Intel SBCEGBESW10 CLI Manual 

Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide A Guide for System Administrators of Intel® Server Products Intel Order Number D67145-002

Disclaimer Information in this document is provided in connection with Intel® products. No license, express or implied, by estoppel or otherwise, to any intellectual property rights is granted by this document. Except as provided in Intel's Terms and Conditions of Sale for such products, Intel assumes no liability whatsoever, and Intel disclaims any express or implied warranty, relating to sale and/or use of Intel products including liability or warranties relating to fitness for a particular purpose, merchantability, or infringement of any patent, copyright or other intellectual property right. Intel products are not intended for use in medical, life saving, or life sustaining applications. Intel may make changes to specifications and product descriptions at any time, without notice. Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others. Copyright © 2006, Intel Corporation. All Rights Reserved. This product includes software developed by the OpenSSL Project for use in the Open SSL Toolkit (http:// wwww.openssl.org/). This product includes software developed by the NetBSD Foundation, Inc., and its contributors. This product includes crytographic software written by Eric Young ([email protected]). This product includes software written by Tim Hudson ([email protected]). SECURE SOCKETS LAYER DELIVERABLE: The Secure Sockets Layer shall constitute “OpenSSL Deliverables” hereunder. The OpenSSL Deliverables are provided to Licensee under the terms of this Agreement and the OpenSSL License Agreement (the “OpenSSL License”), and any use of such OpenSSL Deliverables shall comply with the terms and conditions of the OpenSSL License and this Agreement. A copy of the OpenSSL License is available in the license.txt file accompanying the Deliverables and at http://www.openssl.org/source/license.html. SSH PROTOCOL SUITE OF NETWORK CONNECTIVITY TOOLS DELIVERABLES: The SSH protocol suite of network connectivity tools shall constitute “Open SSH Deliverables” hereunder. The OpenSSH Deliverables are provided to Licensee under the terms of this Agreement and the BSD License (the “BSD License”), and any use of such OpenSSH Deliverables shall comply with the terms and conditions fo the BSD License and this Agreement. A copy of the BSD License is set forth as below: Copyright © Marvell International Ltd. and its affiliates. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistribution of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgement: This product includes software developed by the NetBSD Foundation, Inc. and its contributors. 4. Neither the name of Marvell nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

iii Safety Information Important Safety Instructions Read all caution and safety statements in this document before performing any of the instructions. Wichtige Sicherheitshinweise Lesen Sie zunächst sämtliche Warnund Sicherheitshinweise in diesem Dokument, bevor Sie eine der Anweisungen ausführen. Consignes de sécurité Lisez attention toutes les consignes de sécurité et les mises en garde indiquées dans ce document avant de suivre toute instruction. Instrucciones de seguridad importantes Lea todas las declaraciones de seguridad y precaución de este documento antes de realizar cualquiera de las instrucciones. 重要安全指导 在执行任何指令之前，请阅读本文档中的所有注意事项及安全声明。 和/或 http://support.intel.com/support/motherboards/server/sb/CS-010770.htm 上的 Intel Server Boards and Server Chassis Safety Information（《Intel 服务器主板与服务器机箱安全信息》）。

Warnings Heed safety instructions: Before working with your server product, whether you are using this guide or any other resource as a reference, pay close attention to the safety instructions. You must adhere to the assembly instructions in this guide to ensure and maintain compliance with existing product certifications and approvals. Use only the described, regulated components specified in this guide. Use of other products / components will void the UL listing and other regulatory approvals of the product and will most likely result in noncompliance with product regulations in the region(s) in which the product is sold. System power on/off: The power button DOES NOT turn off the system AC power. To remove power from system, you must unplug the AC power cord from the wall outlet. Make sure the AC power cord is unplugged before you open the chassis, add, or remove any components. Hazardous conditions, devices and cables: Hazardous electrical conditions may be present on power, telephone, and communication cables. Turn off the server and disconnect the power cord, telecommunications systems, networks, and modems attached to the server before opening it. Otherwise, personal injury or equipment damage can result. Electrostatic discharge (ESD) and ESD protection: ESD can damage disk drives, boards, and other parts. We recommend that you perform all procedures in this chapter only at an ESD workstation. If one is not available, provide some ESD protection by wearing an antistatic wrist strap attached to chassis ground any unpainted metal surface on your server when handling parts.

v Preface About this Manual Thank you for purchasing and using an Intel® Blade Server Ethernet Switch Module SBCEGBESW1 or SBCEGBESW10. This manual is written for System Administrators who have knowledge of device management through Command Line Interface (CLI) commands.This document provides the basic rules for understanding how the commands are presented in this guide. The Guide also provides command by command information of all available CLI commands, inclusive of the command description, command syntax, any parameters, other relevant command information, and a basic example. For the latest version of this manual, see http://support.intel.com. Manual Organization Chapter 1 Using CLI Chapter 2 AAA Commands Chapter 3 Address Table Commands Chapter 4 ACL Commands Chapter 5 Clock Commands Chapter 6 Configuration and Image File Commands Chapter 7 Ethernet Configuration Commands Chapter 8 GVRP Commands Chapter 9 IGMP Snooping Commands Chapter 10 IP Address Commands Chapter 11 LACP Commands Chapter 12 Line Commands Chapter 13 Management ACL Commands Chapter 14 PHY Diagnostics Commands

Chapter 15 Port Channel Commands Chapter 16 Port Monitor Commands Chapter 17 QoS Commands Chapter 18 RMON Commands Chapter 19 RADIUS Commands Chapter 20 Web Server Commands Chapter 21 SNMP Commands Chapter 22 Spanning-Tree Commands Chapter 23 SSH Commands Chapter 24 Syslog Commands Chapter 25 System Management Commands Chapter 26 TACACS+ Commands Chapter 27 User Interface Commands Chapter 28 VLAN Commands Chapter 29 802.1x Commands Appendix A: Getting Help

vii Contents Important Safety Instructions ................................................................................................ iii Wichtige Sicherheitshinweise ............................................................................................... iii Consignes de sécurité .......................................................................................................... iii Instrucciones de seguridad importantes ............................................................................... iii Warnings ............................................................................................................................... iv About this Manual .................................................................................................................. v Manual Organization .............................................................................................................. v Chapter 1: Using CLI ..................................................................................................1 Overview ................................................................................................................................1 Chapter 2: AAA Commands ......................................................................................9 aaa authentication login .........................................................................................................9 aaa authentication enable ....................................................................................................10 login authentication ..............................................................................................................11 enable authentication ...........................................................................................................12 ip http authentication ............................................................................................................13 ip https authentication ..........................................................................................................14 show authentication methods ..............................................................................................15 password .............................................................................................................................16 enable password ..................................................................................................................17 username .............................................................................................................................18 Chapter 3: Address Table Commands ...................................................................21 bridge address .....................................................................................................................21 bridge multicast filtering .......................................................................................................22 bridge multicast address ......................................................................................................23 bridge multicast forbidden address ......................................................................................24 bridge multicast forward-all ..................................................................................................25 bridge multicast forbidden forward-all ..................................................................................26 bridge aging-time .................................................................................................................27 clear bridge ..........................................................................................................................28 port security .........................................................................................................................28 port security mode ...............................................................................................................29 port security routed secure-address ....................................................................................30 show bridge address-table ...................................................................................................31 show bridge address-table static .........................................................................................32 show bridge address-table count .........................................................................................33 show bridge multicast address-table ...................................................................................34 show bridge multicast filtering ..............................................................................................36

show ports security .............................................................................................................. 37 show ports security addresses ............................................................................................ 38 Chapter 4: ACL Commands .....................................................................................41 ip access-list ........................................................................................................................ 41 permit (ip) ............................................................................................................................ 42 deny (IP) .............................................................................................................................. 44 mac access-list .................................................................................................................... 46 permit (MAC) ....................................................................................................................... 47 deny (MAC) ......................................................................................................................... 48 service-acl ........................................................................................................................... 50 show access-lists ................................................................................................................ 50 show interfaces access-lists ................................................................................................ 51 Chapter 5: Clock Commands ...................................................................................53 clock set .............................................................................................................................. 53 clock source ........................................................................................................................ 54 clock timezone ..................................................................................................................... 54 clock summer-time .............................................................................................................. 55 sntp authentication-key ....................................................................................................... 57 sntp authenticate ................................................................................................................. 58 sntp trusted-key ................................................................................................................... 59 sntp client poll timer ............................................................................................................. 59 sntp broadcast client enable ................................................................................................ 60 sntp anycast client enable ................................................................................................... 61 sntp client enable (Interface) ............................................................................................... 62 sntp unicast client enable .................................................................................................... 63 sntp unicast client poll ......................................................................................................... 63 sntp server ........................................................................................................................... 64 show clock ........................................................................................................................... 65 show sntp configuration ....................................................................................................... 66 show sntp status .................................................................................................................. 67 Chapter 6: Configuration and Image File Commands ...........................................69 copy ..................................................................................................................................... 69 delete ................................................................................................................................... 71 boot system ......................................................................................................................... 72 show running-config ............................................................................................................ 73 show startup-config ............................................................................................................. 74 show backup-config ............................................................................................................. 75 show bootvar ....................................................................................................................... 76 Chapter 7: Ethernet Configuration Commands .....................................................79 interface ethernet ................................................................................................................ 79 interface range ethernet ...................................................................................................... 79

ix shutdown .............................................................................................................................80 description ...........................................................................................................................81 speed ...................................................................................................................................82 duplex ..................................................................................................................................83 negotiation ...........................................................................................................................84 flowcontrol ............................................................................................................................85 mdix .....................................................................................................................................86 back-pressure ......................................................................................................................87 port jumbo-frame .................................................................................................................87 clear counters ......................................................................................................................88 set interface active ...............................................................................................................89 show interfaces advertise ....................................................................................................90 show interfaces configuration ..............................................................................................91 show interfaces status .........................................................................................................92 show interfaces description .................................................................................................93 show interfaces counters .....................................................................................................94 show ports jumbo-frame ......................................................................................................97 port storm-control include-multicast (GC) ............................................................................98 port storm-control include-multicast (IC) ..............................................................................98 port storm-control broadcast enable ....................................................................................99 port storm-control broadcast rate .......................................................................................100 show ports storm-control ...................................................................................................101 Chapter 8: GVRP Commands ................................................................................103 gvrp enable (Global) ..........................................................................................................103 gvrp enable (Interface) .......................................................................................................103 garp timer ...........................................................................................................................104 gvrp vlan-creation-forbid ....................................................................................................105 gvrp registration-forbid .......................................................................................................106 clear gvrp statistics ............................................................................................................107 show gvrp configuration .....................................................................................................108 show gvrp statistics ............................................................................................................109 show gvrp error-statistics ...................................................................................................110 Chapter 9: IGMP Snooping Commands ...............................................................111 ip igmp snooping (Global) ..................................................................................................111 ip igmp snooping (Interface) ..............................................................................................111 ip igmp snooping mrouter learn-pim-dvmrp .......................................................................112 ip igmp snooping host-time-out ..........................................................................................113 ip igmp snooping mrouter-time-out ....................................................................................114 ip igmp snooping leave-time-out ........................................................................................115 show ip igmp snooping mrouter .........................................................................................116 show ip igmp snooping interface .......................................................................................117 show ip igmp snooping groups ..........................................................................................118

