Manuale d’uso / di manutenzione del prodotto S2410s del fabbricante Force10 Networks
Vai alla pagina of 304
SFT OS Command Reference for the S2410 V ersion 2.4.1.0 Edition 2 April 2008.
Copyright 2008 Force10 Networks All rights reserved. Printe d in the USA. April 2008. Force10 Networks reserves the right to change, modify , revi se this publicati on without notice. T rademarks Force10 Networks® and E-Series® ar e registered trademarks of Force10 Networks, In c.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 3 This preface describes SFTOS 2.4.1 by contrasting it to SFT O S 2.3.1.9. Major Changes Most of the differences in SFT OS 2.
4 New Features • The maximum number of LAGs is 12, with a maximum of 12 ports in a LAG (vs. 32 LAGs, with a maximum of eight members each in SFT OS 2.3.1). See Chapter 15, LAG/ Port Channel Commands, on pa ge 249 . • Maximum Jumbo Frame size in creased from 9216 to 1024 0.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 5 New Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Major Changes . . . . . . . . . . . . . . . . . . .
6 Contents Chapter 3 Using the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Command Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 7 show interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 show interface ethernet . . . . . . . . . . . . . .
8 Contents snmp-server enable traps linkmode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 0 snmp-server enable traps multiuse rs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 9 priority (VLAN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126 protocol group . . . . . . . . . . . . . . . . . .
10 Contents Configuration Scripting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146 script apply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 11 port-secur ity ma c- ad d re ss move . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166 show port-security . . . . . . . . . . . . . . . . . .
12 Contents port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190 priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 13 lease . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209 network . . . . . . . . . . . . . . . . . .
14 Contents gvrp interfacemode enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228 gvrp interfacemode enable all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 15 Chapter 15 LAG/Port Channel Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249 addport . . . . . . . . . . . . . . . . . . . . . . . . .
16 Contents spanning-tree mst priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271 spanning-tree mst vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 17 Figure 1 Force10 Netw orks iSuppor t Websit e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Figure 2 Examp le of Accessing the Boot Menu with the reload Command .
18 Figure 35 Using the copy command to Upload the Event Lo g . . . . . . . . . . . . . . . . . . . . . . . . . . . 141 Figure 36 Using the copy command to Download the CLI Ba nner . . . . . . . . . . . . . . . . . . . . . . . 142 Figure 37 Sample Output from the show logging Command .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 19 T able 1 Boot Menu Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 T able 2 Network Address Syntax . . . . . . . . . . . . .
20.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 21 This guide describes configura tion commands for SFTOS 2.4 software, which is dedicate d to the S2410 models of the S-Series line of switc hes.
22 About This Guide Audience This guide assumes you are kn owledgeable in Layer 2 and Laye r 3 networking technolog ies, that you have an understanding of the SFT OS software base and have read the appropriate specification for the relevant switch platform.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 23 Related Documents and Sour ces of Additional Information The following docu ments prov ide information on using the S2410 switch and SFTOS 2.4 software. All of the docu ments are available on the Documents tab of iS upport (the Force10 Networks support we bsite): http://www .
24 About This Guide Document ation Feedback If appropriate for the issue, pl ease include the following info rmation with your comments: • Document name • Document part number (from the front cove.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 25 • Documents : User documentation, F AQs, field no tices, technical tips, and white papers • Support Programs : Information on the complete suite of Force10 support and professional support services.
26 About This Guide.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 27 The SFTOS software loaded in every S- Series switch has two purposes: • Assist attached hardware in switching frames, based on Layer 2, 3, or 4 information contained in the frames. • Provide a complete device management portfolio to the network administrator .
28 SFTOS Overview SFT OS 2.4.1 Features The SFTOS 2.4 .1 so ftware pr ov ides the following features th rough a limited version (no stacking) of its “Layer 2 Package” (also called the “Switching Package”).
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 29 Multicast Protocols • IGMP Snooping • Layer 2 Multicast Forwarding Security and Packet Control Features • Ingress Rate Limiting • Login Access Control • RADIUS • IEEE 802.
30 SFTOS Overview.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 31 This chapter summarizes the procedures to star t and operate the switch. For more detail, see the Getting S t arted chapter in the SFTOS Config uration Guide (and the rest of that guide) or the S2410 Quick Refer ence .
32 Quick Start 5. Press ENTER two times. The prompt of the User Exec mode of the CLI is displayed. 6. Enter enable to switch to the Privileged Exec mode. Y ou can run all show commands from this mode, while some show commands do not run from User Exec mode.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 33 2. At the [Boot Menu] prompt, press the number and Enter of the option that you want. The options are: For details on other Xmodem opt ions, see Uploading from the Switc h through XMODEM on page 37 and Downloading to the Switch through XMODEM on page 37 .
34 Quick Start Physical Port Data T o get information on the physical port, use the show port all command : User Account Management T o configure switch administrator accounts, use the following comma.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 35 Management IP Addr ess In addition to logging into the CLI to view and manage network parameters, you can use the following methods: • Sim.
36 Quick Start Configuring the Management VLAN IP Address T o configure the management VLAN IP address, use the following commands: For details on command syntax for the co mmands liste d above, see General System Management and Information Commands on page 55 .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 37 Example of Configuring the Ethernet Management Port Figure 3 Example of Configuring th e Ethernet M anagement Port Uploading fr om the Switch through XMODEM T o copy to a PC thr ough the co nsole port with XMODEM, use the following command.
38 Quick Start Downloading fr om a TFTP Server 1. Before starting a TFTP server download, c onfigure the management IP address of the switch; see Management IP Address on page 35 .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 39 The SFTOS command line interface (CLI) is one of the three major wa ys to manage the S2410, and is t he most comple te.
40 Using the Command Line Inter face The following conventions apply to the command name: • The command name is displayed in bold fo nt. It must be entered exactly as shown. • When you have entered enough letters of a command name to uniquely identify the command, you can press the space bar or Ta b key to cause the system to complete the word.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 41 W ords in italics (also some times shown in brackets: <param eter> ) indicate that a mandatory parameter mu st be entered in pl ace of the brackets and text inside them .
42 Using the Command Line Inter face unit/slot/port — V alid slot and port number separated by forward slash es. For examp le, 0/1 represents slot number 0 and port number 1. logical unit/ slot/port —Logical unit, slot and port number . This is applicable in the case of a link aggregation group (LAG; also called a port channel).
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 43 Keyboard Shortcuts The following key combinations (speedkeys, sp ecial characters) speed up use of the CLI : Backspace —delete previous ch.
44 Using the Command Line Inter face • T ype a partial keyword followed by a ? A display of keywords be gin ning with the partial keyword is listed .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 45 The following command-mode tree diagram provi des an overview of the names of the mo des and how they relate to each other . The User Ex ec mode at the top of the tree is the mode you enter when you access the CLI.
46 Using the Command Line Inter face Figure 5 CLI Mode Diagram Access to all commands beyond the User Ex ec mode can be restricted through the en able password, which you set with the enable passwd command. See enable passwd on page 142 . Note: In Release 2.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 47 The following table shows the relationship of the command mode names to the prompts visible in the mode and the exit method from that mode. The first three rows in the table are organized in the sequence in which you would access the child modes.
48 Using the Command Line Inter face Mode-based Command Hierar chy As introduced above, the CLI is divided into va rious modes. Commands in a particular mo de are not available until the operator switches to th at mode, with the exception of the User Exec mode commands.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 49 In this mode, a physical port is set up fo r a specifi c logical connection operation. The Interface Config mode provides access to the router interface configuration commands.
50 Using the Command Line Inter face T ACACS Config Mode. Use this mode to configure th e connection parameters to a T ACACS + user authentication server . VLAN Mode. (formally called the Interface Vlan Config mode, or more simply , the Interface Vlan mode) This mode groups a ll the commands pertaining to VLANs.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 51 This chapter covers the following topics: • Configuring for W eb Access on page 52 • W eb Page Layout on page 5 2 • Start ing the W eb.
