Allied-telesis AT-S95 CLI Uživatelský manuál

613-001020 Rev. BManagementSoftwareAT-S95CLI User’s GuideAT-8000GS Series Stackable Gigabit Ethernet SwitchesVersion 1.0.1

Page viiiNot approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideip ssh server ...

Page 88Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleIn the following example, automatic

Ethernet Configuration CommandsPage 89User GuidelinesThe command is effective only after reset.ExampleThe following example enables jumbo frames for t

Page 90Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleIn the following example, the count

Ethernet Configuration CommandsPage 91Command Modes Privileged EXEC modeUser GuidelinesThere are no user guidelines for this command.ExampleThe follow

Page 92Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•interface — Valid Ethernet port

Ethernet Configuration CommandsPage 93show interfaces statusThe show interfaces status Privileged EXEC mode command displays the status of all configu

Page 94Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow interfaces descriptionThe show interf

Ethernet Configuration CommandsPage 95show ports jumbo-frameThe show port jumbo-frame Privileged EXEC mode command displays the configuration of jumbo

Page 96Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExample The following example displays tra

Ethernet Configuration CommandsPage 97ch10000ch20000ch30000ch40000ch50000ch60000ch70000ch80000OutUcastPkts OutMcastPktsOutBcastPkts OutOctets---------

Page ixshow version ...

Page 98Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideThe following table describes the fields s

Ethernet Configuration CommandsPage 99show system flowcontrolThe show system flowcontrol Privileged EXEC mode command displays the flow control state

Page 100Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand Modes Interface Configuration (Et

Ethernet Configuration CommandsPage 101The following example enables Broadcast storm control on port 1/g5 for aGE devices.The following example enable

Page 102Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExample The following example configures

GVRP CommandsPage 103Chapter 10.GVRP Commandsgvrp enable (Global)GARP VLAN Registration Protocol (GVRP) is an industry-standard protocol designed to p

Page 104Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesAn access port does not dy

GVRP CommandsPage 105ExampleThe following example sets the leave timer for Ethernet port 1/g6 to 900 milliseconds.gvrp vlan-creation-forbidThe gvrp vl

Page 106Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeInterface Configuration (Ethe

GVRP CommandsPage 107Parameters•interface — A valid Ethernet port. (Full syntax: unit/port)• port-channel-number — A valid port-channel number.Default

Page xNot approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideip https server ...

Page 108Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•interface — A valid Ethernet p

GVRP CommandsPage 109Command ModeUser EXEC modeUser GuidelinesThere are no user guidelines for this command.ExampleThe following example displays GVRP

Page 110Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 11.IGMP Snooping CommandsNoteIn o

IGMP Snooping CommandsPage 111Command ModeInterface Configuration (VLAN) mode User GuidelinesIGMP snooping can only be enabled on static VLANs.Example

Page 112Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideip igmp snooping host-time-outThe ip igmp

IGMP Snooping CommandsPage 113Command ModeInterface Configuration (VLAN) modeUser GuidelinesIGMP snooping querier can be enabled on a VLAN only if IGM

Page 114Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExample.The following example configures

IGMP Snooping CommandsPage 115no ip igmp snooping mrouter-time-outParameters•time-out — Multicast device timeout in seconds (Range: 1 - 2147483647)Def

Page 116Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUse immediate leave only where there is j

IGMP Snooping CommandsPage 117show ip igmp snooping interfaceThe show ip igmp snooping interface EXEC mode command shows IGMP snooping configuration.S

PrefacePage 1PrefaceThis guide describes how to configure an AT-S95 v1.0.04 v1.1.0 Series switch using the command line interface. The commands are gr

Page 118Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow ip igmp snooping groupsThe show ip i

IP Addressing CommandsPage 119Chapter 12.IP Addressing Commandsip addressThe ip address Interface Configuration (Ethernet, VLAN, port-channel) mode co

Page 120Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•host-name — Specifies the name

IP Addressing CommandsPage 121Default ConfigurationNo default gateway is defined.Command ModeGlobal Configuration modeUser Guidelines There are no use

Page 122Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidearp The arp Global Configuration mode com

IP Addressing CommandsPage 123Syntaxarp timeout secondsno arp timeoutParameters•seconds — Time (in seconds) that an entry remains in the ARP cache. (R

Page 124Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow arpThe show arp Privileged EXEC mode

