NETGEAR M7100-24X Reference Manual

San Jose, CA 95134 USA October 2013 202-11332-01 ProSAFE M7100 Managed Switches Command-Line Interface (CLI) Reference Manual Software Version 10.1.0 Model M7100-24X

Support Thank you for selecting NETGEAR products. After installing your device, locate the serial number on the label of your product and use it to register your product at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR recommends registering your product through the NETGEAR website. For product updates and web support, visit http://support.netgear.com. Phone (US & Canada only): 1-888-NETGEAR. Phone (Other Countries): Check the list of phone numbers at http://support.netgear.com/general/contact/default.aspx. Compliance For regulatory compliance information, visit http://www.netgear.com/about/regulatory. Trademarks NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change without notice. © NETGEAR, Inc. All rights reserved. Revision History Publication Part Number Version Publish Date Comments 202-11332-01 Not applicable October 2013 Updated the manual to a new format. Added the following new command sections: • Special Command-Mode Independent Commands • Private Group Commands • Alternative Store and Forward Commands • Multichassis LAG Commands • Port Mirroring Commands • DHCPv6 Snooping Configuration Commands • MBUF Utilization Commands • Full Memory Dump Commands Removed the following command sections: • Open Shortest Path First (OSPF) Commands • OSPF Graceful Restart Commands • Routing Information Protocol (RIP) Commands • Tunnel Interface Commands • IPv6 Routing Commands • OSPFv3 Commands • OSPFv3 Graceful Restart Commands • DHCPv6 Commands • Multicast Commands • DVMRP Commands • PIM Commands • Internet Group Message Protocol (IGMP) Commands • IGMP Proxy Commands • IPv6 Multicast Forwarder Commands • IPv6 PIM Commands • IPv6 MLD Commands

(continued) (continued) (continued) (continued) • IPv6 MLD-Proxy Commands • PoE Commands • Priority-Based Flow Control Commands • Energy Detect Mode Commands In addition, this revision includes multiple individual command additions, command changes, and command removals. 202-11166-02 1.0 February 2013 Updated document. 202-11166-01 1.0 October 2012 First publication.

Command Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9 Command Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9 Common Parameter Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10 Slot/Port Naming Convention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11 Using a Command’s “No” Form. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12 Managed Switch Modules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12 Command Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12 Special Command-Mode Independent Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .15 Command Completion and Abbreviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16 CLI Error Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17 CLI Line-Editing Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17 Using CLI Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18 Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19 Chapter 2 Switching Commands Port Configuration Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22 Loopback Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28 Spanning Tree Protocol (STP) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30 VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48 Double VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61 Voice VLAN Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63 Provisioning (IEEE 802.1p) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65 GARP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66 GVRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68 GMRP Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70 Alternative Store and Forward Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72 Flow Control Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73 Port-Channel/LAG (802.3ad) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75 Multichassis LAG Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92 Port Mirroring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 DHCP L2 Relay Agent Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 DHCP Client Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109 IGMP Snooping Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 IGMP Snooping Querier Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120 MLD Snooping Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124 MLD Snooping Querier Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 LLDP (802.1AB) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136 LLDP-MED Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

MAC Database Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155 ISDP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 Chapter 3 Multicast VLAN Registration (MVR) About MVR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164 MVR Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164 Chapter 4 Routing Commands Address Resolution Protocol (ARP) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172 IP Routing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177 Router Discovery Protocol Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195 Virtual LAN Routing Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198 Virtual Router Redundancy Protocol Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199 DHCP and BOOTP Relay Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208 IP Helper Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210 IP Event Dampening Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214 ICMP Throttling Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216 Chapter 5 Quality of Service (QoS) Commands Class of Service (CoS) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220 Differentiated Services (DiffServ) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 DiffServ Class Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228 DiffServ Policy Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237 DiffServ Service Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243 DiffServ Show Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244 MAC Access Control List (ACL) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250 IP Access Control List (ACL) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254 IPv6 Access Control List (ACL) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265 Time Range Commands for Time-Based ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269 AutoVoIP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272 iSCSI Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276 Chapter 6 Security Commands Private VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283 Protected Ports Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287 Private Group Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289 Port-Based Network Access Control Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . 291 802.1X Supplicant Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305 Storm-Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307 Static MAC Filtering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318 Dynamic ARP Inspection Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 322 DHCP Snooping Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329 DHCPv6 Snooping Configuration Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 338 Port Security Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348 Denial of Service Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352

Chapter 7 Utility Commands Auto Install Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364 Dual Image Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367 System Information and Statistics Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 368 Logging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388 Email Alerting and Mail Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394 System Utility and Clear Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 401 Simple Network Time Protocol (SNTP) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . 414 DHCP Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422 DNS Client Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435 Packet Capture Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 440 Serviceability Packet Tracing Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 443 Cable Test Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468 sFlow Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468 Software License Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473 IP Address Conflict Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475 Link Local Protocol Filtering Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475 RMON Stats and History Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477 RFC 2819 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477 RFC 3273 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477 RFC 3434 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478 UDLD Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483 USB commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 MBUF Utilization Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488 Full Memory Dump Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 490 Chapter 8 Management Commands Configuring the Switch Management CPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 494 Network Interface Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496 Console Port Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499 Telnet Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 502 Secure Shell (SSH) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 506 Management Security Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 509 Hypertext Transfer Protocol (HTTP) Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . 510 Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 516 User Account Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517 SNMP Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 541 RADIUS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 552 TACACS+ Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 565 Configuration Scripting Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 570 Pre-Login Banner and System Prompt Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 572 Switch Database Management (SDM) Templates . . . . . . . . . . . . . . . . . . . . . . . . . . 574 IPv6 Management Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 575 Terminal Display Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 580

Chapter 9 Green Ethernet Commands Energy Efficient Ethernet (EEE) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 583 Chapter 10 Log Messages Core . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 591 Utilities. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592 Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 595 Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 599 QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 605 Routing and IPv6 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 606 Multicast. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 609 Stacking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 611 Technologies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 612 O/S Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 614 Command List

The command-line interface (CLI) is a text-based way to manage and monitor the system. You can access the CLI by using a direct serial connection or by using a remote logical connection with telnet or SSH. This chapter describes the CLI syntax, conventions, and modes. It contains the following sections: • Command Syntax • Command Conventions • Common Parameter Values • Slot/Port Naming Convention • Using a Command’s “No” Form • Managed Switch Modules • Command Modes • Special Command-Mode Independent Commands • Command Completion and Abbreviation • CLI Error Messages • CLI Line-Editing Conventions • Using CLI Help • Accessing the CLI

