO CERTIFICATE REQUESTSyntaxcrypto certificate id_number request common_name organizational_unit organ

Chapter 95: Secure HTTPS Web Browser Server Commands1472DescriptionUse this command to create certificate enrollment requests for submittal to public

AT-8100 Switch Command Line User’s Guide1473SERVICE HTTPSSyntaxservice httpsParametersNoneModeGlobal Configuration modeDescriptionUse this command to

Chapter 95: Secure HTTPS Web Browser Server Commands1474IP HTTPS CERTIFICATESyntaxip https certificate id_numberParametersid_numberSpecifies a certifi

AT-8100 Switch Command Line User’s Guide1475NO SERVICE HTTPSSyntaxno service httpsParametersNoneModeGlobal Configuration modeDescriptionUse this comma

Chapter 95: Secure HTTPS Web Browser Server Commands1476SHOW CRYPTO CERTIFICATESyntaxshow crypto certificate id_numberParametersid_numberSpecifies a c

AT-8100 Switch Command Line User’s Guide1477SHOW IP HTTPSSyntaxshow ip httpParametersNoneModePrivileged Exec modeDescriptionUse this command to displa

Chapter 95: Secure HTTPS Web Browser Server Commands1478ExampleThis example displays the status of the HTTPS server and basic information about the ce

1479Chapter 96RADIUS and TACACS+ ClientsThis chapter describes the following topics: “Overview” on page 1480 “Remote Manager Accounts” on page 1481

Chapter 8: Basic Switch Management Commands148This example removes the login banner:awplus> enableawplus# configure terminalawplus(config)# no bann

Chapter 96: RADIUS and TACACS+ Clients1480OverviewThe switch has RADIUS and TACACS+ clients for remote authentication. Here are the two features that

AT-8100 Switch Command Line User’s Guide1481Remote Manager AccountsThe switch has one local manager account. The account is referred to as a local acc

Chapter 96: RADIUS and TACACS+ Clients1482the switch, the privilege level of an account is ignored and all accounts have access to the entire command

AT-8100 Switch Command Line User’s Guide14834. Configure the RADIUS or TACACS+ client on the switch by entering the IP addresses of up to three authen

Chapter 96: RADIUS and TACACS+ Clients1484Managing the RADIUS ClientThe following subsections describe how to manage the RADIUS client: “Adding IP Ad

AT-8100 Switch Command Line User’s Guide1485The AUTH-PORT parameter specifies the UDP destination port for RADIUS authentication requests. If 0 is spe

Chapter 96: RADIUS and TACACS+ Clients1486This example sets the RADIUS timeout to 15 seconds:awplus> enableawplus# configure terminalawplus(config)

AT-8100 Switch Command Line User’s Guide1487Deleting ServerIP AddressesTo delete the IP address of a RADIUS server from the list of servers on the swi

Chapter 96: RADIUS and TACACS+ Clients1488Managing the TACACS+ ClientThe following subsections describe how to manage the TACACS+ client: “Adding IP

AT-8100 Switch Command Line User’s Guide1489This example adds the IP address 115.16.172.54 as a TACACS+ authentication server at the bottom of the lis

AT-8100 Switch Command Line User’s Guide149BANNER MOTDSyntaxbanner motdParametersNoneModeGlobal Configuration modeDescriptionUse this command to creat

Chapter 96: RADIUS and TACACS+ Clients1490Deleting IPAddresses ofTACACS+ServersTo delete the IP address of a TACACS+ server from the client on the swi

AT-8100 Switch Command Line User’s Guide1491Configuring Remote Authentication of Manager AccountsCheck that you performed the following steps before a

Chapter 96: RADIUS and TACACS+ Clients1492uses for remote Telnet and SSH sessions. (For background information, refer to “VTY Lines” on page 79.)Toggl

AT-8100 Switch Command Line User’s Guide1493The LINE_ID parameter has a range of 0 to 9. The following example of the command toggles off remote authe

Chapter 96: RADIUS and TACACS+ Clients1494

1495Chapter 97RADIUS and TACACS+ Client CommandsThe commands for the RADIUS and TACACS+ clients are summarized in Table 155 and described in detail wi

Chapter 97: RADIUS and TACACS+ Client Commands1496“RADIUS-SERVER TIMEOUT” on page 1513Global ConfigurationSpecifies the maximum amount of time the RAD

AT-8100 Switch Command Line User’s Guide1497AAA ACCOUNTING LOGINSyntaxaaa accounting login default start-stop|stop-only|none group radius|tacacs Param

Chapter 97: RADIUS and TACACS+ Client Commands1498Confirmation Commands“SHOW RADIUS” on page 1514“SHOW TACACS” on page 1516ExamplesTo configure RADIUS

AT-8100 Switch Command Line User’s Guide1499AAA AUTHENTICATION ENABLE (TACACS+)Syntaxaaa authentication enable default group tacacs [local]Parametersd

AT-8100 Switch Command Line User’s Guide15LOG BUFFERED ...

Chapter 8: Basic Switch Management Commands150This example removes the message-of-the-day banner:awplus> enableawplus# configure terminalawplus(con

Chapter 97: RADIUS and TACACS+ Client Commands1500command is attempted if a TACACS+ server is not available, use the following commands:awplus> ena

AT-8100 Switch Command Line User’s Guide1501AAA AUTHENTICATION LOGINSyntaxaaa authentication login default [group radius|tacacs] [local]Parametersdefa

Chapter 97: RADIUS and TACACS+ Client Commands1502Confirmation Commands“SHOW RADIUS” on page 1514“SHOW TACACS” on page 1516ExamplesTo enable RADIUS se

AT-8100 Switch Command Line User’s Guide1503IP RADIUS SOURCE-INTERFACESyntaxip radius source-interface Ipv4 Address | VIDParametersIpv4 AddressIndicat

Chapter 97: RADIUS and TACACS+ Client Commands1504This example removes the RADIUS source IP address from the RADIUS client:awplus> enableawplus# co

AT-8100 Switch Command Line User’s Guide1505LOGIN AUTHENTICATIONSyntaxlogin authenticationParametersNoneModesConsole Line and Virtual Terminal Line mo

Chapter 97: RADIUS and TACACS+ Client Commands1506This example activates remote authentication for remote Telnet and SSH management sessions that use

AT-8100 Switch Command Line User’s Guide1507NO LOGIN AUTHENTICATIONSyntaxno login authenticationParametersNoneModesConsole Line and Virtual Terminal L

Chapter 97: RADIUS and TACACS+ Client Commands1508NO RADIUS-SERVER HOSTSyntaxno radius-server host ipaddressParameteripaddressSpecifies an IP address

AT-8100 Switch Command Line User’s Guide1509NO TACACS-SERVER HOSTSyntaxno tacacs-server host ipaddressParameteripaddressSpecifies an IP address of a T

AT-8100 Switch Command Line User’s Guide151BAUD-RATE SETSyntaxbaud-rate set 1200|2400|4800|9600|19200|38400|57600|115200ParametersNoneModeGlobal Confi

Chapter 97: RADIUS and TACACS+ Client Commands1510RADIUS-SERVER HOSTSyntaxradius-server host ipaddress [acct-port value] [auth-port value] [key value]

AT-8100 Switch Command Line User’s Guide1511ExamplesThis example adds a RADIUS server with the IP address 176.225.15.23. The UDP port is 1811, and the

Chapter 97: RADIUS and TACACS+ Client Commands1512RADIUS-SERVER KEYSyntaxradius-server key valueParameterskeySpecifies the global encryption key of th

AT-8100 Switch Command Line User’s Guide1513RADIUS-SERVER TIMEOUTSyntaxradius-server timeout valueParameterstimeoutSpecifies the maximum amount of tim

Chapter 97: RADIUS and TACACS+ Client Commands1514SHOW RADIUSSyntaxshow radiusParametersNoneModesPrivileged Exec modeDescriptionUse this command to di

AT-8100 Switch Command Line User’s Guide1515ExampleThis example displays the configuration of the RADIUS client:awplus# show radiusAccounting Port The

Chapter 97: RADIUS and TACACS+ Client Commands1516SHOW TACACSSyntaxshow tacacsParametersNoneModePrivileged Exec modeDescriptionUse this command to dis

AT-8100 Switch Command Line User’s Guide1517ExampleThis example displays the configuration of the TACACS+ client on the switch:awplus# show tacacsServ

Chapter 97: RADIUS and TACACS+ Client Commands1518TACACS-SERVER HOSTSyntaxtacacs-server host ipaddress [key value]ParametershostSpecifies an IP addres

AT-8100 Switch Command Line User’s Guide1519TACACS-SERVER KEYSyntaxtacacs-server key valueParametersvalueSpecifies the global encryption key of the TA

Chapter 8: Basic Switch Management Commands152CLOCK SETSyntaxclock set hh:mm:ss dd mmm yyyyParametershh:mm:ssSpecifies the hour, minute, and second fo

Chapter 97: RADIUS and TACACS+ Client Commands1520TACACS-SERVER TIMEOUTSyntaxtacacs-server timeout valueParameterstimeoutSpecifies the maximum amount

1521Section XIIIQuality of ServiceThis section contains the following chapters: Chapter 98, “Advanced Access Control Lists (ACLs)” on page 1523 Chap

1522

1523Chapter 98Advanced Access Control Lists (ACLs)This chapter describes the following topics: “Overview” on page 1524 “Creating ACLs” on page 1527

Chapter 98: Advanced Access Control Lists (ACLs)1524OverviewAccess Control Lists (ACLs) act as filters to control the ingress packets on ports. They a

AT-8100 Switch Command Line User’s Guide1525Actions The action defines the response to packets that match the filtering criterion of the ACL. There ar

Chapter 98: Advanced Access Control Lists (ACLs)1526Guidelines Here are the ACL guidelines: An ACL can have a permit, deny, or copy-to-mirror action.

AT-8100 Switch Command Line User’s Guide1527Creating ACLsThis section provides examples of how to create all of the ACL types. See the following: “Cr

Chapter 98: Advanced Access Control Lists (ACLs)1528Numbered IPv4 ACL with IP Packets ExamplesThis is the command format for creating ACLs that filter

AT-8100 Switch Command Line User’s Guide1529 host ipaddress— Matches packets with a specified IPv4 address and is an alternative to the IPADRESS/MASK

AT-8100 Switch Command Line User’s Guide153ERASE STARTUP-CONFIGSyntaxerase startup-configParametersNoneModePrivileged Exec modeDescriptionUse this com

Chapter 98: Advanced Access Control Lists (ACLs)1530deny ACL for the denied traffic flow. This is illustrated in the example in Table 162 in which por

AT-8100 Switch Command Line User’s Guide1531NoteThe permit ACLS are added to the ports before the deny ACL to ensure that packets are compared against

Chapter 98: Advanced Access Control Lists (ACLs)1532Here is an example of an ACL that filters tagged packets. See Table 164. It blocks all tagged pack

AT-8100 Switch Command Line User’s Guide1533is only necessary when you want a port to forward a subset of packets that are otherwise discarded. deny—

Chapter 98: Advanced Access Control Lists (ACLs)1534Numbered IPv4 ACL with Protocol Packets ExampleThis is the command format for creating Numbered IP

AT-8100 Switch Command Line User’s Guide1535The VLAN parameter determines if an ACL filters VLANs. You use the parameter to specify the VID. You can s

Chapter 98: Advanced Access Control Lists (ACLs)1536The SRC_IPADDRESS and DST_IPADDRESS parameters specify the source and destination IPv4 addresses.

AT-8100 Switch Command Line User’s Guide1537The following example configures two Numbered IPv4 ACLs. ACL 3017 permits packets from TCP port 67 to 87 o

Chapter 98: Advanced Access Control Lists (ACLs)1538together with the port mirror feature, explained in Chapter 27, “Port Mirror” on page 465.The SRC_

AT-8100 Switch Command Line User’s Guide1539The VLAN parameter determines if an ACL filters VLANs. You use the parameter to specify the VID. You can s

Chapter 8: Basic Switch Management Commands154EXEC-TIMEOUTSyntaxexec-timeout valueParametersexec-timeoutSpecifies the session timer in minutes. The ra

Chapter 98: Advanced Access Control Lists (ACLs)1540 copy-to-mirror— Copies all ingress packets that match the ACL to the destination port of the mir

AT-8100 Switch Command Line User’s Guide1541The example in Table 169 configures port 19 to reject packets containing destination MAC addresses startin

Chapter 98: Advanced Access Control Lists (ACLs)1542This example creates a Named IPv4 ICMP ACL, called “icmppermit,” that permits ICMP packets from an

AT-8100 Switch Command Line User’s Guide1543Creating NamedIPv6 AddressACLsThe Named IPv6 address ACLs are created with the IPv6 ACCESS-LIST commands.