IP Addressing CommandsPage 125Syntaxip domain-lookup no ip domain-lookupDefault Configuration The default configuration is set to enabled.Command Mode

Page 126Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideip name-serverThe ip name-server Global C

IP Addressing CommandsPage 127Command Mode Global Configuration modeUser GuidelinesThere are no user guidelines for this command.ExampleThe following

Page 2Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideadministrative LACP timeouts, display LACP

Page 128Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxip host name addressno ip host name

IP Addressing CommandsPage 129Example The following example deletes all entries from the host name-to-address cache.clear host dhcpThe clear host dhcp

Page 130Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand Mode Privileged EXEC modeUser Gui

Line CommandsPage 131Chapter 13.Line CommandslineThe line Global Configuration mode command identifies a specific line for configuration and enters th

Page 132Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault ConfigurationThe default speed is

Line CommandsPage 133exec-timeoutThe exec-timeout Line Configuration mode command sets the interval that the system waits until user input is detected

Page 134Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example enables the

Line CommandsPage 135Command ModeUser EXEC modeUser GuidelinesThere are no user guidelines for this command.ExampleThe following example disables the

Page 136Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxshow line [console | telnet | ssh]P

Line CommandsPage 137

PrefaceDocument ConventionsPage 3Document ConventionsThis document uses the following conventions:NoteProvides related information or information of s

Page 138Allied Telesis Command Line Interface User’s GuideSection 14. LACP Commandslacp system-priorityThe lacp system-priority Global Configuration m

LACP CommandsPage 139lacp port-priorityThe lacp port-priority Interface Configuration (Ethernet) mode command configures physical port priority. Use t

Page 140Allied Telesis Command Line Interface User’s Guidelacp timeoutThe lacp timeout Interface Configuration (Ethernet) mode command assigns an admi

LACP CommandsPage 141show lacp ethernetThe show lacp ethernet Privileged EXEC mode command displays LACP information for Ethernet ports. Syntaxshow la

Page 142Allied Telesis Command Line Interface User’s Guidedistributing: FALSEexpired: FALSEPartnersystem priority: 0system mac addr: 00:00:00:00:00:00

LACP CommandsPage 143show lacp port-channelThe show lacp port-channel Privileged EXEC mode command displays LACP information for a port-channel.Syntax

Page 144Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 15.Management ACL Commandsmanagem

Management ACL CommandsPage 145The following example creates a management Access List called mlist, configures all interfaces to be management interfa

Page 146Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidedeny (Management)The deny Management Acce

Management ACL CommandsPage 147Parameters•console-only — Indicates that the device can be managed only from the console.• name — Specifies the name of

Page 4Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideContacting Allied TelesisThis section provi

Page 148Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow management access-class The show man

PHY Diagnostics CommandsPage 149Chapter 16.PHY Diagnostics Commandstest copper-port tdrThe test copper-port tdr Privileged EXEC mode command uses Time

Page 150Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault ConfigurationThis command has no

PHY Diagnostics CommandsPage 151ExampleThe following example displays the estimated copper cable length attached to all ports.Console show copper-port

Page 152Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 17.Port Channel Commandsinterface

Port Channel CommandsPage 153Command ModeGlobal Configuration modeUser GuidelinesCommands under the interface range context are executed independently

Page 154Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•port-channel-number — Valid po

Port Monitor CommandsPage 155Chapter 18.Port Monitor Commandsport monitorThe port monitor Interface Configuration mode command starts a port monitorin

Page 156Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow ports monitorThe show ports monitor

Power over Ethernet CommandsPage 157Chapter 19.Power over Ethernet CommandsNoteThe PoE commands are operational in the AT-S94/24, AT-S94/24POE, AT-S94

Using the CLICLI Command ModesPage 5Chapter 1. Using the CLIOverviewThis chapter describes how to start using the CLI and the CLI command editing feat

Page 158Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideno power inline powered-deviceParameters•

Power over Ethernet CommandsPage 159ExampleThe following example configures the device connected to Ethernet interface 1/g1 as a high-priority powered

Page 160Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeGlobal Configuration modeUser

Power over Ethernet CommandsPage 161Port Powered Device State Priority Status Classification [w]---- ---------------- ----- -------- ------ ----------

Page 162Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guide.4/g6 Auto On low class24/g7 Auto On low

