Upload
samuel-perez
View
221
Download
0
Embed Size (px)
Citation preview
7/30/2019 5500gei
1/529
SuperStack 4 Switch 5500G-EI FamilyCommand Reference GuideVersion 3.1.x
http://www.3com.com/Part number: DUA1725-0CAA01Published: July 2005
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
2/529
7/30/2019 5500gei
3/529
CONTENTS
ABOUT THIS GUIDEAbout This Software Version 19
Organization of the Manual 19
Intended Readership 20
Conventions 20
Related Manuals 21
1 USING SYSTEM ACCESS COMMANDSLogging in Commands 24
authentication-mode 24
auto-execute command 24
command-privilege level 25
databits 26
display history-command 27
display user-interface 27
display users 29
free user-interface 29
header 30history-command max-size 32
idle-timeout 33
language-mode 33
lock 34
parity 34
protocol inbound 35
quit 35
return 36
screen-length 36
send 37
service-type 37View 37
set authentication password 39
shell 39
speed 40
stopbits 40
super 41
super password 42
sysname 42
system-view 43
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
4/529
telnet 43
user-interface 44
user privilege level 45
2 USING
PORT
COMMANDS
Ethernet Port Configuration Commands 49
broadcast-suppression 49
copy configuration 50
description 50
display interface 51
display loopback-detection 53
display port 54
display unit 54
duplex 55
flow-control 56
interface 56jumboframe enable 57
loopback 57
loopback-detection control enable 58
loopback-detection enable 59
loopback-detection interval-time 59
loopback-detection per-vlan enable 60
multicast-suppression 60
port access vlan 61
port hybrid pvid vlan 62
port hybrid vlan 62
port link-type 63port trunk permit vlan 64
port trunk pvid vlan 65
reset counters interface 65
shutdown 66
speed 67
unicast-suppression 67
Ethernet Port Link Aggregation Commands 68
debugging link-aggregation error 68
debugging link-aggregation event 69
debugging lacp packet 69
debugging lacp state 70display link-aggregation summary 71
display link-aggregation verbose 71
display link-aggregation interface 72
display lacp system-id 73
lacp enable 74
lacp port-priority 74
lacp system-priority 75
link-aggregation group agg-id description 75
link-aggregation group agg-id mode 76
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
5/529
7/30/2019 5500gei
6/529
display arp 110
display arp timer aging 111
reset arp 111
Resilient ARP Configuration Commands 112
debugging resilient-arp 112
display resilient-arp 113resilient-arp enable 113
resilient-arp interface vlan-interface 114
BOOTP Client Configuration Commands 115
debugging dhcp xrn xha 115
ip address bootp-alloc 115
DHCP Client Configuration Commands 116
debugging dhcp client 116
debugging dhcp xrn xha 116
display dhcp client 117
ip address dhcp-alloc 117
DHCP Relay Configuration Commands 118
address-check 118
debugging dhcp-relay 119
dhcp-security static 119
dhcp-server 120
dhcp-server ip 121
display dhcp-security 122
display dhcp-server 122
display dhcp-server interface vlan-interface 123
Access Management Configuration Commands 124
am enable 124
am ip-pool 124
am trap enable 125
display am 126
display isolate port 127
port isolate 127
UDP Helper Configuration Commands 128
debugging udp-helper 128
display udp-helper server 128
udp-helper enable 129
udp-helper port 129
udp-helper server 130
IP Performance Configuration Commands 131
display fib 131
display fib ip_address 131
display fib acl 132
display fib 133
display fib ip-prefix 133
display fib statistics 134
display icmp statistics 134
display ip socket 135
display ip statistics 136
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
7/529
display tcp statistics 137
display tcp status 138
display udp statistics 139
reset ip statistics 140
reset tcp statistics 140
reset udp statistics 140tcp timer fin-timeout 141
tcp timer syn-timeout 141
tcp window 142
6 USING ROUTING PROTOCOL COMMANDSRouting Table Display Commands 146
display ip routing-table 146
display ip routing-table acl 147
display ip routing-table ip_address 149
display ip routing-table ip_address1 ip_address2 151display ip routing-table ip-prefix 151
display ip routing-table protocol 153
display ip routing-table radix 154
display ip routing-table statistics 155
display ip routing-table verbose 155
Static Route Configuration Command 157
delete static-routes all 157
ip route-static 157
RIP Configuration Commands 159
checkzero 159
default cost 160display rip 160
display rip interface 161
display rip routing 162
filter-policy export 163
filter-policy import 164
host-route 165
import-route 165
network 166
peer 167
preference 167
reset 168rip 168
rip authentication-mode 169
rip input 170
rip metricin 171
rip metricout 172
rip output 172
rip split-horizon 173
rip version 173
rip work 174
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
8/529
summary 175
timers 176
traffic-share-across-interface 176
OSPF Configuration Commands 177
abr-summary 177area 178
asbr-summary 178
authentication-mode 179
default cost 180
default interval 181
default limit 181
default tag 182
default type 183
default-cost 183
default-route-advertise 184
display debugging ospf 185display ospf abr-asbr 185
display ospf asbr-summary 186
display ospf brief 187
display ospf cumulative 189
display ospf error 190
display ospf interface 192
display ospf lsdb 193
display ospf nexthop 195
display ospf peer 196
display ospf request-queue 197
display ospf retrans-queue 198display ospf routing 199
display ospf vlink 200
filter-policy export 201
filter-policy import 202
import-route 202
network 203
nssa 204
ospf 205
ospf authentication-mode 206
ospf cost 207
ospf dr-priority 207
ospf mib-binding 208
ospf mtu-enable 209
ospf network-type 209
ospf timer dead 210
ospf timer hello 211
ospf timer poll 212
ospf timer retransmit 212
ospf trans-delay 213
peer 214
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
9/529
preference 214
reset ospf 215
router id 215
silent-interface 216
snmp-agent trap enable ospf 217
spf-schedule-interval 218stub 218
vlink-peer 219
IP Routing Policy Configuration Commands 220
apply cost 220
apply tag 221
display ip ip-prefix 222
display route-policy 222
filter-policy export 223
filter-policy import 224
if-match { acl | ip-prefix } 225
if-match cost 226
if-match interface 226
if-match ip next-hop 227
if-match tag 228
ip ip-prefix 228
route-policy 229
Route Capacity Configuration Commands 231
display memory 231
display memory limit 231
memory auto-establish disable 232
memory auto-establish enable 233
memory { safety | limit } 233
7 USING MULTICAST PROTOCOL COMMANDSIGMP Snooping Configuration Commands 237
display igmp-snooping configuration 237
display igmp-snooping group 237
display igmp-snooping statistics 238
igmp-snooping 239
igmp-snooping host-aging-time 239
igmp-snooping max-response-time 240
igmp-snooping router-aging-time 241reset igmp-snooping statistics 241
Multicast Common Configuration Commands 242
debugging multicast forwarding 242
debugging multicast kernel-routing 242
debugging multicast status-forwarding 243
display multicast forwarding-table 243
display multicast routing-table 244
mtracert 246
multicast route-limit 247
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
10/529
multicast routing-enable 247
reset multicast forwarding-table 248
reset multicast routing-table 249
IGMP Configuration Commands 250
debugging igmp 250
display igmp group 250display igmp interface 251
igmp enable 252
igmp group-limit 252
igmp group-policy 253
igmp group-policy vlan 254
igmp host-join 255
igmp host-join port 255
igmp host-join vlan 256
igmp lastmember-queryinterval 257
igmp max-response-time 258igmp robust-count 258
igmp timer other-querier-present 259
igmp timer query 260
igmp version 261
reset igmp group 261
PIM Configuration Commands 262
bsr-policy 262
c-bsr 263
c-rp 264
crp-policy 265
debugging pim common 266debugging pim dm 266
debugging pim sm 267
display pim bsr-info 268
display pim interface 269
display pim neighbor 269
display pim routing-table 270
display pim rp-info 271
pim 272
pim bsr-boundary 272
pim dm 273
pim neighbor-limit 273
pim neighbor-policy 274
pim sm 275
pim timer hello 275
register-policy 276
reset pim neighbor 276
reset pim routing-table 277
source-policy 278
static-rp 279
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
11/529
8 USING QOS/ACL COMMANDSACL Configuration Command List 282
acl 282
display acl 283
display packet-filter 284
display time-range 284
packet-filter 285
reset acl counter 286
rule 286
time-range 289
QoS Configuration Commands List 290
display mirror 290
display qos-interface all 291
display qos-interface line-rate 291