Chapter 10: IP Address Commands ......................................................................121 ip address .......................................................................................................................... 121 ip address dhcp ................................................................................................................. 122 ip default-gateway ............................................................................................................. 123 show ip interface ............................................................................................................... 124 arp ................................................................................................................................... 125 arp timeout ........................................................................................................................ 126 clear arp-cache .................................................................................................................. 127 show arp ............................................................................................................................ 127 ip domain-lookup ............................................................................................................... 128 ip domain-name ................................................................................................................. 129 ip name-server .................................................................................................................. 130 ip host ................................................................................................................................ 131 clear host ........................................................................................................................... 131 clear host dhcp .................................................................................................................. 132 show hosts ........................................................................................................................ 133 Chapter 11: LACP Commands ...............................................................................135 lacp system-priority ........................................................................................................... 135 lacp port-priority ................................................................................................................. 135 lacp timeout ....................................................................................................................... 136 show lacp ethernet ............................................................................................................ 137 show lacp port-channel ..................................................................................................... 139 Chapter 12: Line Commands .................................................................................141 Line ................................................................................................................................... 141 show line ........................................................................................................................... 141 Chapter 13: Management ACL Commands ..........................................................145 management access-list .................................................................................................... 145 Chapter 14: PHY Diagnostics Commands ............................................................153 test copper-port tdr ............................................................................................................ 153 show copper-ports tdr ........................................................................................................ 154 show copper-ports cable-length ........................................................................................ 155 ................................................................................................................................... 155 Chapter 15: Port Channel Commands ..................................................................157 ................................................................................................................................... 157 interface port-channel ........................................................................................................ 157 interface range port-channel ............................................................................................. 158 channel-group ................................................................................................................... 158 show interfaces port-channel ............................................................................................ 159 Chapter 16: Port Monitor Commands ...................................................................161 port monitor vlan-tagging ................................................................................................... 162

xi show ports monitor ............................................................................................................163 Chapter 17: QoS Commands .................................................................................165 qos ....................................................................................................................................165 show qos ............................................................................................................................166 show qos aggregate-policer ...............................................................................................166 show qos interface .............................................................................................................167 show qos map ....................................................................................................................169 class-map ..........................................................................................................................170 show class-map .................................................................................................................171 match .................................................................................................................................172 policy-map .........................................................................................................................173 class ...................................................................................................................................174 show policy-map ................................................................................................................175 trust cos-dscp ....................................................................................................................176 set ....................................................................................................................................177 police .................................................................................................................................178 service-policy .....................................................................................................................179 qos aggregate-policer ........................................................................................................180 show qos aggregate-policer ...............................................................................................181 police aggregate ................................................................................................................182 wrr-queue cos-map ............................................................................................................183 wrr-queue bandwidth .........................................................................................................184 priority-queue out num-of-queues ......................................................................................185 traffic-shape .......................................................................................................................186 show qos interface .............................................................................................................187 qos wrr-queue threshold ....................................................................................................189 qos map policed-dscp ........................................................................................................190 qos map dscp-queue .........................................................................................................191 qos trust (Global) ...............................................................................................................192 qos trust (Interface) ............................................................................................................193 qos cos ..............................................................................................................................194 qos dscp-mutation .............................................................................................................195 qos map dscp-mutation .....................................................................................................196 Chapter 18: RMON Commands .............................................................................199 show rmon statistics ..........................................................................................................199 rmon collection history .......................................................................................................201 show rmon collection history ..............................................................................................202 show rmon history ..............................................................................................................203 rmon alarm .........................................................................................................................206 show rmon alarm-table ......................................................................................................208 show rmon alarm ...............................................................................................................209 rmon event .........................................................................................................................210 show rmon events ..............................................................................................................211

show rmon log ................................................................................................................... 212 rmon table-size .................................................................................................................. 214 Chapter 19: RADIUS Commands ...........................................................................215 radius-server host .............................................................................................................. 215 radius-server key ............................................................................................................... 216 radius-server retransmit .................................................................................................... 217 radius-server source-ip ...................................................................................................... 218 radius-server timeout ......................................................................................................... 219 radius-server deadtime ...................................................................................................... 220 show radius-servers .......................................................................................................... 220 Chapter 20: Web Server Commands .....................................................................223 ip http server ...................................................................................................................... 223 ip http port ......................................................................................................................... 223 ip http exec-timeout ........................................................................................................... 224 ip https server .................................................................................................................... 225 ip https port ........................................................................................................................ 226 ip https exec-timeout ......................................................................................................... 226 crypto certificate generate ................................................................................................. 227 crypto certificate request ................................................................................................... 228 crypto certificate import ..................................................................................................... 230 ip https certificate .............................................................................................................. 231 show crypto certificate mycertificate .................................................................................. 232 show ip http ....................................................................................................................... 233 show ip https ..................................................................................................................... 234 Chapter 21: SNMP Commands ..............................................................................237 snmp-server community .................................................................................................... 237 snmp-server view .............................................................................................................. 238 snmp-server group ............................................................................................................ 239 snmp-server user .............................................................................................................. 241 snmp-server engineID local ............................................................................................... 242 snmp-server enable traps .................................................................................................. 244 snmp-server filter ............................................................................................................... 245 snmp-server host ............................................................................................................... 246 snmp-server v3-host .......................................................................................................... 247 snmp-server trap authentication ........................................................................................ 248 snmp-server contact .......................................................................................................... 249 snmp-server location ......................................................................................................... 250 snmp-server set ................................................................................................................. 251 show snmp ........................................................................................................................ 252 show snmp engineid .......................................................................................................... 253 show snmp views .............................................................................................................. 254 show snmp groups ............................................................................................................ 255

xiii show snmp filters ...............................................................................................................256 show snmp users ...............................................................................................................257 Chapter 22: Spanning-Tree Commands ...............................................................259 spanning-tree .....................................................................................................................259 spanning-tree mode ...........................................................................................................259 spanning-tree forward-time ................................................................................................260 spanning-tree max-age ......................................................................................................262 spanning-tree priority .........................................................................................................263 spanning-tree disable ........................................................................................................264 spanning-tree cost .............................................................................................................264 spanning-tree port-priority ..................................................................................................265 spanning-tree portfast ........................................................................................................266 spanning-tree link-type ......................................................................................................267 spanning-tree pathcost method .........................................................................................268 spanning-tree bpdu ............................................................................................................269 clear spanning-tree detected-protocols .............................................................................270 spanning-tree mst priority ..................................................................................................270 spanning-tree mst max-hops .............................................................................................271 spanning-tree mst port-priority ...........................................................................................272 spanning-tree mst cost ......................................................................................................273 spanning-tree mst configuration ........................................................................................274 instance (mst) ....................................................................................................................275 name (mst) .........................................................................................................................276 revision (mst) .....................................................................................................................276 show (mst) .........................................................................................................................277 exit (mst) ............................................................................................................................278 abort (mst) .........................................................................................................................279 spanning-tree guard root ...................................................................................................279 show spanning-tree ...........................................................................................................280 Chapter 23: SSH Commands .................................................................................295 ip ssh port ..........................................................................................................................295 ip ssh server ......................................................................................................................295 crypto key generate dsa ....................................................................................................296 crypto key generate rsa .....................................................................................................297 ip ssh pubkey-auth .............................................................................................................298 crypto key pubkey-chain ssh .............................................................................................299 user-key .............................................................................................................................300 key-string ...........................................................................................................................301 show ip ssh ........................................................................................................................302 show crypto key mypubkey ................................................................................................303 show crypto key pubkey-chain ssh ....................................................................................304 Chapter 24: Syslog Commands ............................................................................307

logging on .......................................................................................................................... 307 logging ............................................................................................................................... 308 logging buffered ................................................................................................................. 309 logging buffered size ......................................................................................................... 310 clear logging ...................................................................................................................... 310 logging file ......................................................................................................................... 311 clear logging file ................................................................................................................ 312 aaa logging ........................................................................................................................ 313 file-system logging ............................................................................................................. 313 management logging ......................................................................................................... 314 show logging ..................................................................................................................... 315 show logging file ................................................................................................................ 317 show syslog-servers .......................................................................................................... 318 Chapter 25: System Management Commands .....................................................321 ping ................................................................................................................................... 321 traceroute .......................................................................................................................... 322 telnet .................................................................................................................................. 325 resume .............................................................................................................................. 328 reload ................................................................................................................................ 328 hostname ........................................................................................................................... 329 show users ........................................................................................................................ 330 show sessions ................................................................................................................... 331 show system ...................................................................................................................... 332 show system id .................................................................................................................. 333 show system flowcontrol ................................................................................................... 334 show system mode ............................................................................................................ 335 show version ..................................................................................................................... 335 service cpu-utilization ........................................................................................................ 336 show cpu utilization ........................................................................................................... 337 Chapter 26: TACACS+ Commands .......................................................................339 tacacs-server host ............................................................................................................. 339 tacacs-server key .............................................................................................................. 340 tacacs-server timeout ........................................................................................................ 341 tacacs-server source-ip ..................................................................................................... 342 show tacacs ....................................................................................................................... 342 Chapter 27: User Interface Commands .................................................................345 enable ................................................................................................................................ 345 disable ............................................................................................................................... 345 login ................................................................................................................................... 346 configure ............................................................................................................................ 347 exit (Configuration) ............................................................................................................ 348 exit ................................................................................................................................... 348

xv end ....................................................................................................................................349 help ....................................................................................................................................350 terminal datadump .............................................................................................................350 show history .......................................................................................................................351 show privilege ....................................................................................................................352 do ....................................................................................................................................353 Chapter 28: VLAN Commands ..............................................................................355 vlan database ....................................................................................................................355 vlan ....................................................................................................................................355 interface vlan .....................................................................................................................356 interface range vlan ...........................................................................................................357 name ..................................................................................................................................358 switchport protected ...........................................................................................................359 switchport mode .................................................................................................................360 switchport access vlan .......................................................................................................360 switchport trunk allowed vlan .............................................................................................361 switchport trunk native vlan ...............................................................................................362 switchport general allowed vlan .........................................................................................363 switchport general pvid ......................................................................................................364 switchport general ingress-filtering disable ........................................................................365 switchport general acceptable-frame-type tagged-only .....................................................366 switchport forbidden vlan ...................................................................................................366 ip internal-usage-vlan ........................................................................................................367 show vlan ...........................................................................................................................368 show vlan internal usage ...................................................................................................369 show interfaces switchport .................................................................................................370 map protocol protocols-group ............................................................................................373 switchport general map protocols-group vlan ....................................................................374 map mac macs-group ........................................................................................................375 switchport general map macs-group vlan ..........................................................................376 map subnet subnets-group ................................................................................................377 switchport general map subnets-group vlan ......................................................................377 show vlan protocols-groups ...............................................................................................378 show vlan macs-groups .....................................................................................................379 show vlan subnets-groups .................................................................................................380 Chapter 29: 802.1x Commands .............................................................................383 aaa authentication dot1x ....................................................................................................383 dot1x system-auth-control .................................................................................................384 dot1x port-control ...............................................................................................................384 dot1x re-authentication ......................................................................................................386 dot1x timeout re-authperiod ...............................................................................................386 dot1x re-authenticate .........................................................................................................387 dot1x timeout quiet-period .................................................................................................388

dot1x timeout tx-period ...................................................................................................... 389 dot1x max-req ................................................................................................................... 390 dot1x timeout supp-timeout ............................................................................................... 391 dot1x timeout server-timeout ............................................................................................. 392 show dot1x ........................................................................................................................ 393 show dot1x users .............................................................................................................. 395 show dot1x statistics ......................................................................................................... 397 ADVANCED FEATURES .................................................................................................. 398 dot1x auth-not-req ............................................................................................................. 398 dot1x multiple-hosts .......................................................................................................... 399 dot1x single-host-violation ................................................................................................. 400 dot1x guest-vlan ................................................................................................................ 401 dot1x guest-vlan enable .................................................................................................... 402 show dot1x advanced ........................................................................................................ 403 Appendix A: Getting Help ......................................................................................405 World Wide Web ............................................................................................................... 405 Telephone ......................................................................................................................... 405