Power over Ethernet CommandsPage 163The following table describes the significant fields shown in the example:Overload Counter: 0Short Counte

Page 164Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 20.QoS CommandsqosThe qos Global

QoS CommandsPage 165ExampleThe following example displays QoS attributes when QoS is disabled on the device.priority-queue out num-of-queuesThe priori

Page 166Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault Configuration1000 Kbits/SecComman

QoS CommandsPage 167Syntaxshow qos interface [ethernet interface-number | vlan vlan-id | port-channel number] [queuing]Parameters•interface-number — V

Page 6Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guide2. Enter the password and press <Enter&g

Page 168Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxwrr-queue cos-map queue-id cos1...c

QoS CommandsPage 169Parameters•dscp-list — Specify up to 8 DSCP values, with each value separated by space.• dp — Enter the Drop Precedence value to w

Page 170Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeGlobal Configuration modeUser

QoS CommandsPage 171Parameters•dscp-queue — Indicates the DSCP to queue map.Default ConfigurationThis command has no default configuration.Command Mod

Page 172Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 21.Radius Commandsradius-server h

Radius CommandsPage 173ExampleThe following example specifies a RADIUS server host with IP address 192.168.10.1, authentication request port number 20

Page 174Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•retries — Specifies the retran

Radius CommandsPage 175radius-server timeoutThe radius-server timeout Global Configuration mode command sets the interval during which the device wait

Page 176Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThere are no user guidelin

Radius CommandsPage 177Console# show radius-serversIP address Port AuthPort Acc Time-outRet-ransDeadTime Source IP Priority Usage--------- ---- ------

Using the CLICLI Command ModesPage 7Interface Configuration and Specific Configuration ModesInterface Configuration mode commands modify specific inte

Page 178Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 22.RMON Commandsshow rmon statist

RMON CommandsPage 179The following table describes significant fields shown above:Field Description Octets The total number of octets of data (includi

Page 180Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidermon collection historyThe rmon collectio

RMON CommandsPage 181Default ConfigurationThis command has no default configuration.Command ModeUser EXEC modeUser GuidelinesThere are no user guideli

Page 182Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault ConfigurationThis command has no

RMON CommandsPage 183The following table describes significant fields shown above:Console> show rmon history 1 otherSample Set: 1 Owner: MeInterfac

Page 184Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidermon alarmThe rmon alarm Global Configura

RMON CommandsPage 185Command ModeGlobal Configuration modeUser GuidelinesThere are no user guidelines for this command.ExampleThe following example co

Page 186Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideThe following table describes significant

RMON CommandsPage 187The following table describes the significant fields shown in the display:rmon eventThe rmon event Global Configuration mode comm

Copyright © 2008 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Page 8Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideStarting the CLIThe device can be managed o

Page 188Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•index — Specifies the event in

RMON CommandsPage 189ExampleThe following example displays the RMON event table.The following table describes significant fields shown above:show rmon

Page 190Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example displays the

RMON CommandsPage 191Command ModeGlobal Configuration modeUser GuidelinesThe configured table size takes effect after the device is rebooted.ExampleTh

Page 192Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 23.SNMP Commandssnmp-server commu

SNMP CommandsPage 193ExampleThe following example defines community access string public to permit administrative access to SNMP protocol at an admini

Page 194Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidesnmp-server groupThe snmp-server group Gl

SNMP CommandsPage 195Syntaxsnmp-server user username groupname [remote engineid-string] [ auth-md5 password | auth-sha password | auth-md5-key md5-de

Page 196Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidesnmp-server engineID localThe snmp-server

SNMP CommandsPage 197The show running-config Privileged EXEC mode command does not display the SNMP engine ID configuration. To see the SNMP engine ID

Using the CLIEditing FeaturesPage 9Editing FeaturesEntering CommandsA CLI command is a series of keywords and arguments. Keywords identify a command,

Page 198Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•filter-name—Specifies the labe

SNMP CommandsPage 199Parameters•ip-address—Specifies the IP address of the host (targeted recipient).• hostname—Specifies the name of the host. (Range

Page 200Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•ip-address—Specifies the IP ad

SNMP CommandsPage 201Command ModeGlobal Configuration modeUser GuidelinesThere are no user guidelines for this command.ExampleThe following example en

Page 202Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•text — Specifies a string that

SNMP CommandsPage 203show snmpThe show snmp Privileged EXEC mode command displays the SNMP status.Syntaxshow snmpDefault ConfigurationThis command has