52 Using the Web User Interface Configuring for W eb Access T o enable W eb browser access to the switch: 1. Configure the switch for in-band connectivity .
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 53 3. Make your selection by clicking on the appr opriate item in the navigation tree in Frame 2. Command Buttons The following command buttons are used throughout the W eb UI pa nels: Save —Implements and saves the chan ges you just made.
54 Using the Web User Interface.
SFTOS Command Reference for the S2410, Version 2.4 . 1.0 55 The comma nds in this chapter either manage the switch in general, configure management interfaces, or show current ma nagement settings. For every conf iguration command, there is a show command that displays the configuration setting.
56 System Management Commands dir • network protoc ol on page 62 • protocol on page 63 • serviceport ip on page 63 • serviceport protocol on page 64 • show arp switch on page 64 • show har.
hostname SFTOS Command Reference for the S2410, Version 2.4 . 1.0 57 Example Figure 7 Example of dir nvram Command Output hostname Change the text that ap pears as part of the CLI prompt. Synt ax ho stname hostname Parameters Default Force10 S50 (For e xample, the User Exec prompt appears as “ (Force10 S50) > ”.
58 System Management Commands interface managementethe rnet interface managementethernet This command invokes the Interface ManagementEthernet mode (uses the (Config-if-ma)# prompt), where you can set up a management IP interface. For details on management interfaces, see the Management chapter of the SFTOS Confi guration Guide .
mac-addr ess SFTOS Command Reference for the S2410, Version 2.4 . 1.0 59 The value for ipaddr is the IP Addres s of the management interface. This is the IP address that you would enter in your W eb browser to access the SFTOS W eb User Interface.
60 System Management Commands management route de fault Default None Mode Interface ManagementEthernet Command History Related Commands management route default This command sets the IP gate way of the switch. The managemen t IP address (configured with the ip address , above) and the gateway must be on the same subnet.
mtu SFTOS Command Reference for the S2410, Version 2.4 . 1.0 61 Example Figure 8 Example of Configuring Man agement Address Related Commands mtu This command sets the maximum transmission unit (MTU) size (in bytes) for physical and LAG (port channel) interfaces.
62 System Management Commands network ma c-address network mac-address This command is replaced by the mac-address command in V ersion 2.3. Mode Privileged Exec Command History network mac-type This command is replaced by the mac-type command in V ersion 2.
protocol SFTOS Command Reference for the S2410, Version 2.4 . 1.0 63 protocol This command specifies the netw ork configuration protocol t o be used for the management VLAN. Synt ax protocol { none | bootp | dhcp } If you modify this value, the chan ge is effective immediately .
64 System Management Commands serviceport pr ot oc ol Related Commands serviceport protocol This command specifies the network configuratio n protocol to be used for configuring access to the Ethernet Managemen t port. Synt ax serviceport pro tocol { none | bootp | dhcp } If you modify this value, the ch ange is effective immediately .
show hardwa re SFTOS Command Reference for the S2410, Version 2.4 . 1.0 65 MAC Address —A unicast MAC a ddress for which the switch has forwarding and/or fi ltering information.
66 System Management Commands show interface Enter the port number of a particular port to query , where unit is the stack member , slot is always 0 (zero), and port is the port numb er .
show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 67 Related Commands show interface ethernet This command displays de tailed statistics for a specific port or for all CPU traffic based upon the ar gument.
68 System Management Commands show interface ethernet Example 1 Figure 10 Example of show interface ethern et switchport Output The display fields of show interface ethernet , when the keyword switchp.
show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 69 Example 2 Figure 1 1 Example of show interface ethernet u nit/slot/port Output ( truncated) Broadcast Packets T ran.
70 System Management Commands show interface ethernet The show interface ethe rnet display fields, when the argument is unit/slot/port , are as follows: Ta b l e 8 Fields in Output of show interface e.
show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 71 Packets Received 1519-1522 Octets The total number of packets (including bad packets) received that were betw een 1519 and 1 522 octets in length i nclusive (excluding framing bits but including FCS octets).
72 System Management Commands show interface ethernet Local Traf fic Frames The total number of frames dropped in the forwardin g process because the de st ination add r e ss wa s loca ted off of this port. 802.3x Pause Frames Received A count of MAC Co ntrol frames received on this interface with an opcode indicating the P AUSE operation.
show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 73 Packets T ransmi tted 1024-1518 Octets The total number of p ackets (including bad packets) received that were betw.
74 System Management Commands show interface ethernet Related Commands VLAN Viable Discards The number of frames discarded on this p ort when a lookup on a particular VLAN occurs while that entry in t.
show interface mana gementethernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 75 show interface managementethernet This command displays info rmation about the management address of the switch.
76 System Management Commands show interface switchport Related Commands show interface switchport This command displays a summary of statistics on Layer 2 interfaces.
show interfaces SFTOS Command Reference for the S2410, Version 2.4 . 1.0 77 Related Commands show interfaces This command displays information about a selected interface or VLAN.
78 System Management Commands show loggi ng Usage Information The following examp le shows sample output of the show interfaces descri ption command with an interface specified in the unit/slot/port f.
show mac-addr-t able SFTOS Command Reference for the S2410, Version 2.4 . 1.0 79 Parameters Mode Privileged Exec Example Figure 13 Example of Output from the show mac-ad dr-ta ble a ll Command Field Descriptions Mac Address —A unicast MAC addres s for which the switch has forwa rding and or filtering informati on.
80 System Management Commands show msg log Stat ic —The value of the correspo nding instance was added by the system or a user wh en a static MAC filter was defined. It cannot be relearned. Learned —The value of the correspondi ng instance was learned by o bserving the source MAC addresses of incoming traffic, and is currently in use.
show netw ork SFTOS Command Reference for the S2410, Version 2.4 . 1.0 81 show network Command History Related Commands show running-config This command is used to disp lay/capture the current setting of dif ferent protocol packages supported on the switch.
82 System Management Commands show serviceport Example Figure 16 Using the show run n ing-config comma nd Note : Usage Information Start ing with Release 2.3, show running- config startup-config provides the user the opportunity to captu re the runnin g-config data to the startup-co nfig file as a text file.
show sysinfo SFTOS Command Reference for the S2410, Version 2.4 . 1.0 83 Example Figure 17 show serviceport Comma nd Output Related Commands show sysinfo This command displays switch information.
84 System Management Commands show version Mode Privileged Exec show version This command displays version details of the software/hardware present on the system, which would be used for trouble-shooting .
show version SFTOS Command Reference for the S2410, Version 2.4 . 1.0 85 Burned in MAC Address Universally assign ed network address Software V ersion The releas e.
86 System Management Commands show tech-s upport Related Commands show tech-support This command displays the output of the commands show hardware , sh ow logging , show port all , show running-config , and show versio n .
vlan participation (management) SFTOS Command Reference for the S2410, Version 2.4 . 1.0 87 Related Commands vlan participation (management) This command assigns the management VLAN of the switc h.
88 System Management Commands ip telnet maxsessions • telnetcon maxsessions on page 91 • telnetcon timeout on page 90 ip telnet maxsessions This command specifies the maximum number of T elnet connection sessions that can be established. Synt ax ip telnet ma xsessions 0-5 A value of 0 indicates that no T elnet connec tion can be estab lish ed.
ip telnet server enable SFTOS Command Reference for the S2410, Version 2.4 . 1.0 89 Command History ip telnet server enable Enable or disable T elnet services. Synt ax [no ] telnet server enable Mode Global Config Command History Related Commands session-limit This command specifies the maximum number of simultaneous outbound telnet sessions.
