C H A P T E R  8

Utility Commands

This chapter describes the utility commands available in the FASTPATH® CLI.

The commands in this chapter are presented in four groups:

This chapter includes the following sections:


Dual Image Commands

FASTPATH software supports a dual image feature that allows the switch to have two FASTPATH images in the permanent storage. You can specify which image is the active image to be loaded in subsequent reboots. This feature allows reduced down-time when you upgrade or downgrade the FASTPATH software.

delete

This command deletes the supplied image file from the permanent storage. The image to be deleted must be a backup image. If this image is the active image, or if this image is activated, error is displayed.


Format

delete {image1 | image2}

Mode

Privileged EXEC


boot system

This command activates the specified image. It will be the active-image for subsequent reboots and will be to be loaded by the boot loader. The current active-image is marked as the backup-image, for subsequent reboots. If the specified image doesn’t exist on the system, this command returns error.


Format

boot system <image-file-name>

Mode

Privileged EXEC


show bootvar

This command displays the version information and the activation status for the current active and backup images. The command also displays any text description associated with an image. This command displays the switch activation status.


Format

show bootvar

Mode

Privileged EXEC


filedescr

This command associates a given text description with an image. Any existing description will be replaced.


Format

filedescr {image1 | image2} <text-description>

Mode

Privileged EXEC


update bootcode

This command updates the bootcode (boot loader) on the switch. The bootcode is read from the active-image for subsequent reboots.


Format

update bootcode

Mode

Privileged EXEC



System Information and Statistics Commands

This section describes the commands you use to view information about system features, components, and configurations.

show arp switch

This command displays the contents of the IP stack’s Address Resolution Protocol (ARP) table. The IP stack only learns ARP entries associated with the management interfaces - network or service ports. ARP entries associated with routing interfaces are not listed.


Format

show arp switch

Mode

Privileged EXEC



TABLE 8-1

Entry

Definition

IP Address

IP address of the management interface or another device on the management network.

MAC Address

Hardware MAC address of that device.

Interface

For a service port the output is Management. For a network port, the output is the slot/port of the physical interface.


show eventlog

This command displays the event log, which contains error messages from the system. The event log is not cleared on a system reset.


Format

show eventlog

Mode

Privileged EXEC



TABLE 8-2 Entry Definitions for show eventlog

Entry

Definition

File

The file in which the event originated.

Line

The line number of the event

Task Id

The task ID of the event.

Code

The event code.

Time

The time this event occurred.




Note - Event log information is retained across a switch reset.


show hardware

This command displays inventory information for the switch.



Note - The show version command and the show hardware command display the same information. In future releases of the software, the show hardware command will not be available. For a description of the command output, see the show versioncommand.



Format

show hardware

Mode

Privileged EXEC


show version

This command displays inventory information for the switch.



Note - The show version command will replace the show hardware command in future releases of the software.



Format

show version

Mode

Privileged EXEC



TABLE 8-3 Entry Definitions for show version

Entry

Definition

Switch Description

Text used to identify the product name of this switch.

Machine Type

Specifies the machine model as defined by the Vital Product Data.

Machine Model

Specifies the machine model as defined by the Vital Product Data.

Serial Number

The unique box serial number for this switch.

FRU Number

The field replaceable unit number.

Part Number

Manufacturing part number.

Maintenance Level

Indicates hardware changes that are significant to software.

Manufacturer

Manufacturer descriptor field.

Burned in MAC Address

Universally assigned network address.

Software Version

The release.version.revision number of the code currently running on the switch.

Operating System

The operating system currently running on the switch.

Network Processing Device

The type of the processor microcode.

Additional Packages

This displays the additional packages incorporated into this system.


show interface

This command displays a summary of statistics for a specific interface or a count of all CPU traffic based upon the argument.


Format

show interface {<slot/port> | switchport}

Mode

Privileged EXEC


The display parameters, when the argument is <slot/port>, is as follows.


TABLE 8-4 Entry Definitions for show interface

Entry

Definition

Packets Received Without Error

The total number of packets (including broadcast packets and multicast packets) received by the processor.

Packets Received With Error

The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.

Broadcast Packets Received

The total number of packets received that were directed to the broadcast address. Note that this does not include multicast packets.

Packets Transmitted Without Error

The total number of packets transmitted out of the interface.

Transmit Packets Errors

The number of outbound packets that could not be transmitted because of errors.

Collisions Frames

The best estimate of the total number of collisions on this Ethernet segment.

Time Since Counters Last Cleared

The elapsed time, in days, hours, minutes, and seconds since the statistics for this port were last cleared.


The display parameters, when the argument is “switchport” is as follows.


TABLE 8-5 Entry Definitions for show interface switchport

Entry

Definition

Broadcast Packets Received

The total number of packets received that were directed to the broadcast address. Note that this does not include multicast packets.

Packets Received With Error

The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.

Packets Transmitted Without Error

The total number of packets transmitted out of the interface.

Broadcast Packets Transmitted

The total number of packets that higher-level protocols requested to be transmitted to the Broadcast address, including those that were discarded or not sent.

Transmit Packet Errors

The number of outbound packets that could not be transmitted because of errors.

Address Entries Currently In Use

The total number of Forwarding Database Address Table entries now active on the switch, including learned and static entries.

VLAN Entries Currently In Use

The number of VLAN entries presently occupying the VLAN table.

Time Since Counters Last Cleared

The elapsed time, in days, hours, minutes, and seconds since the statistics for this switch were last cleared.


show interface ethernet

This command displays detailed statistics for a specific interface or for all CPU traffic based upon the argument.


Format

show interface ethernet {<slot/port> | switchport}

Mode

Privileged EXEC


When you specify a value for <slot/port>, the command displays the following information, separated by:

 


TABLE 8-7 Entry Definitions for show interface ethernet Packets Received Successfully

Entry

Definition

Total Packets Received Without Error

The total number of packets received that were without errors.