Page 204Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideThe following table describes significant

SNMP CommandsPage 205show snmp viewsThe show snmp views Privileged EXEC mode command displays the configuration of views.Syntaxshow snmp views [viewna

Page 206Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThere are no user guidelin

SNMP CommandsPage 207User GuidelinesThere are no user guidelines for this command.ExampleThe following example displays the configuration of filters.s

Page 10Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideNegating the Effect of CommandsFor many co

Page 208Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 24.Spanning-Tree Commandsspanning

Spanning-Tree CommandsPage 209Command Modes Global Configuration modeUser GuidelinesIn RSTP mode, the device uses STP when the neighbor device uses ST

Page 210Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxspanning-tree hello-time secondsno

Spanning-Tree CommandsPage 211ExampleThe following example configures the spanning tree bridge maximum-age to 10 seconds.spanning-tree priorityThe spa

Page 212Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThere are no user guidelin

Spanning-Tree CommandsPage 213spanning-tree port-priorityThe spanning-tree port-priority Interface Configuration mode command configures port priority

Page 214Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example enables Port

Spanning-Tree CommandsPage 215Parameters•long — Specifies port path costs with a range of 1-200,000,000 .• short — Specifies port path costs with a r

Page 216Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidespanning-tree guard rootThe spanning-tree

Spanning-Tree CommandsPage 217ExampleThe following example shutsdown an interface when it receives a BPDU.clear spanning-tree detected-protocolsThe cl

CLI Command ConventionsWhen entering commands there are certain command entry standards that apply to all commands. The following table describes the

Page 218Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault ConfigurationThe default bridge p

Spanning-Tree CommandsPage 219Syntaxspanning-tree mst instance-id port-priority priorityno spanning-tree mst instance-id port-priorityParameters•insta

Page 220Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand Modes Interface Configuration (Et

Spanning-Tree CommandsPage 221Syntaxinstance instance-id {add | remove} vlan vlan-rangeParameters•instance-ID—ID of the MST instance (Range: 1-15).• v

Page 222Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThere are no user guidelin

Spanning-Tree CommandsPage 223Default ConfigurationThis command has no default configuration.Command ModeMST Configuration modeUser GuidelinesThe pend

Page 224Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideabort (mst)The abort MST Configuration mo

Spanning-Tree CommandsPage 225Command Modes Privileged EXEC modeUser GuidelinesThere are no user guidelines for this command.ExamplesThe following exa

Page 226Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideConsole# show spanning-treeSpanning tree

Spanning-Tree CommandsPage 2271/2 Enabled 128.2 20000 - - - -1/3 Disabled 128.3 20000 - - - -1/4 Enabled 128.4 20000 - - - -1/5 Enabled 128.5 20000 -

Page 12Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guide

Page 228Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideBridge ID Priority 36864Address 00:02:4b:

Spanning-Tree CommandsPage 229Port 2 (1/2) enabledState: Forwarding Role: DesignatedPort id: 128.2 Port cost: 20000 Type: Shared (configured: auto) S

Page 230Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideConsole# show spanning-tree ethernet 1/g1

Spanning-Tree CommandsPage 231Name State Prio.Nbr Cost Sts Role PortFast Type---- ------- -------- ----- --- ---- -------- ----------1/1 Enabled 128.1

Page 232Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideHello Time 2 sec Max Age 20 sec Forward D

Spanning-Tree CommandsPage 233Port 4 (1/4) enabledState: Forwarding Role: DesignatedPort id: 128.4 Port cost: 20000 Type: Shared (configured: auto) I

Page 234Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDesignated port id: 128.2 Designated cost

Spanning-Tree CommandsPage 235Address 00:02:4b:19:7a:00Path Cost 10000Rem hops 19Bridge ID Priority 32768Address 00:02:4b:29:7a:00Hello Time 2 sec Max

Page 236Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 25.SSH Commandsip ssh portThe ip

SSH CommandsPage 237User GuidelinesIf encryption keys are not generated, the SSH server is in standby until the keys are generated. To generate SSH se

ACL CommandsPage 13Chapter 2. ACL Commandsip access-listThe ip access-list Global Configuration mode command defines an IPv4 Access List and places th

Page 238Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeGlobal Configuration modeUser