1 1 Using CLI Overview This document describes the Command Line Interface (CLI) used to manage the Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10. The switches can operate as standalone systems, or can be stacked together in the same system. Most of the CLI commands are applicable to both switch modules. This chapter describes how to start using the CLI and the CLI command editing features. CLI Command Modes Introduction The Command Line Interface (CLI) is divided into different command modes. Each command mode has its own set of specific commands. Entering a question mark ? at the system prompt (console prompt) displays a list of commands available for that particular command mode. From each command mode a specific command is used to navigate from one command mode to another. The order for mode access is as follows: User EXEC mode, Privileged EXEC mode, Global Configuration mode, and Interface Configuration mode. When starting a session, the initial mode is the User EXEC mode. Only a limited subset of commands are available in User EXEC mode. This task level does not change the configuration. To enter the next level, the Privileged EXEC mode, a password is required. The Privileged EXEC mode gives access to commands that displays device configuration and provides access to the device Configuration mode. The Global Configuration mode manages the device configuration on a global level. The Interface Configuration mode configures specific interfaces in the device. User EXEC Mode After logging into the device, the user is automatically in User EXEC command mode unless the user is defined as a privileged user. In general, the User EXEC commands allow the user to perform basic tests, and list system information. The user-level prompt consists of the device host name followed by the angle bracket (>).

The default host name is Console unless it has been changed using the hostname command in the Global Configuration mode. Privileged EXEC Mode Privileged access is password protected to prevent unauthorized use because many of the Privileged commands set operating system parameters. The password is not displayed on the screen and is case sensitive. Privileged users enter directly into the Privileged EXEC mode. To enter the Privileged EXEC mode from the User EXEC mode, perform the following steps: At the prompt enter the enable command and press . A password prompt is displayed. Enter the password and press . The password is displayed as *. The Privileged EXEC mode prompt is displayed. The Privileged EXEC mode prompt consists of the device host name followed by #. To return from the Privileged EXEC mode to the User EXEC mode, use the disable command. The following example illustrates how to access the Privileged EXEC mode and return to the User EXEC mode: The exit command is used to return from any mode to the previous mode except when returning to the User EXEC mode from the Privileged EXEC mode. For example, the exit command is used to return from the Interface Configuration mode to the Global Configuration mode. Global Configuration Mode Global Configuration mode commands apply to features that affect the system as a whole, rather than just a specific interface. The configure Privileged EXEC mode command is used to enter the Global Configuration mode. To enter the Global Configuration mode perform the following steps: 1. At the Privileged EXEC mode prompt enter the configure command and press . The Global Configuration mode prompt is displayed. The Global Console> Console# Console> enable Enter Password: ****** Console# Console# disable Console>

3 Configuration mode prompt consists of the device host name followed by (config) and #. 2. To return from the Global Configuration mode to the Privileged EXEC mode, the user can use one of the following commands: exit end Ctrl+Z The following example illustrates how to access the Global Configuration mode and return to the Privileged EXEC mode: Interface Configuration and Specific Configuration Modes Interface Configuration mode commands modify specific interface operations. The following are the Interface Configuration modes: • Line Interface — Contains commands to configure the management connections. These include commands such as line timeout settings, etc. The line Global Configuration mode command is used to enter the Line Configuration command mode. • VLAN Database — Contains commands to create a VLAN as a whole. The vlan database Global Configuration mode command is used to enter the VLAN Database Interface Configuration mode. • Management Access List — Contains commands to define management access-lists. The management access-list Global Configuration mode command is used to enter the Management Access List Configuration mode. • Ethernet — Contains commands to manage port configuration. The interface ethernet Global Configuration mode command is used to enter the Interface Configuration mode to configure an Ethernet type interface. • Port Channel — Contains commands to configure port-channels, for example, assigning ports to a port-channel. Most of these commands are the same as the commands in the Ethernet interface mode, and are used to manage the member ports as a single entity. The interface port-channel Global Configuration mode command is used to enter the Port Channel Interface Configuration mode. • SSH Public Key-chain — Contains commands to manually specify other device SSH public keys. The crypto key pubkey-chain ssh Global Configuration mode command is used to enter the SSH Public Key-chain Configuration mode. • QoS — Contains commands related to service definitions. The qos Global Configuration mode command is used to enter the QoS services configuration mode. Console# Console# configure Console(config)# exit Console#

• MAC Access-List — Configures conditions required to allow traffic based on MAC addresses. The mac access-list Global Configuration mode command is used to enter the MAC access-list configuration mode. Starting the CLI The device can be managed over a direct connection via a Telnet connection. The device is managed by entering command keywords and parameters at the prompt. Using the device command-line interface (CLI) is very similar to entering commands on a UNIX system. If access is via a Telnet connection, ensure that the device has a defined IP address, corresponding management access is granted, and the workstation used to access the device is connected to the device prior to using CLI commands. 1. Enter the following commands to begin the configuration procedure: 2. Configure the device and enter the necessary commands to complete the required tasks. 3. When finished, exit the session with the exit command. When a different user is required to log onto the system, use the login Privileged EXEC mode command. This effectively logs off the current user and logs on the new user. Editing Features Entering Commands A CLI command is a series of keywords and arguments. Keywords identify a command, and arguments specify configuration parameters. For example, in the command show interfaces status ethernet Ext.1, show, interfaces and status are keywords, ethernet is an argument that specifies the interface type, and Ext.1 specifies the port. To enter commands that require parameters, enter the required parameters after the command keyword. For example, to set a password for the administrator, enter: When working with the CLI, the command options are not displayed. The command is not selected from a menu, but is manually entered. To see what commands are available in each mode or within an Interface Configuration, the CLI does provide a method of displaying the available commands, the command syntax requirements and in some instances parameters required to complete the command. The standard command to request help is ?. Console> enable Console# configure Console(config)# Console(config)# username admin password alansmith

5 There are two instances where help information can be displayed: • Keyword lookup — The character ? is entered in place of a command. A list of all valid commands and corresponding help messages are is displayed. • Partial keyword lookup — If a command is incomplete and or the character ? is entered in place of a parameter. The matched keyword or parameters for this command are displayed. To assist in using the CLI, there is an assortment of editing features. The following features are described: • Terminal Command Buffer • Command Completion • Nomenclature • Keyboard Shortcuts • Terminal Command Buffer Every time a command is entered in the CLI, it is recorded on an internally managed Command History buffer. Commands stored in the buffer are maintained on a First In First Out (FIFO) basis. These commands can be recalled, reviewed, modified, and reissued. This buffer is not preserved across device resets. By default, the history buffer system is enabled, but it can be disabled at any time. For information about the command syntax to enable or disable the history buffer, see “show history”. There is a standard default number of commands that are stored in the buffer. The standard number of 10 commands can be increased to 216. By configuring 0, the effect is the same as disabling the history buffer system. For information about the command syntax for configuring the command history buffer, see history size. To display the history buffer, see “show history”. Negating the Effect of Commands For many configuration commands, the prefix keyword no can be entered to cancel the effect of a command or reset the configuration to the default value. This guide describes the negation effect for all applicable commands. Command Completion If the command entered is incomplete, invalid or has missing or invalid parameters, then the appropriate error message is displayed. This assists in entering the correct command. By pressing the button, an incomplete command is entered. If the characters already entered are not enough for the system to identify a single matching command, press ? to display the available commands matching the characters already entered.

Nomenclature When referring to an Ethernet port in a CLI command, the following format is used: For an Ethernet port on a standalone device: Ethernet_type port_number For an Ethernet port on a stacked device: unit_number/Ethernet_type port number The Ethernet type may be Gigabit Ethernet (indicated by “g”). For example, g3 stands for Gigabit Ethernet port 3 on a stand-alone device, whereas 1/3 stands for Gigabit Ethernet port 3 on stacking unit. The ports may be described on an individual basis or within a range. Use format port number-port number to specify a set of consecutive ports and port number, port number to indicates a set of non-consecutive ports. For example, g1-3 stands for Gigabit Ethernet ports 1, 2 and 3, and g1,5 stands for Gigabit Ethernet ports 1 and 5. Keyboard Shortcuts The CLI has a range of keyboard shortcuts to assist in editing the CLI commands. The following table describes the CLI shortcuts. Keyboard KeyDescription The following list provides a description of keyboard shortcuts: • Up-arrow key — Recalls commands from the history buffer, beginning with the most recent command. Repeat the key sequence to recall successively older commands. • Down-arrow key — Returns the most recent commands from the history buffer after recalling commands with the up arrow key. Repeating the key sequence will recall successively more recent commands. • Ctrl+A — Moves the cursor to the beginning of the command line. • Ctrl+E — Moves the cursor to the end of the command line. • Ctrl+Z / End — Returns back to the Privileged EXEC mode from any configuration mode. • Backspace key — Deletes one character left to the cursor position.

7 CLI Command Conventions When entering commands there are certain command entry standards that apply to all commands. The following table describes the command conventions. Copying and Pasting Text Up to 1000 lines of text (or commands) can be copied and pasted into the device. It is the user’s responsibility to ensure that the text copied into the device consists of legal commands only. This feature is dependent on the baud rate of the device. When copying and pasting commands from a configuration file, make sure that the following conditions exist: A device Configuration mode has been accessed. The commands contain no encrypted data, like encrypted passwords or keys. Encrypted data cannot be copied and pasted into the device. ConventionDescription [ ]In a command line, square brackets indicates an optional entry. { }In a command line, curly brackets indicate a selection of compulsory parameters separated by the | character. One option must be selected. For example: flowcontrol {auto|on|off} means that for the flowcontrol command either auto, on or off must be selected. Italic fontIndicates a parameter. Indicates an individual key on the keyboard. For example, indicates the Enter key. Ctrl+F4Any combination keys pressed simultaneously on the keyboard. all — When a parameter is required to define a range of ports or parameters and all is an option, the default for the command is all when no parameters are defined. For example, the command interface range port-channel has the option of either entering a range of channels, or selecting all. When the command is entered without a parameter, it automatically defaults to all.

9 2 AAA Commands aaa authentication login The aaa authentication login Global Configuration mode command defines login authentication. To restore defaults, use the no form of this command. Syntax aaa authentication login {default | list-name} method1 [method2...] no aaa authentication login {default | list-name} Parameters • default — Uses the listed authentication methods that follow this argument as the default list of methods when a user logs in. • list-name — Character string used to name the list of authentication methods activated when a user logs in. (Range: 1-12 characters) • method1 [method2...] — Specify at least one method from the following list: Default Configuration The local user database is checked. This has the same effect as the command aaa authentication login list-name local. Command Mode Global Configuration mode Keyword Description enable Uses the enable password for authentication. line Uses the line password for authentication. local Uses the local username database for authentication. none Uses no authentication. radius Uses the list of all RADIUS servers for authentication. tacacs Uses the list of all TACACS+ servers for authentication.