Unicast Packets Received

The number of subnetwork-unicast packets delivered to a higher-layer protocol.

Multicast Packets Received

The total number of good packets received that were directed to a multicast address. Note that this number does not include packets directed to the broadcast address.

Broadcast Packets Received

The total number of good packets received that were directed to the broadcast address. Note that this does not include multicast packets.


 


TABLE 8-8 Entry Definitions for show interface ethernet Packets Received With MAC Errors

Entry

Definition

Total

The total number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.

Jabbers Received

The total number of packets received that were longer than 1518 octets (excluding framing bits, but including FCS octets), and had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error). Note that this definition of jabber is different than the definition in IEEE-802.3 section 8.2.1.5 (10BASE5) and section 10.3.1.4 (10BASE2). These documents define jabber as the condition where any packet exceeds 20 ms. The allowed range to detect jabber is between 20 ms and 150 ms.

Fragments/Undersize Received

The total number of packets received that were less than 64 octets in length (excluding framing bits but including FCS octets).

Alignment Errors

The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with a non-integral number of octets.

Rx FCS Errors

The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with an integral number of octets

Overruns

The total number of frames discarded as this port was overloaded with incoming packets, and could not keep up with the inflow.


 


TABLE 8-9 Entry Definitions for show interface ethernet Received Packets Not Forwarded

Entry

Definition

Total

A count of valid frames received which were discarded (in other words, filtered) by the forwarding process.

Local Traffic Frames

The total number of frames dropped in the forwarding process because the destination address was located off of this port.

802.3x Pause Frames Received

A count of MAC Control frames received on this interface with an opcode indicating the PAUSE operation. This counter does not increment when the interface is operating in half-duplex mode.

Unacceptable Frame Type

The number of frames discarded from this port due to being an unacceptable frame type.

Multicast Tree Viable Discards

The number of frames discarded when a lookup in the multicast tree for a VLAN occurs while that tree is being modified.

Reserved Address Discards

The number of frames discarded that are destined to an IEEE 802.1 reserved address and are not supported by the system.

Broadcast Storm Recovery

The number of frames discarded that are destined for FF:FF:FF:FF:FF:FF when Broadcast Storm Recovery is enabled.

CFI Discards

The number of frames discarded that have CFI bit set and the addresses in RIF are in non-canonical format.

Upstream Threshold

The number of frames discarded due to lack of cell descriptors available for that packet's priority level.


 


TABLE 8-10 Entry Definitions for show interface ethernet Packets Transmitted Octets

Entry

Definition

Total Bytes

The total number of octets of data (including those in bad packets) received on the network (excluding framing bits but including FCS octets). This object can be used as a reasonable estimate of Ethernet utilization. If greater precision is desired, the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval. -----

Packets Transmitted 64 Octets

The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).

Packets Transmitted 65-127 Octets

The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets).

Packets Transmitted 128-255 Octets

The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).

Packets Transmitted 256-511 Octets

The total number of packets (including bad packets) received that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).

Packets Transmitted 512-1023 Octets

The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).

Packets Transmitted 1024-1518 Octets

The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).

Max Frame Size

The maximum size of the Info (non-MAC) field that this port will receive or transmit.


 


TABLE 8-11 Entry Definitions for show interface ethernet Packets Transmitted Successfully

Entry

Definition

Total

The number of frames that have been transmitted by this port to its segment.

Unicast Packets Transmitted

The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent.

Multicast Packets Transmitted

The total number of packets that higher-level protocols requested be transmitted to a Multicast address, including those that were discarded or not sent.

Broadcast Packets Transmitted

The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent.


 


TABLE 8-12 Entry Definitions for show interface ethernet Transmit Errors

Entry

Definition

Total Errors

The sum of Single, Multiple, and Excessive Collisions.

Tx FCS Errors

The total number of packets transmitted that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with an integral number of octets

Oversized

The total number of frames that exceeded the max permitted frame size. This counter has a max increment rate of 815 counts per sec. at 10 Mb/s.

Underrun Errors

The total number of frames discarded because the transmit FIFO buffer became empty during frame transmission.


 


TABLE 8-13 Entry Definitions for show interface ethernet Transmit Discards

Entry

Definition

Total Discards

The sum of single collision frames discarded, multiple collision frames discarded, and excessive frames discarded.

Single Collision Frames

A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by exactly one collision.

Multiple Collision Frames

A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision.

Excessive Collisions

A count of frames for which transmission on a particular interface fails due to excessive collisions.

Port Membership Discards

The number of frames discarded on egress for this port due to egress filtering being enabled.


 


TABLE 8-14 Entry Definitions for show interface ethernet Protocol Statistics

Entry

Definition

802.3x Pause Frames Transmitted

A count of MAC Control frames transmitted on this interface with an opcode indicating the PAUSE operation. This counter does not increment when the interface is operating in half-duplex mode.

GVRP PDUs Received

The count of GVRP PDUs received in the GARP layer.

GVRP PDUs Transmitted

The count of GVRP PDUs transmitted from the GARP layer.

GVRP Failed Registrations

The number of times attempted GVRP registrations could not be completed.

GMRP PDUs Received

The count of GMRP PDU's received in the GARP layer.

GMRP PDUs Transmitted

The count of GMRP PDU's transmitted from the GARP layer.

GMRP Failed Registrations

The number of times attempted GMRP registrations could not be completed.