display qos-interface mirrored-to 292
display qos-interface traffic-limit 293
display qos-interface traffic-priority 293
display qos-interface traffic-redirect 294
display qos-interface traffic-statistic 294
display queue-scheduler 295
line-rate 296
mirrored-to 296
mirroring-port 297
monitor-port 298
priority 298
priority trust 299
queue-scheduler 300
reset traffic-statistic 300
traffic-limit 301
traffic-priority 302
traffic-redirect 304
traffic-statistic 305
QoS Profile Configuration Commands 306
apply qos-profile 306
display qos-profile 306
packet-filter 307
qos-profile 308
qos-profile user-based 308traffic-limit 309
traffic-priority 310
Logon users ACL Control Command 311
acl 311
ip http acl 312
snmp-agent community 312
snmp-agent group 313
snmp-agent usm-user 314
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
12/529
9 USING FABRIC COMMANDSFabric Commands 317
display xrn-fabric 317
change self-unit 317
change unit-id 318
set unit name 319
sysname 319
10 USING RSTP COMMANDSRSTP Configuration Commands 322
display stp 322
323
display stp ignored-vlan 324
display stp tc 324
reset stp 324
stp 325stp bpdu-protection 326
stp cost 327
stp edged-port 327
stp loop-protection 328
stp ignored vlan 329
stp mcheck 329
stp mode 330
stp pathcost-standard 331
stp point-to-point 331
stp port priority 332
stp priority 333
stp root primary 333
stp root secondary 334
stp root-protection 335
stp timeout-factor 336
stp timer forward-delay 336
stp timer hello 337
stp timer max-age 337
stp transmit-limit 338
11 USING AAA AND RADIUS COMMANDS802.1x Configuration Commands 343display dot1x 343
dot1x 344
dot1x authentication-method 345
dot1x dhcp-launch 346
dot1x max-user 346
dot1x port-control 347
dot1x port-method 348
dot1x quiet-period 349
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
13/529
dot1x retry 350
dot1x supp-proxy-check 351
dot1x timer 352
reset dot1x statistics 353
Centralized MAC Address Authentication Configuration Commands 354
debugging mac-authentication event 354display mac-authentication 355
mac-authentication 356
mac-authentication domain 357
mac-authentication timer 358
AAA Configuration Commands 359
access-limit 359
attribute 359
cut connection 360
display connection 361
display domain 363
display local-user 363
domain 364
idle-cut 366
level 366
local-user 367
messenger 368
password 369
radius-scheme 369
scheme 370
self-service-url 371
service-type 372
state 373
RADIUS Protocol Configuration Commands 374
accounting optional 374
data-flow-format 374
display local-server statistics 375
display radius 376
display radius statistics 377
display stop-accounting-buffer 378
key 379
local-server 380
nas-ip 381
primary accounting 381
primary authentication 382
radius nas-ip 383
radius scheme 384
reset radius statistics 385
reset stop-accounting-buffer 385
retry 386
retry realtime-accounting 387
retry stop-accounting 388
secondary accounting 388
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
14/529
secondary authentication 389
server-type 390
state 391
stop-accounting-buffer enable 392
timer 392
timer realtime-accounting 393timer response-timeout 394
user-name-format 395
12 USING SYSTEM MANAGEMENT COMMANDSFile System Management Commands 402
cd 402
copy 403
delete 403
dir 404
execute 405file prompt 406
format 406
mkdir 406
more 407
move 407
pwd 408
rename 409
reset recycle-bin 409
rmdir 410
undelete 410
Configuration File Management Commands 411display current-configuration 411
display saved-configuration 413
display this 413
display startup 414
reset saved-configuration 414
save 415
startup saved-configuration 416
416
FTP Server Configuration Commands 416
display ftp-server 417
display ftp-user 417ftp server 417
ftp timeout 418
local-user 418
password 419
service-type 420
FTP Client Commands 421
ascii 421
binary 422
bye 422
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
15/529
cd 422
cdup 423
close 423
delete 424
dir 424
disconnect 424ftp 425
get 425
lcd 426
ls 426
mkdir 426
passive 427
put 427
pwd 428
quit 428
remotehelp 428
rmdir 429
user 429
verbose 429
TFTP Configuration Commands 430
tftp get 430
tftp put 430
MAC Address Table Management Commands 431
display mac-address 431
display mac-address aging-time 432
mac-address 433
mac-address max-mac-count 434
mac-address timer 434
Device Management Commands 436
boot boot-loader 436
boot bootrom 436
display boot-loader 436
display cpu 437
display device 437
display fan 438
display memory 438
display power 439
display schedule reboot 439
reboot 440
schedule reboot at 440
schedule reboot delay 441
Basic System Configuration and Management Commands 442
clock datetime 442
clock summer-time 443
clock timezone 444
sysname 445
System Status and System Information Display Commands 445
display clock 445
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
16/529
display config-agent 446
display debugging 447
display version 447
System Debug Commands 447
debugging 448
display diagnostic-information 448Network Connection Test Commands 449
end-station polling ip-address 449
ping 449
tracert 451
HWPing Commands 453
hwping-agent enable 453
hwping 453
count 454
destination ip 454
frequency 455
test-type 455
test-enable 456
display hwping 456
Log Commands 457
display channel 457
display info-center 458
display logbuffer 458
display logbuffer summary 460
display trapbuffer 460
info-center channel name 461
info-center console channel 462
info-center enable 462
info-center logbuffer 463
info-center loghost 464
info-center loghost source 465
info-center monitor channel 465
info-center snmp channel 466
info-center source 467
info-center switch-on 469
info-center timestamp 470
info-center trapbuffer 470
reset logbuffer 471
reset trapbuffer 471
terminal debugging 472
terminal logging 472
terminal monitor 473
terminal trapping 473
SNMP Configuration Commands 474
display snmp-agent 474
display snmp-agent community 474
display snmp-agent group 475
display snmp-agent mib-view 476
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
17/529
display snmp-agent statistics 477
display snmp-agent sys-info 478
display snmp-agent usm-user 479
display snmp-proxy unit 479
enable snmp trap 480
snmp-agent community 480snmp-agent group 481
snmp-agent local-engineid 482
snmp-agent mib-view 483
snmp-agent packet max-size 483
snmp-agent sys-info 484
snmp-agent target-host 485
snmp-agent trap enable 486
snmp-agent trap life 487
snmp-agent trap queue-size 488
snmp-agent trap source 488
snmp-agent usm-user 489
undo snmp-agent 490
RMON Configuration Commands 490
display rmon alarm 491
display rmon event 491
display rmon eventlog 492
display rmon history 493
display rmon prialarm 494
display rmon statistics 495
rmon alarm 496
rmon event 497
rmon history 498
rmon prialarm 499
rmon statistics 500
NTP Configuration Commands 501
debugging ntp-service 501
display ntp-service sessions 502
display ntp-service status 502
display ntp-service trace 503
ntp-service access 504
ntp-service authentication enable 504
ntp-service authentication-keyid 505
ntp-service broadcast-client 505
ntp-service broadcast-server 506
ntp-service max-dynamic sessions 507
ntp-service multicast-client 507
ntp-service multicast-server 508
ntp-service reliable authentication-keyid 509
ntp-service source-interface 509
ntp-service in-interface disable 510
ntp-service unicast-peer 511
ntp-service unicast-server 512
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
18/529
SSH Configuration Commands 513
debugging ssh server 513
display rsa local-key-pair public 513
display rsa peer-public-key 514
display ssh server 515
display ssh user-information 515peer-public-key end 516
protocol inbound 516
public-key-code begin 517
public-key-code end 518
rsa local-key-pair create 518
rsa local-key-pair destroy 519
rsa peer-public-key 520
ssh server authentication-retries 520
ssh server rekey-interval 521
ssh server timeout 521
ssh user assign rsa-key 522
ssh user username authentication-type 523
A BOOTROM INTERFACEAccessing the Bootrom Interface 525
Boot Menu 526
Download Application File to Flash 526
Select Application File to Boot 526
Display all Files in Flash 527
Delete File from Flash 527
Modify Bootrom Password 528Enter Bootrom Upgrade Menu 528
Skip Current Configuration File 528
Set Bootrom Password Recovery 528
Set Switch Startup Mode 529
Reboot 529
Boot Menu File Download Commands 529
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
19/529
ABOUT THIS GUIDE
This guide provides all the information you need to use the configurationcommands supported by version 3.0.x software on the 3Com SuperStack 4Switch 5500G-EI.