90 System Management Commands show telnet The no version of this command sets the outbou nd T elnet session timeout value to the default. Default 1 (minute) Mode Line Config show telnet This command displays the curre nt outbound telnet settings.
telnetcon maxsessions SFTOS Command Reference for the S2410, Version 2.4 . 1.0 91 telnetcon maxsessions Command History Serial Commands This section describes the follo wi ng SFT OS system management .
92 System Management Commands serial timeout The no serial baudrate command sets the communic ation rate of the terminal interface to the 9600 default. Default 9600 Mode Line Config serial timeout This command specifies the maximum connect time (in minutes) without console activity .
show serial SFTOS Command Reference for the S2410, Version 2.4 . 1.0 93 Ta b l e 1 4 Fields of show serial Command Output Field Description Serial Port Login Timeout (minut es) S pecifies the time, in minutes, of inactivity on a serial port connection, after which the switch will close the connection.
94 System Management Commands show serial SNMP Management Commands This section describes the SNMP system ma nagement command s supported by SFTOS: • show snmpcommun ity on page 95 • show snmptrap.
show snmpcommunity SFTOS Command Reference for the S2410, Version 2.4 . 1.0 95 show snmpcommunity This command displays SNMP community info rmation. Six communitie s are supported. Y ou can add, change, or delete communities. The switc h does n ot have to be reset for changes to take effect.
96 System Management Commands show trapflags show trapflags This command displays trap co nditions. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the switch's SNMP agent sends the tr ap to all enabled trap receivers.
snmp-server SFTOS Command Reference for the S2410, Version 2.4 . 1.0 97 snmp-server This command sets the name an d the physical location of th e switch, and the organization responsible for the network. The range for name, location, and contact is from 1 to 31 alphanumeric characters.
98 System Management Commands snmp-server community ipaddr snmp-server community ipaddr This command sets a client IP address for an SN MP community . The address is the assoc iated community SNMP pac.
snmp-serve r community ro SFTOS Command Reference for the S2410, Version 2.4 . 1.0 99 status is changed back to Enable.The no version of this comma nd deactivates an SNMP community . If the community is disabled, no SNMP requests using this community are accepted.
100 System Management Commands snmp-serve r en ab le traps link mode Mode Global Config Command History Related Commands snmp-server enable traps linkmode This command enables Link Up /Down traps for the entire swit c h.
snmp-server enable traps stpmode SFTOS Command Reference for the S2410, Version 2.4.1.0 101 snmp-server enable traps stpmode This command enables the sending of new root traps and topology chan ge notification traps.
102 System Management Commands snmptrap Command History snmptrap This command adds an SNMP trap receiver na me and trap receiver IP address. The maximum name length is 16 case-sensitiv e alphanumeric characters. Synt ax [ no ] snmptrap name ip addr The no version of this command deletes the sp ecified trap receiver from the community .
snmp trap link-status SFTOS Command Reference for the S2410, Version 2.4.1.0 103 snmp trap link-status This command enables link status traps by interface. Synt ax [ no ] snmp trap link-status The no versi on of this command disabl es link status traps by interface.
104 System Management Commands snmptrap snmpversion.
SFTOS Command Reference for the S2410, Version 2.4.1.0 105 This chapter provides a detailed explanation of the system co nfiguration commands in the following major sections: • System Configuration .
106 System Configuration Commands bridge aging-time • show mac-address-table multicast on page 115 • show mac-address-table stats on page 1 16 • show monitor session on pag e 1 16 • show port .
enable SFTOS Command Reference for the S2410, Version 2.4.1.0 107 Synt ax co nfigure Command Mode s Privileged Exec Usage Information Users executing this command enter the Global Config mode, which provides access to many commands within that mode. Also , this mo de is a gateway t o all other more proto col-specific modes except the VLAN mode.
108 System Configuration Commands interface interface This command accesses the Interface Config mode for a designated logic al or physical interface. The Interface Config mode pr ovide s access to configura tion commands for th e specified interface.
interface range SFTOS Command Reference for the S2410, Version 2.4.1.0 109 Defaults This command has no d efault behavior or values. Mode Global Config Command History Usage Information When creating an interface range, interfaces appear in the order they are entered; they are not sorted.
110 System Configuration Commands interface range Range and Port Ch annel Range prompts within that mode are displayed in the Link Aggregation chapter (LAGs) in the SFTOS Command Refer ence .
interface range SFTOS Command Reference for the S2410, Version 2.4.1.0 111 Example Figure 22 Bulk Configuratio n W arning Message Figure 23 is an example of a correctly format ted single range bu lk configuration.
112 System Configuration Commands monitor se ssion monitor session This command adds a mirrored port (source port) or probe port (destination port) to a session identified with the session ID of 1. In all released versions of SFT OS, the se ssion is always 1.
monitor session 1 m ode SFTOS Command Reference for the S2410, Version 2.4.1.0 113 monitor session 1 mode This command sets the monitor session (port monitoring) mode to enabled . The probe and monitored ports mu st be configured before port monitoring can be enabled.
114 System Configuration Commands no monitor session 1 no monitor session 1 This command removes all the source ports an d a destination port of the mirroring session and restore the default va lue for mirroring session mode. The 1 or session-id paramete r is an intege r value used to identify the session.
show mac-address-table multicast SFTOS Command Reference for the S2410, Version 2.4.1.0 115 igmpsnooping —Display IGMP Snooping entries in the MFDB table. multicast —Display Multicast Fo rwarding Database T able informatio n. stats —Display MFDB statistics.
116 System Configuration Commands show mac-address-table stats Description—The text description of this multicast table entry . Interfaces—The list of interfaces that are designated for forwarding (Fwd:) and filteri ng (Flt:).
show port SFTOS Command Reference for the S2410, Version 2.4.1.0 117 Synt ax sho w monitor session 1 Mode Privileged Exec Example Figure 27 Command Exampl e: show monitor session 1 Field Descriptions Session ID—In all released versions of SFTOS, the session is always 1.
118 System Configuration Commands show port Example Figure 28 show port a ll Command Output Example Interface—V alid unit, slot and port n umber separated by forward slashes.. This field onl y displays in the show port all report. T ype—If not blank, this fiel d indicate s that this port is a special type of port.
show port protocol SFTOS Command Reference for the S2410, Version 2.4.1.0 119 show port protocol This command displays th e protocol-based VL AN information for either the entire system, or for the indicated group.
120 System Configuration Commands shutdown a ll Synt ax [ no ] shutdown all Default enabled Mode Global Config V irtual LAN (VLAN) Commands In SFTOS 2.
clear vl an SFTOS Command Reference for the S2410, Version 2.4.1.0 121 • participation (VLAN) on page 126 • priority (VLAN) on page 126 • protocol grou p on page 127 • protocol vlan group on p.
122 System Configuration Commands description Mode Privileged Exec Related Commands description Enter a description for the selec ted interface (port or VLAN). Synt ax [no ] description description The descri ption allows spaces if you surround the stat ement with single or double quotes.
encapsulation (VLAN) SFTOS Command Reference for the S2410, Version 2.4.1.0 123 encapsulation (VLAN) This command configures the link layer encapsula tion type for the packet within the VLAN.
124 System Configuration Commands makestatic Usage Information After using this command to access the Interf ace VLAN mode (the pr ompt for the Interface VLAN mode is (conf-if-vl-<vlan-id>)# ) , you can configure the selected VLAN.
mtu (VLAN) SFTOS Command Reference for the S2410, Version 2.4.1.0 125 Mode Interface VLAN Command History Related Commands mtu (VLAN) This command sets the MTU (Maximum T r ansmission Unit) of the selected VLAN.
126 System Configuration Commands network mg mt_vlan Command History Related Commands network mgmt_vlan Command History participation (VLAN) Configure how ports participate in a specific VLAN. Mode Interface VLAN Command History Related Commands priority (VLAN) Configure the priority for untagged frames.
protocol group SFTOS Command Reference for the S2410, Version 2.4.1.0 127 protocol group This command attaches a group ID to the selected VLAN . A group can only be associated with one VLAN at a time.