Chapter 98: Advanced Access Control Lists (ACLs)1544This example creates a protocol ACL, called “protocopytomirror,” that copies RDP packets (protocol

AT-8100 Switch Command Line User’s Guide1545Assigning ACLs to PortsBefore you can assign an ACL to a port, you must first create an ACL. The command t

Chapter 98: Advanced Access Control Lists (ACLs)1546In this example, ports 12 and 13 are assigned an ACL, ID number 3075, that blocks all untagged ing

AT-8100 Switch Command Line User’s Guide1547Assigning NamedIPv4 ACLsTo assign a Named IPv4 ACL to a port on the switch, use the ACCESS-GROUP command i

Chapter 98: Advanced Access Control Lists (ACLs)1548Assigning NamedIPv6 ACLsTo assign a Named IPv6 ACL to a port on the switch, use the IPV6 TRAFFIC-F

AT-8100 Switch Command Line User’s Guide1549Removing ACLs from PortsThe command that you use to remove an ACL from a port depends on which type of ACL

AT-8100 Switch Command Line User’s Guide155This example sets the session timer for the first (vty 0) Telnet or SSH session to 5 minutes:awplus> ena

Chapter 98: Advanced Access Control Lists (ACLs)1550This example removes a MAC ACL with an ID number of 4037 from port 5:Removing NamedIPv4 ACLsTo rem

AT-8100 Switch Command Line User’s Guide1551The following example removes a Named IPv6 ACL called “icmpdeny” from port 17:Table 182. Removing Named IP

Chapter 98: Advanced Access Control Lists (ACLs)1552Deleting ACLs from the SwitchThe command that you use to delete an ACL from the switch depends on

AT-8100 Switch Command Line User’s Guide1553The following example deletes a MAC ACL with ID number 4415 from the switch:Deleting NamedIPv4 AddressACLs

Chapter 98: Advanced Access Control Lists (ACLs)1554This example deletes a Named IPv6 address ACL with the list name “denytcp” from the switch:Table 1

AT-8100 Switch Command Line User’s Guide1555Setting ACL Time RangesBy default, an ACL filter is effective immediately. However, if you want to set a d

Chapter 98: Advanced Access Control Lists (ACLs)1556The following example creates a time range setting that starts on Mondays through Fridays from 7 a

AT-8100 Switch Command Line User’s Guide1557Displaying the ACLsThere are several ways of displaying information about ACLs on the switch. For example,

Chapter 98: Advanced Access Control Lists (ACLs)1558The following example displays the ACLs assigned to ports 1 to 5:awplus# show interface port1.0.1-

AT-8100 Switch Command Line User’s Guide1559.Figure 253. SHOW TIME-RANGE Commandawplus# show time-rangeTime-Range t1absolute start 09:00:00 2 January

Chapter 8: Basic Switch Management Commands156HELPSyntaxhelpParametersNoneModeAll modesDescriptionUse this command to learn how to use on-line help. E

Chapter 98: Advanced Access Control Lists (ACLs)1560

1561Chapter 99ACL CommandsThe Access Control List (ACL) commands are summarized in Table 190 and described in detail within the chapter.Table 190. Acc

Chapter 99: ACL Commands1562“IP ACCESS-LIST (IP)” on page 1597 IP ACL Defines an ACL that filters IP packets based on source and destination IP addres

AT-8100 Switch Command Line User’s Guide1563“NO ACCESS-LIST” on page 1634 Global ConfigurationDeletes ACLs from the switch.“NO ACCESS-GROUP” on page 1

Chapter 99: ACL Commands1564ABSOLUTE STARTSyntaxabsolute start <hours:minutes:seconds DD MM YYYY> end <hours:minutes:seconds DD MM YYYY>Pa

AT-8100 Switch Command Line User’s Guide1565ExamplesThis example uses a time range called “February2012” that enables the permit or deny statement to

Chapter 99: ACL Commands1566ACCESS-CLASSSyntaxaccess-class <3000 - 3699>|<4000 - 4699>access-class <3000 - 3699>|<4000 - 4699>

AT-8100 Switch Command Line User’s Guide1567ExampleThis example assigns the switch an IP address of 10.0.0.20/24. It creates a Numbered ACL with an ID

Chapter 99: ACL Commands1568ACCESS-GROUPSyntaxaccess-group id_numberaccess-group id_number|list_nameParametersid_numberSpecifies the ID number of an a

AT-8100 Switch Command Line User’s Guide1569ExamplesThis example adds an IP ACL with an ID of 3022 to port 15:awplus> enableawplus# configure termi

AT-8100 Switch Command Line User’s Guide157HOSTNAMESyntaxhostname nameParametersnameSpecifies a name of up to 39 alphanumeric characters for the switc

Chapter 99: ACL Commands1570ACCESS-LIST (MAC Address)Syntaxaccess-list id_number action src_mac_address|any src_mac_mask dst_mac_address|any dst_mac_m

AT-8100 Switch Command Line User’s Guide1571dst_mac_addressSpecifies the destination MAC address of the ingress packets. Choose from the following opt

Chapter 99: ACL Commands1572awplus(config_if)# mac access-group 4002awplus(config_if)# mac access-group 4003awplus(config_if)# mac access-group 4011aw

AT-8100 Switch Command Line User’s Guide1573ACCESS-LIST ICMPSyntaxaccess-list id_number action icmp src_ipaddress dst_ipaddress [vlan vid]Parametersid

Chapter 99: ACL Commands1574ipaddress/mask: Matches packets that have a destination IP address of a specific subnet or end node. host ipaddress: Match

AT-8100 Switch Command Line User’s Guide1575This example adds a deny access list to ports 4 and 5 to discard all untagged ingress packets that are ICM

Chapter 99: ACL Commands1576ACCESS-LIST IPSyntaxaccess-list id_number action ip src_ipaddress dst_ipaddress [vlan vid]Parametersid_numberSpecifies the

AT-8100 Switch Command Line User’s Guide1577dst_ipaddress: Specifies the destination IP address of the ingress packets the access list should filter.

Chapter 99: ACL Commands1578This example creates a deny access list, ID number 3095, that discards all untagged ingress packets that have destination

AT-8100 Switch Command Line User’s Guide1579This example configures ports 22 and 23 to accept only untagged ingress packets containing destination add

Chapter 8: Basic Switch Management Commands158LINE CONSOLESyntaxline console 0ParametersNoneModeGlobal Configuration modeDescriptionUse this command t

Chapter 99: ACL Commands1580ACCESS-LIST PROTOSyntaxaccess-list id_number action proto protocol_number src_ipaddress dst_ipaddress [vlan vid]Parameters

AT-8100 Switch Command Line User’s Guide1581dst_ipaddressSpecifies the destination IP address of the ingress packets the access list should filter. Ch

Chapter 99: ACL Commands15829 IGP (Interior Gateway Protocol) (IANA)11 Network Voice Protocol (RFC741)17 UDP (User Datagram Protocol) (RFC768)20 Host

AT-8100 Switch Command Line User’s Guide1583Confirmation Commands“SHOW ACCESS-LIST” on page 1641 and “SHOW INTERFACE ACCESS-GROUP” on page 1643Example

Chapter 99: ACL Commands1584awplus(config_if)# access-group 3011awplus(config_if)# endawplus# show access-listawplus# show interface port1.0.5,port1.0

AT-8100 Switch Command Line User’s Guide1585ACCESS-LIST TCPSyntaxaccess-list id_number action tcp src_ipaddress eq|lt|gt|ne|range src_tcp_port dst_ipa

Chapter 99: ACL Commands1586ltMatches packets that are less than the TCP port number specified by the SRC_TCP_PORT or DST_TCP_PORT parameter.gtMatches

AT-8100 Switch Command Line User’s Guide1587ModeGlobal Configuration modeDescriptionUse this command to create access control lists that filter ingres

Chapter 99: ACL Commands1588This example creates an ACL that causes port 14 to discard all tagged ingress TCP packets with the VID 27, regardless of t

AT-8100 Switch Command Line User’s Guide1589ACCESS-LIST UDPSyntaxaccess-list id_number action udp src_ipaddress eq|lt|gt|ne|range src_udp_port dst_ipa

AT-8100 Switch Command Line User’s Guide159LINE VTYSyntaxline vty first_line_id [last_line_id]Parametersfirst_line_idSpecifies the number of a VTY lin

Chapter 99: ACL Commands1590ltMatches packets that are less than the UDP port number specified by the SRC_UDP_PORT or DST_UDP_PORT parameter.gtMatches

AT-8100 Switch Command Line User’s Guide1591ModeGlobal Configuration modeDescriptionUse this command to create access control lists that filter ingres

Chapter 99: ACL Commands1592This example defines an ACL that causes port 18 to discard all untagged ingress packets that have source and destination U

AT-8100 Switch Command Line User’s Guide1593IP ACCESS-LIST Syntaxip access-list nameParametersnameSpecifies the name of the IP ACL.ModeGlobal Configur

Chapter 99: ACL Commands1594IP ACCESS-LIST (ICMP)Syntaxaction deny|permit|copy-to-mirror icmp scr_ipaddress any|host dest_ipaddress any|host time-rang

AT-8100 Switch Command Line User’s Guide1595For example, the subnet address 149.11.11.0 would have a mask of “24” for the twenty-four bits of the netw

Chapter 99: ACL Commands1596This example creates a Named ICMP ACL, called “icmpdeny,” that denies ICMP packets from source IP source address 190.155.2

AT-8100 Switch Command Line User’s Guide1597IP ACCESS-LIST (IP)Syntaxaction deny|permit|copy-to-mirror ip scr_ipaddress any|host dest_ipaddress any|ho

Chapter 99: ACL Commands1598For example, the subnet address 149.11.11.0 would have a mask of “24” for the twenty-four bits of the network section of t

AT-8100 Switch Command Line User’s Guide1599This example creates a Named IP ACL, called “ipdeny,” that denies ICMP packets from source IP address 190.

Contents16Chapter 52: LACP Commands ...

Chapter 8: Basic Switch Management Commands160NO HOSTNAMESyntaxno hostnameParametersNoneModeGlobal Configuration modeDescriptionUse this command to de

Chapter 99: ACL Commands1600IP ACCESS-LIST (MAC)Syntaxaction deny|permit|copy-to-mirror mac scr_mac_address any|host dest_mac_address any|host [vlan v

AT-8100 Switch Command Line User’s Guide1601dst_mac_addressSpecifies the destination MAC address of the ingress packets. Choose from the following opt

Chapter 99: ACL Commands1602ExamplesThis example creates a Named IP ACL, called “permitmac,” that permits packets from source MAC address 12:a3:4b:89:

AT-8100 Switch Command Line User’s Guide1603IP ACCESS-LIST (PROTO)Syntaxaction deny|permit|copy-to-mirror proto protocol_number scr_ip_address any|hos

Chapter 99: ACL Commands1604dest_ipaddressMaskSpecifies the destination IP address of the ingress packets the access list should filter. Choose from t

AT-8100 Switch Command Line User’s Guide1605ExamplesThis example creates a Named IP ACL, called “permitproto8,” that permits all EGP packets (protocol

Chapter 99: ACL Commands1606IP ACCESS-LIST (TCP)Syntaxaction deny|permit|copy-to-mirror tcp scr_ipaddress any|host gt|lt|ne|range|eq src_tcp_port dest

AT-8100 Switch Command Line User’s Guide1607gtMatches packets that are greater than the TCP port number specified by the src_ipaddress parameter.neMat

Chapter 99: ACL Commands1608eqMatches packets that are equal to the TCP port number specified by the dest_ipaddress parameter.dst_tcp_portSpecifies th

AT-8100 Switch Command Line User’s Guide1609This example creates a deny access list called “denytcp” that discards all tagged ingress TCP packets from

AT-8100 Switch Command Line User’s Guide161PINGSyntaxping ipaddress|hostnameParametersipaddressSpecifies the IP address of the network device to recei

Chapter 99: ACL Commands1610IP ACCESS-LIST (UDP)Syntaxaction deny|permit|copy-to-mirror udp scr_ipaddress any|host gt|lt|ne|range|eq src_upd_port dest

AT-8100 Switch Command Line User’s Guide1611gtMatches packets that are greater than the TCP port number specified by the src_ipaddress parameter.neMat

Chapter 99: ACL Commands1612eqMatches packets that are equal to the TCP port number specified by the dest_ipaddress parameter.dst_udp_portSpecifies th

AT-8100 Switch Command Line User’s Guide1613This example discards tagged packets from UDP ports 67 to 87 if they are from the 154.11.234.0 network and

Chapter 99: ACL Commands1614IPV6 ACCESS-LISTSyntaxipv6 access-list <ipv6 access-list>Parametersipv6 access-listSpecifies the name of an IPv6 ACL

AT-8100 Switch Command Line User’s Guide1615IPV6 ACCESS-LIST (ICMP)Syntaxaction deny|permit|copy-to-mirror icmp scr_ip_address any|host dest_ipaddress

Chapter 99: ACL Commands1616ipaddress/mask: Matches packets that have a destination IPv6 address of a subnet or an end node in the X:X::X:X/mask forma

AT-8100 Switch Command Line User’s Guide1617ExamplesThis example creates an ICMP ACL called “icmpdeny1” that denies ICMP packets from any IPv6 source

Chapter 99: ACL Commands1618IPV6 ACCESS-LIST (IP)Syntaxaction deny|permit|copy-to-mirror ip scr_ip_address any|ipaddress|host dest_ipaddress any|ipadd

AT-8100 Switch Command Line User’s Guide1619number of bits in the address, from left to right, that constitute the network portion of the address. The

Chapter 8: Basic Switch Management Commands162NoteThe switch sends the ICMP Echo Requests from the ports of the VLAN assigned the management IP addres

Chapter 99: ACL Commands1620This example creates an IP ACL, called “ipdeny2,” that denies IP packets from IPv6 source address fe80::202:b3ff:fele:8329

AT-8100 Switch Command Line User’s Guide1621IPV6 ACCESS-LIST (PROTO)Syntaxaction deny|permit|copy-to-mirror proto proto_type scr_ip_address any|ipaddr

Chapter 99: ACL Commands1622ipaddress/mask: Matches packets that have a destination IPv6 address of a subnet or an end node in the X:X::X:X/mask forma

AT-8100 Switch Command Line User’s Guide16232001:0db8::a2:1c50/64 any awplus(config-ipv6-acl)# exitawplus(config)# interface port1.0.9awplus(config_if

Chapter 99: ACL Commands1624IPV6 ACCESS-LIST (TCP)Syntaxaction deny|permit|copy-to-mirror tcp scr_ip_address any|host eq|lt|gt|ne src_tcp_port dest_ip

AT-8100 Switch Command Line User’s Guide1625gtMatches packets that are greater than the TCP port number specified by the src_ipaddress parameter.neMat

Chapter 99: ACL Commands1626eqMatches packets that are equal to the TCP port number specified by the dest_ipaddress parameter.dst_tcp_portSpecifies th

AT-8100 Switch Command Line User’s Guide1627This example creates an ACL that discards all untagged ingress packets that have the source and destinatio

Chapter 99: ACL Commands1628IPV6 ACCESS-LIST (UDP)Syntaxaction deny|permit|copy-to-mirror udp scr_ip_address any|host eq|lt|gt|ne|range dest_ipaddress

AT-8100 Switch Command Line User’s Guide1629gtMatches packets that are greater than the UDP port number specified by the src_ipaddress parameter.neMat

AT-8100 Switch Command Line User’s Guide163PING IPv6Syntaxping ipv6 <ipv6-address> repeat <1-99> size <36-18024> Parametersipv6-addr

Chapter 99: ACL Commands1630time-rangeSpecifies the name of a time range that is created with the TIME-RANGE command. You must create a time range bef

AT-8100 Switch Command Line User’s Guide1631This example discards tagged packets from UDP ports 67 to 87 if they are from the 154.11.234.0/64 network

Chapter 99: ACL Commands1632IPV6 TRAFFIC-FILTERSyntaxipv6 traffic-filter <ipv6_access_list>Parameters<ipv6_access_list>Specifies the name

AT-8100 Switch Command Line User’s Guide1633MAC ACCESS-GROUPSyntaxmac access-group id_numberParametersid_numberSpecifies the ID number of a MAC addres

Chapter 99: ACL Commands1634NO ACCESS-LISTSyntaxno access-list id_numberParametersid_numberSpecifies the ID number of an access list you want to delet

AT-8100 Switch Command Line User’s Guide1635NO ACCESS-GROUPSyntaxno access-group id_numberParametersid_numberSpecifies the ID number of an access list

Chapter 99: ACL Commands1636NO MAC ACCESS-GROUPSyntaxno mac access-group id_numberParametersid_numberSpecifies the ID number of a MAC address access l

AT-8100 Switch Command Line User’s Guide1637PERIODICSyntaxperiodic day days-of-the-week time (hh:mm:ss) to day days-of-the-week time (hh:mm:ss) Parame

Chapter 99: ACL Commands1638ExamplesThis example sets the date and time range from Monday at 12:01 am to Thursday at 4:00 pm:awplus> enableawplus#

AT-8100 Switch Command Line User’s Guide1639PERIODIC (DAILY)Syntaxperiodic day (daily|weekdays|weekend) time (hh:mm:ss) to time (hh:mm:ss) Parametersd

Chapter 8: Basic Switch Management Commands164REBOOTSyntaxrebootParametersNoneModePrivileged Exec modeDescriptionUse this command to reset the switch.