About This SoftwareVersion
The software in the Switch 5500G-EI is a subset of that used in some other 3Comproducts. Depending on the capabilities of your hardware platform, somecommands described in this guide may not be available on your Switch, although
the unavailable commands may still display on the command line interface (CLI). Ifyou try to use an unavailable command, an error message displays.
CAUTION: Any command that displays on the CLI, but is not described in thisguide, is not supported in version 3.0.x software. 3Com only supports thecommands described in this guide. Other commands may result in the loss of data,and are entered at the users risk.
Organization of theManual
The Switch 5500G-EI Command Reference Guide consists of the followingchapters:
Using System Access Commands Introduces the commands used for
accessing the Switch. Using Port Commands Introduces the commands used for configuring
Ethernet port and link aggregation.
Using VLAN Commands Introduces the commands used for configuringVLANs.
Using Network Protocol Commands Introduces the commands used forconfiguring network protocols.
Using Routing Protocol Commands Introduces the commands used forconfiguring routing protocols.
Using Multicast Protocol Commands Introduces the commands used forconfiguring multicast protocols.
Using QoS and ACL Commands Introduces the commands used forconfiguring QoS/ACL.
Using STP Commands Introduces the commands used for configuring STP.
Using AAA and RADIUS Commands Introduces the commands used forconfiguring 802.1x, AAA and RADIUS.
Using Reliability Commands Introduces the commands used forconfiguring VRRP.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
20/529
20 ABOUT THIS GUIDE
Using System ManagementCommands Introduces the commands usedfor system management and maintenance.
Intended Readership The manual is intended for the following readers:
Network administrators
Network engineers
Users who are familiar with the basics of networking
Conventions This manual uses the following conventions:
Table 1 Icons
Icon Notice Type Description
Information note Information that describes important features or instructions.Caution Information that alerts you to potential loss of data or
potential damage to an application, system, or device.
Warning Information that alerts you to potential personal injury.
Table 2 Text conventions
Convention Description
Screen displays This typeface represents text as it appears on the screen.
Keyboard key names If you must press two or more keys simultaneously, the key names arelinked with a plus sign (+), for example:
Press Ctrl+Alt+Del
The words enterand type
When you see the word enter in this guide, you must typesomething, and then press Return or Enter. Do not press Return orEnter when an instruction simply says type.
Fixed commandtext
This typeface indicates the fixed part of a command text. You must typethe command, or this part of the command, exactly as shown, andpress Return or Enterwhen you are ready to enter the command.
Example: The command display history-command must beentered exactly as shown.
Variablecommand text
This typeface indicates the variable part of a command text. You musttype a value here, and press Return or Enterwhen you are ready toenter the command.
Example: in the command super level , a value in the range 0 to 3must be entered in the position indicated by level
{ x | y | ... } Alternative items, one of which must be entered, are grouped in bracesand separated by vertical bars. You must select and enter one of theitems.
Example: in the command flow-control {hardware | none |software}, the braces and the vertical bars combined indicate thatyou must enter one of the parameters. Enter either hardware, ornone, or software.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
21/529
Related Manuals 21
Related Manuals The3Com SuperStack 4 Switch 5500G-EI Getting Started Guide providesinformation about installation.
The3Com SuperStack 4 Switch 5500G-EI Configuration Guide providesinformation about configuring your network using the commands described inthis guide.
[ ] Items shown in square brackets [ ] are optional.Example 1: in the command display users [all], the squarebrackets indicate that the parameter all is optional. You can enter thecommand with or without this parameter.
Example 2: in the command user-interface [type]first-number [last-number] the square brackets indicate that theparameters [type] and [last-number] are both optional. You canenter a value in place of one, both or neither of these parameters.
Alternative items, one of which can optionally be entered, are groupedin square brackets and separated by vertical bars.Example 3: in the command header [shell | incoming |login] text, the square brackets indicate that the parametersshell, incoming and loginare all optional. The vertical barsindicate that only one of the parameters is allowed.
Table 2 Text conventions
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
22/529
22 ABOUT THIS GUIDE
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
23/529
7/30/2019 5500gei
24/529
24 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
telnet
user-interface
user privilege level
Logging in Commands This section describes the commands that you can use to configure system accessand system security.
authentication-mode Syntax
authentication-mode { password | scheme | none }
View
User interface view
Parameter
password: Requires local authentication of password at log in.
scheme: Requires local or remote authentication of username and password atlog in.
none: Allows users to log in without username or password.
Description
This command configures the authentication method for a user at log in.
Use the command authentication-mode password to prompt a user for localpassword authentication at login. To set the password, use set authenticationpassword.
Use the command authentication-mode schemeto prompt a user to providelocal or remote user name and password authentication at login. The type of theauthentication depends on your network configuration. For further information,see AAA and RADIUS.
Use the command authentication-mode none to allow a user to log in withoutusername or password authentication.
By default, users logging in using the console port do not need to pass anyterminal authentication. Users logging in via modem or Telnet are required toprovide password authentication when they log in.
Example
To configure local password authentication, enter the following command:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface aux 0
[SW5500-ui-aux0]authentication-mode password
auto-execute command Syntax
auto-execute command text
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
25/529
Logging in Commands 25
undo auto-execute command
View
User Interface View
Parametertext:Specifies the command to be run automatically.
Description
Enter auto-execute command text to configure the Switch to automatically runa specified command. When the user logs in, the command will be executedautomatically. This command is usually used to configure the telnet command onthe terminal, which will connect the user to a designated device automatically.
Enter undo auto-execute command to cancel the auto-execute command so thecommand is not run automatically.
By default, auto-execute is disabled.
CAUTION: If you execute this command, the user-interface can no longer be usedto perform routine configurations on the local system. Ensure that you can log into the system in some other way to cancel the configuration, before you configurethe auto-execute command and save the configuration.
Example
To configure the Switch to automatically Telnet to device 10.110.100.1 after theuser logs in via VTY 0, enter the following command:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface vty 0[SW5500-ui-vty0]auto-execute command telnet 10.110.100.1
command-privilege level Syntax
command-privilege level level viewviewcommand
undo command-privilege viewviewcommand
View
System View
Parameter
level:Enter the command level you want to assign to this command, rangingfrom 0 to 3.
view:Enter the name of the view that contains the command. This can be any ofthe views supported by the Switch.
command:Enter the command to be configured.
Description
Use the command-privilege level command to configure the priority levelassigned to any command within a selected view.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
26/529
7/30/2019 5500gei
27/529
Logging in Commands 27
Example
To configure the data bits of the AUX (Console) port to 7 bits, enter the following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface aux 0
[SW5500-ui-aux0]databits 7
displayhistory-command
Syntax
display history-command
View
All views
Parameter
None
DescriptionUse the display history-command command to view the commands previouslyentered during this login session, up to a specified maximum.
To set the maximum number of commands to display, see history-commandmax-size.