128 System Configuration Commands protocol vlan gr ou p all Command History protocol vlan group all This command adds all physical interfaces to the protocol-based VLAN identified by groupid . A group may have more than one interfa ce associated with it.
show vlan SFTOS Command Reference for the S2410, Version 2.4.1.0 129 show vlan This command displays informa tion about VLANs, either detaile d information for a specific VLAN or summary information for all config ured VLANs. The ID is a valid VLAN identification number .
130 System Configuration Commands show vlan port Q: “T” indicates that the port is tagged; “U” indicates untagged. Ports:”E” for Ethernet, followed by the po rt numbers (unit/slot/port) in.
tagged SFTOS Command Reference for the S2410, Version 2.4.1.0 131 Mode Privileged Exec Command History Example Figure 34 Output of th e show vlan po rt Command tagged This command sets tagging to en abled for a specific port (or ra nge of ports ) in the sele cted VLAN.
132 System Configuration Commands untagged Usage Information The tagged command includes the functionality of the participation include command and the acceptframe vlanOnly command. For details , see the VLAN chapter in the SFTOS Configuration Guide .
vlan acceptframe SFTOS Command Reference for the S2410, Version 2.4.1.0 133 vlan acceptframe This command sets the frame acceptance mode per interface . Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#.
134 System Configuration Commands vlan participation all Command History Related Commands vlan participation all This command configures the degree of participa tion for all int erfaces in a VLAN.
vlan port tagging all SFTOS Command Reference for the S2410, Version 2.4.1.0 135 Mode Global Config Command History Related Commands vlan port tagging all This command sets the tagg ing behavior for all interfaces in a VLAN to enabled.
136 System Configuration Commands vlan protocol gr ou p vlan protocol group This command adds a protocol-based VLAN group to the system. The groupn ame is a character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to id entify the group in su bsequent commands.
vlan pvid SFTOS Command Reference for the S2410, Version 2.4.1.0 137 vlan pvid This command changes the VLAN ID per interface. Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#.
138 System Configuration Commands clear config System Utility Commands This section describes system utilities. The comman ds are divided into two functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands co nfigure featur es and options of the switch.
clear port-channel SFTOS Command Reference for the S2410, Version 2.4.1.0 139 Synt ax clear counters { unit/sl ot/port | all } Mode Privileged Exec clear port-channel This command clears all port-channels (LAGs). Synt ax clear port-channel Mode Privileged Exec clear traplog This command clears the t rap log.
140 System Configuration Commands copy • Event log (also called the error l og or the persistent log) ( nvram:errorlog ) • Buffered message log (also called the System log) ( nvram:log ) • startup configuration ( nvram:startup-config ) •t r a p l o g ( nvram:trapl og ) • See also copy (clibanner).
copy (clibanner) SFTOS Command Reference for the S2410, Version 2.4.1.0 141 The following command copies from the swit ch system memory to flash memory: copy system:running-co nfig nvram:startup-confi.
142 System Configuration Commands enable passwd cannot be created on the switch. Instead, create th e banner file using a text editor , put it on your TFTP server , and then download it to the switch.
logout SFTOS Command Reference for the S2410, Version 2.4.1.0 143 Synt ax en able passwd password Mode Global Config Command History logout Close the curre nt T elnet connectio n or reset the current serial connection.
144 System Configuration Commands ping ping This command checks if another computer is on the network and listens for connections. T o use this command, configure the switch for ne twork (in-band) connect ion. The source and target devices must have the ping utility enable d and running on top of TCP/IP .
terminal length SFTOS Command Reference for the S2410, Version 2.4.1.0 145 terminal length Configure the number of lines to be displayed on the terminal screen in one page of output of “show” commands.
146 System Configuration Commands write write The functionality of this comm and is the same as for the copy system:running-config nvram:startup-config command, to save the running configuration to NVRAM, which would be used while the system is re-booted the next time.
script apply SFTOS Command Reference for the S2410, Version 2.4.1.0 147 script apply This command applies the commands in the co nfiguration script to the switch. The apply command backs up the running configuration an d then starts applying the commands in the script file.
148 System Configuration Commands script show script show This command displays the contents of a script file. The parameter scriptname is the name of the script file.
SFTOS Command Reference for the S2410, Version 2.4.1.0 149 This chapter provides a deta iled explanation of the fo llowing Syslog commands: • logging buffered on page 149 • logging buf fered wrap .
150 System Log logging buffered wrap Use no logging buffered to disable logging to the in-memory log. Default disabled; critical Mode Global Config logging buffered wrap This command enables wrapping of in-memory logging when full ca pacity is reached.
logging console SFTOS Command Reference for the S2410, Version 2.4.1.0 151 logging console This command enables logging of Sy stem log messages to the console.
152 System Log logging host reconfigu re logging host reconfigure This command enables you to revise the IP address of a configured syslog host. Synt ax loggin g host reconfigure host-id hostadd ress Use show logging hosts to learn association of host-id wit h ho staddress .
logging syslog SFTOS Command Reference for the S2410, Version 2.4.1.0 153 logging syslog This command enables logging to any configured syslog server .
154 System Log show logging buffered Fields in the report include : Logging Client Local Port—The port on the collector/relay to which syslog m essages are sent CLI Command Logging—The mode for lo.
show logging hosts SFTOS Command Reference for the S2410, Version 2.4.1.0 155 Buffered Logging Wrapping Behavior—The behavior of the in-memory log when faced with a log-ful l situation.
156 System Log show logging traplogs Fields in the report include : Index—An integer from 1 to 8, used for removing the associated syslog host IP Address—IP Address of the configured syslog host Severity—The minimum severity to log to the specified address Port—Server Port Number .
SFTOS Command Reference for the S2410, Version 2.4.1.0 157 Commands in this chapter manage user accoun ts. The commands are are comprised of two functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands co nfigure featur es and options of the switch.
158 User A ccount Comma nds disconnect disconnect This command closes the designated remote session or all sessions. Synt ax dis connect { sessionID | all } Mode Privileged Exec show loginsession This command displays curre nt telnet and seri al port connections to the switch.
username passwd SFTOS Command Reference for the S2410, Version 2.4.1.0 159 User Access Mode—Shows whether t he operator is able to change parameters on the switch (Read/ Write) or is only able to view them (Read Only). As a factory default, the ‘admin’ user h as Read/Write access.
160 User A ccount Comma nds users snmpv3 accessmode users snmpv3 accessmode This command specifies the SNMP v3 acc ess priv ileges for the spec ified login user . The valid accessmode values are readonly or readwrite . The usernam e is the login user name for which the specified access mode applies.
users snmpv3 encryption SFTOS Command Reference for the S2410, Version 2.4.1.0 161 If des is specified, the required key ma y b e specified on the comman d line. The ke y may be up to 16 characters long. If the des protocol is specified but a key is not provided, the user will be prompted for the key .
162 User A ccount Comma nds users snmpv3 encryption.
SFTOS Command Reference for the S2410, Version 2.4.1.0 163 This chapter provides a detaile d explanation of the security commands available in the SFTOS software, presented in the following sections: • Port Security Commands • Port-Based Network Access Control (IEEE 802.
164 Security Commands port-secur ity Implement ation Notes • If port security is enabled on a port, and th en an ACL is applied to the port, the ACL is given precedence and port security is ignored.
port-security max-static SFTOS Command Reference for the S2410, Version 2.4.1.0 165 Synt ax po rt-security max-dynamic maxvalue no port-security max-dyn amic Default 600 Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#.