Chapter 99: ACL Commands1640This example sets the date and time range from 9 am Monday morning to 5 pm Friday evening:awplus> enableawplus# configu

AT-8100 Switch Command Line User’s Guide1641SHOW ACCESS-LISTSyntaxshow access-list [<3000-3699>|<4000-4699>|<list-name>]Parameters&l

Chapter 99: ACL Commands1642ExampleThis example displays Numbered IP, MAC, and Named IP ACLs:awplus# show access-listFigure 254. SHOW ACCESS-LIST Comm

AT-8100 Switch Command Line User’s Guide1643SHOW INTERFACE ACCESS-GROUPSyntaxshow interface port access-groupParametersportSpecifies a port number. Yo

Chapter 99: ACL Commands1644SHOW IPV6 ACCESS-LISTSyntaxshow ipv6 access-list <list-name>Parameters<list-name>Specifies the name of an IPv6

AT-8100 Switch Command Line User’s Guide1645SHOW TIME-RANGESyntaxshow time-range ParametersNoneModePrivileged Exec modeDescriptionUse this command to

Chapter 99: ACL Commands1646TIME-RANGE Syntaxtime-range <time-range-name>Parameterstime-range-nameSpecifies a name of a time range.ModeGlobal Co

1647Chapter 100Quality of Service (QoS)This chapter describes the following topics: “Overview” on page 1648 “Enabling QoS on the Switch” on page 165

Chapter 100: Quality of Service (QoS)1648OverviewQuality of Service (QoS) refers to the latency, bandwidth, jitter, and loss settings that high-bandwi

AT-8100 Switch Command Line User’s Guide1649A twin-rate policer allows you to determine the CIR and CBS as well as two additional values: Peak Inform

AT-8100 Switch Command Line User’s Guide165RELOADSyntaxreloadParametersNoneModePrivileged Exec modeDescriptionUse this command to reset the switch. Yo

Chapter 100: Quality of Service (QoS)1650Enabling QoS on the SwitchBy default, the QoS feature is disabled on the switch. You must enable the QoS feat

AT-8100 Switch Command Line User’s Guide1651Creating a Class MapTo define filtering criteria, you need to create a class map. You create a class map a

Chapter 100: Quality of Service (QoS)1652NoteIf a conflict occurs between the settings in two class maps assigned to the same policy map, priority is

AT-8100 Switch Command Line User’s Guide1653number parameter allows you to add an access group to a class map by specifying an ACL number. For more in

Chapter 100: Quality of Service (QoS)1654Adding a CoS Value to a Class MapChoosing the CoS value allows you to add the user priority level to a class

AT-8100 Switch Command Line User’s Guide1655Adding a DSCP Value to a Class MapYou can specify a DSCP value level of 0, which is the lowest priority, t

Chapter 100: Quality of Service (QoS)1656Adding MAC-Type to a Class MapTo add the destination MAC address type, or MAC-type, to a class map, use the M

AT-8100 Switch Command Line User’s Guide1657Adding a TCP Flag to a Class MapTo set TCP flags for a class map which are used as matching criteria, use

Chapter 100: Quality of Service (QoS)1658Creating a Policy MapAfter you have created one or more class maps, you need to create a policy map which all

AT-8100 Switch Command Line User’s Guide1659Associating aClass Map With aPolicy MapTo associate a class map to a policy map, use the CLASS command. Fo

Chapter 8: Basic Switch Management Commands166SERVICE MAXMANAGERSyntaxservice maxmanager valueParametersvalueSpecifies the maximum number of manager s

Chapter 100: Quality of Service (QoS)1660Configuring Default Class MapsEach time you create a new policy map, a new class map called default is create

AT-8100 Switch Command Line User’s Guide1661Prioritizing CoS and DSCP By default, the DSCP field in Layer 3 packets and the CoS field in Layer 2 frame

Chapter 100: Quality of Service (QoS)1662Allied Telesis recommends using the default mappings listed in Table 209 on page 1661 and Table 210, “DSCP De

AT-8100 Switch Command Line User’s Guide1663Creating Single-rate and Twin-rate PolicersA policer can be used to meter the traffic classified by a clas

Chapter 100: Quality of Service (QoS)1664Creating a Single-rate PolicerThe following example configures a single-rate policer requiring traffic to con

AT-8100 Switch Command Line User’s Guide1665awplus(config-pmap-c)# police twin-rate 10000 2000 30000 50000 action policed-dscp-transmitConfigures a tw

Chapter 100: Quality of Service (QoS)1666Creating an Aggregate PolicerAn aggregate policer is a named policer with an aggregate name that you can assi

AT-8100 Switch Command Line User’s Guide1667awplus mls qos aggregate-police policyagg1 single-rate 125 30000 60000 action policed-dscp-transmitCreates

Chapter 100: Quality of Service (QoS)1668awplus(config-pmap-c)# police aggregate policyagg1Associates an aggregate name “policyagg1” with class map “c

AT-8100 Switch Command Line User’s Guide1669Configuring the Egress QueuesThis section discusses a port’s egress queues, including how incoming data ar

AT-8100 Switch Command Line User’s Guide167SHOW BANNER LOGINSyntaxshow banner login ParametersNoneModePrivileged Exec modeDescriptionUse this command

Chapter 100: Quality of Service (QoS)1670Determining theEgress QueuesThere are eight egress queues allocated to each egress port. The egress queue tha

AT-8100 Switch Command Line User’s Guide1671The following example sets ingress traffic with a CoS value of 5 to egress on queue 7 of port 8:Table 218.

Chapter 100: Quality of Service (QoS)1672The following example sets ingress traffic with a DSCP value of 5 to egress on queue 7 of port 5:Table 219. S

AT-8100 Switch Command Line User’s Guide1673awplus# show mls qos maps dscp-queue interface port 1.0.5Displays the DSCP mapping for port 5. See below.T

Chapter 100: Quality of Service (QoS)1674The following example uses the SET QUEUE command to set the traffic classified by class map “cmap4” to queue

AT-8100 Switch Command Line User’s Guide1675There are two commands that allow you to set egress queue shaping on a port. See Table 221.Both of these c

Chapter 100: Quality of Service (QoS)1676awplus(config-if)# wrr-queue weight 15,14,13,12,11,10,9,8Sets port 17 to the Weighted Round Robin scheduling

AT-8100 Switch Command Line User’s Guide1677Enabling Auto-QoS Support on the SwitchNoteQoS and LLDP must be manually enabled globally before the Auto-

Chapter 100: Quality of Service (QoS)1678Auto-QoS MacroExamplesYou can use the AUTO-QOS command to support a voice VLAN and optionally specify to trus

AT-8100 Switch Command Line User’s Guide1679awplus (config)# mls qos map cos-queue 0 to 1Maps CoS priority 0 to egress queue 1.awplus (config)# mls qo

Chapter 8: Basic Switch Management Commands168SHOW BAUD-RATESyntaxshow baud-rateParametersNoneModeUser Exec mode and Privileged Exec modeDescriptionUs

Chapter 100: Quality of Service (QoS)1680Auto-QoS with Trust DSCP Functionality and Voice VLAN Support In the following example, VLAN 100 becomes the

AT-8100 Switch Command Line User’s Guide1681Auto-QoS Functionality In the following example, the CoS value of ingress traffic is trusted:awplus> en

Chapter 100: Quality of Service (QoS)1682Auto-QoS with Trust DSCP Functionality In the following example, VLAN 100 becomes the voice VLAN, and trust D

AT-8100 Switch Command Line User’s Guide1683Auto-QoS-MEDMacro ExamplesNoteLLDP must be enabled globally before Auto-QoS-MED configuration. Link Layer

Chapter 100: Quality of Service (QoS)1684NoteUnlike the other procedures in this chapter, the Auto-QoS-MED examples provide a list of commands, but do

AT-8100 Switch Command Line User’s Guide1685Auto-QoS-MED with Trust DSCP Functionality and Voice VLAN Support In the following example, VLAN 100 becom

Chapter 100: Quality of Service (QoS)1686Table 229. Auto-QoS MED with Trust DSCP Functionality & Voice VLAN Support ExampleCommand Descriptionawpl

AT-8100 Switch Command Line User’s Guide1687Auto-QoS-MED Functionality ExampleIn the following example, the CoS value of ingress traffic is trusted:aw

Chapter 100: Quality of Service (QoS)1688Auto-QoS-MED with Trust DSCP Functionality In the following example, the DSCP value of ingress traffic is tru

AT-8100 Switch Command Line User’s Guide1689awplus (config-pmap)# class trustdscpEnters the “trustdscp” class map.awplus (config-pmap-c)# trust dscpEn

AT-8100 Switch Command Line User’s Guide169SHOW CLOCKSyntaxshow clockParametersNoneModesUser Exec modeDescriptionUse this command to display the syste

Chapter 100: Quality of Service (QoS)1690Displaying QoS SettingsThere are eight commands that display the QoS settings. See Table 232 for a descriptio

AT-8100 Switch Command Line User’s Guide1691Displaying QoSStatusTo display the status of the QoS feature, use the SHOW MLS QOS command at the Global C

Chapter 100: Quality of Service (QoS)1692Displaying aPolicy MapTo display the contents of a policy map, use the SHOW POLICY-MAP command in the Privile

AT-8100 Switch Command Line User’s Guide1693Figure 262. SHOW MLS QOS INTERFACE Command— Strict PriorityDisplaying CoS toQueue MappingsTo display the m

Chapter 100: Quality of Service (QoS)1694The CoS values in the first line are matched with the egress queue assignments in the second line. For exampl

AT-8100 Switch Command Line User’s Guide1695Figure 264. SHOW MLS QOS MAPS DSCP-QUEUE CommandDisplaying DSCPto Policed-DSCPValuesTo display the mapping

Chapter 100: Quality of Service (QoS)1696The syntax of the SHOW MLS QOS MAPS POLICED-DSCP command is: show mls qos maps policed-dscp <0-63>See F

1697Chapter 101QoS CommandsThe Quality of Service (QoS) commands are summarized in Table 233 and described in detail in this chapter.Table 233. Qualit

Chapter 101: QoS Commands1698“MATCH TCP-FLAGS” on page 1726 Class Map Sets one or more TCP flags for a class map.“MATCH VLAN” on page 1728 Class Map S

AT-8100 Switch Command Line User’s Guide1699“POLICE SINGLE-RATE ACTION” on page 1755Policy Map ClassConfigures a single-rate policer for a class map.“

AT-8100 Switch Command Line User’s Guide17Setting the Bridge Priority...

Chapter 8: Basic Switch Management Commands170SHOW RUNNING-CONFIGSyntaxshow running-configParametersNoneModesPrivileged Exec modeDescriptionUse this c

Chapter 101: QoS Commands1700“WRR-QUEUE EGRESS-RATE-LIMIT QUEUES” on page 1782Interface ConfigurationSets a limit on the amount of traffic that can be

AT-8100 Switch Command Line User’s Guide1701AUTO-QOS Syntaxauto-qos [voice <VLANID> |trust dscp]ParametersvoiceSpecifies a VLAN ID for voice VLA

Chapter 101: QoS Commands1702In the following example, VLAN 50 becomes the voice VLAN on port 1.0.22, and DSCP is trusted on traffic ingressing onto t

AT-8100 Switch Command Line User’s Guide1703AUTO-QOS-MEDSyntaxauto-qos-med [voice <VLANID> |trust dscp]ParametersvoiceSpecifies a VLAN ID for vo

Chapter 101: QoS Commands1704In the following example, VLAN 50 becomes the voice VLAN on port 1.0.14, and DSCP is trusted on traffic ingressing onto t

AT-8100 Switch Command Line User’s Guide1705CLASSSyntaxclass name|defaultParametersnameIndicates the name of a class map.defaultIndicates the class-ma

Chapter 101: QoS Commands1706To delete an association between a class map called “cmap5” and policy map called “pmap1,” do the following:awplus> en

AT-8100 Switch Command Line User’s Guide1707CLASS-MAPSyntaxclass-map nameParametersnameSpecifies the name of a class map.ModeGlobal Configuration mode

Chapter 101: QoS Commands1708DEFAULT-ACTIONSyntaxdefault-action permit|deny|copy-to-mirrorParameterspermitSpecifies packets are permitted. This is the

AT-8100 Switch Command Line User’s Guide1709To reset the action for the default class-map to permit, do the following:awplus> enableawplus# configu

AT-8100 Switch Command Line User’s Guide171SHOW SWITCHSyntaxshow switchParametersNoneModesPrivileged Exec modeDescriptionUse this command to view the

Chapter 101: QoS Commands1710DESCRIPTION (Policy Map)Syntaxdescription lineParameterslineSpecifies an 80-character description of the QoS policy map.