9 ProSAFE M7100 Managed Switches Command Syntax A command is one or more words that might be followed by one or more parameters. Parameters can be required or optional values. Some commands, such as show network and clear vlan, do not require parameters. Other commands, such as network parms, require that you supply a value after the command. You must type the parameter values in a specific order, and optional parameters follow required parameters. The following example describes the network parms command syntax: • network parms is the command name. • and are parameters and represent required values that you must enter after you type the command keywords. • [gateway] is an optional keyword, so you are not required to enter a value in place of the keyword. The Command Line Reference lists each command by the command name and provides a brief description of the command. Each command reference also contains the following information: • Format shows the command keywords and the required and optional parameters. • Mode identifies the command mode you must be in to access the command. • Default shows the default value, if any, of a configurable setting on the device. The show commands also contain a description of the information that the command shows. Command Conventions In this document, the command name and keywords are noted in the following ways: • In descriptive text: Command names in bold font. Keywords are in bold font. Parameters (which are also referred to as arguments) are in italic font and placed between angle brackets (<>). You must replace the parameter name with an appropriate value, which might be a name or number. Parameters are order-dependent. • In tables describing the command format, mode, and, if applicable, default: Command names in regular font. Keywords are in regular font. Parameters are in italic font and placed between angle brackets (<>). You must replace the parameter name with an appropriate value, which might be a name or number. Parameters are order-dependent. The parameters for a command might include mandatory values, optional values, or keyword choices. Table 1 describes the conventions this document uses to distinguish between value types. Format network parms [gateway]

10 ProSAFE M7100 Managed Switches Common Parameter Values Parameter values might be names (strings) or numbers. To use spaces as part of a name parameter, enclose the name value in double quotes. For example, the expression “System Name with Spaces” forces the system to accept the spaces. Empty strings (““) are not valid user-defined strings. Table 2 describes common parameter values and value formatting. Table 1. Parameter Conventions Symbol Example Description <> angle brackets Indicates that you must enter a value in place of the brackets and text inside them. [] square brackets [] Indicates an optional parameter that you can enter in place of the brackets and text inside them. {} curly braces {choice1 | choice2} Indicates that you must select a keyword from the list of choices. | Vertical bars choice1 | choice2 Separates the mutually exclusive choices. [{}] Braces within square brackets [{choice1 | choice2}] Indicates a choice within an optional element. Table 2. Parameter Descriptions Parameter Description ipaddr This parameter is a valid IP address. You can enter the IP address in the following formats: a (32 bits) a.b (8.24 bits) a.b.c (8.8.16 bits) a.b.c.d (8.8.8.8) In addition to these formats, the CLI accepts decimal, hexadecimal, and octal formats through the following input formats (where n is any valid hexadecimal, octal, or decimal number): 0xn (CLI assumes hexadecimal format) 0n (CLI assumes octal format with leading zeros) n (CLI assumes decimal format) ipv6-address FE80:0000:0000:0000:020F:24FF:FEBF:DBCB, or FE80:0:0:0:20F:24FF:FEBF:DBCB, or FE80::20F24FF:FEBF:DBCB, or FE80:0:0:0:20F:24FF:128:141:49:32 For more information, refer to RFC 3513. Interface or slot/port Valid slot and port number separated by forward slashes. For example, 0/1 represents slot number 0 and port numb er1.

11 ProSAFE M7100 Managed Switches Slot/Port Naming Convention Managed switch software references physical entities such as cards and ports by using a slot/port naming convention. The software also uses this convention to identify certain logical entities, such as Port-Channel interfaces. The slot number has two uses. In the case of physical ports, it identifies the card containing the ports. In the case of logical and CPU ports it also identifies the type of interface or port. The port identifies the specific physical port or logical interface being managed on a given slot. Note: In the CLI, loopback and tunnel interfaces do not use the slot/port format. To specify a loopback interface, you use the loopback ID. To specify a tunnel interface, you use the tunnel ID. Logical Interface Represents a logical slot and port number. This is applicable in the case of a port-channel (LAG). You can use the logical slot/port to configure the port-channel. Character strings Use double quotation marks to identify character strings, for example, “System Name with Spaces”. An empty string (“”) is not valid. Table 3. Type of Slots Slot Type Description Physical slot numbers Physical slot numbers begin with zero, and are allocated up to the maximum number of physical slots. Logical slot numbers Logical slots immediately follow physical slots and identify port-channel (LAG) or router interfaces. CPU slot numbers The CPU slots immediately follow the logical slots. Table 4. Type of Ports Port Type Description Physical Ports The physical ports for each slot are numbered sequentially starting from zero. Logical Interfaces Port-channel or link aggregation group (LAG) interfaces are logical interfaces that are only used for bridging functions. VLAN routing interfaces are only used for routing functions. Loopback interfaces are logical interfaces that are always up. Tunnel interfaces are logical point-to-point links that carry encapsulated packets. CPU ports CPU ports are handled by the driver as one or more physical entities located on physical slots. Table 2. Parameter Descriptions (continued) Parameter Description

12 ProSAFE M7100 Managed Switches Using a Command’s “No” Form The no keyword is a specific form of an existing command and does not represent a new or distinct command. Almost every configuration command has a no form. In general, use the no form to reverse the action of a command or reset a value back to the default. For example, the no shutdown configuration command reverses the shutdown of an interface. Use the command without the keyword no to reenable a disabled feature or to enable a feature that is disabled by default. Only the configuration commands are available in the no form. Managed Switch Modules Managed switch software consists of flexible modules that can be applied in various combinations to develop advanced Layer 2/3/4+ products. The commands and command modes available on your switch depend on the installed modules. Additionally, for some show commands, the output fields might change based on the modules included in the software. The software suite includes the following modules: • Switching (Layer 2) • Routing (Layer 3) • IPv6—IPv6 routing • Multicast • Quality of Service • Management (CLI, web UI, and SNMP) • IPv6 Management—Allows management of the device through an IPv6 through an IPv6 address without requiring the IPv6 Routing package in the system. The management address can be associated with the network port (front-panel switch ports) and a routine interface (port or VLAN). • Stacking Not all modules are available for all platforms or software releases. Command Modes The CLI groups commands into modes according to the command function. Each of the command modes supports specific software commands. The commands in one mode are not available until you switch to that particular mode, except for the User EXEC mode commands. You can execute the User EXEC mode commands in the Privileged EXEC mode. The command prompt changes in each command mode to help you identify the current mode. Table 5 describes the command modes and the prompts visible in that mode.