STP BPDUs Transmitted

Spanning Tree Protocol Bridge Protocol Data Units sent

STP BPDUs Received

Spanning Tree Protocol Bridge Protocol Data Units received

RST BPDUs Transmitted

Rapid Spanning Tree Protocol Bridge Protocol Data Units sent

RSTP BPDUs Received

Rapid Spanning Tree Protocol Bridge Protocol Data Units received

MSTP BPDUs Transmitted

Multiple Spanning Tree Protocol Bridge Protocol Data Units sent

MSTP BPDUs Received

Multiple Spanning Tree Protocol Bridge Protocol Data Units received


 


TABLE 8-15 Entry Definitions for show interface ethernet Dotlx Statistics

Entry

Definition

EAPOL Frames Received

The number of valid EAPOL frames of any type that have been received by this authenticator.

EAPOL Frames Transmitted

The number of EAPOL frames of any type that have been transmitted by this authenticator.

Time Since Counters Last Cleared

The elapsed time, in days, hours, minutes, and seconds since the statistics for this port were last cleared.


When you use the switchport keyword, the following information appears.


TABLE 8-16 Entry Definitions for show interface ethernet switchport

Entry

Definition

Octets Received

The total number of octets of data received by the processor (excluding framing bits but including FCS octets).

Total Packets Received Without Error

The total number of packets (including broadcast packets and multicast packets) received by the processor.

Unicast Packets Received

The number of subnetwork-unicast packets delivered to a higher-layer protocol.

Multicast Packets Received

The total number of packets received that were directed to a multicast address. Note that this number does not include packets directed to the broadcast address.

Broadcast Packets Received

The total number of packets received that were directed to the broadcast address. Note that this does not include multicast packets.

Receive Packets Discarded

The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.

Octets Transmitted

The total number of octets transmitted out of the interface, including framing characters.

Packets Transmitted without Errors

The total number of packets transmitted out of the interface.

Unicast Packets Transmitted

The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent.

Multicast Packets Transmitted

The total number of packets that higher-level protocols requested be transmitted to a Multicast address, including those that were discarded or not sent.

Broadcast Packets Transmitted

The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent.

Transmit Packets Discarded

The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.

Most Address Entries Ever Used

The highest number of Forwarding Database Address Table entries that have been learned by this switch since the most recent reboot.

Address Entries in Use

The number of Learned and static entries in the Forwarding Database Address Table for this switch.

Maximum VLAN Entries

The maximum number of Virtual LANs (VLANs) allowed on this switch.

Most VLAN Entries Ever Used

The largest number of VLANs that have been active on this switch since the last reboot.

Static VLAN Entries

The number of presently active VLAN entries on this switch that have been created statically.

Dynamic VLAN Entries

The number of presently active VLAN entries on this switch that have been created by GVRP registration.

VLAN Deletes

The number of VLANs on this switch that have been created and then deleted since the last reboot.

Time Since Counters Last Cleared

The elapsed time, in days, hours, minutes, and seconds, since the statistics for this switch were last cleared.


show mac-addr-table

This command displays the forwarding database entries. If the command is entered with no parameter, the entire table is displayed. This is the same as entering the optional all parameter. Alternatively, the administrator can enter a MAC Address to display the table entry for the requested MAC address and all entries following the requested MAC address.


Format

show mac-addr-table [<macaddr> | all]

Mode

Privileged EXEC



TABLE 8-17 Entry Definitions for show mac-addr-table

Entry

Definition

Mac Address

A unicast MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes.

Interface

The port which this address was learned.

Interface Index

This object indicates the ifIndex of the interface table entry associated with this port.

Status

The status of this entry. The meanings of the values are:

Static

The value of the corresponding instance was added by the system or a user when a static MAC filter was defined. It cannot be relearned.

Learned

The value of the corresponding instance was learned by observing the source MAC addresses of incoming traffic, and is currently in use.

Management

The value of the corresponding instance (system MAC address) is also the value of an existing instance of dot1dStaticAddress. It is identified with interface 0/1. and is currently used when enabling VLANs for routing.

Self

The value of the corresponding instance is the address of one of the switch’s physical interfaces (the system’s own MAC address).GMRP Learned The value of the corresponding was learned via GMRP and applies to Multicast.

Other

The value of the corresponding instance does not fall into one of the other categories.


show running-config

Use this command to display or capture the current setting of different protocol packages supported on the switch. This command displays or captures commands with settings and configurations that differ from the default value. To display or capture the commands with settings and configurations that are equal to the default value, include the [all] option.



Note - Show running-config does not display the User Password, even if you set one different from the default.


The output is displayed in script format, which can be used to configure another switch with the same configuration. If the optional <scriptname> is provided with a file name extension of “.scr”, the output is redirected to a script file.



Note - If you issue the show running-config command from a serial connection, access to the switch through remote connections (such as Telnet) is suspended while the output is being generated and displayed.



Format

show running-config [all | <scriptname>]

Mode

Privileged EXEC


show sysinfo

This command displays switch information.


Format

show sysinfo

Mode

Privileged EXEC



TABLE 8-18 Entry Definitions for show sysinfo

Entry

Definition

Switch Description

Text used to identify this switch.

System Name

Name used to identify the switch.The factory default is blank. To configure the system name, see snmp-server.

System Location

Text used to identify the location of the switch. The factory default is blank. To configure the system location, see snmp-server.

System Contact

Text used to identify a contact person for this switch. The factory default is blank. To configure the system location, see snmp-server.

System ObjectID

The base object ID for the switch’s enterprise MIB.

System Up Time

The time in days, hours and minutes since the last switch reboot.

MIBs Supported

A list of MIBs supported by this agent.


show tech-support

Use the show tech-support command to display system and configuration information when you contact technical support. The output of the show tech-support command combines the output of the following commands:


Logging Commands

This section describes the commands you use to configure system logging, and to view logs and the logging settings.

logging buffered

This command enables logging to an in-memory log that keeps up to 128 logs.


Default

disabled; critical when enabled

Format

logging buffered

Mode

Global Config


no logging buffered

This command disables logging to in-memory log.