AT-8100 Switch Command Line User’s Guide1711To remove a description from a policy map called “pmap1,” do the following:awplus> enableawplus# config

Chapter 101: QoS Commands1712MATCH ACCESS-GROUP Syntaxmatch access-group group-name|group-numberParametersgroup-nameIndicates a group name that was cr

AT-8100 Switch Command Line User’s Guide1713 To create a numbered IPv4 ACL, see the commands listed in Table 234.Use the no form of this command, NO

Chapter 101: QoS Commands1714The following example creates a numbered IPv4 MAC ACL access list, 4012 and matches it to a class map called “cmap2:”awpl

AT-8100 Switch Command Line User’s Guide1715MATCH COSSyntaxmatch cos <0-7>Parameters0-7Specifies the CoS value where 0 is the lowest value, and

Chapter 101: QoS Commands1716Confirmation Commands“SHOW CLASS-MAP” on page 1766“SHOW RUNNING-CONFIG” on page 170ExamplesThe following example creates

AT-8100 Switch Command Line User’s Guide1717MATCH DSCPSyntaxmatch dscp <0-63>Parameters0-63Specifies the DSCP value with 0 as the lowest value a

Chapter 101: QoS Commands1718MATCH IP-PRECEDENCESyntaxmatch ip-precedence <0-7>Parameters0-7Specifies the precedence number.ModeClass Map modeDe

AT-8100 Switch Command Line User’s Guide1719MATCH MAC-TYPESyntaxmatch mac-type <12bcast|12mcast|12ucast>Parametersl2bcastSpecifies the Layer 2 B

Chapter 8: Basic Switch Management Commands172ExampleThe following example displays the switch information:awplus# show switchActive Spanning Tree ver

Chapter 101: QoS Commands1720The following example removes the MAC type from a class map:awplus> enableawplus# configure terminalawplus(config)# cl

AT-8100 Switch Command Line User’s Guide1721MATCH PROTOCOLSyntaxmatch eth-format layer-two-format protocol layer-three-protocolParameterseth-formatInd

Chapter 101: QoS Commands1722snap-tagged Indicates Sub-network Access Protocol (SNAP) tagged packets.snap-untagged Indicates SNAP untagged packets.Tab

AT-8100 Switch Command Line User’s Guide1723dec-lavc Indicates protocol number 6007. Enter the parameter name or its number.dec-mod-dump-id Indicates

Chapter 101: QoS Commands1724Confirmation Commands“SHOW CLASS-MAP” on page 1766“SHOW RUNNING-CONFIG” on page 170ExamplesThe following example assigns

AT-8100 Switch Command Line User’s Guide1725The following example creates a class map called “cmap12” and assigns ARP to it:awplus> enableawplus# c

Chapter 101: QoS Commands1726MATCH TCP-FLAGSSyntaxmatch tcp-flags ack|fin|rst|syn|urgParametersackIndicates the Acknowledge TCP flag.finIndicates the

AT-8100 Switch Command Line User’s Guide1727If you assign both of these commands to the same class map, such as “cmap1,” the output of the SHOW CLASS-

Chapter 101: QoS Commands1728MATCH VLANSyntaxmatch vlan <1-4094>Parameters1-4094Specifies the VLAN ID number.ModeClass Map Configuration modeDes

AT-8100 Switch Command Line User’s Guide1729MLS QOS AGGREGATE-POLICE SINGLE-RATESyntaxmls qos aggregate-police <name> single-rate <CIR> &l

AT-8100 Switch Command Line User’s Guide173SHOW SYSTEMSyntaxshow systemParametersNoneModesUser Exec and Privileged Exec modesDescriptionUse this comma

Chapter 101: QoS Commands1730This type of policer can meter the traffic classified by the class map, and as a result, is given a red bandwidth class f

AT-8100 Switch Command Line User’s Guide1731awplus(config-pmap)# police aggregate policeagg1awplus(config-pmap-c)# exitawplus(config-pmap)# class cmap

Chapter 101: QoS Commands1732MLS QOS AGGREGATE-POLICE TWIN-RATESyntaxmls qos aggregate-police <name> twin-rate <cir> <cbs> <pir&g

AT-8100 Switch Command Line User’s Guide1733A twin-rate policier is based on four values:  minimum rate minimum burst size maximum rate maximum bu

Chapter 101: QoS Commands1734awplus(config-pmap-c)# exitawplus(config-pmap)# class cmaptwin2awplus(config-pmap)# police aggregate policeaggtwinawplus(

AT-8100 Switch Command Line User’s Guide1735MLS QOS COSSyntaxmls qos cos <0-7>Parameters0-7Specifies the Class of Service user-priority value. T

Chapter 101: QoS Commands1736The following example sets the CoS priority value to 4 on port 22:awplus> enableawplus# configure terminalawplus(confi

AT-8100 Switch Command Line User’s Guide1737MLS QOS ENABLESyntaxmls qos enableParametersNoneModeGlobal Configuration modeDescriptionUse this command t

Chapter 101: QoS Commands1738MLS QOS MAP COS-QUEUESyntaxmls qos map cos-queue cos_priority to egress_queueParameterscos_prioritySpecifies a Class of S

AT-8100 Switch Command Line User’s Guide1739Confirmation Command“SHOW MLS QOS MAPS COS-QUEUE” on page 1775ExamplesThe following example sets an egress

Chapter 8: Basic Switch Management Commands174SHOW SYSTEM SERIALNUMBERSyntaxshow system serialnumberParametersNoneModeUser Exec and Privileged Exec mo

Chapter 101: QoS Commands1740MLS QOS MAP DSCP-QUEUESyntaxmls qos map dscp-queue dscp_value to egress_queueParametersdscp_valueSpecifies a DSCP value.

AT-8100 Switch Command Line User’s Guide1741ExamplesThe following example maps a DSCP value of 46 to egress queue 7 on ingress port 1.0.24. The DSCP v

Chapter 101: QoS Commands1742MLS QOS MAP POLICED-DSCPSyntaxmls qos map policed-dscp <existing-dscp> to <new-dscp> <0 - 63>Parameters

AT-8100 Switch Command Line User’s Guide1743This example changes the DSCP value from 20 to 44:awplus> enableawplus# configure terminalawplus(config

Chapter 101: QoS Commands1744NO AUTO-QOS VOICE | TRUST DSCPSyntaxno auto-qos [voice <VLANID> |trust dscp]ParametersvoiceSpecifies a VLAN ID for

AT-8100 Switch Command Line User’s Guide1745In the following example, DSCP is removed as the type of trust:awplus> enableawplus# configure terminal

Chapter 101: QoS Commands1746NO MATCH ACCESS-GROUPSyntaxmatch access-group group-name|group-numberParametersgroup-nameIndicates an ACL group name that

AT-8100 Switch Command Line User’s Guide1747The following example removes group number 4000 from a class map, called “cmap41”:awplus> enableawplus#

Chapter 101: QoS Commands1748NO MATCH PROTOCOLSyntaxno match eth-format layer-two-format protocol layer-three-protocolParameterseth-formatIndicates th

AT-8100 Switch Command Line User’s Guide1749The following example removes 802.2 tagged packets from a class map called “cmap8”:awplus> enableawplus

AT-8100 Switch Command Line User’s Guide175SHOW USERSSyntaxshow usersParametersNoneModesPrivileged Exec modeDescriptionUse this command to display the

Chapter 101: QoS Commands1750NO MLS QOS AGGREGATE-POLICESyntaxno mls qos aggregate-police name ParametersnameIndicates the name of the police aggregat

AT-8100 Switch Command Line User’s Guide1751NO MLS QOS ENABLESyntaxno mls qos enableParametersNoneModeGlobal Configuration modeDescriptionUse this com

Chapter 101: QoS Commands1752NO POLICE AGGREGATESyntaxno police aggregate nameParametersnameIndicates the name of a police aggregate.ModePolicy Map Cl

AT-8100 Switch Command Line User’s Guide1753POLICE AGGREGATESyntaxpolice aggregate nameParametersnameIndicates the name of the police aggregator.ModeP

Chapter 101: QoS Commands1754The following example removes the association between the aggregate name, “policyagg5,” and class maps “cmap7” and “cmap1

AT-8100 Switch Command Line User’s Guide1755POLICE SINGLE-RATE ACTIONSyntaxpolice single-rate <cir> <cbs> <ebs> action [drop-red|pol

Chapter 101: QoS Commands1756POLICED-DSCP command. See “MLS QOS MAP POLICED-DSCP” on page 1742.Although data are metered per byte, if there are suffic

AT-8100 Switch Command Line User’s Guide1757POLICE TWIN-RATE ACTIONSyntaxpolice twin-rate <cir> <cbs> <pir> <pbs> action [drop

Chapter 101: QoS Commands1758 minimum burst size maximum rate maximum burst sizeThe value of the action parameter greatly effects the outcome of th

AT-8100 Switch Command Line User’s Guide1759POLICY-MAPSyntaxpolicy-map nameParametersnameSpecifies the name of a policy map.ModeGlobal Configuration m

Chapter 8: Basic Switch Management Commands176ExampleThis example displays the managers who are logged on to the switch:awplus# show usersIdle The num

Chapter 101: QoS Commands1760SET COSSyntaxset cos <0-7>Parameters0-7Specifies the CoS value of the classified traffic.ModePolicy Map Class modeD

AT-8100 Switch Command Line User’s Guide1761The following example removes the policy-map action for class map “cmap25” by using the NO SET COS command

Chapter 101: QoS Commands1762SET DSCPSyntaxset dscp <0-63>Parameters<0-63>Specifies the DSCP value of the classified traffic.ModePolicy Ma

AT-8100 Switch Command Line User’s Guide1763SET QUEUESyntaxset queue <0-7>Parameters<0-7>Specifies the queue.ModePolicy Map Class modeDesc

Chapter 101: QoS Commands1764The following example removes the previously configured egress queue from class map “cmap2:”awplus> enableawplus# conf

AT-8100 Switch Command Line User’s Guide1765SERVICE-POLICY INPUTSyntaxservice-policy input <policy-map>Parameterspolicy-mapIndicates the name of

Chapter 101: QoS Commands1766SHOW CLASS-MAPSyntaxshow class-map class-map-nameParametersclass-map-nameSpecifies the name of the class map.ModesUser Ex

AT-8100 Switch Command Line User’s Guide1767SHOW POLICY-MAPSyntaxshow policy-map policy-map-nameParameterspolicy-map-nameSpecifies the name of the pol

Chapter 101: QoS Commands1768ExampleThis example displays the settings of a policy map called “pmap4:'awplus# show policy-map pmap4Description Th

AT-8100 Switch Command Line User’s Guide1769SHOW MLS QOSSyntaxshow mls qos ParametersNoneModePrivileged Exec modeDescriptionUse this command to displa

AT-8100 Switch Command Line User’s Guide177SHOW VERSIONSyntaxshow versionParametersNoneModeUser Exec and Privileged Exec modesDescriptionUse this comm

Chapter 101: QoS Commands1770SHOW MLS QOS AGGREGRATE-POLICERSyntaxshow mls qos aggregate-policer nameParametersnameSpecifies the name of the aggregate

AT-8100 Switch Command Line User’s Guide1771.ExampleThis example displays the contents of the aggregate policer, called “ap1:”awplus# show mls qos agg

Chapter 101: QoS Commands1772SHOW MLS QOS INTERFACESyntaxshow mls qos interface portParametersportSpecifies the port to display. You can view only one

AT-8100 Switch Command Line User’s Guide1773Figure 273. SHOW MLS QOS INTERFACE Command - Strict Priority (continued)Figure 274 is an example of a port

Chapter 101: QoS Commands1774The fields in the display are described in Table 240.ExampleThis example displays the mappings of egress queues to CoS va

AT-8100 Switch Command Line User’s Guide1775SHOW MLS QOS MAPS COS-QUEUESyntaxshow mls qos maps cos-queueParametersportSpecifies the port to display. Y

Chapter 101: QoS Commands1776SHOW MLS QOS MAPS DSCP-QUEUESyntaxshow mls qos maps dscp-queueParametersportSpecifies the port. You can display only one

AT-8100 Switch Command Line User’s Guide1777Figure 276. SHOW MLS QOS MAPS DSCP-QUEUE CommandThe mappings of DSCP value and egress queues are set with

Chapter 101: QoS Commands1778ExampleThe following example displays the DSCP mappings:awplus# show mls qos maps dscp-queue

AT-8100 Switch Command Line User’s Guide1779SHOW MLS QOS MAPS POLICED-DSCPSyntaxshow mls qos maps policed-dscp <0-63>Parameters<0-63>Speci

Chapter 8: Basic Switch Management Commands178SNMP-SERVER CONTACTSyntaxsnmp-server contact contactParameterscontactSpecifies the name of the person re

Chapter 101: QoS Commands1780TRUST DSCPSyntaxtrust dscpParametersNoneModePolicy Map Class modeDescriptionUse this command to trust the DSCP field in a

AT-8100 Switch Command Line User’s Guide1781awplus> enableawplus# configure terminalawplus(config)# policy-map pmap1awplus(config-pmap)# class cmap

Chapter 101: QoS Commands1782WRR-QUEUE EGRESS-RATE-LIMIT QUEUESSyntaxwrr-queue egress-rate-limit bandwidth queues [0|1|2|3|4|5|6|7]Parametersbandwidth

AT-8100 Switch Command Line User’s Guide1783This example removes egress rate limiting from port 14:awplus> enableawplus# configure terminalawplus(c

Chapter 101: QoS Commands1784WRR-QUEUE WEIGHTSyntaxwrr-queue weight weightParametersweightSpecifies the weight (the number of packets a port transmits

AT-8100 Switch Command Line User’s Guide1785Figure 279. Mapping of WRR QueuesUse the no form of this command, NO WRR-QUEUE WEIGHT, to remove the WRR s

Chapter 101: QoS Commands1786

1787Chapter 102QoS Storm Control ProtectionThis chapter describes the following topics: “Overview” on page 1788 “Enabling Policy-Based QSP” on page

Chapter 102: QoS Storm Control Protection1788OverviewThe QoS Storm Control Protection (QSP) feature uses QoS mechanisms to classify traffic that is li

AT-8100 Switch Command Line User’s Guide1789The QSP feature is configured and displayed with six storm control commands. All of the commands that begi

AT-8100 Switch Command Line User’s Guide179SNMP-SERVER LOCATIONSyntaxsnmp-server location locationParameterslocationSpecifies the location of the swit

Chapter 102: QoS Storm Control Protection1790When the software detects a storm on a port, a message is automatically recorded in the Event log or Sysl

AT-8100 Switch Command Line User’s Guide1791Enabling Policy-Based QSPTo enable QSP, use the STORM PROTECTION command. You enable storm protection on a

Chapter 102: QoS Storm Control Protection1792Setting the Storm Control ActionTo determine which action the switch takes when the configured limits are

AT-8100 Switch Command Line User’s Guide1793Disabling a Port The following example sets the storm protection action to disable the port assigned to th

Chapter 102: QoS Storm Control Protection1794Shutting Down aPortThe following example sets the storm protection action to shut down the port assigned

AT-8100 Switch Command Line User’s Guide1795Setting Storm Control Down TimeAfter the storm control action has been triggered, the port assigned to the