13 ProSAFE M7100 Managed Switches Note: The command modes available on your switch depend on the software modules that are installed. For example, a switch that does not support BGPv4 does not have the Router BGPv4 Command Mode. Table 5. CLI Command Modes Command Mode Prompt Mode Description User EXEC Switch> Contains a limited set of commands to view basic system information. Privileged EXEC Switch# Allows you to issue any EXEC command, enter the VLAN mode, or enter the Global Configuration mode. Global Config Switch (Config)# Groups general setup commands and permits you to make modifications to the running configuration. VLAN Config Switch (Vlan)# Groups all the VLAN commands. Interface Config Switch (Interface )# Switch (Interface Loopback )# Switch (Interface Tunnel )# Manages the operation of an interface and provides access to the router interface configuration commands. Use this mode to set up a physical port for a specific logical connection operation. Line Config Switch (line)# Contains commands to configure outbound telnet settings and console interface settings. Policy Map Config Switch (Config-policy-map)# Contains the QoS Policy-Map configuration commands. Policy Class Config Switch (Config-policy-class-map)# Consists of class creation, deletion, and matching commands. The class match commands specify Layer 2, Layer 3, and general match criteria. Class-Map Config Switch (Config-class-map)# Contains the QoS class map configuration commands for IPv4. Ipv6_Class-Map Config Switch (Config-class-map)# Contains the QoS class map configuration commands for IPv6. MAC Access-list Config Switch (Config-mac-access-list)# Allows you to create a MAC Access-List and to enter the mode containing MAC Access-List configuration commands. TACACS Config Switch (Tacacs)# Contains commands to configure properties for the TACACS servers. DHCP Pool Config Switch (Config dhcp-pool)# Contains the DHCP server IP address pool configuration commands. Stack Global Config Mode Switch (Config stack)# Allows you to access the Stack Global Config Mode.

14 ProSAFE M7100 Managed Switches Table 6 explains how to enter or exit each mode. ARP Access-List Config Mode Switch (Config-arp-access-list)# Contains commands to add ARP ACL rules in an ARP Access List. VPC Domain Config Mode Switch (Config-VPC 1)# Contains the VPC domain configuration commands. Table 6. CLI Mode Access and Exit Command Mode Access Method Exit or Access Previous Mode User EXEC This is the first level of access. To exit, enter logout. Privileged EXEC From the User EXEC mode, enter enable. To exit to the User EXEC mode, enter exit or press Ctrl-Z. Global Config From the Privileged EXEC mode, enter configure. To exit to the Privileged EXEC mode, enter exit, or press Ctrl-Z. VLAN Config From the Privileged EXEC mode, enter vlan database. To exit to the Privileged EXEC mode, enter exit or press Ctrl-Z. Interface Config From the Global Config mode, enter interface or interface loopback or interface tunnel To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. Line Config From the Global Config mode, enter lineconfig. To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-ZZ. Policy-Map Config From the Global Config mode, enter policy-map . To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. Policy-Class-Map Config From the Policy Map mode enter class. To exit to the Policy Map mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. Class-Map Config From the Global Config mode, enter class-map, and specify the optional keyword ipv4 to specify the Layer 3 protocol for this class. See class-map on page 228 for more information. To exit to the Global Config mode, enter exitt. To return to the Privileged EXEC mode, enter Ctrl-ZZ. Ipv6-Class-Map Config From the Global Config mode, enter class-map and specify the optional keyword ipv6 to specify the Layer 3 protocol for this class. See class-map on page 228 for more information. To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. MAC Access-list Config From the Global Config mode, enter mac access-list extended . To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. Table 5. CLI Command Modes (continued) Command Mode Prompt Mode Description

15 ProSAFE M7100 Managed Switches Special Command-Mode Independent Commands The following commands are special commands that do not belong to a particular command mode and that do not let you configure a specific feature. interface Use this command to switch from one interface to another interface while you can remain in Interface Config mode and do not need to go to Global Config mode. For single interfaces, valid interfaces you can switch to are physical interfaces, port-channel interfaces, VLAN routing interfaces, loopback interfaces, and tunnel interfaces. For ranges of interfaces, valid interfaces you can switch to are physical interfaces, port-channel interfaces, and VLAN routing interfaces. do For all the commands that are supported in Privileged Exec mode, the do command lets you execute any of these commands in Global Config mode, Interface Config mode, Interface Config mode, VLAN Config mode, or Routing Config mode. TACACS Config From the Global Config mode, enter tacacs-server host , in which is the IP address of the TACACS server on your network. To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. DHCP Pool Config From the Global Config mode, enter ip dhcp pool . To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. Stack Global Config Mode From the Global Config mode, enter the stack command. To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. ARP Access-List Config Mode From the Global Config mode, enter the arp access-list command. To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. VPC Domain Config Mode From the Global Config mode, enter the vpc domain command. To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. Format interface { | lag {} |loopback {} |tunnel {} | vlan {}} Mode Interface Config Global Config Table 6. CLI Mode Access and Exit (continued) Command Mode Access Method Exit or Access Previous Mode

16 ProSAFE M7100 Managed Switches In other words, to execute a command that is normally supported only in Privileged EXEC mode, you do not need to switch to Privileged EXEC mode as long as you place the do command before the command that is normally supported only in Privileged EXEC mode. show This command lets you execute a show command that is normally supported only in Privileged EXEC mode, Global Config mode, Interface Config mode, VLAN config mode, or Routing Config mode, in any other of these five modes. For example, to execute a show command that is normally supported only in Interface Config mode, you do not need to switch to Interface Config mode as long as you place the show command before the show command that is normally supported only in Interface Config mode. Command Completion and Abbreviation Command completion finishes spelling the command when you type enough letters of a command to uniquely identify the command keyword. Once you have entered enough letters, press the SPACEBAR or TAB key to complete the word. Command abbreviation allows you to execute a command when you have entered there are enough letters to uniquely identify the command. You must enter all of the required keywords and parameters before you enter the command. Format do Mode Privileged EXEC Global Config Interface Config VLAN Config Routing Config Format show Mode Privileged EXEC Global Config Interface Config VLAN Config Routing Config