User Guidelines The default and optional list names created with the aaa authentication login command are used with the login authentication command. Create a list by entering the aaa authentication login list-name method command for a particular protocol, where list-name is any character string used to name this list. The method argument identifies the list of methods that the authentication algorithm tries, in the given sequence. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. Example The following example configures the authentication login. aaa authentication enable The aaa authentication enable Global Configuration mode command defines authentication method lists for accessing higher privilege levels. To restore defaults, use the no form of this command. Syntax aaa authentication enable {default | list-name} method1 [method2...] no aaa authentication enable {default | list-name} Parameters • default — Uses the listed authentication methods that follow this argument as the default list of methods, when using higher privilege levels. • list-name — Character string used to name the list of authentication methods activated, when using access higher privilege levels. (Range: 1-12 characters) • method1 [method2...] — Specify at least one method from the following list: Console(config)# aaa authentication login default radius tacacs enable line local none Keyword Description enable Uses the enable password for authentication.

11 Default Configuration If the default list is not set, only the enable password is checked. This has the same effect as the command aaa authentication enable default enable. Command Mode Global Configuration mode User Guidelines The default and optional list names created with the aaa authentication enable command are used with the enable authentication command. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. All aaa authentication enable default requests sent by the device to a RADIUS or TACACS+ server include the username $enabx$., where x is the requested privilege level. Example The following example sets the enable password for authentication when accessing higher privilege levels. login authentication The login authentication Line Configuration mode command specifies the login authentication method list for a remote telnet or console. To restore the default configuration specified by the aaa authentication login command, use the no form of this command. line Uses the line password for authentication. none Uses no authentication. radius Uses the list of all RADIUS servers for authentication. Uses username $enabx$., where x is the privilege level. tacacs Uses the list of all TACACS+ servers for authentication. Uses username "$enabx$." where x is the privilege level. Keyword Description Console(config)# aaa authentication enable default enable

Syntax login authentication {default | list-name} no login authentication Parameters • default — Uses the default list created with the aaa authentication login command. • list-name — Uses the indicated list created with the aaa authentication login command. Default Configuration Uses the default set with the command aaa authentication login. Command Mode Line Configuration mode User Guidelines To change (or rename) an authentication method, use the negate command and create a new rule with the new method name. Example The following example specifies the default authentication method for a console. enable authentication The enable authentication Line Configuration mode command specifies the authentication method list when accessing a higher privilege level from a remote Telnet or console. To restore the default configuration specified by the aaa authentication enable command, use the no form of this command. Syntax enable authentication {default | list-name} no enable authentication Console(config)# line console Console(config-line)# login authentication default

13 Parameters • default — Uses the default list created with the aaa authentication enable command. • list-name — Uses the indicated list created with the aaa authentication enable command. Default Configuration Uses the default set with the aaa authentication enable command. Command Mode Line Configuration mode User Guidelines There are no user guidelines for this command. Example The following example specifies the default authentication method when accessing a higher privilege level from a Telnet. ip http authentication The ip http authentication Global Configuration mode command specifies authentication methods for HTTP server users. To restore the default configuration, use the no form of this command. Syntax ip http authentication method1 [method2...] no ip http authentication Console(config)# line console Console(config-line)# enable authentication default

Parameters • method1 [method2...] — Specify at least one method from the following list: Default Configuration The local user database is checked. This has the same effect as the command ip http authentication local. Command Mode Global Configuration mode User Guidelines The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. Example The following example configures the HTTP authentication. ip https authentication The ip https authentication Global Configuration mode command specifies authentication methods for HTTPS server users. To restore the default configuration, use the no form of this command. Syntax ip https authentication method1 [method2...] no ip https authentication Keyword Description local Uses the local username database for authentication. none Uses no authentication. radius Uses the list of all RADIUS servers for authentication. tacacs Uses the list of all TACACS+ servers for authentication. Console(config)# ip http authentication radius tacacs local none

15 Parameters • method1 [method2...] — Specify at least one method from the following list: Default Configuration The local user database is checked. This has the same effect as the command ip https authentication local. Command Mode Global Configuration mode User Guidelines The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. Example The following example configures HTTPS authentication. show authentication methods The show authentication methods Privileged EXEC mode command displays information about the authentication methods. Syntax show authentication methods Keyword Description local Uses the local username database for authentication. none Uses no authentication. radius Uses the list of all RADIUS servers for authentication. tacacs Uses the list of all TACACS+ servers for authentication. Console(config)# ip https authentication radius tacacs local none

Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the authentication configuration. password The password Line Configuration mode command specifies a password on a line. To remove the password, use the no form of this command. Syntax password password [encrypted] no password Console# show authentication methods login Authentication Method Lists --------------------------------- Default: Local Enable Authentication Method Lists ---------------------------------- Default: Radius, Enable Console_Enable: Enable, None Line Login Method List Enable Method List ----------------------------------------- Console Default Default Telnet Default Default SSH DefaultDefault http: Local https: Local dot1x:

17 Parameters • password — Password for this level. (Range: 1-159 characters) • encrypted — Encrypted password to be entered, copied from another device configuration. Default Configuration No password is defined. Command Mode Line Configuration mode User Guidelines If a password is defined as encrypted, the required password length is 32 characters. Example The following example specifies the password called `secret' on a Telnet. enable password The enable password Global Configuration mode command sets a local password to control access to user and privilege levels. To remove the password requirement, use the no form of this command. Syntax enable password [level level] password [encrypted] no enable password [level level] Parameters • password — Password for this level. (Range: 1-159 characters) • level — Level for which the password applies. If not specified the level is 15 (Range: 1-15). • encrypted — Encrypted password entered, copied from another device configuration. Console(config)# line console Console(config-line)# password secret

Default Configuration No enable password is defined. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example sets a local level 15 password called `secret' to control access to user and privilege levels. username The username Global Configuration mode command creates a user account in the local database. To remove a user name, use the no form of this command. Syntax username name [password password] [level level] [encrypted] no username name Parameters • name — The name of the user. (Range: 1-20 characters) • password — The authentication password for the user. (Range: 1-159 characters) • level — The user level (Range: 1-15). If a level is not specified, the level is automaically set to 1. • encrypted — Encrypted password entered, copied from another device configuration. Default Configuration No user is defined. Console(config)# enable password secret level 15

19 Command Mode Global Configuration mode User Guidelines User account can be created without a password. Example The following example configures user called bob with password `lee' and user level 15 to the system. Console(config)# username bob password lee level 15

21 3 Address Table Commands bridge address The bridge address Interface Configuration (VLAN) mode command adds a MAC-layer station source address to the bridge table. To delete the MAC address, use the no form of this command. Syntax bridge address mac-address {ethernet interface | port-channel port-channel-number} [permanent | delete-on-reset | delete-on-timeout | secure] no bridge address [mac-address] Parameters • mac-address — A valid MAC address. • interface — A valid Ethernet port. • port-channel-number — A valid port-channel number. • permanent — The address can only be deleted by the no bridge address command. • delete-on-reset — The address is deleted after reset. • delete-on-timeout — The address is deleted after "age out" time has expired. • secure — The address is deleted after the port changes mode to unlock learning (no port security command). This parameter is only available when the port is in the learning locked mode. Default Configuration No static addresses are defined. The default mode for an added address is permanent. Command Mode Interface Configuration (VLAN) mode User Guidelines Using the no form of the command without specifying a MAC address deletes all static MAC addresses belonging to this VLAN).

22 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example The following example adds a permanent static MAC-layer station source address 3aa2.64b3.a245 on port 1 to the bridge table. bridge multicast filtering The bridge multicast filtering Global Configuration mode command enables filtering multicast addresses. To disable filtering multicast addresses, use the no form of this command. Syntax • bridge multicast filtering • no bridge multicast filtering Default Configuration Filtering multicast addresses is disabled. All multicast addresses are flooded to all ports. Command Mode Global Configuration mode User Guidelines If multicast devices exist on the VLAN, do not change the unregistered multicast addresses state to drop on the switch ports. If multicast devices exist on the VLAN and IGMP-snooping is not enabled, the bridge multicast forward-all command should be used to enable forwarding all multicast packets to the multicast switches. Example In the folowing example, bridge multicast filtering is enabled. Console(config)# interface vlan 2 Console(config-if)# bridge address 3aa2.64b3.a245 ethernet ext.1 permanent Console(config)# bridge multicast filtering

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 23 bridge multicast address The bridge multicast address Interface Configuration (VLAN) mode command registers a MAC-layer multicast address in the bridge table and statically adds ports to the group. To unregister the MAC address, use the no form of this command. Syntax bridge multicast address {mac-multicast-address | ip-multicast-address} bridge multicast address {mac-multicast-address | ip-multicast-address} [add | remove] {ethernet interface-list | port-channel port-channel-number-list} no bridge multicast address {mac-multicast-address | ip-multicast-address} Parameters • add — Adds ports to the group. If no option is specified, this is the default option. • remove — Removes ports from the group. • mac-multicast-address — A valid MAC multicast address. • ip- multicast-address — A valid IP multicast address. • interface-list — Separate nonconsecutive Ethernet ports with a comma and no spaces; a hyphen is used to designate a range of ports. • port-channel-number-list — Separate nonconsecutive port-channels with a comma and no spaces; a hyphen is used to designate a range of ports. Default Configuration No multicast addresses are defined. Command Mode Interface Configuration (VLAN) mode User Guidelines If the command is executed without add or remove, the command only registers the group in the bridge database. Static multicast addresses can only be defined on static VLANs.

24 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example The following example registers the MAC address: The following example registers the MAC address and adds ports statically. bridge multicast forbidden address The bridge multicast forbidden address Interface Configuration (VLAN) mode command forbids adding a specific multicast address to specific ports. Use the no form of this command to restore the default configuration. Syntax bridge multicast forbidden address {mac-multicast-address | ip-multicast-address} {add | remove} {ethernet interface-list | port-channel port-channel-number-list} no bridge multicast forbidden address {mac-multicast-address | ip-multicast-address} Parameters • add — Adds ports to the group. • remove — Removes ports from the group. • mac-multicast-address — A valid MAC multicast address. • ip- multicast-address — A valid IP multicast address. • interface-list — Separate nonconsecutive Ethernet ports with a comma and no spaces; hyphen is used to designate a range of ports. • port-channel-number-list — Separate nonconsecutive valid port-channels with a comma and no spaces; a hyphen is used to designate a range of port-channels. Default Configuration No forbidden addresses are defined. Console(config)# interface vlan 8 Console(config-if)# bridge multicast address 01:00:5e:02:02:03 Console(config)# interface vlan 8 Console(config-if)# bridge multicast address 01:00:5e:02:02:03 add ethernet ext.1, ext.2

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 25 Command Modes Interface Configuration (VLAN) mode User Guidelines Before defining forbidden ports, the multicast group should be registered. Example In this example, MAC address 0100.5e02.0203 is forbidden on port 2 within VLAN 8. bridge multicast forward-all The bridge multicast forward-all Interface Configuration (VLAN) mode command enables forwarding all multicast packets on a port. To restore the default configuration, use the no form of this command. Syntax bridge multicast forward-all {add | remove} {ethernet interface-list | port-channel port- channel-number-list} no bridge multicast forward-all Parameters • add — Force forwarding all multicast packets. • remove — Do not force forwarding all multicast packets. • interface-list — Separate nonconsecutive Ethernet ports with a comma and no spaces; a hyphen is used to designate a range of ports. • port-channel-number-list — Separates nonconsecutive port-channels with a comma and no spaces; a hyphen is used to designate a range of port-channels. Default Configuration This setting is disabled. Command Mode Console(config)# interface vlan 8 Console(config-if)# bridge multicast address 0100.5e.02.0203 Console(config-if)# bridge multicast forbidden address 0100.5e02.0203 add ethernet ext.2