Example
To display previously entered commands, enter the following.
display history-command
The commands display on screen.
display user-interface Syntax
display user-interface [ type number|number] [summary]
View
All views
Parameter
type number:Enter the type and number of the user interface you want todisplay details on, for example VTY 3.
number:Enter the index number of the user interface you want to display detailson.
summary: Display the summary of a user interface.
Description
Use the display user-interfacecommand to view information on a userinterface. You can choose to access this information by user interface type andtype number, or by user interface index number. The information displayed is thesame whichever access method you use.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
28/529
7/30/2019 5500gei
29/529
7/30/2019 5500gei
30/529
30 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
Parameter
type: Enter the type and type number of the user interface to be reset.
number: Enter the index number of the user interface to be reset.
DescriptionUse this command to reset a specified user interface to its default settings. Theuser interface will be disconnected after the reset.
Use free user-interface typeto reset the interface with the specified typeand type number to its default settings. Use free user-interface numbertoreset the interface with the specified index number to its default settings.
You cannot use this command on the current user interface.
Example
To reset user interface AUX 1 from another user interface on the Switch , enter the
following:free user-interface aux 1
After the command is executed, user interface AUX 1 is disconnected.When younext log in using user interface AUX 1, it opens using the default settings .
header Syntax
header { shell | incoming | login } text
undo header { shell | incoming | login }
View
System view
Parameter
login: Login information in case of authentication. It is displayed before the useris prompted to enter user name and password.
shell: User conversation established header, the information output after userconversation has been established. If authentication is required, it is promptedafter the user passes authentication..
incoming: Login header, the information output after a Modem user logs in. If
authentication is required, it is prompted after the user passes authentication. Inthis case, no shell information is output..
text: Specifies the title text. If you do not choose any keyword in the command,the system displays the login information by default. The system supports twotypes of input mode: you can input all the text in one line (a maximum of 256characters, including command key word, can be entered); or you can input all thetext in several lines using the key, and more than 256 characters can beentered. The text starts and ends with the first character. After entering the lastcharacter, press the key to exit the interactive process.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
31/529
Logging in Commands 31
Description
Use the header command to configure the system to display a header during userlog in. Use the undo header { shell | incoming | login }command todelete the specified header.
When the user logs in, and a connection is activated, the login header displays.After the user successfully logs in, the shell header displays.
The first characters in the text are regarded as the start and stop characters. Afteryou type in the stop character, the system will exit the header commandautomatically.
If you do not want to use the control characters, you can type in text with thesame characters at the beginning and end, and press Enter.
If you press after typing any of the three keywords shell, login andincoming in the command, then what you type after the word header is thecontents of the login information, instead of identifying header type.
You can judge whether the initial character can be used as the header contentsthis way:
1 If there is only one character in the first line and it is used as the identifier, thisinitial character pairs with the ending character and is not the header contents.
2 If there are many characters in the first line but the initial and ending charactersare different, this initial character pairs with the ending character and is theheader contents.
3 There are many characters in the first line and the initial character is identical withthe ending character, this initial character is not the header contents.
Example
Configure the header of setting up a session.
Mode 1: Input in one line
system-view
System View: return to User View with Ctrl+Z.
[SW5500]header shell %SHELL: Hello! Welcome%
The starting and ending characters must be the same, and press the keyto finish a line.
When you log on the Switch again, the terminal displays the configured session
establishment title.
[SW5500]quit
quit
Please press ENTERSHELL: Hello! Welcome
The initial character "%" is not the header contents.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
32/529
32 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
Mode 2: Input in several lines
system-view
System View: return to User View with Ctrl+Z.
[SW5500]header shell % SHELL:
After you pressing the key, the system prompts the following message:Input banner text, and quit with the character '%'.
Go on inputting the rest text and end your input with the first letter:
Hello! Welcome %
Press the key.
[SW5500]
When you log on the Switch again, the terminal displays the configured sessionestablishment title.
[SW5500]quitquit
Please press ENTER
%SHELL:
The initial character "%" is the header contents.
Hello! Welcome
history-commandmax-size
Syntax
history-command max-size value
undo history-command max-size
View
User interface view
Parameter
value: Enter the number of previously entered commands that you want theSwitch to save.
Description
Use the command history-command max-size to specify the amount of
previously entered commands that you want the Switch to save. Enter any valuebetween 0 and 256. The default is 10, that is, the 10 most recently enteredcommands are saved. Use the undo history-command max-size command torestore the default value.
To display the most recently-entered commands, up to the specified maximum,use the command display history-command.
Example
To set the history buffer to 20, that is to save the 20 most recently-enteredcommands, enter the following:
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
33/529
Logging in Commands 33
system-view
System View: return to User View with Ctrl+Z.[SW5500]user-interface aux 0
[SW5500-ui-aux0]history-command max-size 20
idle-timeout Syntaxidle-timeout minutes[ seconds]
undo idle-timeout
View
User interface view
Parameter
minutes:Enter the number of minutes you want to allow a user interface toremain idle before it is disconnected. This can be in the range 0 to 35791.
seconds:Enter the number of seconds in addition to the number of minutes.Optional.
Description
Use the idle-timeout command to configure the amount of time you want toallow a user interface to remain idle before it is disconnected. Use the undoidle-timeout command to restore the default idle-timeout. By default,idle-timeout is set to 10 minutes.
To disable idle timeout, set the idle-timeout value to 0.
Example
To configure the timeout value to 1 minute on the AUX user interface, enter thefollowing:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface aux 0
[SW5500-ui-aux0]idle-timeout 1
language-mode Syntax
language-mode { chinese | english }
View
User View
Parameter
chinese: Sets the language of the command line interface to Chinese.
english: Sets the language of the command line interface to English.
Description
Use the language-mode command to choose the language of the command lineinterface. By default, the command line interface is set to English.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
34/529
34 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
Example
To change the command line interface from English to Chinese, enter thefollowing:
language-mode chinese
lock Syntax
lock
View
User View
Parameter
None
Description
Use the lock command to lock the current user interface and prevent
unauthorized users from accessing it. An authorized user must enter a validpassword to access the interface.
Example
To lock the current user interface, enter the following:
lock
Password: xxxx
Again: xxxx
parity Syntax
parity { even | mark | none | odd | space }
undo parity
View
User Interface View
Parameter
even: Sets the Switch to even parity.
mark: Sets the Switch to mark parity (1)
none: Sets the Switch to perform no parity checking.
odd: Sets the Switch to odd parity.
space: Sets the Switch to zero parity (0)
Description
Use the parity command to configure the parity mode on the AUX (Console)port. Use the undo parity command to restore the default parity mode (no paritychecking).
This command can only be performed in the AUX user interface view.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
35/529
Logging in Commands 35
Example
To set mark parity on the AUX (Console) port, enter the following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface aux 0
[SW5500-ui-aux0]parity mark
protocol inbound Syntax
protocol inbound { all| ssh | telnet }
View
VTY user interface view
Parameter
all: Supports both Telnet and SSH protocols.
ssh: Supports only SSH protocol.
telnet: Supports only Telnet protocol.
Description
Use the protocol inbound command to configure the protocols supported by adesignated user interface.
By default, the user interface supports Telnet and SSH protocol.
For the related commands, see user-interface vty.
Example
Configure SSH protocol supported by VTY0 user interface.
system-view
System View: return to User View with Ctrl+Z.[SW5500]user-interface vty 0
[SW5500-ui-vty0]protocol inbound ssh
quit Syntax
quit
View
All views
Parameter
None
Description
Use the quit command to exit from the current view to the next highest view. Ifthe current view is user view, this command quits the system.
There are three levels of view, which are, from high to low:
user view
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
36/529
36 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
system view
menu views, for example VLAN view, Ethernet port view, and so on.
Related commands: return, system-view.
ExampleTo return to user view from system view, enter the following:
[SW5500]quit
return Syntax
return
View
System view or higher
ParameterNone
Description
Use the return command to return to user view from any other view.
Ctrl+Z performs the same function as the return command.
To return to the next highest level of view, use quit.