17 ProSAFE M7100 Managed Switches CLI Error Messages If you enter a command and the system is unable to execute it, an error message appears. Table 7 describes the most common CLI error messages. CLI Line-Editing Conventions Table 8 describes the key combinations you can use to edit commands or increase the speed of command entry. You can access this list from the CLI by entering help from the User or Privileged EXEC modes. Table 7. CLI Error Messages Message Text Description % Invalid input detected at '^' marker. Indicates that you entered an incorrect or unavailable command. The carat (^) shows where the invalid text is detected. This message also appears if any of the parameters or values are not recognized. Command not found / Incomplete command. Use a question mark (?) to list commands. Indicates that you did not enter the required keywords or values. Ambiguous command Indicates that you did not enter enough letters to uniquely identify the command. Table 8. CLI Editing Conventions Key Sequence Description DEL or Backspace Delete previous character Ctrl-A Go to beginning of line Ctrl-E Go to end of line Ctrl-F Go forward one character Ctrl-B Go backward one character Ctrl-D Delete current character Ctrl-U, X Delete to beginning of line Ctrl-K Delete to end of line Ctrl-W Delete previous word Ctrl-T Transpose previous character Ctrl-P Go to previous line in history buffer Ctrl-R Rewrites or pastes the line Ctrl-N Go to next line in history buffer

18 ProSAFE M7100 Managed Switches Using CLI Help Enter a question mark (?) at the command prompt to display the commands available in the current mode. (switch) >? enable Enter into user privilege mode. help Display help for various special keys. logout Exit this session. Any unsaved changes are lost. ping Send ICMP echo packets to a specified IP address. quit Exit this session. Any unsaved changes are lost. show Display Switch Options and Settings. telnet Telnet to a remote host. Enter a question mark (?) after each word you enter to display available command keywords or parameters. (switch) #network ? javamode Enable/Disable. mgmt_vlan Configure the Management VLAN ID of the switch. parms Configure Network Parameters of the router. protocol Select DHCP, BootP, or None as the network config protocol. If the help output shows a parameter in angle brackets, you must replace the parameter with a value. (switch) #network parms ? Enter the IP address. Ctrl-Y Prints last deleted character Ctrl-Q Enables serial flow Ctrl-S Disables serial flow Ctrl-Z Return to root command prompt Tab, Command-line completion Exit Go to next lower command prompt ? List available commands, keywords, or parameters Table 8. CLI Editing Conventions (continued) Key Sequence Description

19 ProSAFE M7100 Managed Switches If there are no additional command keywords or parameters, or if more parameters are optional, the following message appears in the output: Press Enter to execute the command You can also enter a question mark (?) after typing one or more characters of a word to list the available command or parameters that begin with the letters, as shown in the following example: (switch) #show m? mac-addr-table mac-address-table monitor Accessing the CLI You can access the CLI by using a direct console connection or by using a telnet or SSH connection from a remote management host. For the initial connection, you must use a direct connection to the console port. You cannot access the system remotely until the system has an IP address, subnet mask, and default gateway. You can set the network configuration information manually, or you can configure the system to accept these settings from a BOOTP or DHCP server on your network. For more information, see Network Interface Commands on page 496.

This chapter describes the switching commands available in the managed switch CLI. This chapter contains the following sections: • Port Configuration Commands • Loopback Interface Commands • Spanning Tree Protocol (STP) Commands • VLAN Commands • Double VLAN Commands • Voice VLAN Commands • Provisioning (IEEE 802.1p) Commands • GARP Commands • GVRP Commands • GMRP Commands • Alternative Store and Forward Commands • Flow Control Commands • Port-Channel/LAG (802.3ad) Commands • Multichassis LAG Commands • Port Mirroring Commands • DHCP L2 Relay Agent Commands • DHCP Client Commands • IGMP Snooping Configuration Commands • IGMP Snooping Querier Commands • MLD Snooping Commands • MLD Snooping Querier Commands • LLDP (802.1AB) Commands • LLDP-MED Commands • MAC Database Commands • ISDP Commands

The commands in this chapter are in three functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands configure features and options of the switch. Every switch command has a show command that displays the configuration setting. • Clear commands clear some or all of the settings to factory defaults.

Port Configuration Commands interface This command gives you access to the Interface Config mode, which allows you to enable or modify the operation of an interface (port). interface vlan This command gives you access to the vlan virtual interface mode, which allows certain port configurations (for example, the IP address) to be applied to the VLAN interface. Type a question mark (?) after entering the interface configuration mode to see the available options. interface lag This command gives you access to the LAG (link aggregation, or port channel) virtual interface, which allows certain port configurations to be applied to the LAG interface. Type a question mark (?) after entering the interface configuration mode to see the available options. Note: The IP address cannot be assigned to a LAG virtual interface. The interface must be put under a VLAN group and an IP address assigned to the VLAN group. auto-negotiate This command enables automatic negotiation on a port. Format interface Mode Global Config Format interface vlan Mode Global Config Format interface lag Mode Global Config Default enabled Format auto-negotiate Mode Interface Config

no auto-negotiate This command disables automatic negotiation on a port. Note: Automatic sensing is disabled when automatic negotiation is disabled. auto-negotiate all This command enables automatic negotiation on all ports. no auto-negotiate all This command disables automatic negotiation on all ports. description Use this command to create an alpha-numeric description of the port. mtu Use the mtu command to set the maximum transmission unit (MTU) size, in bytes, for frames that ingress or egress the interface. You can use the mtu command to configure jumbo frame support for physical and port-channel (LAG) interfaces. For the standard 7000 series implementation, the MTU size is a valid integer between 1522–9216 for tagged packets and a valid integer between 1518–9216 for untagged packets. Note: To receive and process packets, the Ethernet MTU must include any extra bytes that Layer-2 headers might require. To configure the IP MTU size, which is the maximum size of the IP packet (IP Header + IP payload), see ip mtu on page 183. Default enabled Format auto-negotiate all Mode Global Config Format no auto-negotiate all Mode Global Config Format description Mode Interface Config

no mtu This command sets the default MTU size (in bytes) for the interface. shutdown This command disables a port. Note: You can use the shutdown command on physical and port-channel (LAG) interfaces, but not on VLAN routing interfaces.no shutdown This command enables a port. shutdown all This command disables all ports. Note: You can use the shutdown all command on physical and port-channel (LAG) interfaces, but not on VLAN routing interfaces. Default 1518 (untagged) Format mtu <1518-9216> Mode Interface Config Format no mtu Mode Interface Config Format shutdown Mode Interface Config Format no shutdown Mode Interface Config Format shutdown all Mode Global Config