Format

no logging buffered

Mode

Global Config


logging buffered wrap

This command enables wrapping of in-memory logging when the log file reaches full capacity. Otherwise when the log file reaches full capacity, logging stops.


Default

enabled

Format

logging buffered wrap

Mode

Privileged EXEC


no logging buffered wrap

This command disables wrapping of in-memory logging and configures logging to stop when the log file capacity is full.


Format

no logging buffered wrap

Mode

Privileged EXEC


logging console

This command enables logging to the console. You can specify the <severitylevel> value as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), info (6), or debug (7).


Default

disabled; critical when enabled

Format

logging console [severitylevel]

Mode

Global Config


no logging console

This command disables logging to the console.


Format

no logging console

Mode

Global Config


logging host

This command enables logging to a host. You can configure up to eight hosts. The <ipaddr> is the IP address of the logging host. The <port> value is a port number from 1 to 65535. You can specify the <severitylevel> value as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), info (6), or debug (7).


Default

port--514
level--critical (2)

Format

logging host <ipaddr> [<port>][<severitylevel>]

Mode

Global Config


logging host remove

This command disables logging to host. See show logging hosts for a list of host indexes.


Format

logging host remove <hostindex>

Mode

Global Config


logging port

This command sets the local port number of the LOG client for logging messages. The <portid> can be in the range from 1 to 65535.


Default

514

Format

logging port <portid>

Mode

Global Config


no logging port

This command resets the local logging port to the default.


Format

no logging port

Mode

Global Config


logging syslog

This command enables syslog logging. The <portid> parameter is an integer with a range of 1-65535.


Default

disabled

Format

logging syslog [port <portid>]

Mode

Global Config


no logging syslog

This command disables syslog logging.


Format

no logging syslog

Mode

Global Config


show logging

This command displays logging configuration information.


Format

show logging

Mode

Privileged EXEC



TABLE 8-19 Entry Definitions for show logging

Entry

Definition

Logging Client Local Port

Port on the collector/relay to which syslog messages are sent.

CLI Command Logging

Shows whether CLI Command logging is enabled.

Console Logging

Shows whether console logging is enabled.

Console Logging Severity Filter

The minimum severity to log to the console log. Messages with an equal or lower numerical severity are logged.

Buffered Logging

Shows whether buffered logging is enabled.

Syslog Logging

Shows whether syslog logging is enabled.

Log Messages Received

Number of messages received by the log process. This includes messages that are dropped or ignored.

Log Messages Dropped

Number of messages that could not be processed due to error or lack of resources.

Log Messages Relayed

Number of messages sent to the collector/relay.


show logging buffered

This command displays buffered logging (system startup and system operation logs).


Format

show logging buffered

Mode

Privileged EXEC



TABLE 8-20 Entry Definitions for show logging buffered

Entry

Definition

Buffered (In-Memory) Logging

Shows whether the In-Memory log is enabled or disabled.

Buffered Logging Wrapping Behavior

The behavior of the In Memory log when faced with a log full situation.

Buffered Log Count

The count of valid entries in the buffered log.


show logging hosts

This command displays all configured logging hosts.


Format

show logging hosts

Mode

Privileged EXEC



TABLE 8-21 Entry Definitions for show logging hosts

Entry

Definition

Host Index

(Used for deleting hosts)

IP Address

IP address of the logging host.

Severity Level

The minimum severity to log to the specified address. The possible values are emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), info (6), or debug (7).

Port

Displays the server port number, which is the port on the local host from which syslog messages are sent.

Host Status

The state of logging to configured syslog hosts. If the status is disable, no logging occurs.


show logging traplogs

This command displays SNMP trap events and statistics.


Format

show logging traplogs

Mode

Privileged EXEC



TABLE 8-22 Entry Definitions for show logging traplogs

Entry

Definition

Number of Traps Since Last Reset

Shows the number of traps since the last boot.

Trap Log Capacity

Shows the number of traps the system can retain.

Number of Traps Since Log Last Viewed

Shows the number of new traps since the command was last executed.

Log

Shows the log number.

System Time Up

Shows how long the system had been running at the time the trap was sent.

Trap

Shows the text of the trap message.



System Utility and Clear Commands

This section describes the commands you use to help troubleshoot connectivity issues and to restore various configurations to their factory defaults.

traceroute

Use the traceroute command to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. The <ipaddr> value should be a valid IP address. The [<port>] value should be a valid decimal integer in the range of 0 (zero) to 65535. The optional port parameter is the UDP port used as the destination of packets sent as part of the traceroute. This port should be an unused port on the destination system. The default value is 33434.


Format

traceroute <ipaddr> [<port>]

Mode

Privileged EXEC


clear config

This command resets the configuration to the factory defaults without powering off the switch. When you issue this command, a prompt appears to confirm that the reset should proceed. When you enter y, you automatically reset the switch.


Format

clear config

Mode

Privileged EXEC


clear counters

This command clears the statistics for a specified <slot/port>, for all the ports, or for the entire switch based upon the argument.


Format

clear counters {<slot/port> | all}

Mode

Privileged EXEC


clear igmpsnooping

This command clears the tables managed by the IGMP Snooping function and attempts to delete these entries from the Multicast Forwarding Database.


Format

clear igmpsnooping

Mode

Privileged EXEC


clear pass

This command resets all user passwords to the factory defaults without powering off the switch. You are prompted to confirm that the password reset should proceed.


Format

clear pass

Mode

Privileged EXEC


clear port-channel

This command clears all port-channels (LAGs).


Format

clear port-channel

Mode

Privileged EXEC


clear traplog

This command clears the trap log.


Format

clear traplog

Mode

Privileged EXEC


clear vlan

This command resets VLAN configuration parameters to the factory defaults.


Format

clear vlan

Mode

Privileged EXEC


enable passwd

This command prompts you to change the Privileged EXEC password. Passwords are a maximum of eight alphanumeric characters. The password is case sensitive.