166 Security Commands port-secur ity ma c-address move no port-security mac-address mac-address vid Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#.
show port-security dynamic SFTOS Command Reference for the S2410, Version 2.4.1.0 167 Example Figure 39 Example of show port- s ec ur ity all Co mm a nd Out pu t • • show port-security dynamic This command displays the dynami cally locked MAC addres ses for port.
168 Security Commands show port-s ecurity static show port-security static This command displays the statically locked MAC addres ses for port. Synt ax sho w port-security static unit/slot/port Mode P.
authentication login SFTOS Command Reference for the S2410, Version 2.4.1.0 169 • dot1x timeout on page 174 • dot1x user on page 1 75 • show authentication on page 175 • show authentication us.
170 Security Commands clear dot1x statistics The no version of this command deletes the specif ied authentication login list. The attempt to delete fails if any of the following conditions are true: .
dot1x initialize SFTOS Command Reference for the S2410, Version 2.4.1.0 171 Synt ax do t1x defaultlogin listname Mode Global Config dot1x initialize This command begins the initializ ation sequence on the specifie d port. This command is only valid if the control mode for the specified port is 'auto'.
172 Security Commands dot1x port-co n tro l Default 2 Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History dot1x port-control This command sets the authentic ation mode to be used on th e specified port .
dot1x re-authe nticate SFTOS Command Reference for the S2410, Version 2.4.1.0 173 Force-unauthorized—The authenticator P AE un conditionally sets the controlled port to unauthorized. Force-authorized—The authenticator P AE un conditionally sets the controlled port to authorized.
174 Security Commands dot1x system-auth-control Command History dot1x system-auth-control This command is used to enable the dot1x authentication suppor t on the switch. By default, the authentication support is disa bled. While disabled, the dot1x configuration is retained and can be changed, but is not activated.
dot1x user SFTOS Command Reference for the S2410, Version 2.4.1.0 175 tx-period—Sets the value, in seconds, of the time r used by the authenticator state machine on this port to determine when to send an EAPOL EAP Request/Identity frame to the supplicant.
176 Security Commands show authentication users Synt ax show authentication Mode Privileged Exec Authentication Login List—Thi s displays the authentication login listna me. Method 1—This displays the first method in th e specified authentication login list, if any .
show dot1x SFTOS Command Reference for the S2410, Version 2.4.1.0 177 If the optional parameter summary { unit/slot/p ort | all } is used, t he dot1x configuration for the specified port or all ports are displayed. Port—The interface whose c onfiguration is displayed.
178 Security Commands show dot1x Example Figure 40 Example of Outpu t fro m the sh ow do t1 x de tail Command If the optional parameter statistics unit/slot/port is used, the dot1x statistics for the specified port are displayed. Port—The interface whose statistics are displayed.
show dot1x users SFTOS Command Reference for the S2410, Version 2.4.1.0 179 show dot1x users This command displa ys 8 02.1x port security us er information for locally configured users.
180 Security Commands users defaultlogin users defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is conf igured locally .
radius accounting mode SFTOS Command Reference for the S2410, Version 2.4.1.0 181 radius accounting mode This command is used to enable the RADIUS accounting function. The no version of this command is used to set the RADIUS accounting fu nction to the default value - i.
182 Security Commands radius server key If the acct keyword is used, the comma nd config ures the IP addr ess to use for the RADIUS accounting server .
radius server msgauth SFTOS Command Reference for the S2410, Version 2.4.1.0 183 radius server msgauth This command enables the message authen ticator attribute for a specified server .
184 Security Commands radius server time out radius server timeout This command sets the timeout value (in seconds) after which a request must be retransmitted to the RADIUS server if no res ponse is received . The timeout va lue is an int eger in the range of 1 to 30.
show radius accounting statistics SFTOS Command Reference for the S2410, Version 2.4.1.0 185 show radius accounting statistics This command is used to display the conf igured RADIUS accounting mode, accounting server , and the statistic s for the configured accounting server .
186 Security Commands show radius statistics (authentication) show radius statistics (authentication) This command is used to displa y the statistics for RADIUS or configured server . T o show the configured RADIUS server statistic, the IP Addr ess specified must match that of a previously configured RADIUS server .
show radius statistics (authentication) SFTOS Command Reference for the S2410, Version 2.4.1.0 187 Round Tr ip T ime—The time interval, in hundredths of a secon d, between the most rece nt Access-Reply | Access-Challenge and the Access-Request th at ma tched it from the RADIUS authentication server .
188 Security Commands tacacs-server host tacacs-server host Configure a T ACACS+ server and ente r into T ACACS+ Configuration mode. Synt ax tacacs -server host ip-address T o remove a T ACACS+ server host, use the no tacacs-server host { hostname | ip-address } command.
tacacs-server timeout SFTOS Command Reference for the S2410, Version 2.4.1.0 189 Default Not configured. Command Mode s CONFIGUR A TION Usage Information The key configured with this command must match the key configured on the T ACACS+ daemon. tacacs-server timeout Specify a global timeout va lue for all T ACACS+ hosts.
190 Security Commands port Default If unspecified, the key-string defaults to the global value. Command Mode T ACACS Configuration port Specify a server port number for a particular T ACACS host. Synt ax po rt port-number Default If unspecified, the port number defaults to 49.
single-connection SFTOS Command Reference for the S2410, Version 2.4.1.0 191 single-connection Configure the client to maintain a single open connection with the T ACACS server . Synt ax [ no ] single-connection Default Use multiple connections. In other words, the c lient will use a separate connection for each authentication session.
192 Security Commands ip ssh maxsessions Secure Shell (SSH) Commands The commands in this section are: • ip ssh maxsessions on page 192 • ip ssh protoc ol o n page 193 • ip ssh server enable on .
ip ssh prot ocol SFTOS Command Reference for the S2410, Version 2.4.1.0 193 ip ssh protocol This command is used to set or remove protoc ol levels (or versions ) for SSH.
194 Security Commands ip ssh timeout ip ssh timeout This command sets the SSH connection session tim eout value, in minutes. A session is active as long as the session has been idle for the value set. Changing the timeout value for active sessions does not become effectiv e until the session is reaccessed.
sshcon maxsessions SFTOS Command Reference for the S2410, Version 2.4.1.0 195 SSH Sessions Currently Active Max SSH Sessions Allowed SSH T i meout—SSH login timeout confi gured by ip ssh timeout com.
196 Security Commands ip http javamode enable ip http javamode enable Enable Java mode for th e W eb interface to SFT OS. Synt ax ip http javamo de enable Use no ip http jav amode enable to disable Java mode. Default disabled Mode Global Config Command History ip http secure-port This command is used to set the SSL T port.
ip http secure-ser ve r enable SFTOS Command Reference for the S2410, Version 2.4.1.0 197 ip http secure-server enable This command is used to enable the secure socket layer for secure HTTP . The no version of this command is used to disable the secure socket layer for secure HTTP .
198 Security Commands show ip http show ip http This command displays the HTTP settings for the switch. Synt ax show ip http Mode Privileged Exec The report fields are: HTTP Mode (Unsecure) — This field indica tes whether basic HTTP is enabled or disabled on the switch.
show storm-control SFTOS Command Reference for the S2410, Version 2.4.1.0 199 Broadcast S t orm Control Commands This section contains the following commands: • show storm-control • storm-control broadcast o n pa ge 200 • storm-control flowcontrol on p age 200 show storm-control This command displays switch configuration information.
200 Security Commands storm-control broadcast Related Commands storm-control broadcast This command enables broa dcast storm recovery mode . If the mode is enabled, broa dcast storm recovery with high and low thresholds is implemented. The threshold implementation fo llows a percentage pattern.
storm-control flowcontrol SFTOS Command Reference for the S2410, Version 2.4.1.0 201 The no version of this command disables 802.3x flow control for th e switch. Default disabled Mode Global Config Note: This command only applies to full-duplex mode port s.