Example
To return to user view from any other view (the example below shows the
command entered from the system view), enter the following.system-view
System View: return to User View with Ctrl+Z.[SW5500]return
screen-length Syntax
screen-length screen-lengthundo screen-length
View
User interface view
Parameter
screen-length: Enter the maximum number of information lines that you wantto display on a terminal screen, ranging from 0 to 512. The default is 24.
Description
Use the command screen-length to configure how many information lines(maximum) will be displayed on the screen of a terminal. Use the command undoscreen-length to restore the default of 24 lines.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
37/529
Logging in Commands 37
To disable this function, that is to allow an unlimited number of information lines,enter the parameter as 0.
Example
To configure a terminal to display 20 lines of information, enter the following:
system-viewSystem View: return to User View with Ctrl+Z.[SW5500]user-interface aux 0
[SW5500-ui-aux0]screen-length 20
send Syntax
send { all | number| type}
View
User view
Parameter
all: Sends a message to all user interfaces.
type:Enter the type and type number of the user interface that you want to senda message to.
number:Enter the absolute/relative number of the interface that you want tosend a message to.
Description
Use the send command to send messages to other user interfaces.
Example
To send a message to all the user interfaces, enter the following:
send all
service-type Syntax
service-type { ftp [ ftp-directory directory] | lan-access |{ssh |
telnet | terminal }* [ level level ]}
undo service-type { ftp [ ftp-directory directory] | lan-access|{ssh | telnet | terminal }* }
View Local-user View
Parameter
telnet: Specifies user type as Telnet.
ssh: Specifies user type as SSH.
level level:Specifies the level of Telnet, SSH or terminal users. The argumentlevel is an integer in the range of 0 to 3 and defaults to 0.
ftp: Specifies user type as ftp.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
38/529
38 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
ftp-directorydirectory: Specifies the directory of ftp users, directory is acharacter string of up to 64 characters.
lan-access: Specifies user type to lan-access, which mainly refers to Ethernetaccessing users, 802.1x supplicants for example.
terminal: Authorizes the user to use the terminal service (login from the Consoleport).
Description
Use the command service-type to configure which level of command a user canaccess after login. Use the command undo service-type to restore the defaultlevel of command (level 1).
Commands are classified into four levels, as follows:
0 - Visit level. Users at this level have access to network diagnosis tools (such asping and tracert), and the Telnet commands. A user at this level cannot save
the configuration file. 1 - Monitoring level. Users at this level can perform system maintenance,
service fault diagnosis, and so on. A user at this level cannot save theconfiguration file.
2 - System level. Users at this level can perform service configurationoperations, including routing, and can enter commands that affect eachnetwork layer. Configuration level commands are used to provide directnetwork service to the user.
3 - Management level. Users at this level can perform basic system operations,and can use file system commands, FTP commands, TFTP commands, XModemdownloading commands, user management commands and level setting
commands.
Example
To allow a user zbr to configure commands a level 0 after login, enter thefollowing:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]local-user zbr
[SW5500-luser-zbr]service-type telnet level 0
To activate these settings, quit the system and login with the username zbr. Nowonly the commands at level 0 are listed on the terminal.
[SW5500]quit?
User view commands:
language-mode Specify the language environmentping Ping function
quit Exit from current command view
super Set the current user priority leveltelnet Establish one TELNET connection
tracert Trace route function
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
39/529
Logging in Commands 39
set authenticationpassword
Syntax
set authentication password { cipher | simple }password
undo set authentication password
View
User interface view
Parameter
cipher: Configure to display the password in encrypted text.
simple: Configure to display the password in plain text.
password: If the authentication is in the simple mode, the password must be inplain text. If the authentication is in the cipher mode, the password can be eitherin encrypted text or in plain text. If a plain text password is entered when ciphermode has been selected, the password will be displayed in the configuration
settings as encrypted. A plain text password is a sequential character string of nomore than 16 digits, for example, 3Com918. The length of an encrypted passwordmust be 24 digits and in encrypted text, for example,_(TT8F]Y\5SQ=^Q`MAF4
7/30/2019 5500gei
40/529
40 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
Description
Use the shell command to enable the terminal service for a user interface. Theterminal service is enabled by default. Use the undo shell command to disablethe terminal service for a user interface.
When using the undo shell command, note the following points. For reasons of security, the undo shell command can only be used on user
interfaces other than the AUX user interface.
You cannot use this command on the current user interface.
You are asked to confirm the command.
Example
To disable the terminal service on the VTY user interfaces 0 to 4, enter thefollowing from another user interface:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface vty 0 4[SW5500-ui-vty0-4]undo shell
speed Syntax
speed speed-value
undo speed
View
User interface view
Parameter
speed-value: Specify the transmission rate on the AUX (Console) port in bits persecond (bps). This can be any of the following values: 1200,2400, 4800,9600,19200,38400,57600, or 115200 .
The default rate is 19200 bps.
Description
Use the speed command to configure the transmission rate on the AUX (Console)port. Use the undo speed command to restore the default rate.
This command can only be performed in AUX user interface view.
Example
To configure the transmission speed on the AUX (Console) port as 9600 b/s, enterthe following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface aux 0
[SW5500-ui-aux0]speed 9600
stopbits Syntax
stopbits { 1 | 1.5 | 2 }
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
41/529
Logging in Commands 41
undo stopbits
View
User interface view
Parameter
1: Sets the stop bits to 1.
1.5: Sets the stop bits to 1.5.
2: Sets the stop bits to 2.
Description
Use the stopbits command to configure the stop bits on the AUX (Console) port.Use the undo stopbits command to restore the default stop bits (the defaultis 1).
This command can only be performed in AUX user interface view.
Example
To configure the stop bits to 2, enter the following from the AUX (Console) port:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface aux 0
[SW5500-ui-aux0]stopbits 2
super Syntax
super level
View
All views
Parameter
level:Enter a user level in the range 0 to 3. The default is 3.
Description
The super command gives a user access to a higher level than their currentlyassigned user level.
To ensure that only an authorized user can access the higher level, use the superpassword command to set a password for the higher level. If the user does notenter a valid password, the user level does not change.
Login users are classified into four levels that correspond to the four commandlevels. A user can only use commands at the levels that are equal to or lower thantheir user level.
Related commands: super password, quit.
Example
To change to user level 3 from the current user level.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
42/529
42 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
super 3
Password:
The password prompt displays only if you set a password using the superpassword command.
super password Syntax
super password [ level level ]{ simple | cipher }password
undo super password [ level level ]
View
System View
Parameter
level:Entera user level in the range 1 to 3. The default is 3. The password youenter is set for the specified level.
cipher: Configure to display the password in encrypted text.
simple: Configure to display the password in plain text.
password: If the authentication is in the simple mode, the password must be inplain text. If the authentication is in the cipher mode, the password can be eitherin encrypted text or in plain text. If a plain text password is entered when ciphermode has been selected, the password will be displayed in the configurationsettings as encrypted. A plain text password is a sequential character string of nomore than 16 digits, for example, 3Com918. The length of an encrypted passwordmust be 24 digits and in encrypted text, for example,_(TT8F]Y\5SQ=^Q`MAF4
7/30/2019 5500gei
43/529
Logging in Commands 43
undo sysname
View
System view
Parameter
text:Enter the host name of the Switch. The host name must be no more than30 characters long. The default is SW5500.
Description
Use the sysname command to configure the host name of the Switch. Use theundo sysname command to restore the host name to the default of SW5500.
Changing the hostname of the Ethernet switch will affect the prompt ofcommand line interface. For example, if the hostname of the Ethernet switch isMyHost, the prompt in user view will be .
Example
To configure the hostname of the Switch to 3Com, enter the following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]sysname 3Com
[3Com]
system-view Syntax
system-view
View
User view
Parameter
None
Description
Enter system-viewto enter the system view from the user view.
Related commands: quit, return.