Format

enable passwd

Mode

User EXEC


logout

This command closes the current telnet connection or resets the current serial connection.



Note - Save configuration changes before logging out.



Format

logout

Modes

Privileged EXEC
User EXEC


ping

This command checks if another computer is on the network and listens for connections. To use this command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP. You can ping the switch from any IP workstation the switch is connected to through the default VLAN (VLAN 1), as long as there is a physical path between the switch and the workstation. The terminal interface sends three pings to the target station.


Format

ping <ipaddr>

Modes

Privileged EXEC
User EXEC


quit

This command closes the current telnet connection or resets the current serial connection. The system asks you whether to save configuration changes before quitting.


Format

quit

Modes

Privileged EXEC
User EXEC


reload

This command resets the switch without powering it off. Reset means that all network connections are terminated and the boot code executes. The switch uses the stored configuration to initialize the switch. You are prompted to confirm that the reset should proceed. The LEDs on the switch indicate a successful reset.


Format

reload

Mode

Privileged EXEC


copy

The copy command uploads and downloads files to and from the switch. You can also use the copy command to manage the dual images (image1 and image2) on the file system. Upload and download files from a server by using TFTP or Xmodem. Replace the <source> and <destination> parameters with the options in Copy Parameters. For the <url> source or destination, use one of the following values:


Format

copy <source> <destination>

Mode

Privileged EXEC



{xmodem | tftp://<ipaddr>/<filepath>/<filename>}

For TFTP, the <ipaddr> parameter is the IP address of the server, <filepath> is the path to the file, and <filename> is the name of the file you want to upload or download.

 

TABLE 8-23 Copy Parameters

Source

Destination

Description

nvram:clibanner

<url>

Copies the CLI banner to a server.

nvram:errorlog

<url>

Copies the error log file to a server.

nvram:log

<url>

Copies the log file to a server.

nvram:script <scriptname>

<url>

Copies a specified configuration script file to a server.

nvram:startup-config

<url>

Copies the startup configuration to a server.

nvram:traplog

<url>

Copies the trap log file to a server.

system:running-config

nvram:startup-config

Saves the running configuration to nvram.

<url>

nvram:clibanner

Downloads the CLI banner to the system.

<url>

nvram:script
<destfilename>

Downloads a configuration script file to the system. During the download of a configuration script, the copy command validates the script. In case of any error, the command lists all the lines at the end of the validation process and prompts you to confirm before copying the script file.

<url>

nvram:sshkey-dsa

Downloads an SSH key file. For more information, see Secure Shell (SSH) Command.

<url>

nvram:sshkey-rsa1

Downloads an SSH key file.

<url>

nvram:sshkey-rsa2

Downloads an SSH key file.

<url>

nvram:sslpem-dhweak

Downloads an HTTP secure-server certificate.

<url>

nvram:sslpem-dhstrong

Downloads an HTTP secure-server certificate.

<url>

nvram:sslpem-root

Downloads an HTTP secure-server certificate. For more information, see Hypertext Transfer Protocol (HTTP) Commands.

<url>

nvram:sslpem-server

Downloads an HTTP secure-server certificate.

<url>

nvram:startup-config

Downloads the startup configuration file to the system.

<url>

nvram:system-image

Downloads a code image to the system.

<url>

{image1 | image2}

Download an image from the remote server to either image.

{image1 | image2}

<url>

Upload either image to the remote server.

image1

image2

Copy image1 to image2.

image2

image1

Copy image2 to image1.



Simple Network Time Protocol (SNTP) Commands

This section describes the commands you use to automatically configure the system time and date by using SNTP.

sntp broadcast client poll-interval

This command sets the poll interval for SNTP broadcast clients in seconds as a power of two where <poll-interval> can be a value from 6 to 16.


Default

6

Format

sntp broadcast client poll-interval <poll-interval>

Mode

Global Config


no sntp broadcast client poll-interval

This command resets the poll interval for SNTP broadcast client back to the default value.


Format

no sntp broadcast client poll-interval

Mode

Global Config


sntp client mode

This command enables Simple Network Time Protocol (SNTP) client mode and may set the mode to either broadcast or unicast.


Default

disabled

Format

sntp client mode [broadcast | unicast]

Mode

Global Config


no sntp client mode

This command disables Simple Network Time Protocol (SNTP) client mode.


Format

no sntp client mode

Mode

Global Config


sntp client port

This command sets the SNTP client port id to a value from 1-65535.


Default

123

Format

sntp client port <portid>

Mode

Global Config


no sntp client port

This command resets the SNTP client port back to its default value.


Format

no sntp client port

Mode

Global Config


sntp unicast client poll-interval

This command sets the poll interval for SNTP unicast clients in seconds as a power of two where <poll-interval> can be a value from 6 to 16.


Default

6

Format

sntp unicast client poll-interval <poll-interval>

Mode

Global Config


no sntp unicast client poll-interval

This command resets the poll interval for SNTP unicast clients to its default value.


Format

no sntp unicast client poll-interval

Mode

Global Config


sntp unicast client poll-timeout

This command will set the poll timeout for SNTP unicast clients in seconds to a value from 1-30.


Default

5

Format

sntp unicast client poll-timeout <poll-timeout>

Mode

Global Config


no sntp unicast client poll-timeout

This command will reset the poll timeout for SNTP unicast clients to its default value.


Format

no sntp unicast client poll-timeout

Mode

Global Config


sntp unicast client poll-retry

This command will set the poll retry for SNTP unicast clients to a value from 0 to 10.


Default

1

Format

sntp unicast client poll-retry <poll-retry>

Mode

Global Config


no sntp unicast client poll-retry

This command will reset the poll retry for SNTP unicast clients to its default value.