SSH CommandsPage 239Syntaxcrypto key pubkey-chain sshDefault ConfigurationNo keys are specified.Command ModeGlobal Configuration modeUser GuidelinesTh

Page 240Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•username — Specifies the usern

SSH CommandsPage 241Use the key-string row SSH Public Key-string Configuration mode command to specify the SSH public key row by row. Each row must be

Page 242Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example displays the

SSH CommandsPage 243ExampleThe following example displays the SSH public RSA keys on the device.show crypto key pubkey-chain sshThe show crypto key pu

Page 244Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideKey: 005C300D 06092A86 4886F70D 01010105

Syslog CommandsPage 245Chapter 26.Syslog Commandslogging onThe logging on Global Configuration mode command controls error message logging. This comma

Page 246Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•ip-address — IP address of the

Syslog CommandsPage 247Command ModeGlobal Configuration modeUser GuidelinesThere are no user guidelines for this command.ExampleThe following example

Page 14Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidepermit-udp {any | { source source-wildcard

Page 248Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxlogging buffered size numberno logg

Syslog CommandsPage 249logging fileThe logging file Global Configuration mode command limits syslog messages sent to the logging file based on severit

Page 250Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example clears messa

Syslog CommandsPage 251Parameters•copy — Indicates logging messages related to file copy operations.• delete-rename — Indicates logging messages relat

Page 252Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow loggingThe show logging Privileged E

Syslog CommandsPage 25311-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet1/2, changed state to up11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface

Page 254Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow logging fileThe show logging file Pr

Syslog CommandsPage 255ExampleThe following example displays the logging state and the syslog messages stored in the logging file.Console# show loggin

Page 256Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow syslog-serversThe show syslog-server

Syslog CommandsPage 257IP address Port Severity Facility Description------------ ---- ------------- -------- -----------192.180.2.27 514 Informational

ACL CommandsPage 15• dscp — Indicates matching the dscp number with the packet dscp value. • ip-precedence — Indicates matching ip-precedence with the

Page 258Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 27.TACACS+ Commandstacacs-server

TACACS+ CommandsPage 259ExampleThe following example specifies a TACACS+ host.tacacs-server keyThe tacacs-server key Global Configuration mode command

Page 260Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault Configuration5 secondsCommand Mod

TACACS+ CommandsPage 261Syntaxshow tacacs [ip-address]Parameters•ip-address — Name or IP address of the TACACS+ server.Default ConfigurationThis comma

Page 262Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 28.System Management Commandsping

System Management CommandsPage 263ExampleThe following example displays pinging results:A sample of this list follows. Note that the Ctrl-shift-6 sequ

Page 264Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuidereloadThe reload Privileged EXEC mode com

System Management CommandsPage 265hostnameThe hostname Global Configuration mode command specifies or modifies the device host name. Use the no form o

Page 266Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeGlobal Configuration modeUser

System Management CommandsPage 267ExampleThe following example reloads Unit 2 of the stack.stack change unit-idNoteThis command is operational in the

Page 16Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidemobile-registration-request, mobile-regist

Page 268Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxshow stack [unit unit]Parameters•un

System Management CommandsPage 269show usersThe show users User EXEC mode command displays information about the active users.Topology is RingUnit Num

Page 270Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxshow usersDefault ConfigurationThis

System Management CommandsPage 271Command ModeUser EXEC modeUser GuidelinesThere are no user guidelines for this command.Example The following example

Page 272Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example displays the

System Management CommandsPage 273Syntaxshow system id [unit unit]Parameters•unit unit — Unit number. Default ConfigurationThis command has no default

Page 274Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxshow version [unit unit]Parameters•

System Management CommandsPage 275set systemThe set system Priviledged EXEC mode command activates/deactivates features.Syntaxset system qos {active |

Page 276Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 29.User Interface CommandsenableT

User Interface CommandsPage 277Command ModePrivileged EXEC modeUser GuidelinesThere are no user guidelines for this command.ExampleThe following examp

ACL CommandsPage 17flags] deny-udp [disable-port] {any|{ source source-wildcard}} {any| source-port} {any|{destination destination-wildcard}} {any|des

Page 278Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModePrivileged EXEC modeUser Guid

User Interface CommandsPage 279Command ModePrivileged and User EXEC modesUser GuidelinesThere are no user guidelines for this command.ExampleThe follo

Page 280Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThere are no user guidelin