no shutdown all This command enables all ports. speed This command sets the speed and duplex setting for the interface. speed all This command sets the speed and duplex setting for all interfaces. show port advertise Use this command to display the local administrative link advertisement configuration, local operational link advertisement, and the link partner advertisement for an interface. It also displays priority Resolution for speed and duplex as per 802.3 Annex 28B.3. It displays the autonegotiation state, Phy Master/Slave Clock configuration, and Link state of the port. If the link is down, the Clock is displayed as No Link, and a dash is displayed against the Oper Peer advertisement, and Priority Resolution. If autonegotiation is disabled, the admin Local Link advertisement, operational local link advertisement, operational peer advertisement, and Priority resolution fields are not displayed. If this command is executed without the optional slot/port parameter, it displays the autonegotiation state and operational Local link advertisement for all the ports. Operational link advertisement will display speed only if it is supported by both local as well as link partner. If autonegotiation is disabled, operational local link advertisement is not displayed. Example: The following commands show the command output with and without the optional parameter: (switch)#show port advertise 0/1 Port: 0/1 Type: Gigabit - Level Format no shutdown all Mode Global Config Format speed [auto] [{<100 | 10 | 10G> {half-duplex | full-duplex>}}] Mode Interface Config Format speed all [auto] [{<100 | 10> {}}] Mode Global Config Format show port advertise [slot/port] Mode Privileged EXEC

Link State: Down Auto Negotiation: Enabled Clock: Auto 1000f 1000h 100f 100h 10f 10h ----- ----- ---- ---- --- --- Admin Local Link Advertisement no no yes no yes no Oper Local Link Advertisement no no yes no yes no Oper Peer Advertisement no no yes yes yes yes Priority Resolution - - yes - - - (Netgear Switch)#show port advertise Port Type Neg Operational Link Advertisement --------- ------------------------------ ----------- ------------------------------ 0/1 Gigabit - Level Enabled 1000f, 100f, 100h, 10f, 10h 0/2 Gigabit - Level Enabled 1000f, 100f, 100h, 10f, 10h 0/3 Gigabit - Level Enabled 1000f, 100f, 100h, 10f, 10h show port This command displays port information. Format show port { | all} Mode Privileged EXEC Term Definition Interface Valid slot and port number separated by forward slashes. Type If not blank, this field indicates that this port is a special type of port. The possible values are: • Mirror - this port is a monitoring port. For more information, see Port Mirroring Commands on page 100. • PC Mbr- this port is a member of a port-channel (LAG). • Probe - this port is a probe port. Admin Mode The Port control administration state. The port must be enabled in order for it to be allowed into the network. - May be enabled or disabled. The factory default is enabled. Physical Mode The desired port speed and duplex mode. If autonegotiation support is selected, the duplex mode and speed is set from the auto-negotiation process. Note that the maximum capability of the port (full-duplex -100M) is advertised. Otherwise, this object determines the port's duplex mode and transmission rate. The factory default is Auto. Physical Status The port speed and duplex mode. Link Status The Link is up or down.

show port protocol This command displays the Protocol-Based VLAN information for either the entire system, or for the indicated group. show port description This command displays the port description for every port. show port status This command displays the Protocol-Based VLAN information for either the entire system, or for the indicated group. Link Trap This object determines whether to send a trap when link status changes. The factory default is enabled. LACP Mode LACP is enabled or disabled on this port. Format show port protocol { | all} Mode Privileged EXEC Term Definition Group Name The group name of an entry in the Protocol-based VLAN table. Group ID The group identifier of the protocol group. Protocol(s) The type of protocol(s) for this group. VLAN The VLAN associated with this Protocol Group. Interface(s) Lists the slot/port interface(s) that are associated with this Protocol Group. Format show port description Mode Privileged EXEC Term Definition Interface Valid slot and port number separated by forward slashes Description Shows the port description configured via the “description” command Format show port status { | all} Mode Privileged EXEC Term Definition

Loopback Interface Commands The commands in this section describe how to create, delete, and manage loopback interfaces. A loopback interface is always expected to be up. This interface can provide the source address for sent packets and can receive both local and remote packets. The loopback interface is typically used by routing protocols. To assign an IP address to the loopback interface, see ip address on page 178. interface loopback Use this command to enter the Interface Config mode for a loopback interface. The range of the loopback ID is 0–7. no interface loopback This command removes the loopback interface and associated configuration parameters for the specified loopback interface. Term Definition Interface Valid slot and port number separated by forward slashes. Media Type “Copper” or “Fiber” for combo port. STP Mode Indicate the spanning tree mode of the port. Physical Mode Either “Auto” or fixed speed and duplex mode. Physical Status The actual speed and duplex mode. Link Status Whether the link is Up or Down. Loop Status Whether the port is in loop state or not. Partner Flow Control Whether the remote side is using flow control or not. Format interface loopback Mode Global Config Format no interface loopback Mode Global Config

show interface loopback This command displays information about configured loopback interfaces. If you do not specify a loopback ID, the following information appears for each loopback interface on the system: If you specify a loopback ID, the following information appears: Format show interface loopback [] Mode Privileged EXEC Term Definition Loopback ID The loopback ID associated with the rest of the information in the row. Interface The interface name. IP Address The IPv4 address of the interface. Received Packets The number of packets received on this interface. Sent Packets The number of packets transmitted from this interface. IPv6 Address The IPv6 address of this interface. Term Definition Interface Link Status Shows whether the link is up or down. IP Address The IPv4 address of the interface. IPv6 is enabled (disabled) Shows whether IPv6 is enabled on the interface. IPv6 Prefix is The IPv6 address of the interface. MTU size The maximum transmission size for packets on this interface, in bytes.

Spanning Tree Protocol (STP) Commands This section describes the commands you use to configure Spanning Tree Protocol (STP). STP helps prevent network loops, duplicate messages, and network instability. spanning-tree This command sets the spanning-tree operational mode to enabled. no spanning-tree This command sets the spanning-tree operational mode to disabled. While disabled, the spanning-tree configuration is retained and can be changed, but is not activated. spanning-tree auto-edge This command enables auto-edge on the interface or range of interfaces. When enabled, the interface becomes an edge port if it does not see BPDUs for edge delay time. no spanning-tree auto-edge This command disables auto-edge on the interface or range of interfaces. Default enabled Format spanning-tree Mode Global Config Format no spanning-tree Mode Global Config Default enabled Format spanning-tree auto-edge Mode Interface Config Format no spanning-tree auto-edge Mode Interface Config