26 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Interface Configuration (VLAN) mode User Guidelines There are no user guidelines for this command. Example In this example, all multicast packets on port 1 are forwarded. bridge multicast forbidden forward-all The bridge multicast forbidden forward-all Interface Configuration (VLAN) mode command forbids a port to be a forward-all-multicast port. To restore the default configuration, use the no form of this command. Syntax bridge multicast forbidden forward-all {add | remove} {ethernet interface-list | port- channel port-channel-number-list} no bridge multicast forbidden forward-all Parameters • add — Forbids forwarding all multicast packets. • remove — Does not forbid forwarding all multicast packets. • interface-list — Separates nonconsecutive Ethernet ports with a comma and no spaces; a hyphen is used to designate a range of ports. • port-channel-number-list — Separates nonconsecutive port-channels with a comma and no spaces; a hyphen is used to designate a range of port-channels. Default Configuration This setting is disabled. Command Mode Interface Configuration (VLAN) mode Console(config)# interface vlan 2 Console(config-if)# bridge multicast forward-all add ethernet ext.1

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 27 User Guidelines IGMP snooping dynamically discovers multicast device ports. When a multicast device port is discovered, all the multicast packets are forwarded to it unconditionally. This command prevents a port from becoming a multicast device port. Example In this example, forwarding all multicast packets to 1 with VLAN 2 is forbidden. bridge aging-time The bridge aging-time Global Configuration mode command sets the address table aging time. To restore the default configuration, use the no form of this command. Syntax bridge aging-time seconds no bridge aging-time Parameters • seconds — Time in seconds. (Range: 10-630 seconds) Default Configuration The default setting is 300 seconds. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Console(config)# interface vlan 2 Console(config-if)# bridge multicast forbidden forward-all add ethernet ext.1

28 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example In the following example, the bridge aging time is set to 250 seconds. clear bridge The clear bridge Privileged EXEC mode command removes any learned entries from the forwarding database. Syntax clear bridge Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In the following example, the bridge tables are cleared. port security The port security Interface Configuration mode command locks the port to block unknown traffic and prevent the port from learning new addresses. To restore the default configuration, use the no form of this command. Syntax port security [forward | discard | discard-shutdown] [trap seconds] [max] Console(config)# bridge aging-time 250 Console# clear bridge

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 29 no port security Parameters • forward — Forwards packets with unlearned source addresses, but does not learn the address. • discard — Discards packets with unlearned source addresses. This is the default if no option is indicated. • discard-shutdown — Discards packets with unlearned source addresses. The port is also shut down. • seconds — Sends SNMP traps and defines the minimum amount of time in seconds between consecutive traps. (Range: 1-1000000)Default Configuration This setting is disabled. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example In this example, port 1 forwards all packets without learning addresses of packets from unknown sources and sends traps every 100 seconds if a packet with an unknown source address is received. port security mode The port security mode Interface Configuration mode command configures the port security mode. To restore the default configuration, use the no form of this command. Syntax port security mode {lock | mac-addresses} no port security mode Console(config)# interface ethernet ext.1 Console(config-if)# port security forward trap 100

30 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Parameters • lock — Saves the current dynamic MAC addresses associated with the port and disables learning, relearning and aging. • mac-addresses — Deletes the current dynamic MAC addresses associated with the port and learns up to the maximum number addresses allowed on the port. Relearning and aging are enabled. Default Configuration This setting is disabled. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example In this example, port security mode is set to dynamic for Ethernet interface 1. port security routed secure-address The port security routed secure-address Interface Configuration (Ethernet, port-channel) mode command adds a MAC-layer secure address to a routed port. Use the no form of this command to delete a MAC address. Syntax port security routed secure-address mac-address no port security routed secure-address mac-address Parameters mac-address — A valid MAC address. Console(config)# interface ethernet ext.1 Console(config-if)# port security mode mac-addresses

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 31 Default Configuration No addresses are defined. Command Mode Interface Configuration (Ethernet, port-channel) mode. Cannot be configured for a range of interfaces (range context). User Guidelines The command enables adding secure MAC addresses to a routed port in port security mode. The command is available when the port is a routed port and in port security mode. The address is deleted if the port exits the security mode or is not a routed port. Example In this example, the MAC-layer address 66:66:66:66:66:66 is added to port 1. show bridge address-table The show bridge address-table Privileged EXEC mode command displays all entries in the bridge-forwarding database. Syntax show bridge address-table [vlan vlan] [ethernet interface | port-channel port-channel- number | address mac address] Parameters • vlan — Specifies a valid VLAN, such as VLAN 1. • interface — A valid Ethernet port. • port-channel-number — A valid port-channel number. • mac address — A valid MAC address. Default Configuration This command has no default configuration. Console(config)# interface ethernet ext.1 Console(config-if)# port security routed secure-address 66:66:66:66:66:66

32 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Command Mode Privileged EXEC mode User Guidelines Internal usage VLANs (VLANs that are automatically allocated on ports with a defined Layer 3 interface) are presented in the VLAN column by a port number and not by a VLAN ID. "Special" MAC addresses that were not statically defined or dynamically learned are displayed in the MAC address table. This includes, for example, MAC addresses defined in ACLS. Example In this example, all classes of entries in the bridge-forwarding database are displayed. show bridge address-table static The show bridge address-table static Privileged EXEC mode command displays statically created entries in the bridge-forwarding database. Syntax show bridge address-table static [vlan vlan] [ethernet interface | port-channel port- channel-number] Parameters • vlan — Specifies a valid VLAN, such as VLAN 1. • interface — A valid Ethernet port. Console# show bridge address-table Aging time is 300 sec interface mac address Port Type --------- -------------- ---- ------- 1 00:60:70:4C:73:FF 5 dynamic 1 00:60:70:8C:73:FF 5 dynamic 200 00:10:0D:48:37:FF 5 static

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 33 • port-channel-number — A valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, all static entries in the bridge-forwarding database are displayed. show bridge address-table count The show bridge address-table count Privileged EXEC mode command displays the number of addresses present in the Forwarding Database. Syntax show bridge address-table count [vlan vlan] [ethernet interface-number | port-channel port-channel-number] Parameters • vlan — Specifies a valid VLAN, such as VLAN 1. Console# show bridge address-table static Aging time is 300 sec vlan mac address port type ---- ----------------- ---- ----------------- 1 00:60:70:4C:73:FF 8 Permanent 1 00:60.70.8C.73:FF 8 delete-on-timeout 200 00:10:0D:48:37:FF 9 delete-on-reset

34 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide • interface — A valid Ethernet port. • port-channel-number — A valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, the number of addresses present in all VLANs are displayed. show bridge multicast address-table The show bridge multicast address-table Privileged EXEC mode command displays multicast MAC address or IP address table information. Syntax show bridge multicast address-table [vlan vlan-id] [address mac-multicast-address | ip- multicast-address] [format ip | format mac] Console# show bridge address-table count Capacity: 8192 Free: 8083 Used: 109 Secure addresses: 2 Static addresses: 1 Dynamic addresses: 97 Internal addresses: 9

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 35 Parameters • vlan-id — Indicates the VLAN ID. This has to be a valid VLAN ID value. • mac-multicast-address — A valid MAC multicast address. • ip-multicast-address — A valid IP multicast address. • format ip / mac — Multicast address format. Can be ip or mac. If the format is unspecified, the default is mac. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines A MAC address can be displayed in IP format only if it is in the range of 0100.5e00.0000- 0100.5e7f.ffff. Example In this example, multicast MAC address and IP address table information is displayed. Console# show bridge multicast address-table Vlan MAC Address Type Ports ---- -------------- ------- ---------- 1 01:00:5e:02:02:03 static 1, 2 19 01:00:5e:02:02:08 static 1-8 19 00:00:5e:02:02:08 dynamic 9-11 Forbidden ports for multicast addresses: Vlan MAC Address Ports ---- -------------- ----- 1 01:00:5e:02:02:03 8 19 01:00:5e:02:02:08 8

36 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide A multicast MAC address maps to multiple IP addresses as shown above. show bridge multicast filtering The show bridge multicast filtering Privileged EXEC mode command displays the multicast filtering configuration. Syntax show bridge multicast filtering vlan-id Parameters • vlan-id — Indicates the VLAN ID. This has to be a valid VLAN ID value. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Console# show bridge multicast address-table format ip Vlan IP/MAC Address Type Ports ---- ----------------- ------ --------- 1 224-239.130|2.2.3 static 1, 2 19 224-239.130|2.2.8 static 1-8 19 224-239.130|2.2.8 dynamic 9-11 Forbidden ports for multicast addresses: Vlan IP/MAC Address Ports ---- ----------------- ------ 1 224-239.130|2.2.3 8 19 224-239.130|2.2.8 8

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 37 Example In this example, the multicast configuration for VLAN 1 is displayed. show ports security The show ports security Privileged EXEC mode command displays the port-lock status. Syntax show ports security [ethernet interface | port-channel port-channel-number] Parameters • interface — A valid Ethernet port. • port-channel-number — A valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Console# show bridge multicast filtering 1 Filtering: Enabled VLAN: 1 Port Static Status ---- --------- --------- 1 Filter 2 Filter 3 - Filter

38 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example In this example, all classes of entries in the port-lock status are displayed: The following table describes the fields shown above. show ports security addresses The show ports security addresses Privileged EXEC mode command displays the current dynamic addresses in locked ports. Syntax show ports security addresses [ethernet interface | port-channel port-channel-number] Parameters • interface — A valid Ethernet port. • port-channel-number — A valid port-channel number Default Configuration This command has no default configuration. Console# show ports security Port Status Learning Action Maximum Trap Frequency ---- ------- -------- ------- ------- ------- --------- 1 Locked Dynamic Discard 3 Enable 100 2 Unlocked Dynamic - 28 - - 3 Locked Disabled Discard, Shutdown 8 Disable - Field Description Port The port number. Status The values are: Locked/Unlocked. Learning The learning mode. Action Action on violation. Maximum The maximum number of addresses that can be associated on this port in theStatic Learning mode or in the Dynamic Learning mode. Trap Sends traps in case of a violation. Frequency The minimum time interval between consecutive traps.