User Interface CommandsPage 281show historyThe show history User EXEC mode command lists the commands entered in the current session.Syntaxshow histor

Page 282Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThere are no user guidelin

VLAN CommandsPage 283Chapter 30.VLAN Commandsvlan databaseThe vlan database Global Configuration mode command enters the VLAN Configuration mode.Synta

Page 284Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThere are no user guidelin

VLAN CommandsPage 285Default Configuration1Command ModeVLAN Configuration modeUser GuidelinesThere are no user guidelines for this command.NoteAfter r

Page 286Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleIn the following example, for VLAN

VLAN CommandsPage 287Parameters•string — Unique name to be associated with this VLAN. (Range: 1-32 characters)Default ConfigurationNo name is defined.

Page iTable of ContentsPreface ...

Page 18Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault ConfigurationNo IPv4 Access List i

Page 288Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThis example configures ethernet p

VLAN CommandsPage 289switchport access vlanThe switchport access vlan Interface Configuration mode command configures the VLAN ID when the interface i

Page 290Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeInterface Configuration (Ethe

VLAN CommandsPage 291Syntaxswitchport general allowed vlan add vlan-list [tagged | untagged]switchport general allowed vlan remove vlan-listParameters

Page 292Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThere are no user guidelin

VLAN CommandsPage 293Command ModeInterface Configuration (Ethernet, port-channel) modeUser GuidelinesThere are no user guidelines for this command.Exa

Page 294Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault ConfigurationThis command has no

VLAN CommandsPage 295ExampleThe following example maps a MAC address or a range of MAC addresses to a group of MAC addresses.show vlan macs-groupThe s

Page 296Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault ConfigurationAll VLANs are allowe

VLAN CommandsPage 297ExampleThe following example reserves an unused VLAN as the internal usage VLAN of ethernet port 1/g8.Console# configConsole(conf

ACL CommandsPage 19Syntaxmac access-list access-list-name no mac access-list access-list-name Parameters•access-list-name — Name of the MAC-Access Lis

Page 298Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow vlanThe show vlan Privileged EXEC mo

VLAN CommandsPage 299Default ConfigurationThis command has no default configuration.Command ModePrivileged EXEC modeUser GuidelinesThere are no user g

Page 300Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example displays the

VLAN CommandsPage 30173 outConsole show interface switchport ethernet 1/g2Port 1/g2:VLAN Membership mode: GeneralOperating parameters:PVID: 4095 (disc

Page 302Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideAcceptable Frame Type: UntaggedGVRP statu

Web Server CommandsPage 303Chapter 31.Web Server Commandsip http serverThe ip http server Global Configuration mode command enables configuring the de

Page 304Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesUse the crypto certificate

Web Server CommandsPage 305Command ModeGlobal Configuration modeUser GuidelinesUse the crypto certificate generate Global Configuration mode command t

Page 306Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•minutes — Integer that specifi

Web Server CommandsPage 307If no URL or IP address is specified, the default common name is the lowest IP address of the device at the time that the c

Page 20Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeMAC-Access List Configuration

Page 308Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesUse this command to export

Web Server CommandsPage 309User GuidelinesUse this command to enter an external certificate (signed by Certification Authority) to the device. To end

Page 310Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeGlobal Configuration modeUser

Web Server CommandsPage 311show ip httpThe show ip http Privileged EXEC mode command displays the HTTP server configuration.Syntaxshow ip httpDefault

Page 312Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example displays the

802.1x CommandsPage 313Chapter 32.802.1x Commandsaaa authentication dot1x The aaa authentication dot1x Global Configuration mode command specifies one

Page 314Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideno dot1x system-auth-controlDefault Confi

802.1x CommandsPage 315ExampleThe following example enables 802.1X authentication on Ethernet port 1/g16.dot1x re-authenticationThe dot1x re-authentic

Page 316Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand Mode Interface Configuration (Eth

802.1x CommandsPage 317Parameters•seconds — Specifies the time in seconds that the device remains in the quiet state following a failed authentication

ACL CommandsPage 21User Guidelines•MAC BPDU packets cannot be denied.• This command defines an Access Control Element (ACE). An ACE can only be remove

Page 318Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesThe default value of this

802.1x CommandsPage 319Syntaxdot1x timeout supp-timeout seconds no dot1x timeout supp-timeoutParameters•seconds — Time in seconds that the device wait

Page 320Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser Guidelines The actual timeout can be