spanning-tree bpdufilter Use this command to enable BPDU Filter on an interface or range of interfaces. no spanning-tree bpdufilter Use this command to disable BPDU Filter on the interface or range of interfaces. spanning-tree bpdufilter default Use this command to enable BPDU Filter on all the edge port interfaces. no spanning-tree bpdufilter default Use this command to disable BPDU Filter on all the edge port interfaces. spanning-tree bpduflood Use this command to enable BPDU Flood on the interface. Default disabled Format spanning-tree bpdufilter Mode Interface Config Default disabled Format no spanning-tree bpdufilter Mode Interface Config Default disabled Format spanning-tree bpdufilter Mode Global Config Default enabled Format no spanning-tree bpdufilter default Mode Global Config Default disabled Format spanning-tree bpduflood Mode Interface Config

no spanning-tree bpduflood Use this command to disable BPDU Flood on the interface. spanning-tree bpduguard Use this command to enable BPDU Guard on the switch. no spanning-tree bpduguard Use this command to disable BPDU Guard on the switch. spanning-tree bpdumigrationcheck Use this command to force a transmission of rapid spanning tree (RSTP) and multiple spanning tree (MSTP) BPDUs. Use the parameter to transmit a BPDU from a specified interface, or use the all keyword to transmit BPDUs from all interfaces. This command forces the BPDU transmission when you execute it, so the command does not change the system configuration or have a “no” version. spanning-tree configuration name This command sets the Configuration Identifier Name for use in identifying the configuration that this switch is currently using. The is a string of up to 32 characters. Format no spanning-tree bpduflood Mode Interface Config Default disabled Format spanning-tree bpduguard Mode Global Config Format no spanning-tree bpduguard Mode Global Config Format spanning-tree bpdumigrationcheck { | all} Mode Global Config Default base MAC address in hexadecimal notation Format spanning-tree configuration name Mode Global Config

no spanning-tree configuration name This command resets the Configuration Identifier Name to its default. spanning-tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using. The Configuration Identifier Revision Level is a number in the range of 0–65535. no spanning-tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using to the default value. spanning-tree cost Use this command to configure the external path cost for a port that is used by an MST instance. When you use the auto keyword, the path cost from the port to the root bridge is automatically determined by the speed of the interface. To configure the cost manually, specify a cost value from 1 to 200000000. no spanning-tree cost This command resets the auto-edge status of the port to the default value. Format no spanning-tree configuration name Mode Global Config Default 0 Format spanning-tree configuration revision <0-65535> Mode Global Config Format no spanning-tree configuration revision Mode Global Config Default auto Format spanning-tree cost {cost | auto} Mode Interface Config Format no spanning-tree auto-edge Mode Interface Config

spanning-tree edgeport This command specifies that this port is an edge port within the Common and Internal Spanning Tree. This allows this port to transition to Forwarding State without delay. no spanning-tree edgeport This command specifies that this port is not an edge port within the Common and Internal Spanning Tree. spanning-tree forceversion This command sets the Force Protocol Version parameter to a new value. Use 802.1d to specify that the switch transmits ST BPDUs rather than MST BPDUs (IEEE 802.1d functionality supported). Use 802.1s to specify that the switch transmits MST BPDUs (IEEE 802.1s functionality supported). Use 802.1w to specify that the switch transmits RST BPDUs rather than MST BPDUs (IEEE 802.1w functionality supported). no spanning-tree forceversion This command sets the Force Protocol Version parameter to the default value. Default enabled Format spanning-tree edgeport Mode Interface Config Format no spanning-tree edgeport Mode Interface Config Default 802.1s Format spanning-tree forceversion {802.1d | 802.1s | 802.1w} Mode Global Config Format no spanning-tree forceversion Mode Global Config

spanning-tree forward-time This command sets the Bridge Forward Delay parameter to a new value for the Common and Internal Spanning Tree. The forward-time value is in seconds within a range of 4–30, with the value being greater than or equal to “(Bridge Max Age / 2) + 1”. no spanning-tree forward-time This command sets the Bridge Forward Delay parameter for the Common and Internal Spanning Tree to the default value. spanning-tree guard This command selects whether loop guard or root guard is enabled on an interface. If neither is enabled, the port operates in accordance with the multiple spanning tree protocol. no spanning-tree guard This command disables loop guard or root guard on the interface. spanning-tree tcnguard This command enables the propagation of received topology change notifications and topology changes to other ports. Default 15 Format spanning-tree forward-time <4-30> Mode Global Config Format no spanning-tree forward-time Mode Global Config Default none Format spanning-tree guard {none | root | loop} Mode Interface Config Format no spanning-tree guard Mode Interface Config Default disable Format spanning-tree tcnguard Mode Interface Config

no spanning-tree tcnguard This command disables the propagation of received topology change notifications and topology changes to other ports. spanning-tree transmit This command specifies the bridge transmit hold count parameter, which is a number from 1 to 10. spanning-tree max-age This command sets the Bridge Max Age parameter to a new value for the Common and Internal Spanning Tree. The max-age value is in seconds within a range of 6–40, with the value being less than or equal to 2 x (Bridge Forward Delay - 1). no spanning-tree max-age This command sets the Bridge Max Age parameter for the Common and Internal Spanning Tree to the default value. spanning-tree max-hops This command sets the MSTP Max Hops parameter to a new value for the Common and Internal Spanning Tree. The max-hops value is a range from 6 to 40. Format no spanning-tree tcnguard Mode Interface Config Default 6 Format spanning-tree transmit Mode Global Config Default 20 Format spanning-tree max-age <6-40> Mode Global Config Format no spanning-tree max-age Mode Global Config Default 20 Format spanning-tree max-hops <1-127> Mode Global Config

no spanning-tree max-hops This command sets the Bridge Max Hops parameter for the Common and Internal Spanning Tree to the default value. spanning-tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the Common and Internal Spanning Tree. If you specify an parameter that corresponds to an existing multiple spanning tree instance, the configurations are done for that multiple spanning tree instance. If you specify 0 (defined as the default CIST ID) as the , the configurations are done for the Common and Internal Spanning Tree instance. If you specify the cost option, the command sets the path cost for this port within a multiple spanning tree instance or the Common and Internal Spanning Tree instance, depending on the parameter. You can set the path cost as a number in the range of 1–200000000 or auto. If you select auto the path cost value is set based on Link Speed. If you specify the external-cost option, this command sets the external-path cost for MST instance ‘0’ that is, CIST instance. You can set the external cost as a number in the range of 1–200000000 or auto. If you specify auto, the external path cost value is set based on Link Speed. If you specify the port-priority option, this command sets the priority for this port within a specific multiple spanning tree instance or the Common and Internal Spanning Tree instance, depending on the parameter. The port-priority value is a number in the range of 0–240 in increments of 16. no spanning-tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance, or in the Common and Internal Spanning Tree to the respective default values. If you specify an parameter that corresponds to an existing multiple spanning tree instance, you are configuring that multiple spanning tree instance. If you specify 0 (defined as the default CIST ID) as the , you are configuring the Common and Internal Spanning Tree instance. If you specify cost, this command sets the path cost for this port within a multiple spanning tree instance or the Common and Internal Spanning Tree instance, depending on the parameter, to the default value, that is, a path cost value based on the Link Speed. Format no spanning-tree max-hops Mode Global Config Default • cost—auto • external-cost—auto • port-priority—128 Format spanning-tree mst {{cost <1-200000000> | auto} | {external-cost <1-200000000> | auto} | port-priority <0-240>} Mode Interface Config