Format

no sntp unicast client poll-retry

Mode

Global Config


sntp multicast client poll-interval

This command will set the poll interval for SNTP multicast clients in seconds as a power of two where <poll-interval> can be a value from 6 to 16.


Default

6

Format

sntp multicast client poll-interval <poll-interval>

Mode

Global Config


no sntp multicast client poll-interval

This command resets the poll interval for SNTP multicast clients to its default value.


Format

no sntp multicast client poll-interval

Mode

Global Config


sntp server

This command configures an SNTP server (a maximum of three). The optional priority can be a value of 1-3, the version a value of 1-4, and the port id a value of 1-65535.


Format

sntp server <ipaddress> [<priority> [<version> [<portid>]]]

Mode

Global Config


no sntp server

This command deletes an server from the configured SNTP servers.


Format

no sntp server remove <ipaddress>

Mode

Global Config


show sntp

This command is used to display SNTP settings and status.


Format

show sntp

Mode

Privileged EXEC



TABLE 8-24 Entry Definitions for show sntp

Entry

Definition

Last Update Time

Time of last clock update.

Last Attempt Time

Time of last transmit query (in unicast mode).

Last Attempt Status

Status of the last SNTP request (in unicast mode) or unsolicited message (in broadcast mode).

Broadcast Count

Current number of unsolicited broadcast messages that have been received and processed by the SNTP client since last reboot.

Multicast Count

Current number of unsolicited multicast messages that have been received and processed by the SNTP client since last reboot


show sntp client

This command is used to display SNTP client settings.


Format

show sntp client

Mode

Privileged EXEC



TABLE 8-25 Entry Definitions for show sntp client

Entry

Definition

Client Supported Modes

Supported SNTP Modes (Broadcast, Unicast, or Multicast).

SNTP Version

The highest SNTP version the client supports

Port

SNTP Client Port

Client Mode

Configured SNTP Client Mode

Poll Interval

Poll interval value for SNTP clients in seconds as a power of two.

Poll Timeout

Poll timeout value in seconds for SNTP clients.

Poll Retry

Poll retry value for SNTP clients.


show sntp server

This command is used to display SNTP server settings and configured servers.


Format

show sntp server

Mode

Privileged EXEC



TABLE 8-26 Entry Definitions for show sntp server

Entry

Definition

Server IP Address

IP Address of configured SNTP Server

Server Type

Address Type of Server.

Server Stratum

Claimed stratum of the server for the last received valid packet.

Server Reference ID

Reference clock identifier of the server for the last received valid packet.

Server Mode

SNTP Server mode.

Server Maximum Entries

Total number of SNTP Servers allowed.

Server Current Entries

Total number of SNTP configured. For each configured server, the following is displayed.

IP Address

IP Address of configured SNTP Server.

Address Type

Address Type of configured SNTP server.

Priority

IP priority type of the configured server.

Version

SNTP Version number of the server. The protocol version used to query the server in unicast mode.

Port

Server Port Number

Last Attempt Time

Last server attempt time for the specified server.

Last Update Status

Last server attempt status for the server.

Total Unicast Requests

Number of requests to the server.

Failed Unicast Requests

Number of failed requests from server.



DHCP Server Commands

This section describes the commands you to configure the DHCP server settings for the switch. DHCP uses UDP as its transport protocol and supports a number of features that facilitate in administration address allocations.

ip dhcp pool

This command configures a DHCP address pool name on a DHCP server and enters DHCP pool configuration mode.


Default

none

Format

ip dhcp pool <name>

Mode

Global Config


no ip dhcp pool

This command removes the DHCP address pool. The name should be previously configured pool name.


Format

no ip dhcp pool <name>

Mode

Global Config


client-identifier

This command specifies the unique identifier for a DHCP client. Unique-identifier is a valid notation in hexadecimal format. In some systems, such as Microsoft DHCP clients, the client identifier is required instead of hardware addresses. The unique-identifier is a concatenation of the media type and the MAC address. For example, the Microsoft client identifier for Ethernet address c819.2488.f177 is 01c8.1924.88f1.77 where 01 represents the Ethernet media type. For more information, refer to the “Address Resolution Protocol Parameters” section of RFC 1700, Assigned Numbers for a list of media type codes.


Default

none

Format

client-identifier <uniqueidentifier>

Mode

DHCP Pool Config


no client-identifier

This command deletes the client identifier.


Format

no client-identifier

Mode

DHCP Pool Config


client-name

This command specifies the name for a DHCP client. Name is a string consisting of standard ASCII characters.


Default

none

Format

client-name <name>

Mode

DHCP Pool Config


no client-name

This command removes the client name.


Format

no client-name

Mode

DHCP Pool Config


default-router

This command specifies the default router list for a DHCP client. {address1, address2... address8} are valid IP addresses, each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid.


Default

none

Format

default-router <address1> [<address2>....<address8>]

Mode

DHCP Pool Config


no default-router

This command removes the default router list.


Format

no default-router

Mode

DHCP Pool Config


dns-server

This command specifies the IP servers available to a DHCP client. Address parameters are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid.


Default

none

Format

dns-server <address1> [<address2>....<address8>]

Mode

DHCP Pool Config


no dns-server

This command removes the DNS Server list.


Format

no dns-server

Mode

DHCP Pool Config


hardware-address

This command specifies the hardware address of a DHCP client. Hardware-address is the MAC address of the hardware platform of the client consisting of 6 bytes in dotted hexadecimal format. Type indicates the protocol of the hardware platform. It is 1 for 10 MB Ethernet and 6 for IEEE 802.


Default

ethernet

Format

hardware-address <hardwareaddress> <type>

Mode

DHCP Pool Config


no hardware-address

This command removes the hardware address of the DHCP client.