Chapter 102: QoS Storm Control Protection1796Setting the Storm Control Speed and Sampling FrequencyYou want to set the data rate for triggering policy

AT-8100 Switch Command Line User’s Guide1797Displaying Port Storm StatusTo display the storm status for the specified port, use the SHOW MLS QOS INTER

Chapter 102: QoS Storm Control Protection1798

1799Chapter 103QSP CommandsThe QoS Storm Control Protection commands are summarized in Table 249 and described in detail in this chapter.Table 249. Qu

Contents18SHOW SPANNING-TREE...88

Chapter 8: Basic Switch Management Commands180SYSTEM TERRITORYSyntaxsystem territory territoryParametersterritorySpecifies the territory of the switch

Chapter 103: QSP Commands1800SHOW MLS QOS INTERFACE STORM-STATUSSyntaxshow mls qos interface port storm-statusParametersportSpecifies the port to disp

AT-8100 Switch Command Line User’s Guide1801Confirmation CommandNoneExampleThis example displays the storm status for port 5:awplus# show mls qos inte

Chapter 103: QSP Commands1802STORM-ACTIONSyntaxstorm-action portdisable|vlandisable|linkdownParametersportdisableDisables the port in software.vlandis

AT-8100 Switch Command Line User’s Guide1803awplus(config)# policy-map pmap2awplus(config-pmap)# class cmap1awplus(config-pmap-c)# storm-protectionawp

Chapter 103: QSP Commands1804STORM-DOWNTIMESyntaxstorm-downtime <1 - 86400>Parameters<1 - 86400>Indicates the number of seconds.ModePolicy

AT-8100 Switch Command Line User’s Guide1805STORM-PROTECTIONSyntaxstorm-protection ParametersNoneModePolicy Map ClassDescriptionUse this command to en

Chapter 103: QSP Commands1806STORM-RATESyntaxstorm-rate <1 - 10000000>Parameters<1 - 10000000>Sets the data rate in kbps. ModePolicy Map C

AT-8100 Switch Command Line User’s Guide1807The following example disables the storm-rate setting:awplus> enableawplus# configure terminalawplus(co

Chapter 103: QSP Commands1808STORM-WINDOWSyntaxstorm-window <100 - 6000>Parameters<100 - 6000>Indicates the window size, measured in ms. E

AT-8100 Switch Command Line User’s Guide1809The following example disables the storm-window setting on class map “cmap5:'awplus> enableawplus#

AT-8100 Switch Command Line User’s Guide181This example removes the current territory information:awplus> enableawplus# configure terminalawplus(co

Chapter 103: QSP Commands1810

1811Section XIVRoutingThis section contains the following chapters: Chapter 104, “Internet Protocol Version 4 Packet Routing” on page 1813 Chapter 1

1812

1813Chapter 104Internet Protocol Version 4 Packet RoutingThis chapter describes the following topics: “Overview” on page 1814 “Routing Interfaces” o

Chapter 104: Internet Protocol Version 4 Packet Routing1814OverviewThis section contains an overview of the IPv4 routing feature on the switch and beg

AT-8100 Switch Command Line User’s Guide1815Routing InterfacesRouting interfaces are used to route IPv4 packets between the networks that are local to

Chapter 104: Internet Protocol Version 4 Packet Routing1816Static RoutesStatic routes are used to route IPv4 packets to networks that are not directly

AT-8100 Switch Command Line User’s Guide1817Routing Information Protocol (RIP)The switch supports Routing Information Protocol (RIP) versions 1 and 2.

Chapter 104: Internet Protocol Version 4 Packet Routing1818The switch transmits its routing table every thirty seconds from those interfaces that have

AT-8100 Switch Command Line User’s Guide1819Default RouteA default route is a “match all” destination entry in the routing table. The switch uses it t

Chapter 8: Basic Switch Management Commands182

Chapter 104: Internet Protocol Version 4 Packet Routing1820Routing TableThe switch has a routing table of local and remote networks The local networks

AT-8100 Switch Command Line User’s Guide1821Address Resolution Protocol (ARP) TableThe switch has an ARP table. The switch uses the table to store the

Chapter 104: Internet Protocol Version 4 Packet Routing1822Internet Control Message Protocol (ICMP)ICMP allows routers to send error and control messa

AT-8100 Switch Command Line User’s Guide1823Time to Live Exceeded (11) The switch sends a “Time to live exceeded” packet if the value in a packet’s TT

Chapter 104: Internet Protocol Version 4 Packet Routing1824Routing Interfaces and Management FeaturesRouting interfaces are primarily used to route IP

AT-8100 Switch Command Line User’s Guide1825Example of the Routing CommandsThis section contains an example of the commands of the IPv4 routing featur

Chapter 104: Internet Protocol Version 4 Packet Routing1826Creating theRoutingInterfacesNow that the VLANs are created, you may use the IP ADDRESS com

AT-8100 Switch Command Line User’s Guide1827IPv4 decimal masks 16 and 24 are equivalent to masks 255.255.0.0 and 255.255.255.0, respectively.There are

Chapter 104: Internet Protocol Version 4 Packet Routing1828Adding Static andDefault RoutesBuilding on our example, assume you decide to manually enter

AT-8100 Switch Command Line User’s Guide1829Now assume you want to create a default route for packets that have a destination address to an unknown ne

183Chapter 9Port ParametersThis chapter contains the following: “Adding Descriptions” on page 184 “Setting the Speed and Duplex Mode” on page 185 “

Chapter 104: Internet Protocol Version 4 Packet Routing1830Activating RIP Rather than adding static routes to remote destinations, or perhaps to augme

AT-8100 Switch Command Line User’s Guide1831You may specify the interfaces in the NETWORK command by their respective network addresses instead of the

Chapter 104: Internet Protocol Version 4 Packet Routing1832

1833Chapter 105IPv4 Routing CommandsThe IPv4 routing commands are summarized in Table 253 and described in detail within the chapter.NoteThe commands

Chapter 105: IPv4 Routing Commands1834NoteThe switch does not support IPv6 packet routing, but it does support one IPv6 management address. For instru

AT-8100 Switch Command Line User’s Guide1835IP ADDRESSSyntaxip address ipaddress/maskParametersipaddressSpecifies an IPv4 address for a new routing in

Chapter 105: IPv4 Routing Commands1836ExamplesThis example adds a new routing interface to the Default VLAN, which has the VID 1.The interface is assi

AT-8100 Switch Command Line User’s Guide1837IP ADDRESS DHCPSyntaxip address dhcpParametersNoneModeVLAN Interface modeDescriptionUse this command to cr

Chapter 105: IPv4 Routing Commands1838IP ROUTESyntaxip route ipaddress1 mask ipaddress2 [admin]Parametersipaddress1Specifies the IP address of a remot

AT-8100 Switch Command Line User’s Guide1839The switch uses the default route to route packets to remote destination networks that are not listed in i

Chapter 9: Port Parameters184Adding DescriptionsThe ports will be easier to identify if you give them descriptions. The descriptions are viewed with t

Chapter 105: IPv4 Routing Commands1840This example assigns the switch the IPv4 default gateway address 143.87.132.45. The mask is specified in IP nota

AT-8100 Switch Command Line User’s Guide1841NO IP ADDRESSSyntaxno ip addressParametersNoneModeVLAN Interface modeDescriptionUse this command to delete

Chapter 105: IPv4 Routing Commands1842ExampleThis example deletes the IPv4 routing interface from the VLAN with the VID 15:awplus> enableawplus# co

AT-8100 Switch Command Line User’s Guide1843NO IP ADDRESS DHCPSyntaxno ip address dhcpParametersNoneModeVLAN Interface modeDescriptionUse this command

Chapter 105: IPv4 Routing Commands1844ExampleThis example deletes the IPv4 routing interface with a dynamic IP address from the VLAN with the VID 3:aw

AT-8100 Switch Command Line User’s Guide1845NO IP ROUTESyntaxno ip route ipaddress1/mask ipaddress2 [admin]Parametersipaddress1Specifies the IP addres

Chapter 105: IPv4 Routing Commands1846This example deletes the same static route, but the mask is entered in decimal notation:awplus> enableawplus#

AT-8100 Switch Command Line User’s Guide1847SHOW IP INTERFACESyntaxshow ip interfaceParametersNoneModePrivileged Exec modeDescriptionUse this command

Chapter 105: IPv4 Routing Commands1848ExampleThis example displays the routing interfaces on the switch:awplus# show ip interfaceProtocol The status o

AT-8100 Switch Command Line User’s Guide1849SHOW IP ROUTESyntaxshow ip routeParametersNoneModePrivileged Exec modeDescriptionUse this command to displ

AT-8100 Switch Command Line User’s Guide185Setting the Speed and Duplex ModeThe twisted pair ports on the switch can operate at 10, 100, or 1000 Mbps,

Chapter 105: IPv4 Routing Commands1850NoteRIP routes have an additional option which indicates the time lapsed in hours: minutes: seconds since the RI

1851Chapter 106Routing Information Protocol (RIP)This chapter describes the following topics: “Overview” on page 1852 “Enabling RIP” on page 1853 “

Chapter 106: Routing Information Protocol (RIP)1852OverviewThe AT-8100 Series switches provide Layer 3 routing functionality as well as Layer 2 switch

AT-8100 Switch Command Line User’s Guide1853Enabling RIPTo connect remote networks dynamically, you must enable the RIP routing process on the switche

Chapter 106: Routing Information Protocol (RIP)1854The following example enables RIP on Switch S1 so that VLAN interfaces 10 and 50 receive and send R

AT-8100 Switch Command Line User’s Guide1855Specifying a RIP VersionThe Management Software supports both RIP Version 1 and 2. The default RIP Version

Chapter 106: Routing Information Protocol (RIP)1856Enabling AuthenticationSecurity is one of the primary requirements for corporate networks. RIP Vers

AT-8100 Switch Command Line User’s Guide1857The following example configures Switch S1 to specify MD5 as the authentication mode and “axc222” as the p

Chapter 106: Routing Information Protocol (RIP)1858Enabling and Disabling Automatic Route SummarizationAs a corporation grows, the corporate network n

AT-8100 Switch Command Line User’s Guide1859The following example enables automatic summarization:S1> enableS1# configure terminalS1(config)# route

Chapter 9: Port Parameters186This example sets the speeds of ports 11 and 17 to 100Mbps:awplus> enableawplus# configure terminalawplus(config)# int

Chapter 106: Routing Information Protocol (RIP)1860Enabling and Disabling Split HorizonRIP implements the split-horizon mechanism to prevent propagati

AT-8100 Switch Command Line User’s Guide1861Advertising the Default RouteRIP has a built-in feature which allows you to advertise a default route to d

Chapter 106: Routing Information Protocol (RIP)1862Displaying Routing Information with RIPTo confirm that routes are dynamically added by RIP, use the

AT-8100 Switch Command Line User’s Guide1863Adjusting TimersRIP sends routing updates at regular intervals. By default, the Management Software transm

Chapter 106: Routing Information Protocol (RIP)1864Blocking Routing Updates on an InterfaceThe interfaces on the switch receive routing updates every

1865Chapter 107Routing Information Protocol (RIP) CommandsThe RIP commands are summarized in Table 258 and described in detail within the chapter.Tabl

Chapter 107: Routing Information Protocol (RIP) Commands1866“NO AUTO-SUMMARY” on page 1881 Routing ConfigurationDisables automatic route summarization

AT-8100 Switch Command Line User’s Guide1867“ROUTER RIP” on page 1896 Global ConfigurationEnters the Routing Configuration mode to configure RIP.“SHOW

Chapter 107: Routing Information Protocol (RIP) Commands1868AUTO-SUMMARYSyntaxauto-summaryParametersNoneModeRouting Configuration modeDescriptionUse t

AT-8100 Switch Command Line User’s Guide1869DEFAULT-INFORMATION ORIGINATESyntaxdefault-information originateParameterNoneModeRouter Configuration mode

AT-8100 Switch Command Line User’s Guide187Setting the MDI/MDI-X Wiring ConfigurationThe wiring configurations of twisted pair ports that operate at 1

Chapter 107: Routing Information Protocol (RIP) Commands1870IP RIP AUTHENTICATION STRINGSyntaxip rip authentication string auth-stringParametersauth-s

AT-8100 Switch Command Line User’s Guide1871IP RIP AUTHENTICATION MODESyntaxip rip authentication mode md5|textParametersmd5Specifies the MD5 authenti

Chapter 107: Routing Information Protocol (RIP) Commands1872IP RIP RECEIVE-PACKETSyntaxip rip receive-packetParametersNoneModeVLAN Interface modeDescr

AT-8100 Switch Command Line User’s Guide1873IP RIP RECEIVE VERSIONSyntaxip rip receive version 1|2|1 2Parameters1Specifies RIP Version 1.2Specifies RI

Chapter 107: Routing Information Protocol (RIP) Commands1874The following example configures the routing interface in VLAN 3 to receive both RIP Versi

AT-8100 Switch Command Line User’s Guide1875IP RIP SEND-PACKETSyntaxip rip send packetParametersNoneModeVLAN Interface modeDescriptionUse this command

Chapter 107: Routing Information Protocol (RIP) Commands1876IP RIP SEND VERSIONSyntaxip rip send version 1|2Parameters1Specifies RIP Version 1.2Specif

AT-8100 Switch Command Line User’s Guide1877IP RIP SPLIT-HORIZONSyntaxip rip split-horizon [poisoned]ParameterspoisonedAssigns a hop value of infinity

Chapter 107: Routing Information Protocol (RIP) Commands1878ExamplesThe following example activates split horizon on the routing interface in VLAN 5.