If you specify external-cost, this command sets the external path cost for this port for mst ‘0’ instance, to the default value, that is, a path cost value based on the Link Speed. If you specify port-priority, this command sets the priority for this port within a specific multiple spanning tree instance or the Common and Internal Spanning Tree instance, depending on the parameter, to the default value. spanning-tree mst instance This command adds a multiple spanning tree instance to the switch. The parameter is a number within a range of 1–4094, that corresponds to the new instance ID to be added. The maximum number of multiple instances supported by the switch is 4. no spanning-tree mst instance This command removes a multiple spanning tree instance from the switch and reallocates all VLANs allocated to the deleted instance to the Common and Internal Spanning Tree. The parameter is a number that corresponds to the desired existing multiple spanning tree instance to be removed. spanning-tree mst priority This command sets the bridge priority for a specific multiple spanning tree instance. The parameter is a number that corresponds to the desired existing multiple spanning tree instance. The priority value is a number within a range of 0–61440 in increments of 4096. If you specify 0 (defined as the default CIST ID) as the , this command sets the Bridge Priority parameter to a new value for the Common and Internal Spanning Tree. The bridge priority value is a number within a range of 0–61440. The twelve least significant bits are masked according to the 802.1s specification. This causes the priority to be rounded down to the next lower valid priority. Format no spanning-tree mst [cost | external-cost | port-priority] Mode Interface Config Default none Format spanning-tree mst instance Mode Global Config Format no spanning-tree mst instance Mode Global Config Default 32768 Format spanning-tree mst priority <0-61440> Mode Global Config

no spanning-tree mst priority This command sets the bridge priority for a specific multiple spanning tree instance to the default value. The parameter is a number that corresponds to the desired existing multiple spanning tree instance. If 0 (defined as the default CIST ID) is passed as the , this command sets the Bridge Priority parameter for the Common and Internal Spanning Tree to the default value. spanning-tree mst vlan This command adds an association between a multiple spanning tree instance and one or more VLANs so that the VLAN(s) are no longer associated with the Common and Internal Spanning Tree. The parameter is a number that corresponds to the desired existing multiple spanning tree instance. The vlan range can be specified as a list or as a range of values. To specify a list of VLANs, enter a list of VLAN IDs, each separated by a comma with no spaces in between. To specify a range of VLANs, separate the beginning and ending VLAN ID with a dash ("-"). no spanning-tree mst vlan This command removes an association between a multiple spanning tree instance and one or more VLANs so that the VLAN(s) are again associated with the Common and Internal Spanning Tree. spanning-tree port mode This command sets the Administrative Switch Port State for this port to enabled. Format no spanning-tree mst priority Mode Global Config Format spanning-tree mst vlan Mode Global Config Format no spanning-tree mst vlan Mode Global Config Default enabled Format spanning-tree port mode Mode Interface Config

no spanning-tree port mode This command sets the Administrative Switch Port State for this port to disabled. spanning-tree port mode all This command sets the Administrative Switch Port State for all ports to enabled. no spanning-tree port mode all This command sets the Administrative Switch Port State for all ports to disabled. show spanning-tree This command displays spanning tree settings for the Common and Internal Spanning Tree. The following details are displayed. Format no spanning-tree port mode Mode Interface Config Default enabled Format spanning-tree port mode all Mode Global Config Format no spanning-tree port mode all Mode Global Config Format show spanning-tree Mode • Privileged EXEC • User EXEC Term Definition Bridge Priority Specifies the bridge priority for the Common and Internal Spanning Tree (CST). The value lies between 0 and 61440. It is displayed in multiples of 4096. Bridge Identifier The bridge identifier for the CST. It is made up using the bridge priority and the base MAC address of the bridge. Time Since Topology Change Time in seconds. Topology Change Count Number of times changed. Topology Change Boolean value of the Topology Change parameter for the switch indicating if a topology change is in progress on any port assigned to the Common and Internal Spanning Tree.

show spanning-tree brief This command displays spanning tree settings for the bridge. The following information appears. Designated Root The bridge identifier of the root bridge. It is made up from the bridge priority and the base MAC address of the bridge. Root Path Cost Value of the Root Path Cost parameter for the Common and Internal Spanning Tree. Root Port Identifier Identifier of the port to access the Designated Root for the CST Root Port Max Age Derived value. Root Port Bridge Forward Delay Derived value. Hello Time Configured value of the parameter for the CST. Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units (BPDUs). Bridge Max Hops Bridge max-hops count for the device. CST Regional Root Bridge Identifier of the CST Regional Root. It is made up using the bridge priority and the base MAC address of the bridge. Regional Root Path Cost Path Cost to the CST Regional Root. Associated FIDs List of forwarding database identifiers currently associated with this instance. Associated VLANs List of VLAN IDs currently associated with this instance. Format show spanning-tree brief Mode • Privileged EXEC • User EXEC Term Definition Bridge Priority Configured value. Bridge Identifier The bridge identifier for the selected MST instance. It is made up using the bridge priority and the base MAC address of the bridge. Bridge Max Age Configured value. Bridge Max Hops Bridge max-hops count for the device. Bridge Hello Time Configured value. Bridge Forward Delay Configured value. Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units (BPDUs). Term Definition