802.1x CommandsPage 3211/g5 Force-auth Unauthorized* Disabled 3600 n/a* Port is down or not present.console#Console# show dot1x ethernet 1/g1802.1x i

Page 322Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuidePort Admin Mode Oper Mode Reauth ControlR

802.1x CommandsPage 323The following table describes significant fields shown above:show dot1x usersThe show dot1x users Privileged EXEC mode command

Page 324Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•username — Supplicant username

802.1x CommandsPage 325Syntaxshow dot1x statistics ethernet interfaceParameters•interface — Valid Ethernet port. (Full syntax: unit/port)Default Confi

Page 326Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideThe following table describes the signifi

802.1x CommandsPage 327User GuidelinesAn access port cannot be a member in an unauthenticated VLAN.The native VLAN of a trunk port cannot be an unauth

Page 22Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow access-listsThe show access-lists Pri

Page 328Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidedot1x single-host-violationThe dot1x sing

802.1x CommandsPage 329Parameters•mac-only — Enable authentication based on the station's MAC address only. 802.1X frames are ignored.• mac-and-8

Page 330Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideThe following example displays 802.1X adv

802.1x CommandsPage 331Default ConfigurationDisabled.Command ModeInterface Configuration (Ethernet) modeUser GuidelinesA device can have only one glob

Page 332Allied TelesisCommand Line Interface User’s GuideIndexAaaa authentication dot1x 313aaa authentication dot1x default 3

Index Page 333gvrp enable (Interface) 103gvrp registration-forbid 105gvrp vlan-creation-forbid 105Hhelp 279history 133history

Page 334Allied TelesisCommand Line Interface User’s GuidePreface 1priority-queue out num-of-queues 165Privileged EXEC Mode 5Q

Index Page 335show snmp engineID 204show snmp filters 206show snmp groups 205show snmp users 207show snmp views 205show sntp c

Page 336Allied TelesisCommand Line Interface User’s Guideterminal history 134terminal history size 135test copper-port tdr 14

ACL CommandsPage 23User GuidelinesThere are no user guidelines for this command.ExampleThe following example displays ACLs applied to the interfaces o

Page 24Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 3. AAA Commandsaaa authentication

AAA CommandsPage 25User Guidelines•The default and optional list names created with the aaa authentication login command are used with the login authe

Page 26Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeGlobal Configuration modeUser

AAA CommandsPage 27enable authenticationThe enable authentication Line Configuration mode command specifies the authentication method list when access

Page iiNot approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideip https authentication...

Page 28Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault ConfigurationThe local user databa

AAA CommandsPage 29User GuidelinesThe additional methods of authentication are used only if the previous method returns an error, not if it fails. To

Page 30Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuidepasswordThe password Line Configuration mo

AAA CommandsPage 31Syntaxusername name [password password] [level level] [encrypted]no username nameParameters•name — The name of the user (Range: 1-

Page 32Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example displays the

AAA CommandsPage 33User GuidelinesThere are no user guidelines for this command.ExampleThe following example sets a local level 15 password called ‘se

Page 34Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 4. Address Table Commandsbridge ad

Address Table CommandsPage 35Syntaxbridge multicast filteringno bridge multicast filteringParametersThis command has no keywords or arguments.Default

Page 36Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeInterface configuration (VLAN)

Address Table CommandsPage 37User GuidelinesBefore defining forbidden ports, the Multicast group should be registered.ExampleIn this example, MAC addr

Page iiiChapter 6.Configuration and Image File Commands ... 65copy...

Page 38Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidebridge multicast forbidden forward-allThe

Address Table CommandsPage 39Default ConfigurationThe default setting is 300 seconds.Command ModeGlobal Configuration modeUser GuidelinesThere are no

Page 40Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideParameters•forward — Forwards frames with

Address Table CommandsPage 41ExampleIn this example, port security mode is set to dynamic for Ethernet interface 1/g7. port security maxThe port secur

Page 42Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideDefault Configuration No addresses are def

Address Table CommandsPage 43ExampleIn this example, all classes of entries in the bridge-forwarding database are displayed.show bridge address-table

Page 44Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow bridge address-table countThe show br

Address Table CommandsPage 45show bridge multicast address-tableThe show bridge multicast address-table Privileged EXEC mode command displays the brid

Page 46Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExamplesIn these examples, Multicast MAC a

Address Table CommandsPage 47NoteA Multicast MAC address maps to multiple IP addresses as shown above.show bridge multicast address-table staticThe sh

Page ivNot approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideshow interfaces counters...