Example
To enter system view from user view, enter the following:system-view
System view: return to User View with Ctrl+Z.[SW5500]
telnet Syntax
telnet { hostname| ip_address}[ service_port ]
View
User view
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
44/529
44 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
Parameter
hostname: Enter the host name of the remote Switch. It is configured using theip host command.
ip_address:Enter theIP address or the host name of the remote Switch. If youenter the host name, the Switch must be set to static resolution.
service_port:Designates the management port on the remote Switch, in therange 0 to 65535. Optional.
Description
Use the telnet command to log in to another Ethernet switch from the currentswitch via Telnet for remote management. To terminate the Telnet logon, press .
If you do not specify a service_port, the default Telnet port number of 23 isused.
Related command: display tcp status.
Example
To log in to the Ethernet switch Switch32 at IP address 10.1.1.1 from the currentSwitch (Switch01), enter the following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface vty 0 4
[SW5500-ui-vty0-4]authentication-mode none
telnet 10.1.1.1
Trying 10.1.1.1.....
Press CTRL+K to abort
Connected to 10.1.1.1...*********************************************************
* All rights reserved (1997-2005) *
* Without the owner's prior written consent, **no decompiling or reverse-engineering shall be allowed.*
*********************************************************
user-interface Syntax
user-interface [ type] first_number[ last_number]
View
System view
Parameter
type:Enter the user interface type, which can be aux or vty.
first_number: Specifies the number of the first user interface to be configured..
last_number: Specifies the number of the last user interface to be configured.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
45/529
Logging in Commands 45
Description
Using user-interface command, you can enter single user interface view ormultiple user interface views to configure the corresponding user interfaces.
Example
To configure the user interfaces with index numbers 0 to 9, enter the following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]user-interface 0 9
[SW5500-ui0-9]
This example command selects two AUX (Console) port user interfaces and twoVTY user interfaces (VTY 0, VTY 1). You can now assign access levels to theseinterfaces using the user privilege level command.
user privilege level Syntax
user privilege level level
undo user privilege level
View
User interface view
Parameter
level: Enter the level of command that a user can access, in the range 0 to 3.
Description
Use the user privilege level levelcommand to configure the command level
that a user can access from the specified user interface. The user can use all theavailable commands at this command level. Use the undo user privilege levelcommand to restore the default command level. By default, a user can access allcommands at Level 3 after logging in through the AUX user interface, and allcommands at Level 0 after logging in through a VTY user interface.
Example
To configure a user to access command level 0 after logging in from the VTY 0user interface, enter the following:
system-view
System View: return to User View with Ctrl+Z.[SW5500]user privilege level 0
When the user Telnets from the VTY 0 user interface to the switch, the terminaldisplays commands at level 0, as shown below:
?
User view commands:
language-mode Specify the language environmentping Ping function
quit Exit from current command view
super Set the current user priority leveltelnet Establish one TELNET connection
tracert Trace route function
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
46/529
46 CHAPTER 1: USING SYSTEM ACCESS COMMANDS
undo Negate a command or set its default
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
47/529
2 USING PORT COMMANDS
This chapter describes how to use the following commands:
Ethernet Port Configuration Commands
broadcast-suppression
copy configuration
description
display interface
display loopback-detection
display port
display unit
duplex
flow-control
interface
jumboframe enable
loopback
loopback-detection control enable
loopback-detection enable
loopback-detection interval-time
loopback-detection per-vlan enable
multicast-suppression
port access vlan
port hybrid pvid vlan
port hybrid vlan
port link-type
port trunk permit vlan port trunk pvid vlan
reset counters interface
shutdown
speed
unicast-suppression
Ethernet Port Link Aggregation Commands
debugging link-aggregation error
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
48/529
48 CHAPTER 2: USING PORT COMMANDS
debugging link-aggregation event
debugging lacp packet
debugging lacp state
display link-aggregation summary
display link-aggregation verbose
display link-aggregation interface
display lacp system-id
lacp enable
lacp port-priority
lacp system-priority
link-aggregation group agg-id description
link-aggregation group agg-id mode
port link-aggregation group
reset lacp statistics
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
49/529
Ethernet Port Configuration Commands 49
Ethernet PortConfigurationCommands
This section describes the commands you can use to configure and manage theports on your Switch 5500G-EI.
broadcast-suppression Syntaxbroadcast-suppression { ratio | ppspps}
undo broadcast-suppression
View
Ethernet Port View
Parameter
ratio: Specifies the bandwidth ratio of broadcast traffic allowed on an Ethernetport. The ratio value ranges from 1 to 100. The incremental step is 1. By default,
the ratio is 100 meaning all broadcast traffic is accepted. The smaller the ratio is,the less bandwidth is allocated to broadcast traffic and therefore less broadcasttraffic is accepted on the Ethernet port.
ppspps: Specifies the maximum number of broadcast packets per secondaccepted on an Ethernet port. Ranges from 1 to 148810 pps.
Description
Use broadcast-suppression to configure the amount of broadcast traffic thatwill be accepted on a port. Once the broadcast traffic exceeds the value set by theuser, the excess broadcast traffic will be discarded. This feature can be used toensure network service and prevent broadcast storms.
Example
Enable a limit of 20% of the available bandwidth on a port to be allocated tobroadcast traffic. Broadcast traffic exceeding 20% of the ports bandwidth will bediscarded.
system-view
System View: return to User View with Ctrl+Z.[SW5500]interface ethernet 1/0/1
[SW5500-Ethernet1/0/1]broadcast-suppression 20
[SW5500-Ethernet1/0/1]
Specify the maximum packets per second of broadcast traffic on Ethernet1/0/1 tobe 1000.
system-view
System View: return to User View with Ctrl+Z.[SW5500]interface ethernet 1/0/1
[SW5500-Ethernet1/0/1]broadcast-suppression pps 1000
[SW5500-Ethernet1/0/1]
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
50/529
50 CHAPTER 2: USING PORT COMMANDS
copy configuration Syntax
copy configuration source { interface-type interface_number|interface_name| aggregation-group agg-id} destination {interface_list [ aggregation-group agg-id] | aggregation-groupagg-id}
View
System View
Parameter
interface_type: Source port type.
interface_num: Source port number.
interface_name: Source port name, in the format of interface_name =interface_type interface_num. For more information, see the parameter item forthe interface command.
interface_list: Destination port list, interface_list1 = { interface_typeinterface_num| interface_name} [ to { interface_type interface_num|interface_name} ] &. & indicates that the former parameter canbe input 10 times repeatedly at most.
agg-id: Source or destination aggregation group ID. If it is a source aggregationgroup, the port with minimum port number is the source port; if it is a destinationaggregation group, the configurations of all its member ports change to beconsistent with that of the source.
Description
Use the copy configuration command to copy the configuration of a specific
port to other ports, to ensure consistent configuration.
Example
Copy the configuration of aggregation group 1 to aggregation group 2.
system-view
System View: return to User View with Ctrl+Z.[SW5500]copy configuration source aggregation-group 1, destination
aggregation-group 2
description Syntax
description text
undo description
View
Ethernet Port View
Parameter
text:Enter a description of the Ethernet port. This can be a maximum of 80characters.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
51/529
Ethernet Port Configuration Commands 51
Description
Use the description command to enter a description of an Ethernet port. Usethe undo description command to cancel the description.
By default, an Ethernet port does not have a description.
Example
Set the description of port Ethernet1/0/1 to be lanswitch-interface.
system-view
System View: return to User View with Ctrl+Z.
[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]description lanswitch-interface
display interface Syntax
display interface [ interface_type|
interface_type interface_number]
View
All views
Parameter
interface_type:Enter the interface type. This can be either Aux, Ethernet,GigabitEthernet , NULL, Vlan-interface.
interface_number: Enter the interface number in the formatunit-number/0/port-number.
The unit number is a number in the range 1 to 8.
The port number is a number in the range 1 to 28 or 1 to 52 depending on thenumber of ports you have on your unit.
You can use the interface_nameat this command. This consists of theinterface_typeand the interface_numbercombined as a single parameter. Forexample Ethernet1/0/1.