AT-8100 Switch Command Line User’s Guide1879NETWORKSyntaxnetwork network-address|subnet-mask|vlanidParametersnetwork-addressSpecifies the network addr

Chapter 9: Port Parameters188Enabling or Disabling PortsDisabling ports turns off their receivers and transmitters so that they cannot forward traffic

Chapter 107: Routing Information Protocol (RIP) Commands1880The following example allows VLAN 2 to send and accept routing updates:awplus> enableaw

AT-8100 Switch Command Line User’s Guide1881NO AUTO-SUMMARYSyntaxno auto-summaryParametersNoneModeRouting Configuration modeDescriptionUse this comman

Chapter 107: Routing Information Protocol (RIP) Commands1882NO DEFAULT-INFORMATION ORIGINATESyntaxno default-information originateParameterNoneModeRou

AT-8100 Switch Command Line User’s Guide1883NO IP RIP AUTHENTICATION MODESyntaxno ip rip authentication modeParametersNoneModeVLAN Interface modeDescr

Chapter 107: Routing Information Protocol (RIP) Commands1884NO IP RIP AUTHENTICATION STRINGSyntaxno ip rip authentication string auth-stringParameters

AT-8100 Switch Command Line User’s Guide1885NO IP RIP RECEIVE-PACKETSyntaxno ip rip receive-packetParametersNoneModeVLAN Interface modeDescriptionUse

Chapter 107: Routing Information Protocol (RIP) Commands1886NO IP RIP RECEIVE VERSIONSyntaxno ip rip receive versionParametersNoneModeVLAN Interface m

AT-8100 Switch Command Line User’s Guide1887NO IP RIP SEND-PACKETSyntaxno ip rip send packetParametersNoneModeVLAN Interface modeDescriptionUse this c

Chapter 107: Routing Information Protocol (RIP) Commands1888NO IP RIP SEND VERSIONSyntaxno ip rip send versionParametersNoneModeVLAN Interface modeDes

AT-8100 Switch Command Line User’s Guide1889NO IP RIP SPLIT-HORIZONSyntaxno ip rip split-horizonParametersNoneModeVLAN Interface modeDescriptionUse th

AT-8100 Switch Command Line User’s Guide189Enabling or Disabling BackpressurePorts use backpressure during periods of packet congestion, to prevent pa

Chapter 107: Routing Information Protocol (RIP) Commands1890NO NETWORKSyntaxno network network-address|subnet-mask|vlanidParametersnetwork-addressSpec

AT-8100 Switch Command Line User’s Guide1891NO PASSIVE-INTERFACESyntaxno passive-interface vlanidParametersvlanidSpecifies the ID number of a VLAN.Mod

Chapter 107: Routing Information Protocol (RIP) Commands1892NO ROUTER RIPSyntaxno router ripParametersNoneModeGlobal Configuration modeDescriptionUse

AT-8100 Switch Command Line User’s Guide1893NO TIMERS BASICSyntaxno timers basicParametersNoneModeRouting Configuration modeDescriptionUse this comman

Chapter 107: Routing Information Protocol (RIP) Commands1894NO VERSIONSyntaxno versionParametersNoneModeRouter Configuration modeDescriptionUse this c

AT-8100 Switch Command Line User’s Guide1895PASSIVE-INTERFACESyntaxpassive-interface vlanidParametersvlanidSpecifies the ID number of a VLAN.ModeRouti

Chapter 107: Routing Information Protocol (RIP) Commands1896ROUTER RIPSyntaxrouter ripParametersNoneModeGlobal Configuration modeDescriptionUse this c

AT-8100 Switch Command Line User’s Guide1897SHOW IP RIPSyntaxshow ip ripParametersNoneModeUser Exec and Privileged Exec modesDescriptionUse this comma

Chapter 107: Routing Information Protocol (RIP) Commands1898The fields are described in Table 259.ExampleThe following example displays routing inform

AT-8100 Switch Command Line User’s Guide1899SHOW IP RIP COUNTERSyntaxshow ip rip counterParametersNoneModeUser Exec and Privileged Exec modesDescripti

AT-8100 Switch Command Line User’s Guide19Chapter 62: GARP VLAN Registration Protocol ...

Chapter 9: Port Parameters190Enabling or Disabling Flow ControlWhen a port that is operating in full-duplex mode needs to temporarily stop its local o

Chapter 107: Routing Information Protocol (RIP) Commands1900ExampleThe following example displays counters for RIP packets on the switch:awplus# show

AT-8100 Switch Command Line User’s Guide1901SHOW IP RIP INTERFACESyntaxshow ip rip interface interfaceParametersinterfaceSpecifies a VLAN interface. T

Chapter 107: Routing Information Protocol (RIP) Commands1902ExamplesThe following example displays RIP information about VLAN 5:awplus# show ip route

AT-8100 Switch Command Line User’s Guide1903TIMERS BASICSyntaxtimers basic update update timeout timeout garbage garbageParametersupdateSpecifies the

Chapter 107: Routing Information Protocol (RIP) Commands1904ExampleThe following example sets the switch to transmit routing updates every 20 seconds,

AT-8100 Switch Command Line User’s Guide1905VERSIONSyntaxversion 1|2Parameters1Specifies RIP Version 1.2Specifies RIP Version 2.ModeRouter Configurati

Chapter 107: Routing Information Protocol (RIP) Commands1906

1907Appendix ASystem Monitoring CommandsThe system monitoring commands are summarized in Table 262 and described in detail within the chapter.Table 26

Chapter : System Monitoring Commands1908SHOW CPUSyntaxshow cpu [sort pri|runtime|sleep|thrds]ParameterspriSorts the list by process priorities.runtime

AT-8100 Switch Command Line User’s Guide1909SHOW CPU HISTORYSyntaxshow cpu historyParametersNoneModePrivileged Exec modeDescriptionUse this command to

AT-8100 Switch Command Line User’s Guide191This example configures port 21 not to send pause packets during periods of packet congestion:awplus> en

Chapter : System Monitoring Commands1910SHOW CPU USER-THREADSSyntaxshow cpu user-threadsParametersNoneModePrivileged Exec modeDescriptionUse this comm

AT-8100 Switch Command Line User’s Guide1911SHOW MEMORYSyntaxshow memory [sort peak|size|stk]ParameterspeakSorts the list by the peak amounts of memor

Chapter : System Monitoring Commands1912SHOW MEMORY ALLOCATIONSyntaxshow memory allocation processParameterprocessSpecifies a system process.ModePrivi

AT-8100 Switch Command Line User’s Guide1913SHOW MEMORY HISTORYSyntaxshow memory historyParametersNoneModePrivileged Exec modeDescriptionUse this comm

Chapter : System Monitoring Commands1914SHOW MEMORY POOLSSyntaxshow memory poolsParametersNoneModePrivileged Exec modeDescriptionUse this command to d

AT-8100 Switch Command Line User’s Guide1915SHOW PROCESSSyntaxshow memory process [sort cpu|mem]ParameterscpuSorts the list by percentage of CPU utili

Chapter : System Monitoring Commands1916SHOW SYSTEM SERIALNUMBERSyntaxshow system serialnumberParametersNoneModesUser Exec mode and Privileged Exec mo

AT-8100 Switch Command Line User’s Guide1917SHOW SYSTEM INTERRUPTSSyntaxshow system interruptsParametersNoneModePrivileged Exec modeDescriptionUse thi

Chapter : System Monitoring Commands1918SHOW TECH-SUPPORTSyntaxshow tech-support [all]ParametersallPerforms the full set of technical support commands

AT-8100 Switch Command Line User’s Guide1919With the ALL option, the command performs the previous commands and these additional commands: SHOW ARP

Chapter 9: Port Parameters192If flow control is not configured on a port, this message is displayed:Flow control is not set on interface port1.0.2

Chapter : System Monitoring Commands1920

1921Appendix BManagement Software Default SettingsThis appendix lists the factory default settings of the switch. The features are listed in alphabeti

Appendix B: Management Software Default Settings1922 “VLANs” on page 1952 “Web Server” on page 1953

AT-8100 Switch Command Line User’s Guide1923Boot Configuration FileThe following table lists the name of the default configuration file.Boot Configura

Appendix B: Management Software Default Settings1924Class of ServiceThe following table lists the default mappings of the IEEE 802.1p priority levels

AT-8100 Switch Command Line User’s Guide1925Console PortThe following table lists the default settings for the Console port.NoteThe baud rate is the o

Appendix B: Management Software Default Settings1926DHCP RelayThe following table lists the default settings for the DHCP relay feature.DHCP Relay Set

AT-8100 Switch Command Line User’s Guide1927802.1x Port-Based Network Access ControlThe following table describes the 802.1x Port-based Network Access

Appendix B: Management Software Default Settings1928The following table lists the default settings for RADIUS accounting.The following table lists the

AT-8100 Switch Command Line User’s Guide1929Enhanced StackingThe following table lists the enhanced stacking default setting.Enhanced Stacking Setting

AT-8100 Switch Command Line User’s Guide193Resetting PortsIf a port is experiencing a problem, you may be able to correct it with the RESET command in

Appendix B: Management Software Default Settings1930GVRPThis section provides the default settings for GVRP.GVRP Setting DefaultStatus DisabledGIP Sta

AT-8100 Switch Command Line User’s Guide1931Hardware StackingThe following table lists the hardware stacking default setting.Hardware Stacking Setting

Appendix B: Management Software Default Settings1932IGMP SnoopingThe following table lists the IGMP Snooping default settings.IGMP Snooping Setting De

AT-8100 Switch Command Line User’s Guide1933IGMP Snooping QuerierThe following table lists the IGMP snooping querier default settings.IGMP Snooping Qu

Appendix B: Management Software Default Settings1934Link Layer Discovery Protocol (LLDP and LLDP-MED)The following table lists the default settings fo

AT-8100 Switch Command Line User’s Guide1935MAC Address-based Port SecurityThe following table lists the MAC address-based port security default setti

Appendix B: Management Software Default Settings1936MAC Address TableThe following table lists the default setting for the MAC address table.MAC Addre

AT-8100 Switch Command Line User’s Guide1937Management IP AddressThe following table lists the default settings for the management IP address.Manageme

Appendix B: Management Software Default Settings1938Manager AccountThe following table lists the manager account default settings.NoteLogin names and

AT-8100 Switch Command Line User’s Guide1939Port SettingsThe following table lists the port configuration default settings.Port Configuration Setting

Chapter 9: Port Parameters194Configuring Threshold Limits for Ingress PacketsYou can set threshold limits for the ingress packets on the ports. The th

Appendix B: Management Software Default Settings1940RADIUS ClientThe following table lists the RADIUS configuration default settings.RADIUS Configurat

AT-8100 Switch Command Line User’s Guide1941Remote Manager Account AuthenticationThe following table describes the remote manager account authenticati

Appendix B: Management Software Default Settings1942RMONThe following table lists the default settings for RMON collection histories. There are no def

AT-8100 Switch Command Line User’s Guide1943Secure Shell ServerThe following table lists the SSH default settings.NoteThe SSH port number is not adjus

Appendix B: Management Software Default Settings1944sFlow AgentThe default settings for the sFlow agent are listed in this table.sFlow Agent Setting D

AT-8100 Switch Command Line User’s Guide1945Simple Network Management Protocol (SNMPv1, SNMPv2c and SNMPv3)The following table describes the default s

Appendix B: Management Software Default Settings1946Simple Network Time ProtocolThe following table lists the SNTP default settings.SNTP Setting Defau

AT-8100 Switch Command Line User’s Guide1947Spanning Tree Protocols (STP, RSTP and MSTP)This section provides the default settings for STP and RSTP.Sp

Appendix B: Management Software Default Settings1948MultipleSpanning TreeProtocolThe following table describes the RSTP default settings.Loop Guard Di

AT-8100 Switch Command Line User’s Guide1949System NameThe default setting for the system name is listed in this table.System Name Setting DefaultSyst

AT-8100 Switch Command Line User’s Guide195To remove threshold limits from the ports, use the NO STORM-CONTROL command, also in the Port Interface mod

Appendix B: Management Software Default Settings1950TACACS+ Client The following table lists the TACACS+ client configuration default settings.TACACS+

AT-8100 Switch Command Line User’s Guide1951Telnet ServerThe default settings for the Telnet server are listed in this table.NoteThe Telnet port numbe

Appendix B: Management Software Default Settings1952VLANsThis section provides the VLAN default settings.VLAN Setting DefaultDefault VLAN Name Default

AT-8100 Switch Command Line User’s Guide1953Web ServerThe following table lists the web server default settings.Web Server Configuration Setting Defau

Appendix B: Management Software Default Settings1954

1955Command IndexAAAA ACCOUNTING LOGIN command 1497AAA ACCOUNTING LOGIN TACACS command 1497AAA AUTHENTICATION DOT1X DEFAULT GROUP command 1078AAA AUTH

Index1956DOT1X CONTROL-DIRECTION command 1108DOT1X EAP command 1110DOT1X INITIALIZE INTERFACE command 1112DOT1X MAX-REAUTH-REQ command 1113DOT1X PORT-

AT-8100 Switch Command Line User’s Guide1957IP RIP SEND-PACKET command 1875IP RIP SPLIT-HORIZON command 1877IP ROUTE command 305, 320, 1838IP SOURCE B

Index1958NO GROUP-LINK-CONTROL DOWNSTREAM command 521, 531NO GROUP-LINK-CONTROL UPSTREAM command 521, 532NO GVRP ENABLE command 959, 973NO HOLBPLIMIT

AT-8100 Switch Command Line User’s Guide1959NO SERVICE SSH command 1434NO SERVICE TELNET command 1402, 1406NO SERVICE-POLICY INPUT command 1765NO SET

Chapter 9: Port Parameters196Displaying Threshold Limit Settings on PortsTo display the threshold settings for the ingress packets on the ports, use t

Index1960REBOOT command 131, 164REBOOT ESTACK MEMBER command 444REGION command 897RELOAD command 131, 165RENEGOTIATE command 197, 230RESET command 193

AT-8100 Switch Command Line User’s Guide1961SHOW LLDP STATISTICS command 1260, 1314SHOW LLDP STATISTICS INTERFACE command 1260, 1316SHOW LOCATION comm

Index1962SPANNING-TREE MST CONFIGURATION command 892SPANNING-TREE MST INSTANCE command 893SPANNING-TREE MSTP ENABLE command 891SPANNING-TREE PATH-COST

AT-8100 Switch Command Line User’s Guide197Reinitializing Auto-NegotiationIf you believe that a port set to Auto-Negotiation is not using the highest

Chapter 9: Port Parameters198Restoring the Default SettingsTo restore the default settings on a port, use the PURGE command in the Port Interface mode

AT-8100 Switch Command Line User’s Guide199Displaying Port SettingsThere are several ways to display port settings. See the following: “Displaying Sp

CopyrightCopyright © 2014, Allied Telesis, Inc.All rights reserved.This product includes software licensed under the BSD License. As such, the followi

Contents20VLAN SET MACADDRESS (Global Configuration Mode)...1010VLAN SET MACADDRESS

Chapter 9: Port Parameters200Figure 50. SHOW INTERFACE CommandThe fields are described in Table 13 on page 235. For a description of the command, see

AT-8100 Switch Command Line User’s Guide201Displaying or Clearing Port StatisticsTo view packet statistics for the individual ports, use the SHOW PLAT

Chapter 9: Port Parameters202Displaying SFP Information To view information on a plugged SFP on the switch, use the SHOW SYSTEM PLUGGABLE command in t

203Chapter 10Port Parameter CommandsThe port parameter commands are summarized in Table 11.Table 11. Port Parameter CommandsCommand Mode Description“B

Chapter 10: Port Parameter Commands204“NO STORM-CONTROL” on page 226Port Interface Removes threshold limits for broadcast, multicast, or unknown unica

205“STORM-CONTROL” on page 254 Port Interface Sets a maximum limit of the number of broadcast, multicast, or unknown unicast packets forwarded by a po

Chapter 10: Port Parameter Commands206BACKPRESSURESyntaxbackpressure on|offParametersonActivates backpressure on the ports.offDeactivates backpressure

AT-8100 Switch Command Line User’s Guide207This example configures ports 8 and 21 to 100 Mbps, half-duplex mode, with backpressure disabled:awplus>

Chapter 10: Port Parameter Commands208BPLIMITSyntaxbplimit bplimitParametersbplimitSpecifies the number of cells for backpressure. A cell represents 1

AT-8100 Switch Command Line User’s Guide209CLEAR PORT COUNTERSyntaxclear port counter portParametersportSpecifies the port whose packet counters you w

AT-8100 Switch Command Line User’s Guide21Authentication Methods for Authenticator Ports...