Format

no hardware-address

Mode

DHCP Pool Config


host

This command specifies the IP address and network mask for a manual binding to a DHCP client. Address and Mask are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. The prefix-length is an integer from 0 to 32


Default

none

Format

host <address> [{<mask> | <prefix-length>}]

Mode

DHCP Pool Config


no host

This command removes the IP address of the DHCP client.


Format

no host

Mode

DHCP Pool Config


lease

This command configures the duration of the lease for an IP address that is assigned from a DHCP server to a DHCP client. The overall lease time should be between 1-86400 minutes. If you specify infinite, the lease is set for 60 days. You can also specify a lease duration. Days is an integer from 0 to 59. Hours is an integer from 0 to 1439. Minutes is an integer from 0 to 86399.


Default

1 (day)

Format

lease [{<days> [<hours>] [<minutes>] | infinite}]

Mode

DHCP Pool Config


no lease

This command restores the default value of the lease time for DHCP Server.


Format

no lease

Mode

DHCP Pool Config


network (DHCP Pool Config)

Use this command to configure the subnet number and mask for a DHCP address pool on the server. Network-number is a valid IP address, made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. Mask is the IP subnet mask for the specified address pool. The prefix-length is an integer from 0 to 32.


Default

none

Format

network <networknumber> [{<mask> | <prefixlength>}]

Mode

DHCP Pool Config


no network

This command removes the subnet number and mask.


Format

no network

Mode

DHCP Pool Config


bootfile

The command specifies the name of the default boot image for a DHCP client. The <filename> specifies the boot image file.


Default

none

Format

bootfile <filename>

Mode

DHCP Pool Config


no bootfile

This command deletes the boot image name.


Format

no bootfile

Mode

DHCP Pool Config


domain-name

This command specifies the domain name for a DHCP client. The <domain> specifies the domain name string of the client.


Default

none

Format

domain-name <domain>

Mode

DHCP Pool Config


no domain-name

This command removes the domain name.


Format

no domain-name

Mode

DHCP Pool Config


netbios-name-server

This command configures NetBIOS Windows Internet Naming Service (WINS) name servers that are available to DHCP clients.

One IP address is required, although one can specify up to eight addresses in one command line. Servers are listed in order of preference (address1 is the most preferred server, address2 is the next most preferred server, and so on).


Default

none

Format

netbios-name-server <address> [<address2>...<address8>]

Mode

DHCP Pool Config


no netbios-name-server

This command removes the NetBIOS name server list.


Format

no netbios-name-server

Mode

DHCP Pool Config


netbios-node-type

The command configures the NetBIOS node type for Microsoft Dynamic Host Configuration Protocol (DHCP) clients.type Specifies the NetBIOS node type. Valid types are as follows:

no netbios-node-type

This command removes the NetBIOS node Type.


Format

no netbios-node-type

Mode

DHCP Pool Config


next-server

This command configures the next server in the boot process of a DHCP client.The <address> parameter is the IP address of the next server in the boot process, which is typically a TFTP server.


Default

inbound interface helper addresses

Format

next-server <address>

Mode

DHCP Pool Config


no next-server

This command removes the boot server list.


Format

no next-server

Mode

DHCP Pool Config


option

The option command configures DHCP Server options. The <code> parameter specifies the DHCP option code and ranges from 1-254. The <ascii string> parameter specifies an NVT ASCII character string. ASCII character strings that contain white space must be delimited by quotation marks. The hex <string> parameter specifies hexadecimal data. In hexadecimal, character strings are two hexadecimal digits. You can separate each byte by a period (for example, a3.4f.22.0c), colon (for example, a3:4f:22:0c), or white space (for example, a3 4f 22 0c).


Default

none

Format

option <code> {ascii string | hex <string1> [<string2>...<string8>] | ip <address1> [<address2>...<address8>]}

Mode

DHCP Pool Config


no option

This command removes the DHCP Server options. The <code> parameter specifies the DHCP option code.


Format

no option <code>

Mode

DHCP Pool Config


ip dhcp excluded-address

This command specifies the IP addresses that a DHCP server should not assign to DHCP clients. Low-address and high-address are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid.


Default

none

Format

ip dhcp excluded-address <lowaddress> [highaddress]

Mode

Global Config


no ip dhcp excluded-address

This command removes the excluded IP addresses for a DHCP client. Low-address and high-address are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid.


Format

no ip dhcp excluded-address <lowaddress> [highaddress]

Mode

Global Config


ip dhcp ping packets

Use this command to specify the number, in a range from 2-10, of packets a DHCP server sends to a pool address as part of a ping operation. By default the number of packets sent to a pool address is 2, which is the smallest allowed number when sending packets. Setting the number of packets to 0 disables this command.


Default

2

Format

ip dhcp ping packets <0,2-10>

Mode

Global Config


no ip dhcp ping packets

This command prevents the server from pinging pool addresses and sets the number of packets to 0.


Default

0

Format

no ip dhcp ping packets

Mode

Global Config


service dhcp

This command enables the DHCP server.


Default

disabled

Format

service dhcp

Mode

Global Config


no service dhcp

This command disables the DHCP server.


Format

no service dhcp

Mode

Global Config


ip dhcp bootp automatic

This command enables the allocation of the addresses to the bootp client. The addresses are from the automatic address pool.


Default

disabled

Format

ip dhcp bootp automatic

Mode

Global Config


no ip dhcp bootp automatic

This command disables the allocation of the addresses to the bootp client. The address are from the automatic address pool.


Format

no ip dhcp bootp automatic

Mode

Global Config


ip dhcp conflict logging

This command enables conflict logging on DHCP server.


Default

enabled

Format

ip dhcp conflict logging

Mode

Global Config


no ip dhcp conflict logging

This command disables conflict logging on DHCP server.


Format

no ip dhcp conflict logging

Mode

Global Config


clear ip dhcp binding

This command deletes an automatic address binding from the DHCP server database. If “*” is specified, the bindings corresponding to all the addresses are deleted. <address> is a valid IP address made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid.