Description
Use the display interface command to view the configuration information onthe selected interface. Along with others, this interface could be a specific port'sinterface (for example, Ethernet1/0/1) or a specific VLAN interface (for example,vlan-interface 1).
Example
To display configuration information on Ethernet port 1/0/1, enter the following:
display interface Ethernet 1/0/1
The information displays in the following format:
Ethernet1/0/1 current state : UP
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
52/529
52 CHAPTER 2: USING PORT COMMANDS
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is00e0-fc00-0010
The Maximum Transmit Unit is 1500
Media type is twisted pair, loopback not setPort hardware type is 1000_BASE_T
Unkown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type isautonegotiationFlow-control is not enabled
The Maximum Frame Length is 1536
Broadcast MAX-ratio: 100%
Allow jumbo frame to pass
PVID: 1Mdi type: auto
Port link-type: access
Tagged VLAN ID : noneUntagged VLAN ID : 1
Last 300 seconds input: 0 packets/sec 0 bytes/sec
Last 300 seconds output: 0 packets/sec 0 bytes/sec
Input(total): 0 packets, 0 bytes- broadcasts, - multicasts
Input(normal): 0 packets, 0 bytes
0 broadcasts, 0 multicasts
Input: 0 input errors, 0 runts, 0 giants, 0 throttles, 0 CRC
frame, - overruns, 0 aborts, - ignored, - parity errorsOutput(total): 0 packets, 0 bytes
- broadcasts, - multicasts, - pauses
Output(normal): 0 packets, 0 bytes
0 broadcasts, 0 multicasts, 0 pausesOutput: 0 output errors, - underruns, - buffer failures
- aborts, 0 deferred, 0 collisions, 0 late collisions
- lost carrier, - no carrier
Table 6 Output Description of the Display Interface Command
Field Description
Ethernet1/0/1 current state Indicates the current state of the Ethernet port (upor down)
IP Sending frames format Displays the Ethernet frame format
Hardware address Displays the port hardware address
Description Displays the port description
The Maximum Transmit Unit Indicates the maximum transmit unit
Media type Indicates the type of media
loopback not set Displays the port loopback test state
Port hardware type Displays the port hardware type
Unknowns-speed mode,unknown-duplex mode, link speed typeis autonegotiation, link duplex type isautonegotiation
Both the duplex mode and the rate are set toauto-negotiation.
Flow control is not enabled Port flow control state
The Maximum Frame Length Indicates the maximum length of the Ethernetframes that can pass through the port
Broadcast MAX ratio Port broadcast storm suppression ratio
Allow jumbo frame to pass Indicates that jumbo frame are allowed to passthrough the port
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
53/529
Ethernet Port Configuration Commands 53
displayloopback-detection
Syntax
display loopback-detection
View
All views
Parameter
None
Description
Use the display loopback-detection command to view whether the portloopback detection has been enabled. If it has been enabled, then the timeinterval of the detection and the current port loopback information will also bedisplayed.
Example
To display if the port loopback detection is enabled, enter the following:
display loopback-detection
The details display in the following format:
PVID Indicates the port default VLAN ID.
Mdi type Indicates the cable type
Port link-type Indicates the port link type
Tagged VLAN ID Indicates the VLANs with packets tagged
Untagged VLAN ID Indicates the VLANs with packets untagged
Last 300 minutes input rate:0 packets/sec, 0 bytes/sec
Last 300 minutes output rate:0 packets/sec, 0 bytes/sec
Displays the input/output rate and the number ofpackets that were passed on this port in the last300 seconds
Input(total): 0 packets, 0 bytes
- broadcasts, - multicasts
Input(normal): 0 packets, 0 bytes
0 broadcasts, 0 multicasts
Input: 0 input errors, 0 runts, 0 giants,0 throttles, 0 CRC
- frame, - overruns, 0 aborts, -ignored, - parity errors
Output(total): 0 packets, 0 bytes
- broadcasts, - multicasts, - pauses
Output(normal): 0 packets, 0 bytes
0 broadcasts, 0 multicasts, 0 pauses
Output: 0 output errors, - underruns, -buffer failures
- aborts, 0 deferred, 0 collisions, 0late collisions
- lost carrier, - no carrier
The statistics information of input/output packetsand errors on this port. A - indicates that theitem isn't supported by the switch.
Table 6 Output Description of the Display Interface Command
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
54/529
54 CHAPTER 2: USING PORT COMMANDS
Loopback-detection is running
Detection interval time is 30 seconds
There is no port existing loopback link
display port Syntax
display port { hybrid | trunk }
View
All views
Parameter
hybrid: Enter to display the hybrid ports.
trunk: Enter to display the trunked ports.
Description
Use the display port hybrid command to view the ports whose link type ishybrid. Use the display port trunkcommand to view the ports whose link typeis trunk.
Example
To display the currently configured hybrid ports, enter the following:
display port hybrid
The details display in the following format:
The following hybrid ports exist:
GigabitEthernet1/0/1 GibabitEthernet1/0/2
This example indicates that the current configuration has two hybrid ports,GigabitEthernet1/0/1 and GigabitEthernet1/0/2.
display unit Syntax
display unit unit-idinterface
View
Any view
Parameter
unit-id: Specifies Unit ID, ranging from 1 to 8.
Table 7 Output Description of the Display Loopback-detection Command
Field Description
Loopback-detection is running The Loopback-detection is enabled
Detection interval time is 30 seconds The detection interval is 30 seconds
There is no port existing loopback link No port is in the loopback state
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
55/529
Ethernet Port Configuration Commands 55
Description
Using display unitunit-idinterface command, you can view all portinterfaces for the specified unit.
Example
Display the port information for all ports on Unit 1.
display unit 1 interface
Aux1/0/0 current state :DOWN
Line protocol current state :DOWN
Internet protocol processing : disabled
Description : Aux1/0/0 InterfaceThe Maximum Transmit Unit is 1500
Data drive mode: interactive
5 minutes input rate 0.0 bytes/sec, 0.0 packets/sec
5 minutes output rate 0.0 bytes/sec, 0.0 packets/sec
0 packets input, 1000 bytes0 packets output, 27317 bytes
error: Parity 0, Frame 0, Overrun 0, FIFO 0DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP
Cascade1/2/1 current state :DOWN
Line protocol current state :DOWN
Description : Cascade1/2/1 InterfaceThe Maximum Transit Unit is 1500, Hold timer is 10(sec)
(Omitted)
duplex Syntax
duplex { auto | full | half }
undo duplex
View
Ethernet Port View
Parameters
auto: Enter to set the port to auto-negotiation.
full: Enter to set the port to full-duplex.
half: Enter to set the port to half-duplex.
Description
Use the duplex command to configure the duplex mode of an Ethernet port toauto-negotiation, full duplex or half-duplex. Use the undo duplex command torestore the duplex mode of a port to the default mode (auto-negotiation).
Related command: speed.
Example
To configure the Ethernet port Ethernet1/0/1 to auto-negotiation, enter thefollowing:
system-view
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
56/529
56 CHAPTER 2: USING PORT COMMANDS
System View: return to User View with Ctrl+Z.[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]duplex auto
flow-control Syntax
flow-control
undo flow-control
View
Ethernet Port View
Parameters
None
Description
Use the flow-control command to enable flow control on an Ethernet port. This
avoids discarding data packets due to congestion. Use the undo flow-controlcommand to disable flow control.
By default, flow control is disabled.
Example
To enable flow control on port Ethernet1/0/1, enter the following.
system-view
System View: return to User View with Ctrl+Z.
[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]flow-control
interface Syntax
interface interface_type interface_num| interface_name
View
System View
Parameter
interface_type:Enter the interface type. This can be either ,GigabitEthernet, TenGigabitEthernet, Cascade.
interface_number: Enter the interface number in the format unit ID/slotnumber/port-number.
The unit ID is a number in the range 1 to 8.