Chapter 10: Port Parameter Commands210DESCRIPTIONSyntaxdescription descriptionParametersdescriptionSpecifies a description of 1 to 240 alphanumeric ch

AT-8100 Switch Command Line User’s Guide211This example removes the current name from port 11 without assigning a new name:awplus> enableawplus# co

Chapter 10: Port Parameter Commands212DUPLEXSyntaxduplex auto|half|fullParametersautoActivates Auto-Negotiation for the duplex mode, so that the duple

AT-8100 Switch Command Line User’s Guide213ExamplesThis example sets the duplex mode on port 11 half-duplex:awplus> enableawplus# configure termina

Chapter 10: Port Parameter Commands214EGRESS-RATE-LIMITSyntaxegress-rate-limit valueParametersvalueSpecifies the maximum amount of traffic that can be

AT-8100 Switch Command Line User’s Guide215FCTRLLIMITSyntaxfctrllimit fctrllimitParametersfctrllimitSpecifies the number of cells for flow control. A

Chapter 10: Port Parameter Commands216FLOWCONTROLSyntaxflowcontrol send|receive|both on|offParametersendControls whether a port sends pause packets du

AT-8100 Switch Command Line User’s Guide217partner. If it is off, a port does not respond to pause packets and continues to transmit packets. At the d

Chapter 10: Port Parameter Commands218This example configures port 1 and 2 to 10 Mbps, full-duplex mode. The send portion of flow control is disabled

AT-8100 Switch Command Line User’s Guide219HOLBPLIMITSyntaxholbplimit holbplimitParameterholbplimitSpecifies the threshold at which a port signals a h

Contents22NO AUTH DYNAMIC-VLAN-CREATION ...1125NO AUTH GUE

Chapter 10: Port Parameter Commands220Figure 52. Head of Line BlockingThe HOL Limit parameter can help prevent this problem from occurring. It sets a

AT-8100 Switch Command Line User’s Guide221awplus> enableawplus# configure terminalawplus(config)# interface port1.0.9awplus(config-if)# no holbpli

Chapter 10: Port Parameter Commands222NO EGRESS-RATE-LIMITSyntaxno egress-rate-limitParametersNoneModePort Interface modeDescriptionUse this command t

AT-8100 Switch Command Line User’s Guide223NO FLOWCONTROLSyntaxno flowcontrolParameterNoneModePort Interface modeDescriptionUse this command to disabl

Chapter 10: Port Parameter Commands224NO SHUTDOWNSyntaxno shutdownParametersNoneModePort Interface modeDescriptionUse this command to enable ports so

AT-8100 Switch Command Line User’s Guide225NO SNMP TRAP LINK-STATUSSyntaxno snmp trap link-statusParameterNoneModePort Interface modeDescriptionUse th

Chapter 10: Port Parameter Commands226NO STORM-CONTROLSyntaxno storm-control broadcast|multicast|dlfParametersbroadcastSpecifies broadcast packets.mul

AT-8100 Switch Command Line User’s Guide227POLARITYSyntaxpolarity auto|mdi|mdixParametersautoActivates auto-MDI/MDIX.mdiSets a port’s wiring configura

Chapter 10: Port Parameter Commands228This example sets ports 4 and 18 to the MDI-X wiring configuration:awplus> enableawplus# configure terminalaw

AT-8100 Switch Command Line User’s Guide229PURGESyntaxpurgeParametersNoneModePort Interface modeDescriptionUse this command to restore the default set

AT-8100 Switch Command Line User’s Guide23SHOW SNMP-SERVER HOST...

Chapter 10: Port Parameter Commands230RENEGOTIATESyntaxrenegotiateParametersNoneModePort Interface modeDescriptionUse this command to prompt a port th

AT-8100 Switch Command Line User’s Guide231RESETSyntaxresetParametersNoneModePort Interface modeDescriptionUse this command to perform a hardware rese

Chapter 10: Port Parameter Commands232SHOW FLOWCONTROL INTERFACESyntaxshow flowcontrol interface portParameterportSpecifies the port whose flow contro

AT-8100 Switch Command Line User’s Guide233ExampleThis command displays the flow control settings for port 2:awplus# show flowcontrol interface port1.

Chapter 10: Port Parameter Commands234SHOW INTERFACESyntaxshow interface [port]ParameterportSpecifies the port whose current status you want to view.

AT-8100 Switch Command Line User’s Guide235Figure 54. SHOW INTERFACE CommandThe fields are described in Table 13.Interface port1.0.1Link is UP, admini

Chapter 10: Port Parameter Commands236Link is The status of the link on the port. This field is UP when the port has a link with a network device, and

AT-8100 Switch Command Line User’s Guide237ExamplesThis command displays the current operational state of all the ports:awplus# show interfaceThis com

Chapter 10: Port Parameter Commands238SHOW INTERFACE BRIEFSyntaxshow interface briefParameterNoneModesPrivileged Exec modeDescriptionUse this command

AT-8100 Switch Command Line User’s Guide239ExampleThe following example displays the administrative and link statuses of all of the ports on the switc

Contents24Displaying Port TLVs...

Chapter 10: Port Parameter Commands240SHOW INTERFACE STATUSSyntaxshow interface [port] statusParameterportSpecifies the port whose parameter settings

AT-8100 Switch Command Line User’s Guide241ExamplesThis command displays the settings of all the ports:awplus# show interface statusThis command displ

Chapter 10: Port Parameter Commands242SHOW PLATFORM TABLE PORT COUNTERSSyntaxshow platform table port [port] countersParameterportSpecifies the port w

AT-8100 Switch Command Line User’s Guide243MulticastPkts Number of received and transmitted multicast packets.BroadcastPkts Number of received and tra

Chapter 10: Port Parameter Commands244ExamplesThis command displays the statistics for ports 21 and 23:awplus# show platform table port port1.0.21,por

AT-8100 Switch Command Line User’s Guide245SHOW RUNNING-CONFIG INTERFACESyntaxshow running-config interface portParametersportSpecifies a port, multip

Chapter 10: Port Parameter Commands246SHOW STORM-CONTROLSyntaxshow storm-control [port]ParametersportSpecifies the port whose storm-control, threshold

AT-8100 Switch Command Line User’s Guide247ExamplesThis command displays the settings of all the ports:awplus# show storm-controlThis command displays

Chapter 10: Port Parameter Commands248SHOW SYSTEM PLUGGABLESyntaxshow system pluggableParametersNoneModePrivileged Exec modeDescriptionUse this comman

AT-8100 Switch Command Line User’s Guide249SHOW SYSTEM PLUGGABLE DETAILSyntaxshow system pluggable detailParametersNoneModePrivileged Exec modeDescrip

AT-8100 Switch Command Line User’s Guide25RMON Port Statistics ...

Chapter 10: Port Parameter Commands250SHUTDOWNSyntaxshutdownParameterNoneModePort Interface modeDescriptionUse this command to disable ports. Ports th

AT-8100 Switch Command Line User’s Guide251SNMP TRAP LINK-STATUSSyntaxsnmp trap link-statusParameterNoneModePort Interface modeDescriptionUse this com

Chapter 10: Port Parameter Commands252SPEEDSyntaxspeed auto|10|100|1000ParametersautoActivates Auto-Negotiation so that the speed is configured automa

AT-8100 Switch Command Line User’s Guide253This example activates Auto-Negotiation on port 15:awplus> enableawplus# configure terminalawplus(config

Chapter 10: Port Parameter Commands254STORM-CONTROLSyntaxstorm-control broadcast|multicast|dlf level valueParametersbroadcastSpecifies broadcast packe

AT-8100 Switch Command Line User’s Guide255ExamplesThis example sets the maximum threshold level of 5,000 packets per second for ingress broadcast pac

Chapter 10: Port Parameter Commands256

257Chapter 11Power Over Ethernet “Overview” on page 258 “Enabling and Disabling PoE” on page 260  “Adding PD Descriptions to Ports” on page 262  “

Chapter 11: Power Over Ethernet258OverviewThe AT-8100L/8PoE, AT-8100S/24PoE, and AT-8100S/48PoE switches feature Power over Ethernet (PoE) on the 10/1

AT-8100 Switch Command Line User’s Guide259be operated using either one power supply or both power supplies. One power supply is responsible for provi

Contents26Enabling the Telnet Server...

Chapter 11: Power Over Ethernet260Enabling and Disabling PoEEnabling PoE on ports allows the switch to supply power to PDs connected to the ports. In

AT-8100 Switch Command Line User’s Guide261This example enables PoE individually on port 6 and port 8:awplus> enableawplus# configure terminalawplu

Chapter 11: Power Over Ethernet262Adding PD Descriptions to PortsPDs connected to the ports are easier to identify if you give them descriptions. To a

AT-8100 Switch Command Line User’s Guide263Prioritizing PortsWhen the total power requirements of the PDs exceed the total available power of the swit

Chapter 11: Power Over Ethernet264Managing the Maximum Power Limit on PortsTo manage the switch’s power and optimize its power distribution, the switc

AT-8100 Switch Command Line User’s Guide265Managing Legacy PDsThe PoE switch automatically detects whether or not a device plugged into the PoE-enable

Chapter 11: Power Over Ethernet266Monitoring Power ConsumptionYou can monitor the power consumption of the switch and PDs by configuring the unit to t

AT-8100 Switch Command Line User’s Guide267Displaying PoE InformationThe switch allows you to display PoE information using three commands. Each comma

Chapter 11: Power Over Ethernet268This example displays the PoE information of port 1 through port 4:awplus# show power inline interface port1.0.1-por

269Chapter 12Power Over Ethernet CommandsThe Power over Ethernet (PoE) commands are summarized in Table 23. These commands are only supported on the P

AT-8100 Switch Command Line User’s Guide27Enabling the Web Browser Server...

Chapter 12: Power Over Ethernet Commands270“POWER-INLINE PRIORITY” on page 284Port Interface Assigns a PoE priority level to a port.“POWER-INLINE USAG

AT-8100 Switch Command Line User’s Guide271CLEAR POWER-INLINE COUNTERS INTERFACESyntaxclear power-inline counters interface [port]ParameterportSpecifi

Chapter 12: Power Over Ethernet Commands272NO POWER-INLINE ALLOW-LEGACYSyntaxno power-inline allow-legacyParametersNoneModePort Interface modeDescript

AT-8100 Switch Command Line User’s Guide273NO POWER-INLINE DESCRIPTIONSyntaxno power-inline descriptionParametersNoneModePort Interface modeDescriptio

Chapter 12: Power Over Ethernet Commands274NO POWER-INLINE ENABLESyntaxno power-inline enableParametersNoneModePort Interface modeDescriptionUse this

AT-8100 Switch Command Line User’s Guide275NO POWER-INLINE MAXSyntaxno power-inline maxParametersNoneModePort Interface modeDescriptionUse this comman

Chapter 12: Power Over Ethernet Commands276NO POWER-INLINE PRIORITYSyntaxno power-inline priorityParametersNoneModePort Interface modeDescriptionUse t

AT-8100 Switch Command Line User’s Guide277NO POWER-INLINE USAGE-THRESHOLDSyntaxno power-inline usage-thresholdParametersNoneModeGlobal Configuration

Chapter 12: Power Over Ethernet Commands278NO SERVICE POWER-INLINESyntaxno service power-inlineParametersNoneModeGlobal Configuration modeDescriptionU

AT-8100 Switch Command Line User’s Guide279NO SNMP-SERVER ENABLE TRAP POWER-INLINESyntaxno snmp-server enable trap power-inlineParametersNoneModeGloba

Contents28Section XIII: Quality of Service ...1

Chapter 12: Power Over Ethernet Commands280POWER-INLINE ALLOW-LEGACYSyntaxpower-inline allow-legacyParametersNoneModePort Interface modeDescriptionUse

AT-8100 Switch Command Line User’s Guide281POWER-INLINE DESCRIPTIONSyntaxpower-inline description descriptionParametersdescriptionSpecifies a PD descr

Chapter 12: Power Over Ethernet Commands282POWER-INLINE ENABLESyntaxpower-inline enableParametersNoneModePort Interface modeDescriptionUse this comman

AT-8100 Switch Command Line User’s Guide283POWER-INLINE MAXSyntaxpower-inline max max_powerParametersmax_powerSpecifies the maximum power limit of the

Chapter 12: Power Over Ethernet Commands284POWER-INLINE PRIORITYSyntaxpower-inline priority critical|high|lowParameterscriticalSets ports to the Criti

AT-8100 Switch Command Line User’s Guide285ExampleThis example assigns the Critical priority level to port 5:awplus> enableawplus# configure termin

Chapter 12: Power Over Ethernet Commands286POWER-INLINE USAGE-THRESHOLDSyntaxpower-inline usage-threshold thresholdParametersthresholdSpecifies the po

AT-8100 Switch Command Line User’s Guide287SERVICE POWER-INLINESyntaxservice power-inlineParametersNoneModeGlobal Configuration modeDescriptionUse thi

Chapter 12: Power Over Ethernet Commands288SHOW POWER-INLINESyntaxshow power-inlineParameterNoneModePrivileged Exec modeDescriptionUse this command to

AT-8100 Switch Command Line User’s Guide289Table 24. SHOW POWER-INLINE CommandField DescriptionNominal Power The switch’s total available power in wat

AT-8100 Switch Command Line User’s Guide29IPV6 ACCESS-LIST (PROTO)...