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 39 Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example This example displays dynamic addresses in all currently locked ports. Console# show ports security addresses Port Status Learning Current Maximum ---- -------- -------- ------- ------- 1 Disabled Lock - 1 2 Disabled Lock - 1 3 Enabled Max-addresses 0 1 4 Port is a member in port-channel ch1 5 Disabled Lock - 1 6 Enabled Max-addresses 0 10 ch1 Enabled Max-addresses 0 50 ch2 Enabled Max-addresses 0 128

40 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide

41 4 ACL Commands ip access-list The ip access-list Global Configuration mode command enables the IP-Access Configuration mode and creates Layer 3 ACLs. To delete an ACL, use the no form of this command. Syntax ip access-list name no ip access-list name Parameters • name — Specifies the name of the ACL. (Range: 0-32 characters) Default Configuration The default for all ACLs is deny-all. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example shows how to create an IP ACL. Console(config)# ip access-list ip-acl1 Console(config-ip-al)#

permit (ip) The permit IP-Access List Configuration mode command permits traffic if the conditions defined in the permit statement match. Syntax permit {any | protocol} {any | {source source-wildcard}} {any | {destination destination-wildcard}} [dscp dscp number | ip-precedence ip-precedence] permit-icmp {any | {source source-wildcard}} {any | {destination destination- wildcard}} {any | icmp-type} {any | icmp-code} [dscp number | ip-precedence number] permit-igmp {any | {source source-wildcard}} {any | {destination destination- wildcard}} {any | igmp-type} [dscp number | ip-precedence number] permit-tcp {any | {source source-wildcard}} {any | source-port} {any |{destination destination-wildcard}} {any | destination-port} [dscp number | ip-precedence number] [flags list-of-flags] permit-udp {any | {source source-wildcard}} {any | source-port} {any | {destination destination-wildcard}} {any | destination-port} [dscp number | ip-precedence number] Parameters • source — Specifies the source IP address of the packet. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255. • source-wildcard — Specifies wildcard to be applied to the source IP address. Use 1s in bit positions to be ignored. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255. • destination — Specifies the destination IP address of the packet. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255. • destination-wildcard — Specifies wildcard to be applied to the destination IP address. Use 1s in bit positions to be ignored. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255. • protocol — Specifies the abbreviated name or number of an IP protocol. (Range: 0- 255) The following table lists the protocols that can be specified: IP Protocol Abbreviated Name Protocol Number Internet Control Message Protocol icmp 1 Internet Group Management Protocol igmp 2 IP in IP (encapsulation) Protocol ipinip 4 Transmission Control Protocol tcp 6 Exterior Gateway Protocol egp 8

43 • dscp — Indicates matching the dscp number with the packet dscp value. • ip-precedence — Indicates matching ip-precedence with the packet ip-precedence value. • icmp-type — Specifies an ICMP message type for filtering ICMP packets. Enter a value or one of the following values: echo-reply, destination-unreachable, source- quench, redirect, alternate-host-address, echo-request, router-advertisement, router-solicitation, time-exceeded, parameter-problem, timestamp, timestamp- reply, information-request, information-reply, address-mask-request, address- mask-reply, traceroute, datagram-conversion-error, mobile-host-redirect, ipv6- where-are-you, ipv6-i-am-here, mobile-registration-request, mobile-registration- reply, domain-name-request, domain-name-reply, skip and photuris. (Range: 0- 255) • icmp-code — Specifies an ICMP message code for filtering ICMP packets. ICMP packets that are filtered by ICMP message type can also be filtered by the ICMP message code. (Range: 0-255) • igmp-type — IGMP packets can be filtered by IGMP message type. Enter a number or one of the following values: dvmrp, host-query, host-report, pim or trace. (Range: 0-255) • destination-port — Specifies the UDP/TCP destination port. (Range: 0-65535) • source-port — Specifies the UDP/TCP source port. (Range: 0-65535) Interior Gateway Protocol igp 9 User Datagram Protocol udp 17 Host Monitoring Protocol hmp 20 Reliable Data Protocol rdp 27 Inter-Domain Policy Routing Protocol idpr 35 Ipv6 protocol ipv6 41 Routing Header for IPv6 ipv6-route 43 Fragment Header for IPv6 ipv6-frag 44 Inter-Domain Routing Protocol idrp 45 Reservation Protocol rsvp 46 General Routing Encapsulation gre 47 Encapsulating Security Payload (50) esp 50 Authentication Header ah 51 ICMP for IPv6 ipv6-icmp 58 EIGRP routing protocol eigrp 88 Open Shortest Path Protocol ospf 89 Protocol Independent Multicast pim 103 Layer Two Tunneling Protocol l2tp 115 ISIS over IPv4 isis 124 (any IP protocol) any (25504) IP Protocol Abbreviated Name Protocol Number

• list-of-flags — Specifies a list of TCP flags that can be triggered. If a flag is set, it is prefixed by “+”. If a flag is not set, it is prefixed by “-”. The possible values are: +urg, +ack, +psh, +rst, +syn, +fin, -urg, -ack, -psh, -rst, -syn and -fin. The flags are concatenated into one string. For example: +fin-ack. Default Configuration No IPv4 ACL is defined. Command Mode IP-Access List Configuration mode User Guidelines Use the ip access-list Global Configuration mode command to enable the IP-Access List Configuration mode. Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE is added, an implied deny-any-any condition exists at the end of the list and those packets that do not match the conditions defined in the permit statement are denied. Example The following example shows how to define a permit statement for an IP ACL. deny (IP) The deny IP-Access List Configuration mode command denies traffic if the conditions defined in the deny statement match. Syntax deny [disable-port] {any | protocol} {any | {source source-wildcard}} {any | {destination destination-wildcard}} [dscp dscp number | ip-precedence ip-precedence] [in-port port-num | out-port port-num] deny-icmp deny-igmp Console(config)# ip access-list ip-acl1 Console(config-ip-al)# permit rsvp 192.1.1.1 0.0.0.0 any dscp 56

45 deny-tcp deny-udp Parameters • disable-port — Specifies that the port is disabled. • source — Specifies the IP address or host name from which the packet was sent. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255. • source-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s in bit positions to be ignored. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255. • destination — Specifies the IP address or host name to which the packet is being sent. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255. • destination-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s in bit positions to be ignored. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255. • protocol — Specifies the abbreviated name or number of an IP protocol. The following table lists protocols that can be specified: IP Protocol Abbreviated Name Protocol Number Internet Control Message Protocol icmp 1 Internet Group Management Protocol igmp 2 IP in IP (encapsulation) Protocol ip 4 Transmission Control Protocol tcp 6 Exterior Gateway Protocol egp 8 Interior Gateway Protocol igp 9 User Datagram Protocol udp 17 Host Monitoring Protocol hmp 20 Reliable Data Protocol rdp 27 Inter-Domain Policy Routing Protocol idpr 35 Ipv6 protocol ipv6 41 Routing Header for IPv6 ipv6-route 43 Fragment Header for IPv6 ipv6-frag 44 Inter-Domain Routing Protocol idrp 45 Reservation Protocol rsvp 46 General Routing Encapsulation gre 47 Encapsulating Security Payload (50) esp 50 Authentication Header ah 51 ICMP for IPv6 ipv6-icmp 58 EIGRP routing protocol eigrp 88 Open Shortest Path Protocol ospf 89

• in-port port-num — (Optional) Specifies the input port of the devise. In case of egress classification this port will be devise input port. • out-port port-num — (Optional) Specifies the output port of the devise. • dscp — Indicates matching the dscp number with the packet dscp value. • ip-precedence — Indicates matching ip-precedence with the packet ip-precedence value. Default Configuration This command has no default configuration Command Mode IP-Access List Configuration mode User Guidelines Use the ip access-list Global Configuration mode command to enable the IP-Access List Configuration mode. Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE is added, an implied deny-any-any condition exists at the end of the list and those packets that do not match the defined conditions are denied. Example The following example shows how to define a permit statement for an IP ACL. mac access-list The mac access-list Global Configuration mode command enables the MAC-Access List Configuration mode and creates Layer 2 ACLs. To delete an ACL, use the no form of this command. IP-within-IP Encapsulation Protocol ipip 94 Protocol Independent Multicast pim 103 Layer Two Tunneling Protocol l2tp 115 ISIS over IPv4 isis 124 (any IP protocol) any (25504) IP Protocol Abbreviated Name Protocol Number Console(config)# ip access-list ip-acl1 Console(config-ip-al)# deny rsvp 192.1.1.1 0.0.0.255 any

47 Syntax mac access-list name no mac access-list name Parameters • name — Specifies the name of the ACL. (Range: 0-32 characters) Default Configuration The default for all ACLs is deny all. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example shows how to create a MAC ACL. permit (MAC) The permit MAC-Access List Configuration mode command defines permit conditions of an MAC ACL. Syntax permit {any | {host source source-wildcard} any | {destination destination-wildcard}} [vlan vlan-id] [cos cos cos-wildcard] [ethtype eth-type] Parameters • source — Specifies the source MAC address of the packet. • source-wildcard — Specifies wildcard bits to be applied to the source MAC address. Use 1s in bit positions to be ignored. Console(config)# mac access-list macl-acl1 Console(config-mac-al)#

• destination — Specifies the MAC address of the host to which the packet is being sent. • destination-wildcard — Specifies wildcard bits to be applied to the destination MAC address. Use 1s in bit positions to be ignored. • vlan-id — Specifies the ID of the packet vlan. (Range: 0-4095) • cos — Specifies the Class of Service (CoS) for the packet. (Range: 0-7) • cos-wildcard — Specifies wildcard bits to be applied to the CoS. • eth-type — Specifies the Ethernet type of the packet .(Range: 0-65535) Default Configuration No MAC ACL is defined. Command Mode MAC-Access List Configuration mode User Guidelines Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE is added, an implied deny-any-any condition exists at the end of the list and those packets that do not match the conditions defined in the permit statement are denied. If the VLAN ID is specified, the policy map cannot be connected to the VLAN interface. Example The following example shows how to create a MAC ACL with permit rules. deny (MAC) The deny MAC-Access List Configuration mode command denies traffic if the conditions defined in the deny statement match. Syntax deny [disable-port] {any | {source source-wildcard} {any | {destination destination- wildcard}}[vlan vlan-id] [cos cos cos-wildcard] [ethtype eth-type] Console(config)# mac access-list macl-acl1 Console(config-mac-al)# permit 6:6:6:6:6:6 0:0:0:0:0:0 any vlan 6

49 Parameters • disable-port — Indicates that the port is disabled if the statement is deny. • source — Specifies the MAC address of the host from which the packet was sent. • source-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s in bit positions to be ignored. • destination — Specifies the MAC address of the host to which the packet is being sent. • destination-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s in bit positions to be ignored. • vlan-id — Specifies the ID of the packet vlan. • cos — Specifies the packets’s Class of Service (CoS). • cos-wildcard — Specifies wildcard bits to be applied to the CoS. • eth-type — Specifies the packet’s Ethernet type. Default Configuration This command has no default configuration. Command Mode MAC-Access List Configuration mode User Guidelines MAC BPDU packets cannot be denied. This command defines an Access Control Element (ACE). An ACE can only be removed by deleting the ACL, using the no mac access-list Global Configuration mode command. Alternatively, the Web-based interface can be used to delete ACEs from an ACL. Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE is added, an implied deny-any-any condition exists at the end of the list and those packets that do not match the conditions defined in the permit statement are denied. If the VLAN ID is specified, the policy map cannot be connected to the VLAN interface. Example The following example shows how to create a MAC ACL with deny rules on a device. Console(config)# mac access-list macl1 Console (config-mac-acl)# deny 6:6:6:6:6:6:0:0:0:0:0:0 any

service-acl The service-acl Interface Configuration mode command applies an ACL to the input interface. To detach an ACL from an input interface, use the no form of this command. Syntax service-acl {input acl-name} no service-acl {input} Parameters • acl-name—Specifies the ACL to be applied to the input interface. Default Configuration This command has no default configuration. Command Mode Interface (Ethernet, port-channel) Configuration mode. User Guidelines In advanced mode, when an ACL is bound to an interface, the port trust mode is set to trust 12-13 and not to 12. Example The following example binds (services) an ACL to VLAN 2. show access-lists The show access-lists Privileged EXEC mode command displays access control lists (ACLs) defined on the device. Syntax show access-lists [name] Console(config)# interface vlan 2 Console(config-if)# service-acl input macl1