202 Security Commands storm-control flowcontrol.
SFTOS Command Reference for the S2410, Version 2.4.1.0 203 These commands configure th e Dynamic Ho st Configuration Protocol (DHCP) Server parameters and address pools.
204 DHCP Server Commands bootfile bootfile The command specifies the name of the defau lt boot image for a DHCP client. The filename specifies the boot image file.
clear ip dhcp conflict SFTOS Command Reference for the S2410, Version 2.4.1.0 205 clear ip dhcp conflict The command is used to clear an address co nflict from the DHCP Server database. The server detects conflicts using a ping. DHCP server clear s all conflicts If the asterisk (*) character is used as the address parameter .
206 DHCP Server Commands default-router default-router This command specifies the default router list for a DHCP client. { address1 , addres s2 … address8 } are va lid IP addresses, each made up of fo ur decimal bytes ranging from 0 to 255. IP address 0.
hardware-add ress SFTOS Command Reference for the S2410, Version 2.4.1.0 207 hardware-address This command specifies the hardware address of a DHCP client. The hardware-address is the MAC address of the hard ware platform of the client consisting of 6 bytes in dotted hexadecimal format.
208 DHCP Server Commands ip dhcp bootp automatic ip dhcp bootp automatic This command enables the allocation of the ad dresses to the bootp client. The addresses are from the automatic address pool. The no version of this command disables the allocation of the addresses to the bootp client.
ip dhcp ping packets SFTOS Command Reference for the S2410, Version 2.4.1.0 209 ip dhcp ping packets This command is used to spec ify the number in a range from 2-10, of packets a DHCP server sends to a pool address as part of a ping operation.
210 DHCP Server Commands network network This command is used to conf igure the subnet number and mask for a DHCP address pool on the server . Network-number is a vali d IP addre ss, made up of four decimal bytes ranging from 0 to 255. IP address 0.0.
next-server SFTOS Command Reference for the S2410, Version 2.4.1.0 211 • h-node—Hybrid (recommend ed) The no version of this command re moves the NetBIOS node type. Synt ax netb ios-node-type type Default none Mode DHCP Pool Config next-server This command configures the next server in the boot process of a DHCP client.
212 DHCP Server Commands service dhcp no option code Default none Mode DHCP Pool Config service dhcp This command enables the DHCP server and relay agent features on the router . The no version of this command disables the DHCP server and relay agent features.
show ip dhcp global co nfiguration SFTOS Command Reference for the S2410, Version 2.4.1.0 213 show ip dhcp global configuration This command displays address bindings for th e specific IP address on the DHCP server . If no IP address is specified, the bindings corr esponding to all the addresses are displayed.
214 DHCP Server Commands show ip dhc p server statisti cs show ip dhcp server statistics This command displays DHCP server statistics. Synt ax sho w ip dhcp server statistics Mode Privileged Exec and User Exec Address Pool—The number of configured address pools in the DHCP server .
SFTOS Command Reference for the S2410, Version 2.4.1.0 215 This section provides a detailed explanation of the Simple Network T ime Protocol (SNTP) commands. The commands are comp rised of two functional groups: • Configuration Commands confi gure f eatures and options of the switch.
216 SNTP Commands sntp client mode sntp client mode This command enables the Simple Network T ime Protocol (SNT P) client, and optionally sets the mode to either broadcast or unicast. Synt ax sntp client m ode [ broadcast | unicast ] Use the no sntp client mode command to disable SNTP client mode.
sntp unicast client poll-interval SFTOS Command Reference for the S2410, Version 2.4.1.0 217 sntp unicast client poll-interval This command sets the poll inte rval for SNTP unicast clients in seconds as a power of two where poll-interval can be a value from 6 to 16.
218 SNTP Commands sntp server Default 1 retry Mode Global Config sntp server This command configures an SNTP server connection (with a maximum of th ree). Synt ax sntp s erver ipaddress [ priority [ version [ portid ]]] Use the no sntp server remove ipaddress command to delete the server from the list of SNTP servers.
show sntp client SFTOS Command Reference for the S2410, Version 2.4.1.0 219 Field Descriptions Last Update T ime—Time of last clock update Last Attempt T ime —Time of last transmit query (in unicast mode). Last Attempt S tatus—S tatus of the last SNTP requ est (in unicast mode) or unsolicited me ssage (in broadcast mode).
220 SNTP Commands show sntp server show sntp server This command is used to display SNTP server settings and configured servers. Synt ax sho w sntp server Mode Privileged Exec Example Figure 49 show s.
SFTOS Command Reference for the S2410, Version 2.4.1.0 221 VLAN-Stack commands, also called Double VLAN tagging , QinQ , and VLAN tunneling . W ith this feature, you can “stack” VLANs in to one tunnel and switch them through the network.
222 VLAN-Stack Commands mode dot1q-tunn el mode dot1q-tunnel This command is used to enable Double VL AN T unneling on the sp ecified interface. By default, Double VLAN T unneling is disabled. This command performs the same function as mode dvlan-tunn el .
show dot1q-tunne l SFTOS Command Reference for the S2410, Version 2.4.1.0 223 show dot1q-tunnel This command displays whether an interface is enabled for Double VLAN Tunnelin g, along with the system-.
224 VLAN-Stack Commands show dvlan-tunnel show dvlan-tunnel This command displays whether an interface is enabled for Double VLAN Tunnelin g, along with the system-configured etherT ype and detailed information about Double VLAN T unneling for the specified interface, or a list of interfaces and their tunneling status.
SFTOS Command Reference for the S2410, Version 2.4.1.0 225 This chapter provides a detailed explanation of the General Attribu te Registration Protocol (GARP) commands, including GVRP and GMRP commands. The commands are divided into two functional groups: • Show commands display switch settings, statistics, and other information.
226 GARP, GVRP, and GMRP Commands set garp timer leave This command has an effect only when GVRP is enabled. The time is from 10 to 100 (centiseconds).
set garp timer leaveall SFTOS Command Reference for the S2410, Version 2.4.1.0 227 set garp timer leaveall This command sets how frequently Leave All PDUs are generated per port. A Leave All PDU indicates that all registrations w ill be unregistered. Participants would need to rejoin in order to maintain registration.
228 GARP, GVRP, and GMRP Commands gvrp adminmode enable GARP VLAN Registration Pr otocol (GVRP) Commands This section provides a detailed ex planation of the GVRP commands: • gvrp adminm ode enable .
gvrp interfacemode enable all SFTOS Command Reference for the S2410, Version 2.4.1.0 229 gvrp interfacemode enable all This command enables GVRP (GARP VLAN Registration Protocol) for all ports. Synt ax se t gvrp interfac emode enable all Use no set gvrp interfacemode enable all to disable GVRP for all ports.
230 GARP, GVRP, and GMRP Commands show gvrp c onfiguration Example Figure 50 show gvrp configur ation Command Output Example Interface V alid unit, slot and port number separated by forward slashes.
gmrp adminmode SFTOS Command Reference for the S2410, Version 2.4.1.0 231 GARP Multicast Registration Pr otocol (GMRP) Commands This section provides details on GMRP comma nds.
232 GARP, GVRP, and GMRP Commands set gmrp adminmode Use no gmrp adminmod e enable to disable GARP Multicast Registration Protocol (GMRP) on the system. Mode Global Config Command History set gmrp adminmode Command History gmrp interfacemode enable all This command enables GARP Multicast Regist ration Protocol on all interfaces.
set gmrp interfacem ode SFTOS Command Reference for the S2410, Version 2.4.1.0 233 set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a selected interface.
234 GARP, GVRP, and GMRP Commands show mac-address- table gmrp Leave T imer—S pecifies the period of time to wait af ter receiving an unregister request for an attribu te before deleting the attribute. Current attributes are a VLAN or multic ast group.