Page 48Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxshow bridge multicast filtering vlan

Address Table CommandsPage 49show ports securityThe show ports security Privileged EXEC mode command displays the port-lock status.Syntaxshow ports se

Page 50Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideThe following table describes the fields s

Address Table CommandsPage 51In this example, dynamic addresses in currently locked port 1/g1 are displayed.---- -------- -------- ------- -------1/g1

Page 52Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 5. Clock Commandsclock setThe cloc

Clock CommandsPage 53Default ConfigurationNo external clock sourceCommand ModeGlobal Configuration modeUser GuidelinesThere are no user guidelines for

Page 54Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideclock summer-timeThe clock summer-time Glo

Clock CommandsPage 55User GuidelinesIn both the date and recurring forms of the command, the first part of the command specifies when summer time begi

Page 56Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example defines the a

Clock CommandsPage 57Command ModeGlobal Configuration modeUser GuidelinesThe command is relevant for both received Unicast and Broadcast.If there is a

Page vclear host...

Page 58Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideSyntaxsntp broadcast client enableno sntp

Clock CommandsPage 59sntp client enable (Interface)The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode command enables

Page 60Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example enables the d

Clock CommandsPage 61Default ConfigurationNo servers are defined.Command ModeGlobal Configuration modeUser GuidelinesUp to 8 SNTP servers can be defin

Page 62Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example displays the

Clock CommandsPage 63show sntp statusThe show sntp status Privileged EXEC mode command shows the status of the Simple Network Time Protocol (SNTP).Syn

Page 64Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guide----------- ------- ----------------------

Configuration and Image File CommandsPage 65Chapter 6. Configuration and Image File CommandscopyThe copy Privileged EXEC mode command copies files fro

Page 66Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideUser GuidelinesUp to five backup configura

Configuration and Image File CommandsPage 67To copy the running configuration file to a backup configuration file, enter the copy running-config file

Page viNot approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guidepower inline powered-device ...

Page 68Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuidedeleteThe delete Privileged EXEC mode comm

Configuration and Image File CommandsPage 69boot systemThe boot system Privileged EXEC mode command specifies the system image that the device loads a

Page 70Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example displays the

Configuration and Image File CommandsPage 71show bootvarThe show bootvar Privileged EXEC mode command displays the active system image file that is lo

Page 72Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 7. DHCP Option 82 Commandsip dhcp

DHCP Option 82 CommandsPage 73Command ModePrivileged EXECUser GuidelinesThere are no user guidelines for this command.ExampleThe following example dis

Page 74Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 8. DHCP Snooping Commandsip dhcp s

DHCP Snooping CommandsPage 75Command ModeGlobal Configuration modeUser GuidelinesDHCP snooping must be first globally enabled before enabling DHCP sno

Page 76Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideip dhcp snooping information option allowe

DHCP Snooping CommandsPage 77User GuidelinesThere are no user guidelines for this command.ExampleThe following example configures the switch to verify

Page viisnmp-server enable traps ...197

Page 78Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s Guideno ip dhcp snooping database update-freqPa

DHCP Snooping CommandsPage 79User GuidelinesAfter entering this command an entry is added to the DHCP snooping database. If DHCP snooping binding file

Page 80Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideCommand ModeEXEC mode.User GuidelinesThere

DHCP Snooping CommandsPage 81User GuidelinesThere are no user guidelines for this command.ExampleConsole# show ip dhcp snooping bindingTotal number of

Page 82Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideChapter 9. Ethernet Configuration Commands

Ethernet Configuration CommandsPage 83Command ModeGlobal Configuration modeUser GuidelinesCommands under the interface range context are executed inde

Page 84Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuidedescriptionThe description Interface Confi

Ethernet Configuration CommandsPage 85Command ModeInterface Configuration (Ethernet, port-channel) modeUser GuidelinesThe no speed command in a port-c

Page 86Not approved by Document Control. For review only.Allied Telesis Command Line Interface User’s GuideExampleThe following example configures th

Ethernet Configuration CommandsPage 87Parameters•on — Force flow control as enabled.• off — Force flow control as disabled.• auto — Enable AUTO flow c