51 Parameters • name — The name of the ACL. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays access lists defined on a device. show interfaces access-lists The show interfaces access-lists Privileged EXEC mode command displays access lists applied on interfaces. Syntax show interfaces access-lists [ethernet interface | port-channel port-channel-number] Parameters • interface — Valid Ethernet port. (Full syntax: unit/port) • port-channel-number — Valid port-channel number. Default Configuration This command has no default configuration. Console# show access-lists IP access list ACL1 permit ip host 172.30.40.1 any permit rsvp host 172.30.8.8 any

Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays ACLs applied to the interfaces of a device: Console# show interfaces access-lists Interface Input ACL --------- --------- 1 ACL1 1 ACL3

53 5 Clock Commands clock set The clock set Privileged EXEC mode command manually sets the system clock. Syntax clock set hh:mm:ss day month year or clock set hh:mm:ss month day year Parameters • hh:mm:ss — Current time in hours (military format), minutes, and seconds. (hh: 0-23, mm: 0-59, ss: 0-59) • day — Current day (by date) in the month. (Range: 1-31) • month — Current month using the first three letters by name. (Range: Jan, …, Dec) • year — Current year. (Range: 2000-2097) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example sets the system time to 13:32:00 on March 7th, 2005. Console# clock set 13:32:00 7 Mar 2005

clock source The clock source Global Configuration mode command configures an external time source for the system clock. Use no form of this command to disable external time source. Syntax clock source {sntp} no clock source Parameters • sntp — SNTP servers Default Configuration No external clock source Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures an external time source for the system clock. clock timezone The clock timezone Global Configuration mode command sets the time zone for display purposes. To set the time to the Coordinated Universal Time (UTC), use the no form of this command. Syntax clock timezone hours-offset [minutes minutes-offset] [zone acronym] Console(config)# clock source sntp

55 no clock timezone Parameters • hours-offset — Hours difference from UTC. (Range: –12 hours to +13 hours) • minutes-offset — Minutes difference from UTC. (Range: 0-59) • acronym — The acronym of the time zone. (Range: Up to 4 characters) Default Configuration Clock set to UTC. Command Mode Global Configuration mode User Guidelines The system internally keeps time in UTC, so this command is used only for display purposes and when the time is manually set. Example The following example sets the timezone to 6 hours difference from UTC. clock summer-time The clock summer-time Global Configuration mode command configures the system to automatically switch to summer time (daylight saving time). To configure the software not to automatically switch to summer time, use the no form of this command. Syntax clock summer-time recurring {usa | eu | {week day month hh:mm week day month hh:mm}} [offset offset] [zone acronym] clock summer-time date date month year hh:mm date month year hh:mm [offset offset] [zone acronym] clock summer-time date month date year hh:mm month date year hh:mm [offset offset] [zone acronym] Console(config)# clock timezone -6 zone CST

no clock summer-time recurring Parameters • recurring — Indicates that summer time should start and end on the corresponding specified days every year. • date — Indicates that summer time should start on the first specific date listed in the command and end on the second specific date in the command. • usa — The summer time rules are the United States rules. • eu — The summer time rules are the European Union rules. • week — Week of the month. (Range: 1-5, first, last) • day — Day of the week (Range: first three letters by name, like sun) • date — Date of the month. (Range:1-31) • month — Month. (Range: first three letters by name, like Jan) • year — year - no abbreviation (Range: 2000-2097) • hh:mm — Time in military format, in hours and minutes. (Range: hh: 0-23, mm:0-59) • offset — Number of minutes to add during summer time. (Range: 1-1440) • acronym — The acronym of the time zone to be displayed when summer time is in effect. (Range: Up to 4 characters) Default Configuration Summer time is disabled. offset — Default is 60 minutes. acronym — If unspecified default to the timezone acronym. If the timezone has not been defined, the default is UTC. Command Mode Global Configuration mode User Guidelines In both the date and recurring forms of the command, the first part of the command specifies when summer time begins, and the second part specifies when it ends. All times are relative to the local time zone. The start time is relative to standard time. The end time is relative to summer time. If the starting month is chronologically after the ending month, the system assumes that you are in the southern hemisphere. USA rule for daylight savings time:

57 Start: First Sunday in April End: Last Sunday in October Time: 2 am local time EU rule for daylight savings time: Start: Last Sunday in March End: Last Sunday in October Time: 1.00 am (01:00) Example The following example sets summer time starting on the first Sunday in April at 2 am and finishing on the last Sunday in October at 2 am. sntp authentication-key The sntp authentication-key Global Configuration mode command defines an authentication key for Simple Network Time Protocol (SNTP). To remove the authentication key for SNTP, use the no form of this command. Syntax sntp authentication-key number md5 value no sntp authentication-key number Parameters • number — Key number (Range: 1-4294967295) • value — Key value (Range: 1-8 characters) Default Configuration No authentication key is defined. Command Mode Global Configuration mode Console(config)# clock summer-time recurring first sun apr 2:00 last sun oct 2:00

User Guidelines Multiple keys can be generated. Example The following example defines the authentication key for SNTP. sntp authenticate The sntp authenticate Global Configuration mode command grants authentication for received Simple Network Time Protocol (SNTP) traffic from servers. To disable the feature, use the no form of this command. Syntax sntp authenticate no sntp authenticate Default Configuration No authentication Command Mode Global Configuration mode User Guidelines The command is relevant for both unicast and broadcast. Example The following example defines the authentication key for SNTP and grants authentication. Console(config)# sntp authentication-key 8 md5 ClkKey Console(config)# sntp authentication-key 8 md5 ClkKey Console(config)# sntp trusted-key 8

59 sntp trusted-key The sntp trusted-key Global Configuration mode command authenticates the identity of a system to which Simple Network Time Protocol (SNTP) will synchronize. To disable authentication of the identity of the system, use the no form of this command. Syntax sntp trusted-key key-number no sntp trusted-key key-number Parameters • key-number — Key number of authentication key to be trusted. (Range: 1- 4294967295) Default Configuration No keys are trusted. Command Mode Global Configuration mode User Guidelines The command is relevant for both received unicast and broadcast. If there is at least 1 trusted key, then unauthenticated messages will be ignored. Example The following example authenticates key 8. sntp client poll timer The sntp client poll timer Global Configuration mode command sets the polling time for the Simple Network Time Protocol (SNTP) client. To restoreTo restoreTo restore default configuration, use the no form of this command. Console(config)# sntp authentication-key 8 md5 ClkKey Console(config)# sntp trusted-key 8

Syntax sntp client poll timer seconds no sntp client poll timer Paramethers • seconds — Polling interval in seconds. (Range: 60-86400) Default Configuration Polling interval is 1024 seconds. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example sets the polling time for the SNTP client to 120 seconds. sntp broadcast client enable The sntp broadcast client enable Global Configuration mode command enables Simple Network Time Protocol (SNTP) broadcast clients. To disable SNTP broadcast clients, use the no form of this command. Syntax sntp broadcast client enable no sntp broadcast client enable Default Configuration The SNTP broadcast client is disabled. Console(config)# sntp client poll timer 120

61 Command Mode Global Configuration mode User Guidelines Use the sntp client enable (Interface) Interface Configuration mode command to enable the SNTP client on a specific interface. Example The following example enables the SNTP broadcast clients. sntp anycast client enable The sntp anycast client enable Global Configuration mode command enables SNTP anycast client. To disable the SNTP anycast client, use the no form of this command. Syntax sntp anycast client enable no sntp anycast client enable Default Configuration The SNTP anycast client is disabled. Command Mode Global Configuration mode User Guidelines Polling time is determined by the sntp client poll timer Global Configuration mode command. Use the sntp client enable (Interface) Interface Configuration mode command to enable the SNTP client on a specific interface. Console(config)# sntp broadcast client enable

Example The following example enables SNTP anycast clients. sntp client enable (Interface) The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode command enables the Simple Network Time Protocol (SNTP) client on an interface. This applies to both receive broadcast and anycast updates. To disable the SNTP client, use the no form of this command. Syntax sntp client enable no sntp client enable Default Configuration The SNTP client is disabled on an interface. Command Mode Interface Configuration (Ethernet, port-channel, VLAN) mode User Guidelines Use the sntp broadcast client enable Global Configuration mode command to enable broadcast clients globally. Use the sntp anycast client enable Global Configuration mode command to enable anycast clients globally. Example The following example enables the SNTP client on Ethernet port 3. console(config)# sntp anycast client enable Console(config)# interface ethernet ext.3 Console(config-if)# sntp client enable

63 sntp unicast client enable The sntp unicast client enable Global Configuration mode command enables the device to use the Simple Network Time Protocol (SNTP) to request and accept SNTP traffic from servers. To disable requesting and accepting SNTP traffic from servers, use the no form of this command. Syntax sntp unicast client enable no sntp unicast client enable Default Configuration The SNTP unicast client is disabled. Command Mode Global Configuration mode User Guidelines Use the sntp server Global Configuration mode command to define SNTP servers. Example The following example enables the device to use the Simple Network Time Protocol (SNTP) to request and accept SNTP traffic from servers. sntp unicast client poll The sntp unicast client poll Global Configuration mode command enables polling for the Simple Network Time Protocol (SNTP) predefined unicast servers. To disable the polling for SNTP client, use the no form of this command. Syntax sntp unicast client poll no sntp unicast client poll Console(config)# sntp unicast client enable

Default Configuration Polling is disabled. Command Mode Global Configuration mode User Guidelines Polling time is determined by the sntp client poll timer Global Configuration mode command. Example The following example enables polling for SNTP predefined unicast clients. sntp server The sntp server Global Configuration mode command configures the device to use the Simple Network Time Protocol (SNTP) to request and accept SNTP traffic from a specified server. To remove a server from the list of SNTP servers, use the no form of this command. Syntax sntp server {ip-address | hostname}[poll] [key keyid] no sntp server host Parameters • ip-address — IP address of the server. • hostname — Hostname of the server. (Range: 1-158 characters) • poll — Enable polling. • keyid — Authentication key to use when sending packets to this peer. (Range:1- 4294967295) Default Configuration No servers are defined. Console(config)# sntp unicast client poll

65 Command Mode Global Configuration mode User Guidelines Up to 8 SNTP servers can be defined. Use the sntp unicast client enable Global Configuration mode command to enable predefined unicast clients globally. To enable polling you should also use the sntp unicast client poll Global Configuration mode command for global enabling. Polling time is determined by the sntp client poll timer Global Configuration mode command. Example The following example configures the device to accept SNTP traffic from the server on 192.1.1.1. show clock The show clock Privileged EXEC mode command displays the time and date from the system clock. Syntax show clock [detail] Parameters • detail — Shows timezone and summertime configuration. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode Console(config)# sntp server 192.1.1.1

User Guidelines The symbol that precedes the show clock display indicates the following: Example The following example displays the time and date from the system clock. show sntp configuration The show sntp configuration Privileged EXEC mode command shows the configuration of the Simple Network Time Protocol (SNTP). Syntax show sntp configuration Default Configuration This command has no default configuration. Symbol Description * Time is not authoritative. (blank) Time is authoritative. . Time is authoritative, but SNTP is not synchronized. Console# show clock 15:29:03 PDT(UTC-7) Jun 17 2005 Time source is SNTP Console# show clock detail 15:29:03 PDT(UTC-7) Jun 17 2005 Time source is SNTP Time zone: Acronym is PST Offset is UTC-8 Summertime: Acronym is PDT Recurring every year. Begins at first Sunday of April at 2:00. Ends at last Sunday of October at 2:00. Offset is 60 minutes.