SFTOS Command Reference for the S2410, Version 2.4.1.0 235 This chapter provides a detaile d explanation of the following IGMP Snoopin g c ommands: • igmp enable (interface) on page 236 • igmp ena.
236 IGMP Snooping Commands igmp enable (interface) igmp enable (interface) This command enables IGMP Snooping on a sel ected interfac e. If an interface that has IGMP Snooping enabled is en abled for routing or is enlisted as a member of a LAG (port channel), IGMP Snooping functionality will be disabled on that interface.
igmp fast-leave (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 237 igmp fast-leave (interface) This command enables or disables IGMP Snoo ping fast-leave admin mode on a selected interface.
238 IGMP Snooping Commands igmp interfacemode enab le all Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range- vlan 10-20)#; Interface VLAN. Command History igmp interfacemode enable all This command enables IGMP Snooping on all interfaces.
igmp mcrtexpiretime (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 239 Synt ax igmp maxresponse 1-3599 The variable must be less than the IGMP query interval time value. Th e range is 1 to 3599 seconds. The no igmp maxresponse command sets the IGMP Ma ximum Response time on the interface to the default value.
240 IGMP Snooping Commands igmp mrouter (interface) igmp mrouter (interface) This command configures the VLAN ID ( vlanId ) that has the multicast router mode enabled. Synt ax [ no ] igmp mrouter vlanId The no version of this command disables multicas t router mode for a particular VLAN ID ( vlanId ).
set igmp (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 241 Related Commands set igmp (interface) Command History Related Commands set igmp (system) Command History Related Command.
242 IGMP Snooping Commands set igmp groupmemb ership-interval ( interface) The variable must be greate r than the IGMPv3 maximum response time value. The range is 2 to 3600 seconds. The no igmp gr oupmembership-inte rval command sets the IGMP v3 group membership interval time glob ally to the default value.
set igmp maxresponse ( global) SFTOS Command Reference for the S2410, Version 2.4.1.0 243 Related Commands set igmp maxresponse (global) This command sets the IGMP maxi mum respon se time on the system .
244 IGMP Snooping Commands set igmp mcrte xpiretime ( global) set igmp mcrtexpiretime (global) This command sets the Multicast router present expiration time for all routers.
set igmp mrouter SFTOS Command Reference for the S2410, Version 2.4.1.0 245 set igmp mrouter Command History Related Commands show igmpsnooping This command displays IGMP Sn ooping inform ation. Configured info rmation is displayed whether or not IGMP Snooping is en abled.
246 IGMP Snooping Commands show igmpsnooping fast-leave Max Response T i me—Thi s displays the amount of time the switch will wait after sending a query on an interface because it did not receive a report for a pa rticular group on that interfa ce. T his value may be configured.
show mac-address-tabl e igmpsnooping SFTOS Command Reference for the S2410, Version 2.4.1.0 247 show mac-address-table igmpsnooping This command displays the IGMP Snooping en tries in the Multicast Forwarding Database (MFDB) table.
248 IGMP Snooping Commands show mac-address- table igmpsnooping.
SFTOS Command Reference for the S2410, Version 2.4.1.0 249 This section provides syntax details of the Link Aggreg ation Group (LAG) commands (802.3ad), also called port channel, port tr unking, and other terms.
250 LAG/Port Channel Commands deleteport (interface config) In Ethernet Range mode (Interface Range mode for the selected range of physical ports), this command adds the selected ports to the designated LAG . Synt ax addport unit/slot/po rt Specify the LAG ID in its logical slot/port format (e.
deleteport (g lobal config) SFTOS Command Reference for the S2410, Version 2.4.1.0 251 deleteport (global config) This command deletes a ll configured ports from the LAG (port channel).
252 LAG/Port Channel Commands port-channel enable all (g loba l) port-channel enable all (global) This command enables the administrativ e mode for all LAGs (port channels).
port-channel name SFTOS Command Reference for the S2410, Version 2.4.1.0 253 Parameters Default enabled Mode Global Config port-channel name This command renames a LAG (port channel) or all LAGs.
254 LAG/Port Channel Commands port lacpmo de Mode Global Config port lacpmode This command enables Link Aggregation Co ntrol Protocol (LACP) on a p ort.
port lacptimeout (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 255 The no version of this command removes the Link Aggregation Co ntro l Protocol (LACP) timeout on all ports.
256 LAG/Port Channel Commands show port-channel Synt ax sho w port-channel brief Mode Privileged Exec and User Exec Example Figure 51 Example of show port-chann el br ief Command Output S tatic Capability—This field displays whether or not the device has static capability enabled.
show port-channel summary SFTOS Command Reference for the S2410, Version 2.4.1.0 257 Admin Mode—May be enabled or disabled . Th e factory default is enabled. Link T rap Mode—This object determines whether or not to send a trap when link status changes.
258 LAG/Port Channel Commands shutdown shutdown This command disables the selected LAG (port channel). The no version of this command enables the selected LAG .
SFTOS Command Reference for the S2410, Version 2.4.1.0 259 This chapter provides a detailed explanation of the Spanning T ree commands. The commands are divided into two functional g roups: • Show commands display switch settings, statistics, and other information.
260 Spanning Tree (STP) Co mmands show spann ing-tree • spanning-tree max-age on page 269 • spanning-tree max-hops on page 269 • spanning-tree mst on page 269 • no spanning-tree mst on page 27.
show spanning-tree interface SFTOS Command Reference for the S2410, Version 2.4.1.0 261 Bridge Hold T ime—Mini mum time between transmission of Configuration Bridge Protoc ol Data Units (BPDUs) CST Regional Root—Bridge Identifier of the common sp anning tree regional root.
262 Spanning Tree (STP) Co mmands show spanning-tree mst detailed RST BPDUs Received—Rapid S panning T ree Protoc ol Bridge Protocol Data Units received. MSTP BPDUs T ran smitted—Multiple S panning T r ee Protocol Bridge Protocol Data Units sent MSTP BPDUs Received—Mu ltiple S panning Tree Pr otocol Bridge Protocol Data Units received.
show spann ing-tree m st port deta iled SFTOS Command Reference for the S2410, Version 2.4.1.0 263 Mode Privileged Exec and User Exec MST Instance ID—The ID of the MST instance. Port Identifier—The port identifier for t he specified port within the spanning tree.
264 Spanning Tree (STP) Co mmands show spann ing-tree mst port su mmary show spanning-tree mst port summary This command displays the settings of one or a ll ports within the specif ied multiple spanning tree instance. The parameter mstid indicates a particular MST instance.
show spanning-tre e summary SFTOS Command Reference for the S2410, Version 2.4.1.0 265 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command.
266 Spanning Tree (STP) Co mmands spanning-t ree bpdum igr a tion c h e ck Default disabled Mode Global Config spanning-tree bpdumigrationcheck This command enables BPDU migration check on a given interface, by using unit/slot/port , or all interfaces, by using the all keyword.
spanning-t ree edgep or t SFTOS Command Reference for the S2410, Version 2.4.1.0 267 The no version of this command set s the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using to the default value, in other words, 0.
268 Spanning Tree (STP) Co mmands spanning-t re e fo rwa rd-time Synt ax [ no ] spanning-tree forceversio n 802.1d | 802.1w | 802. 1s Default 802.1s Mode Global Config spanning-tree forward-time This command sets the Bridge Forward Delay parameter to a new value for the common and internal spanning tree.
spanning-tree max- age SFTOS Command Reference for the S2410, Version 2.4.1.0 269 spanning-tree max-age This command sets the Bridge Max Age para meter to a new va lue for the common and internal spanning tree.
270 Spanning Tree (STP) Co mmands no spanning-tre e mst If the “cost” token is specified, this command sets the path cost for this port within a multiple spanning tree instance or the co mmon and internal spanning tree instance, depending on the mstid parameter .
spanning-tree mst instance SFTOS Command Reference for the S2410, Version 2.4.1.0 271 If the “port-priority” token is specified, this co mmand sets the priority for this port within a specific mul.