Chapter 12: Power Over Ethernet Commands290ExampleThis example displays PoE information about the switch and ports:awplus# show power-inlineOper The P

AT-8100 Switch Command Line User’s Guide291SHOW POWER-INLINE COUNTERS INTERFACESyntaxshow power-inline counters interface portParameterportSpecifies a

Chapter 12: Power Over Ethernet Commands292ExampleThis command displays the PoE event counters for ports 4 to 6:awplus# show power-inline counters int

AT-8100 Switch Command Line User’s Guide293SHOW POWER-INLINE INTERFACESyntaxshow power-inline interface portParameterportSpecifies a port. You can dis

Chapter 12: Power Over Ethernet Commands294SHOW POWER-INLINE INTERFACE DETAILSyntaxshow power-inline interface port detailParameterportSpecifies a por

AT-8100 Switch Command Line User’s Guide295PoE admin The status of PoE on the port. The status can be one of the following: Enabled: PoE is enabled.

Chapter 12: Power Over Ethernet Commands296ExamplesThis example displays PoE information for port 1:awplus# show power-inline interface port1.0.1 deta

AT-8100 Switch Command Line User’s Guide297SNMP-SERVER ENABLE TRAP POWER-INLINESyntaxsnmp-server enable trap power-inlineParametersNoneModeGlobal Conf

Chapter 12: Power Over Ethernet Commands298

299Chapter 13IPv4 and IPv6 Management AddressesThis chapter contains the following information: “Overview” on page 300 “Assigning an IPv4 Management

Allied Telesis is committed to meeting the requirements of the open source licenses including the GNU General Public License (GPL) and will make all r

Contents30MATCH ACCESS-GROUP ...1712M

Chapter 13: IPv4 and IPv6 Management Addresses300OverviewThis chapter explains how to assign the switch an IP address. The switch must have an IP addr

AT-8100 Switch Command Line User’s Guide301RMON Used with the RMON portion of the MIB tree on an SNMP workstation to remotely monitor the switch.yes n

Chapter 13: IPv4 and IPv6 Management Addresses302Here are the guidelines to assigning the switch management IPv4 and IPv6 addresses: You may assign t

AT-8100 Switch Command Line User’s Guide303Assigning an IPv4 Management Address and Default GatewayThis section covers the following topics: “Adding

Chapter 13: IPv4 and IPv6 Management Addresses304Here are several examples of the command. The first example assigns the switch the management IPv4 ad

AT-8100 Switch Command Line User’s Guide305The next series of commands assigns the management address 143.24.55.67 and subnet mask 255.255.255.0 to th

Chapter 13: IPv4 and IPv6 Management Addresses306NoteIf an IPv4 default gateway is already assigned to the switch, you must delete it prior to enterin

AT-8100 Switch Command Line User’s Guide307awplus> enableawplus# configure terminalawplus(config)# no ip route 0.0.0.0/0 149.121.43.23Displaying an

Chapter 13: IPv4 and IPv6 Management Addresses308Assigning an IPv6 Management Address and Default GatewayThis section covers the following topics: “A

AT-8100 Switch Command Line User’s Guide309NoteIf there is a management IPv6 address already assigned to the switch, you must delete it prior to enter

AT-8100 Switch Command Line User’s Guide31STORM-PROTECTION ...

Chapter 13: IPv4 and IPv6 Management Addresses310The IPADDDRESS parameter is the default gateway to be assigned the switch. The address must be an IPv

AT-8100 Switch Command Line User’s Guide311Displaying anIPv6ManagementAddress andDefault GatewayThere are two commands for displaying a management IPv

Chapter 13: IPv4 and IPv6 Management Addresses312

313Chapter 14IPv4 and IPv6 Management Address CommandsThe IPv4 and IPv6 management address commands are summarized in Table 28.Table 28. Management IP

Chapter 14: IPv4 and IPv6 Management Address Commands314“SHOW IPV6 INTERFACE” on page 335Privileged Exec Displays the IPv4 management address.“SHOW IP

AT-8100 Switch Command Line User’s Guide315CLEAR IPV6 NEIGHBORSSyntaxclear ipv6 neighborsParametersNoneModePrivileged Exec modeDescriptionUse this com

Chapter 14: IPv4 and IPv6 Management Address Commands316IP ADDRESSSyntaxip address ipaddress/maskParametersipaddressSpecifies a management IPv4 addres

AT-8100 Switch Command Line User’s Guide317ExamplesThis example assigns the switch the IPv4 management address 142.35.78.21 and subnet mask 255.255.25

Chapter 14: IPv4 and IPv6 Management Address Commands318IP ADDRESS DHCPSyntaxip address dhcpParametersNoneModeVLAN Interface modeDescriptionUse this c

AT-8100 Switch Command Line User’s Guide319ExampleThis example activates the DHCP client so that the switch obtains its IPv4 management address from a

Contents32IP RIP SPLIT-HORIZON ...

Chapter 14: IPv4 and IPv6 Management Address Commands320IP ROUTESyntaxip route 0.0.0.0/0 ipaddressParametersipaddressSpecifies an IPv4 default gateway

AT-8100 Switch Command Line User’s Guide321ExampleThis example assigns the switch the IPv4 default gateway address 143.87.132.45:awplus> enableawpl

Chapter 14: IPv4 and IPv6 Management Address Commands322IPV6 ADDRESSSyntaxipv6 address ipaddress/maskParametersipaddressSpecifies an IPv6 management a

AT-8100 Switch Command Line User’s Guide323and syslog servers). The VLAN must already exist on the switch before you use this command.Confirmation Com

Chapter 14: IPv4 and IPv6 Management Address Commands324IPV6 ROUTESyntaxipv6 route ::/0 ipaddressParametersipaddressSpecifies an IPv6 address of a def

AT-8100 Switch Command Line User’s Guide325ExampleThis example assigns the switch the IPv6 default gateway address 45ab:672:934c::78:17cb:awplus> e

Chapter 14: IPv4 and IPv6 Management Address Commands326NO IP ADDRESSSyntaxno ip addressParametersNoneModeVLAN Interface modeDescriptionUse this comma

AT-8100 Switch Command Line User’s Guide327NO IP ADDRESS DHCPSyntaxno ip address dhcpParametersNoneModeVLAN Interface modeDescriptionUse this command

Chapter 14: IPv4 and IPv6 Management Address Commands328NO IP ROUTESyntaxno ip route 0.0.0.0/0 ipaddressParametersipaddressSpecifies the current defau

AT-8100 Switch Command Line User’s Guide329NO IPV6 ADDRESSSyntaxno ipv6 addressParametersNoneModeVLAN Interface modeDescriptionUse this command to del

AT-8100 Switch Command Line User’s Guide33RMON ...

Chapter 14: IPv4 and IPv6 Management Address Commands330NO IPV6 ROUTESyntaxno ipv6 route ::/0 ipaddressParametersipaddressSpecifies the current IPv6 d

AT-8100 Switch Command Line User’s Guide331SHOW IP INTERFACESyntaxshow ip interfaceParametersNoneModePrivileged Exec modeDescriptionUse this command t

Chapter 14: IPv4 and IPv6 Management Address Commands332SHOW IP ROUTESyntaxshow ip routeParametersNoneModePrivileged Exec modeDescriptionUse this comm

AT-8100 Switch Command Line User’s Guide333The field “Gateway of last resort is” states the default gateway, which, if defined on the switch, is also

Chapter 14: IPv4 and IPv6 Management Address Commands334ExampleThe following example displays the routes on the switch:awplus# show ip route

AT-8100 Switch Command Line User’s Guide335SHOW IPV6 INTERFACESyntaxshow ipv6 interfaceParametersNoneModePrivileged Exec modeDescriptionUse this comma

Chapter 14: IPv4 and IPv6 Management Address Commands336SHOW IPV6 ROUTESyntaxshow ipv6 routeParametersNoneModePrivileged Exec modeDescriptionUse this

337Chapter 15Simple Network Time Protocol (SNTP) ClientThis chapter contains the following information: “Overview” on page 338 “Activating the SNTP

Chapter 15: Simple Network Time Protocol (SNTP) Client338OverviewThe switch has a Simple Network Time Protocol (SNTP) client for setting its date and

AT-8100 Switch Command Line User’s Guide339Activating the SNTP Client and Specifying the IP Address of an NTP or SNTP ServerTo activate the SNTP clien

Contents34

Chapter 15: Simple Network Time Protocol (SNTP) Client340Configuring Daylight Savings Time and UTC OffsetIf the time that the NTP or SNTP server provi

AT-8100 Switch Command Line User’s Guide341In this example, the client is configured for ST and a UTC offset of +2 hours and 45 minutes:awplus> ena

Chapter 15: Simple Network Time Protocol (SNTP) Client342Disabling the SNTP ClientTo disable the SNTP client so that the switch does not obtain its da

AT-8100 Switch Command Line User’s Guide343Displaying the SNTP ClientTo display the settings of the SNTP client on the switch, use the SHOW NTP ASSOCI

Chapter 15: Simple Network Time Protocol (SNTP) Client344Displaying the Date and TimeTo display the date and time, use the SHOW CLOCK command in the U

345Chapter 16SNTP Client CommandsThe SNTP commands are summarized in Table 33.Table 33. Simple Network Time Protocol CommandsCommand Mode Description“

Chapter 16: SNTP Client Commands346CLOCK SUMMER-TIMESyntaxclock summer-timeParametersNoneModeGlobal Configuration modeDescriptionUse this command to e

AT-8100 Switch Command Line User’s Guide347CLOCK TIMEZONESyntaxclock timezone +hh:mm|-hh:mmParametershh:mmSpecifies the number of hours and minutes di

Chapter 16: SNTP Client Commands348NO CLOCK SUMMER-TIMESyntaxno clock summer-timeParametersNoneModeGlobal Configuration modeDescriptionUse this comman

AT-8100 Switch Command Line User’s Guide349NO NTP PEERSyntaxno ntp serverParameterNoneModeGlobal Configuration modeDescriptionUse this command to deac

35FiguresFigure 1. Command Modes...

Chapter 16: SNTP Client Commands350NTP PEERSyntaxntp peer ipaddressParameteripaddressSpecifies an IP address of an SNTP or NTP server.ModeGlobal Confi

AT-8100 Switch Command Line User’s Guide351PURGE NTPSyntaxpurge ntpParameterNoneModeGlobal Configuration modeDescriptionUse this command to disable th

Chapter 16: SNTP Client Commands352SHOW CLOCKSyntaxshow clockParametersNoneModesUser Exec mode and Privileged Exec modeDescriptionUse this command to

AT-8100 Switch Command Line User’s Guide353SHOW NTP ASSOCIATIONSSyntaxshow ntp associationsParametersNoneModePrivileged Exec modeDescriptionUse this c

Chapter 16: SNTP Client Commands354ExampleThe following example displays the settings of the SNTP client:awplus# show ntp associationsUTC Offset The t

AT-8100 Switch Command Line User’s Guide355SHOW NTP STATUSSyntaxshow ntp statusParametersNoneModePrivileged Exec modeDescriptionUse this command to di

Chapter 16: SNTP Client Commands356

357Chapter 17Domain Name System (DNS) “Overview” on page 358 “Adding a DNS Server to the Switch” on page 360 “Enabling or Disabling the DNS Client”

Chapter 17: Domain Name System (DNS)358OverviewThe Domain Name System (DNS) is a naming system that allows you to access remote systems using host nam

AT-8100 Switch Command Line User’s Guide359DNS Sever List The DNS server list is a set of DNS servers that a DNS client on the switch sends a request

Figures36Figure 51. SHOW RUNNING-CONFIG INTERFACE Command...198Fi

Chapter 17: Domain Name System (DNS)360Adding a DNS Server to the SwitchThe switch has a DNS client. When you add a DNS server to the switch, the DNS

AT-8100 Switch Command Line User’s Guide361Enabling or Disabling the DNS ClientThe DNS client on the switch allows you to use domain names instead of

Chapter 17: Domain Name System (DNS)362Adding a Domain to the DNS ListThe switch allows you to create a list of domains to save typing the portion of

AT-8100 Switch Command Line User’s Guide363Setting a Default Domain Name for the DNSThe switch allows you to save typing of the portion of a domain na

Chapter 17: Domain Name System (DNS)364

365Chapter 18Domain Name System (DNS) CommandsThe DNS commands are summarized in Table 35.Table 35. DNS CommandsCommand Mode Description“IP NAME-SERVE

Chapter 18: Domain Name System (DNS) Commands366IP NAME-SERVERSyntaxip name-server <ip-address>Parametersip-addressSpecifies the IP address of a

AT-8100 Switch Command Line User’s Guide367To delete a DNS server with an IP address of 10.10.10.5 from the DNS server list, use the command:awplus>

Chapter 18: Domain Name System (DNS) Commands368IP DOMAIN-NAMESyntaxip domain-name <domain-name>Parametersdomain-nameSpecifies a domain string,

AT-8100 Switch Command Line User’s Guide369IP DOMAIN-LISTSyntaxip domain-list <domain-name>Parametersdomain-nameSpecifies a domain string, for e

AT-8100 Switch Command Line User’s Guide37Figure 111. Group Link Control Example 5 ...

Chapter 18: Domain Name System (DNS) Commands370ExamplesTo add the domains “com” and “net” to the DNS list, use the following commands:awplus> enab

AT-8100 Switch Command Line User’s Guide371IP DOMAIN-LOOKUPSyntaxip domain-lookupParametersNoneModeGlobal Configuration modeDescriptionUse this comman

Chapter 18: Domain Name System (DNS) Commands372SHOW IP NAME-SERVERSyntaxshow ip name-serverParametersNoneModePrivileged Exec modeDescriptionUse this

AT-8100 Switch Command Line User’s Guide373SHOW IP DOMAIN-NAMESyntaxshow ip domain-nameParametersNoneModePrivileged Exec modeDescriptionUse this comma

Chapter 18: Domain Name System (DNS) Commands374SHOW HOSTSSyntaxshow hostsParametersNoneModePrivileged Exec modeDescriptionUse this command to display

375Chapter 19MAC Address TableThis chapter discusses the following topics: “Overview” on page 376 “Adding Static MAC Addresses” on page 378 “Deleti

Chapter 19: MAC Address Table376OverviewThe MAC address table stores the MAC addresses of all the network devices that are connected to the switch’s p

AT-8100 Switch Command Line User’s Guide377The period of time the switch waits before purging inactive dynamic MAC addresses is called the aging time.