67 Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the current SNTP configuration of the device. show sntp status The show sntp status Privileged EXEC mode command shows the status of the Simple Network Time Protocol (SNTP). Syntax show sntp status Console# show sntp configuration Polling interval: 1024 seconds MD5 Authentication keys: 8, 9 Authentication is required for synchronization. Trusted Keys: 8, 9 Unicast Clients Polling: Enabled Server Polling Encryption Key ----------- ------- -------------- 176.1.1.8 Enabled 9 176.1.8.179 Disabled Disabled Broadcast Clients: Enabled Anycast Clients: Enabled Broadcast Interfaces: 1, 3

Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example shows the status of the SNTP. Console# show sntp status Clock is synchronized, stratum 4, reference is 176.1.1.8, unicast Reference time is AFE2525E.70597B34 (00:10:22.438 PDT Jul 5 1993) Unicast servers: Server Status Last response Offset [mSec] Delay [mSec] ----------- ------- ---------------------------- ------ ------ 176.1.1.8 Up 19:58:22.289 PDT Feb 19 2005 7.33 117.79 176.1.8.179 Unknown 12:17.17.987 PDT Feb 19 2005 8.98 189.19 Anycast server: Server Interface Status Last response Offset Delay [mSec] [mSec] --------- ------- ----- ----------------------------- ------ ----- 176.1.11.8 VLAN 118 Up 9:53:21.789 PDT Feb 19 2005 7.19 119.89 Broadcast: Interface IP Address Last response --------- --------- ---------------------------- 13 0.0.0.0 00:00:00.0 Feb 19 2005 vlan 1 16.1.1.200 15:15:16.0 LLBG Feb 19 2006

69 6 Configuration and Image File Commands copy The copy Privileged EXEC mode command copies files from a source to a destination. Syntax copy source-url destination-url Parameters • source-url — The source file location URL or reserved keyword of the source file to be copied. (Range: 1-160 characters) • destination-url — The destination file URL or reserved keyword of the destination file. (Range: 1-160 characters) The following table displays keywords and URL prefixes. Keyword Source or Destination flash: Source or destination URL for flash memory. It’s the default in case a URL is specified without a prefix. running-config Represents the current running configuration file. startup-config Represents the startup configuration file. image If the source file, represents the active image file. If the destination file, represents the non-active image file. boot Boot file. tftp:// Source or destination URL for a TFTP network server. The syntax for this alias is tftp://host/[directory]/filename. The host can be represented by its IP address or hostname. xmodem: Source for the file from a serial connection that uses the Xmodem protocol. unit://member/ image Image file on one of the units. To copy from the master to all units, specify * in the member field. unit://member/ boot Boot file on one of the units. To copy from the master to all units, specify * in the member field. null: Null destination for copies or files. A remote file can be copied to null to determine its size.

70 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines The location of a file system dictates the format of the source or destination URL. The entire copying process may take several minutes and differs from protocol to protocol and from network to network. *.prv and *.sys files cannot be copied. Understanding Invalid Combinations of Source and Destination Some invalid combinations of source and destination exist. Specifically, you cannot copy if one of the following conditions exist: The source file and destination file are the same file. xmodem: is the destination file. The source file can be copied to image, boot and null: only. tftp:// is the source file and destination file on the same copy. The following table describes copy characters: Copying an Image File from a Server to Flash Memory To copy an image file from a server to flash memory, use the copy source-url image command. Copying a Boot File from a Server to Flash Memory To copy a boot file from a server to flash memory, enter the copy source-url boot command. Copying a Configuration File from a Server to the Running Configuration File Character Description ! For network transfers, indicates that the copy process is taking place. Each exclamation point indicates successful transfer of ten packets (512 bytes each). . For network transfers, indicates that the copy process timed out. Generally, many periods in a row means that the copy process may fail.

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 71 To load a configuration file from a network server to the running configuration file of the device, enter the copy source-url running-config command. The commands in the loaded configuration file are added to those in the running configuration file as if the commands were typed in the command-line interface (CLI). Thus, the resulting configuration file is a combination of the previous running configuration and the loaded configuration files with the loaded configuration file taking precedence. Copying a Configuration File from a Server to the Startup Configuration To copy a configuration file from a network server to the startup configuration file of the device, enter copy source-url startup-config. The startup configuration file is replaced by the copied configuration file. Storing the Running or Startup Configuration on a Server Use the copy running-config destination-url command to copy the current configuration file to a network server using TFTP. Use the copy startup-config destination-url command to copy the startup configuration file to a network server. Saving the Running Configuration to the Startup Configuration To copy the running configuration to the startup configuration file, enter the copy running-config startup-config command. Example The following example copies system image file1 from the TFTP server 172.16.101.101 to a non-active image file. delete The delete Privileged EXEC mode command deletes a file from a flash memory device. Syntax delete url Console# copy tftp://172.16.101.101/file1 image Accessing file 'file1' on 172.16.101.101... Loading file1 from 172.16.101.101: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! [OK] Copy took 0:01:11 [hh:mm:ss]

72 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Parameters • url — The location URL or reserved keyword of the file to be deleted. (Range: 1-160 characters) The following table displays keywords and URL prefixes: Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines *.sys, *.prv, image-1 and image-2 files cannot be deleted. Example The following example deletes the file called ‘test’ from the flash memory. boot system The boot system Privileged EXEC mode command specifies the system image that the device loads at startup. Syntax boot system {image-1 | image-2} Parameters • image-1 — Specifies image 1 as the system startup image. • image-2 — Specifies image 2 as the system startup image. Keyword Source or Destination flash: Source or destination URL for flash memory. It’s the default in case a URL is specified without a prefix. startup-config Represents the startup configuration file. Console# delete flash:test Delete flash:test? [confirm]

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 73 Default Configuration If the unit number is unspecified, the default setting is the master unit number. Command Mode Privileged EXEC mode User Guidelines Use the show bootvar command to find out which image is the active image. Example The following example loads the system image 1 at device startup. show running-config The show running-config Privileged EXEC mode command displays the contents of the currently running configuration file. Syntax show running-config Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Console# boot system image-1

74 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example The following example displays the contents of the running configuration file. show startup-config The show startup-config Privileged EXEC mode command displays the contents of the startup configuration file. Syntax show startup-config Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Console# show running-config hostname device interface ethernet ext.1 ip address 176.242.100.100 255.255.255.0 duplex full speed 1000 interface ethernet ext.2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 75 Example The following example displays the contents of the running configuration file. show backup-config The show backup-config Privileged EXEC mode command displays the contents of the backup configuration file. Syntax show backup-config Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Console# show startup-config hostname device interface ethernet ext.1 ip address 176.242.100.100 255.255.255.0 duplex full speed 1000 interface ethernet ext.2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000

76 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example The following example displays the contents of the backup configuration file. show bootvar The show bootvar Privileged EXEC mode command displays the active system image file that is loaded by the device at startup. Syntax show bootvar Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Console# show backup-config software version 1.1 hostname device interface ethernet ext.1 ip address 176.242.100.100 255.255.255.0 duplex full speed 1000 interface ethernet ext.2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 77 Example The following example displays the active system image file that is loaded by the device at startup. Console# show bootvar Unit Active Image Selected for next boot ---- ------------ ---------------------- 1 image-1 image-1

78 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide

79 7 Ethernet Configuration Commands interface ethernet The interface ethernet Global Configuration mode command enters the interface configuration mode to configure an Ethernet type interface. Syntax interface ethernet interface Parameters • interface — Valid Ethernet port. (Full syntax: unit/port) Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enables configuring Ethernet port 8 interface range ethernet The interface range ethernet Global Configuration mode command configures multiple Ethernet type interfaces at the same time. Console(config)# interface ethernet ext.8

80 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Syntax interface range ethernet {port-list | all} Parameters • port-list — List of valid ports. Where more than one port is listed, separate the nonconsecutive ports with a comma and no spaces, use a hyphen to designate a range of ports and group a list separated by commas in brackets. • all — All Ethernet ports. Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each active interface in the range. If the command returns an error on one of the active interfaces, it does not stop executing commands on other active interfaces. Example The following example shows how ports 10 to 12 and 1 to 14 are grouped to receive the same command. shutdown The shutdown Interface Configuration (Ethernet, port-channel) mode command disables an interface. To restart a disabled interface, use the no form of this command. Syntax shutdown no shutdown Console(config)# interface range ethernet 10-12,1-14 Console(config-if)#

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 81 Default Configuration The interface is enabled. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example disables Ethernet port 5 operations. The following example restarts the disabled Ethernet port. description The description Interface Configuration (Ethernet, port-channel) mode command adds a description to an interface. To remove the description, use the no form of this command. Syntax description string no description Parameters • string — Comment or a description of the port to enable the user to remember what is attached to the port. (Range: 1-64 characters) Default Configuration The interface does not have a description. Console(config)# interface ethernet ext.5 Console(config-if)# shutdown Console(config)# interface ethernet ext.5 Console(config-if)# no shutdown

82 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example adds a description to Ethernet port 5. speed The speed Interface Configuration (Ethernet, port-channel) mode command configures the speed of a given Ethernet interface when not using auto-negotiation. To restore the default configuration, use the no form of this command. Syntax speed {10 | 100 | 1000| 10000} no speed Parameters • 10 — Forces10 Mbps operation. • 100 — Forces 100 Mbps operation. • 1000 — Forces 1000 Mbps operation. • 10000 — Forces 10000 Mbps operation. Default Configuration Maximum port capability Command Mode Interface Configuration (Ethernet, port-channel) mode Console(config)# interface ethernet ext.5 Console(config-if)# description "RD SW#3"

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 83 User Guidelines The no speed command in a port-channel context returns each port in the port-channel to its maximum capability. Example The following example configures the speed operation of Ethernet port 5 to 100 Mbps operation. duplex The duplex Interface Configuration (Ethernet) mode command configures the full/half duplex operation of a given Ethernet interface when not using auto-negotiation. To restore the default configuration, use the no form of this command. Syntax duplex {half | full} no duplex Parameters • half — Forces half-duplex operation • full — Forces full-duplex operation Default Configuration The interface is set to full duplex. Command Mode Interface Configuration (Ethernet) mode User Guidelines When configuring a particular duplex mode on the port operating at 10/100 Mbps, disable the auto-negotiation on that port. Half duplex mode can be set only for ports operating at 10 Mbps or 100 Mbps. Console(config)# interface ethernet ext.5 Console(config-if)# speed 100

84 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide Example The following example configures the duplex operation of Ethernet port 1 to full duplex operation. negotiation The negotiation Interface Configuration (Ethernet, port-channel) mode command enables auto-negotiation operation for the speed and duplex parameters of a given interface. To disable auto-negotiation, use the no form of this command. Syntax negotiation [capability1 [capability2…capability5]] no negotiation Parameters • capability — Specifies the capabilities to advertise. (Possible values: 10h, 10f, 100h,100f, 1000f) Default Configuration Auto-negotiation is enabled. If unspecified, the default setting is to enable all capabilities of the port. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines If capabilities were specified when auto-negotiation was previously entered, not specifying capabilities when currently entering auto-negotiation overrides the previous configuration and enables all capabilities. Console(config)# interface ethernet ext.1 Console(config-if)# duplex full