272 Spanning Tree (STP) Co mmands spanning-t ree mst vlan If 0 (defined as the default CIST ID) is passed as the mstid , then this co mmand sets the Bridge Priority parameter for th e common and internal spanning tree to the default value, in other words, 32768.
spanning-tree port mode en able all SFTOS Command Reference for the S2410, Version 2.4.1.0 273 Synt ax [ no ] spanning-tree port mo de enable Default disabled Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#.
274 Spanning Tree (STP) Co mmands spanning-tree port mode e nable all.
SFTOS Command Reference for the S2410, Version 2.4.1.0 275 This chapter provides a deta iled explanation of available Quality of Service (QoS) commands. The chapter is divide d into the following sections: • Class of Service (CoS) Commands • Differentiated Services (Dif fS erv) Com ma nds on page 285 • Provisioning (IEEE 802.
276 Quality of Service (QoS) Commands classofservice dot1p-mapping By default, SFTOS 2.4.1 co nfig ures all egress queues in weighted round robin mode with equal minimum bandwidths. This means that no egress queue will be given priority over any other .
classofservice trust SFTOS Command Reference for the S2410, Version 2.4.1.0 277 Command History classofservice trust This command sets the class of service trust m ode of an interface to Dot1p (802.1p). (The ip-precedence and ip-dscp options, for IP Precedence and IP DSCP packet markings, are not available in SFTOS 2.
278 Quality of Service (QoS) Commands cos-queue min-bandwidth The no cos-queue max- bandwidth command restores the de fault for each queue's maximum bandwidth value. Modes Global Config Command History cos-queue min-bandwidth This command specifies the minimum transmi ssion bandwidth guarantee for each interface queue.
cos-queue strict SFTOS Command Reference for the S2410, Version 2.4.1.0 279 Usage Specific WRED parameters are configured using the random-detect queue-parms and random-detect exponential-weighting-constant commands.
280 Quality of Service (QoS) Commands random-dete ct queue-parms random-detect queue-parms This command sets the WRED parameters for each drop precede nce level supported by a queue. The actual number of queue drop prece dence le vels is platfo rm-specific (S2410 has four).
show classofservi ce dot1p-mapping SFTOS Command Reference for the S2410, Version 2.4.1.0 281 show classofservice dot1p-mapping This command displays the curre nt Dot1p (802.
282 Quality of Service (QoS) Commands show interfaces cos-qu eu e Report Fields Non-IP T raffic: Class—The traffic class used for non-IP traffic. This is only displayed when the COS trust mode is set to either 'trust ip-dscp' or 'trust ip-precedence'.
show interfaces tail-drop-threshold SFTOS Command Reference for the S2410, Version 2.4.1.0 283 Synt ax show interfaces random-detect slot/port The slot/port parameter is optional. If specified , the class-of-service WRED configuration of the interface is displayed.
284 Quality of Service (QoS) Commands tail-drop queu e-parms Mode Privileged Exec Report Fields Interface — This displays the slot/port of the interface. If displ aying the global configuration, this output line is replaced w ith a Global Confi g indication.
traffic-shape SFTOS Command Reference for the S2410, Version 2.4.1.0 285 traf fic-shape This command specifies the maximum transmi ssion bandwidth limit for the interface as a whole. Also known as rate shaping, this has th e ef fect of smoothing temporary traffic bursts over time so that the transmitte d traf fic rate is bounded.
286 Quality of Service (QoS) Commands show classofservice dot1pmapping show classofservice dot1pmapping This command displays the current 802.1p prior ity mapping to internal traffic classes for all or specific interfaces.
SFTOS Command Reference for the S2410, Version 2.4.1.0 287 This chapter covers th e following commands: • {deny|permit} on page 288 • mac access-list extended on page 290 • mac access-list exten.
288 ACL Comma nd s {deny|permit} Implement ation Notes • If the CPU MA table (This MAC address ta ble is separate from the software MAC address table) is filled so that the ACL logic cannot create another MA table entry , all frames from that source address will be dropped.
{deny|permit} SFTOS Command Reference for the S2410, Version 2.4.1.0 289 Usage A rule may either deny or permit traffic acco rding to the specified classification fields. At a minimum, the source and destination MAC value must be specified, each of which may be substituted using the keyword any to indicate a match on a ny value in that field.
290 ACL Comma nd s mac access-list extended The assign-queue and redirec t parameters are only valid for a permit rule. Mode Mac Access List Config Related Commands mac access-list extended This comma.
mac access- list extended r ename SFTOS Command Reference for the S2410, Version 2.4.1.0 291 mac access-list extended rename This comman d changes the name of an existing MAC ACL.
292 ACL Comma nd s mac access-group mac access-group This command attaches a specific MAC Ac cess Control List (ACL) identified by name to an interface in the ingress directio n. This command, when used in Interface Config mode, only affects a single interface, whereas the Global Config mode setting is applied to all interfaces.
show mac acce ss-list s SFTOS Command Reference for the S2410, Version 2.4.1.0 293 When the comman d is used with the nam e option, the report displays details for the identified MAC access list, in the following fields: Field Descriptions Rule Number—The ordered rule num ber identifier defi ned within the ACL.
294 ACL Comma nd s show mac access-lists.
SFTOS Command Reference for the S2410, Version 2.4.1.0 295 Index Symbols {deny|permit} 288 Numerics 10/100 Ethernet por t 3, 79 802.3ad 28 802.3x flow control 200 A Access Control Lists (ACLs) 287 acc.
296 Index config vlan p orts ingressfilte r 134–135 configuration gu id e 23 configuration reset 138 Configuration Scripting 146 configure 106 configure comma nd 47 configuring a range 108 Contact a.
SFTOS Command Reference for the S2410, Version 2.4.1.0 297 HTML 51 HTTP 51 I IEEE 802.1Q 133–134 IfIndex 79 igmp enable 236 igmp enable (interface) 236 igmp fast-leave (inter face) 237 igmp groupmem.
298 Index deleting ports from 251 enabling or disablin g 251–252 link traps 252 logical ID 256 name 253 summary information 256 user-assigned name 256 lease 209 leave time 226–227 Line Config mode 47, 49 lineconfig command 47 link aggregate group (LAG) 249 Link Aggregation (IEEE 802.
SFTOS Command Reference for the S2410, Version 2.4.1.0 299 setting user 34, 159 user 159 patents 23 PDUs 225, 227 ping 144 p-node (pe er-to-peer) 210 Policy Clas s Mode 49 policy map command 49 Policy.
300 Index script show 148 script validate 148 serial baudrate 91 serial timeout 92 service dhcp 212 service port 79 serviceport commands 3 serviceport ip 37, 63 serviceport pr ot oc ol 64 session-limi.
SFTOS Command Reference for the S2410, Version 2.4.1.0 301 show port-channel brief 255 show port-channel summary 257 show port-s ecurity 166 show port-s ecurity dyna mic 167 show port-s ecurity static.
302 Index resetting 144 statistics, related 201 commands 66, 68, 70, 75–77 switch navigation icon in Web UI 53 syntax conventions 39 syslog servers 78, 80 system information and statistics command s.
SFTOS Command Reference for the S2410, Version 2.4.1.0 303 VLAN Range mode 47 vlan tagging 137 vlan tagging co mmand 4 VLAN tunneling 221 vlan untagging 137 vlan untagging com m a nd 4 VLANs adding 10.
304 Index.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Force10 Networks S2410s è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Force10 Networks S2410s - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Force10 Networks S2410s imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Force10 Networks S2410s ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Force10 Networks S2410s, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Force10 Networks S2410s.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Force10 Networks S2410s. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Force10 Networks S2410s insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