The slot number is a number in the range 0 to 2
The port number is a number in the range 1 to 28 or 1 to 52 depending on thenumber of ports you have on your unit.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
57/529
Ethernet Port Configuration Commands 57
You can use the interface_nameat this command. This consists of theinterface_typeand the interface_numbercombined as a single parameter. Forexample Ethernet1/0/1.
Description
Use the command interface interface_type interface_numberto enter theinterface of the specified port.
If you want to configure the parameters of an Ethernet port, you must first usethis command to enter the Ethernet port view.
Example
To enter the interface for port GigabitEthernet1/0/1, enter the following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]interface Gigabitethernet1/0/1
jumboframe enable Syntax
jumboframe enable
undo jumboframe enable
View
Ethernet Port View
Parameter
None.
Description
Use the jumboframe enable command to allow jumbo frames to pass throughthe specified Ethernet port. Use the undo jumboframe enable command toprevent jumbo frames from passing through an Ethernet port.
If using the 3comoscfg.def default file, jumbo frame support is disabled on allports. When it is enabled, frames between 1522 bytes and 9216 bytes arepermitted.
Example
Allow jumbo frames to pass through Ethernet port 1/0/1.
system-view
System View: return to User View with Ctrl+Z.
[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]jumboframe enable
loopback Syntax
loopback { external | internal }
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
58/529
58 CHAPTER 2: USING PORT COMMANDS
View
Ethernet Port View
Parameter
external: External loop test.
internal: Internal loop test.
Description
Use the loopback command to configure the Ethernet port to perform theloopback test to check if the Ethernet port works normally. The loop test will finishautomatically after being performed for a while.
By default, the Ethernet port will not perform the loopback test.
Example
To perform the internal loop test for Ethernet1/0/1, enter the following:system-view
System View: return to User View with Ctrl+Z.
[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]loopback internal
loopback-detectioncontrol enable
Syntax
loopback-detection control enable
undo loopback-detection control enable
ViewEthernet Port View
Parameter
None
Description
Use the loopback-detection control enable command to enable loopbackdetection control function on a Trunk port or Hybrid port. Use the undoloopback-detection control enable command to disable loopback detectioncontrol function on a Trunk port or Hybrid port.
This command controls the operating status of the port, when the loopbackdetection function is enabled and lookback is detected on a Trunk or Hybrid port.When this function is enabled and loopback is detected on a Trunk or Hybrid port,the system begins to control the operating status of the port. When this functionis disabled and loopback is found, the system just reports a Trap message but hasno control over the operating status of the Trunk or Hybrid port.
By default, the loopback detection control function on Trunk or Hybrid ports isdisabled.
This command has no effect on Access ports.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
59/529
Ethernet Port Configuration Commands 59
Example
Enable port loopback detection control.
system-view
System View: return to User View with Ctrl+Z.
[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]loopback-detection control enable
loopback-detectionenable
Syntax
loopback-detection enable
undo loopback-detection enable
View
Ethernet Port View
ParameterNone
Description
Use the loopback-detection enable command to enable port loopbackdetection. If there is a loopback port found, the switch will put it under control.Use the undo loopback-detection enable command to disable port loopbackdetection.
Loopback detection of a specified port only functions after port loopbackdetection is enabled in the System or Ethernet port view. By default, port loopbackdetection is disabled.
Related commands: display loopback-detection
Example
To enable port loopback detection, enter the following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]loopback-detection enable
loopback-detectioninterval-time
Syntax
loopback-detection interval-time time
undo loopback-detection interval-time
View
System View
Parameter
time: Specifies the interval of monitoring external loopback conditions of theport. It ranges from 5 to 300, measured in seconds.
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
60/529
60 CHAPTER 2: USING PORT COMMANDS
By default, the interval is 30 seconds.
Description
Use the loopback-detection interval-time command to configure thedetection interval for the external loopback condition of each port. Use the undo
loopback-detection interval-time command to restore the default interval.
Related commands: display loopback-detection
Example
To configure the detection interval for the external loopback condition of eachport to 10 seconds, enter the following:
system-view
System View: return to User View with Ctrl+Z.
[SW5500]loopback-detection interval-time 10
loopback-detectionper-vlan enable
Syntaxloopback-detection per-vlan enable
undo loopback-detection per-vlan enable
View
Ethernet Port View
Parameter
None
Description
Use the loopback-detection per-vlan enable command to configure thesystem to perform loopback detection on all VLANs on Trunk and Hybrid ports.Use the undo loopback-detection per-vlan enable command to configure thesystem to only perform loopback detection on the default VLANs on the port.
By default, the system performs loopback detection to the default VLAN on Trunkand Hybrid ports.
Example
Configure the detection interval for the external loopback condition of each portto 10 seconds.
system-viewSystem View: return to User View with Ctrl+Z.
[SW5500]loopback-detection per-vlan enable
multicast-suppression Syntax
multicast-suppression { ratio| ppspps}
undo multicast-suppression
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
61/529
Ethernet Port Configuration Commands 61
View
Ethernet Port View
Parameter
ratio: Specifies the bandwidth ratio of multicast traffic allowed on an Ethernetport. The ratio value ranges from 1 to 100. The incremental step is 1. By default,the ratio is 100 meaning all multicast traffic is accepted. The smaller the ratio is,the less bandwidth is allocated to multicast traffic and therefore less broadcasttraffic is accepted on the Ethernet port.
ppspps: Specifies the maximum number of multicast packets per second acceptedon an Ethernet port. Ranges from 1 to 148810 pps.
Description
Usemulticast-suppression to configure the amount of multicast traffic that willbe accepted on a port. Once the multicast traffic exceeds the value set by the user,
the excess multicast traffic will be discarded. This feature can be used to ensurenetwork service and prevent multicast storms.
Example
Enable a limit of 20% of the available bandwidth on a port to be allocated tomulticast traffic. Multicast traffic exceeding 20% of the ports bandwidth will bediscarded.
system-view
System View: return to User View with Ctrl+Z.
[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]multicast-suppression 20
port access vlan Syntax
port access vlan vlan_id
undo port access vlan
View
Ethernet Port View
Parameter
vlan_id:Enter a VLAN ID in the range 2 to 4094, as defined in IEEE 802.1Q.
Description
Use the port access vlan command to assign the access port to a specifiedVLAN.
Use the undo port access vlan command to remove the access port fromthe VLAN.
Example
To assign GigabitEthernet port 1/0/1 to VLAN3, enter the following.
system-view
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
62/529
62 CHAPTER 2: USING PORT COMMANDS
System View: return to User View with Ctrl+Z.
[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]port access vlan 3
port hybrid pvid vlan Syntax
port hybrid pvid vlanvlan_id
undo port hybrid pvid
View
Ethernet Port View
Parameter
vlan_id:Enter a VLAN ID in the range 2 to 4094, as defined in IEEE 802.1Q. Thedefault is 1.
Description
Use the port hybrid pvid vlan command to configure the default VLAN ID ofthe hybrid port. Use the undo port hybrid pvid command to restore the defaultVLAN ID of the hybrid port.
Hybrid port can be configured together with the isolate-user-vlan. But if thedefault VLAN has set mapping in the isolate-user-vlan, the default VLAN ID cannotbe modified. If you want to modify it, cancel the mapping first.
The default VLAN ID of local hybrid port must be consistent with that of the peerone, otherwise, the packets cannot be properly transmitted.
Related command: port link-type.
Example
To configure the default VLAN of the hybrid port Ethernet1/0/1 to VLAN100, enterthe following.
system-view
System View: return to User View with Ctrl+Z.[SW5500]interface Gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]port hybrid pvid vlan 100
port hybrid vlan Syntax
port hybrid vlan vlan_id_list { tagged | untagged }
undo port hybrid vlan vlan_id_list
View
Ethernet Port View
loaded from www.Manualslib.commanuals search engine
http://www.manualslib.com/http://www.manualslib.com/7/30/2019 5500gei
63/529
7/30/2019 5500gei
64/529
64 CHAPTER 2: USING PORT COMMANDS
Description
Use the port link-type command to configure the link type of the Ethernetport. Use the