Default

none

Format

clear ip dhcp binding {<address> | *}

Mode

Privileged EXEC


clear ip dhcp server statistics

This command clears DHCP server statistics counters.


Format

clear ip dhcp server statistics

Mode

Privileged EXEC


clear ip dhcp conflict

The command is used to clear an address conflict from the DHCP Server database. The server detects conflicts using a ping. DHCP server clears all conflicts If the asterisk (*) character is used as the address parameter.


Default

none

Format

clear ip dhcp conflict {<address> | *}

Mode

Privileged EXEC


show ip dhcp binding

This command displays address bindings for the specific IP address on the DHCP server. If no IP address is specified, the bindings corresponding to all the addresses are displayed.


Format

show ip dhcp binding [<address>]

Modes

Privileged EXEC
User EXEC



TABLE 8-27 Entry Definitions for show ip dhcp binding

Entry

Definition

IP address

The IP address of the client.

Hardware Address

The MAC Address or the client identifier.

Lease expiration

The lease expiration time of the IP Address assigned to the client.

Type

The manner in which IP Address was assigned to the client.


show ip dhcp global configuration

This command displays address bindings for the specific IP address on the DHCP server. If no IP address is specified, the bindings corresponding to all the addresses are displayed.


Format

show ip dhcp global configuration

Modes

Privileged EXEC
User EXEC



TABLE 8-28 Entry Definitions for show ip dhcp global configuration

Entry

Definition

Service DHCP

The field to display the status of dhcp protocol.

Number of Ping Packets

The maximum number of Ping Packets that will be sent to verify that an ip address id not already assigned.

Conflict Logging

Shows whether conflict logging is enabled or disabled.

BootP Automatic

Shows whether BootP for dynamic pools is enabled or disabled.


show ip dhcp pool configuration

This command displays pool configuration. If all is specified, configuration for all the pools is displayed.


Format

show ip dhcp pool configuration {<name> | all}

Modes

Privileged EXEC
User EXEC



TABLE 8-29 Entry Definitions for show ip dhcp pool configuration

 

Pool Name

The name of the configured pool.

Pool Type

The pool type.

Lease Time

The lease expiration time of the IP Address assigned to the client.

DNS Servers

The list of DNS servers available to the DHCP client

Default Routers

The list of the default routers available to the DHCP client

The following additional field is displayed for Dynamic pool type:

Network

The network number and the mask for the DHCP address pool.

The following additional fields are displayed for Manual pool type.

Client Name

The name of a DHCP client.

Client Identifier

The unique identifier of a DHCP client.

Hardware Address

The hardware address of a DHCP client.

Hardware Address Type

The protocol of the hardware platform.

Host

The IP address and the mask for a manual binding to a DHCP client.


show ip dhcp server statistics

This command displays DHCP server statistics.


Format

show ip dhcp server statistics

Modes

Privileged EXEC
User EXEC



TABLE 8-30 Entry Definitions for show ip dhcp server statistics

Entry

Definition

Automatic Bindings

The number of IP addresses that have been automatically mapped to the MAC addresses of hosts that are found in the DHCP database.

Expired Bindings

The number of expired leases.

Malformed Bindings

The number of truncated or corrupted messages that were received by the DHCP server.

The following is displayed for Message Received.

DHCP DISCOVER

The number of DHCPDISCOVER messages the server has received.

DHCP REQUEST

The number of DHCPREQUEST messages the server has received.

DHCP DECLINE

The number of DHCPDECLINE messages the server has received.

DHCP RELEASE

The number of DHCPRELEASE messages the server has received.

DHCP INFORM

The number of DHCPINFORM messages the server has received.

The following is displayed for Message Sent:

DHCP OFFER

The number of DHCPOFFER messages the server sent.

DHCP ACK

The number of DHCPACK messages the server sent.

DHCP NACK

The number of DHCPNACK messages the server sent.


show ip dhcp conflict

This command displays address conflicts logged by the DHCP Server. If no IP address is specified, all the conflicting addresses are displayed.


Format

show ip dhcp conflict [<ip-address>]

Modes

Privileged EXEC
User EXEC



TABLE 8-31 Entry Definitions for show ip dhcp conflict

Entry

Definition

IP address

The IP address of the host as recorded on the DHCP server.

Detection Method

The manner in which the IP address of the hosts were found on the DHCP Server

Detection time

The time when the conflict was found.



DHCP Filtering

You can configure the DHCP Filtering feature as a security measure against unauthorized DHCP servers. DHCP filtering works by allowing you to configure each port as either a trusted port or an untrusted port. To optimize the DHCP filtering feature, configure the port that is connected to an authorized DHCP server on your network as a trusted port. Any DHCP responses received on a trusted port are forwarded. Make sure that all other ports are untrusted so that any DHCP (or BootP) responses received are discarded.

You can configure DHCP filtering on physical ports and LAGs. DHCP filtering is not operable on VLAN interfaces.

ip dhcp filtering

This command enables DHCP filtering globally.


Default

disabled

Format

ip dhcp filtering

Mode

Global Config


no ip dhcp filtering

This command disables DHCP filtering.


Format

no ip dhcp filtering

Mode

Global Config


ip dhcp filtering trust

This command configures an interface as trusted.


Default

untrusted

Format

ip dhcp filtering trust

Mode

Interface Config


no ip dhcp filtering trust

This command returns an interface to the default value for DHCP filtering.


Format

no ip dhcp filtering trust

Mode

Interface Config


show ip dhcp filtering

This command displays the DHCP filtering configuration.


Format

show ip dhcp filtering

Mode

Privileged EXEC



TABLE 8-32 Entry Definitions for show ip dhcp filtering

Entry

Definition

Interface

Specifies the interface by slot/port.

Trusted

Indicates whether the interface is trusted or untrusted.