show spanning-tree interface This command displays the settings and parameters for a specific switch port within the Common and Internal Spanning Tree. The is the desired switch port. The following details are displayed on execution of the command. Format show spanning-tree interface Mode • Privileged EXEC • User EXEC Term Definition Hello Time Admin hello time for this port. Port Mode Enabled or disabled. BPDU Guard Effect Enabled or disabled. Root Guard Enabled or disabled. Loop Guard Enabled or disabled. TCN Guard Enable or disable the propagation of received topology change notifications and topology changes to other ports. BPDU Filter Mode Enabled or disabled. BPDU Flood Mode Enabled or disabled. Auto Edge To enable or disable the feature that causes a port that has not seen a BPDU for ‘edge delay’ time, to become an edge port and transition to forwarding faster. Port Up Time Since Counters Last Cleared Time since port was reset, displayed in days, hours, minutes, and seconds. STP BPDUs Transmitted Spanning Tree Protocol Bridge Protocol Data Units sent. STP BPDUs Received Spanning Tree Protocol Bridge Protocol Data Units received. RSTP BPDUs Transmitted Rapid Spanning Tree Protocol Bridge Protocol Data Units sent. RSTP BPDUs Received Rapid Spanning Tree Protocol Bridge Protocol Data Units received. MSTP BPDUs Transmitted Multiple Spanning Tree Protocol Bridge Protocol Data Units sent. MSTP BPDUs Received Multiple Spanning Tree Protocol Bridge Protocol Data Units received.

show spanning-tree mst port detailed This command displays the detailed settings and parameters for a specific switch port within a particular multiple spanning tree instance. The parameter is a number that corresponds to the desired existing multiple spanning tree instance. The is the desired switch port. Format show spanning-tree mst port detailed Mode • Privileged EXEC • User EXEC Term Definition MST Instance ID The ID of the existing MST instance. Port Identifier The port identifier for the specified port within the selected MST instance. It is made up from the port priority and the interface number of the port. Port Priority The priority for a particular port within the selected MST instance. The port priority is displayed in multiples of 16. Port Forwarding State Current spanning tree state of this port. Port Role Each enabled MST Bridge Port receives a Port Role for each spanning tree. The port role is one of the following values: Root Port, Designated Port, Alternate Port, Backup Port, Master Port, or Disabled Port Auto-Calculate Port Path Cost Indicates whether auto calculation for port path cost is enabled. Port Path Cost Configured value of the Internal Port Path Cost parameter. Designated Root The Identifier of the designated root for this port. Root Path Cost The path cost to get to the root bridge for this instance. The root path cost is zero if the bridge is the root bridge for that instance. Designated Bridge Bridge Identifier of the bridge with the Designated Port. Designated Port Identifier Port on the Designated Bridge that offers the lowest cost to the LAN. Loop Inconsistent State The current loop inconsistent state of this port in this MST instance. When in loop inconsistent state, the port has failed to receive BPDUs while configured with loop guard enabled. Loop inconsistent state maintains the port in a "blocking" state until a subsequent BPDU is received. Transitions Into Loop Inconsistent State The number of times this interface has transitioned into loop inconsistent state. Transitions Out of Loop Inconsistent State The number of times this interface has transitioned out of loop inconsistent state.

If you specify 0 (defined as the default CIST ID) as the , this command displays the settings and parameters for a specific switch port within the Common and Internal Spanning Tree. The is the desired switch port. In this case, the following are displayed. Term Definition Port Identifier The port identifier for this port within the CST. Port Priority The priority of the port within the CST. Port Forwarding State The forwarding state of the port within the CST. Port Role The role of the specified interface within the CST. Auto-Calculate Port Path Cost Indicates whether auto calculation for port path cost is enabled or not (disabled). Port Path Cost The configured path cost for the specified interface. Auto-Calculate External Port Path Cost Indicates whether auto calculation for external port path cost is enabled. External Port Path Cost The cost to get to the root bridge of the CIST across the boundary of the region. This means that if the port is a boundary port for an MSTP region, the external path cost is used. Designated Root Identifier of the designated root for this port within the CST. Root Path Cost The root path cost to the LAN by the port. Designated Bridge The bridge containing the designated port. Designated Port Identifier Port on the Designated Bridge that offers the lowest cost to the LAN. Topology Change Acknowledgemen t Value of flag in next Configuration Bridge Protocol Data Unit (BPDU) transmission indicating if a topology change is in progress for this port. Hello Time The hello time in use for this port. Edge Port The configured value indicating if this port is an edge port. Edge Port Status The derived value of the edge port status. True if operating as an edge port; false otherwise. Point To Point MAC Status Derived value indicating if this port is part of a point to point link. CST Regional Root The regional root identifier in use for this port. CST Internal Root Path Cost The internal root path cost to the LAN by the designated external port.

show spanning-tree mst port summary This command displays the settings of one or all ports within the specified multiple spanning tree instance. The parameter indicates a particular MST instance. The parameter indicates the desired switch port and the all keyword indicates all ports. If you specify 0 (defined as the default CIST ID) for the paramter, the status summary displays for one or all ports within the Common and Internal Spanning Tree. show spanning-tree mst port summary active This command displays settings for the ports within the specified multiple spanning tree instance that are active links. Loop Inconsistent State The current loop inconsistent state of this port in this MST instance. When in loop inconsistent state, the port has failed to receive BPDUs while configured with loop guard enabled. Loop inconsistent state maintains the port in a "blocking" state until a subsequent BPDU is received. Transitions Into Loop Inconsistent State The number of times this interface has transitioned into loop inconsistent state. Transitions Out of Loop Inconsistent State The number of times this interface has transitioned out of loop inconsistent state. Format show spanning-tree mst port summary { | all} Mode • Privileged EXEC • User EXEC Term Definition MST Instance ID The MST instance associated with this port. Interface Valid slot and port number separated by forward slashes. STP Mode Indicates whether spanning tree is enabled or disabled on the port. Type Currently not used. STP State The forwarding state of the port in the specified spanning tree instance. Port Role The role of the specified port within the spanning tree. Desc Indicates whether the port is in loop inconsistent state or not. This field is blank if the loop guard feature is not available. Format show spanning-tree mst port summary active Mode • Privileged EXEC • User EXEC Term Definition

show spanning-tree mst summary This command displays summary information about all multiple spanning tree instances in the switch. On execution, the following details are displayed. show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command. Term Definition mstid The ID of the existing MST instance. Interface slot/port STP Mode Indicates whether spanning tree is enabled or disabled on the port. Type Currently not used. STP State The forwarding state of the port in the specified spanning tree instance. Port Role The role of the specified port within the spanning tree. Desc Indicates whether the port is in loop inconsistent state or not. This field is blank if the loop guard feature is not available. Format show spanning-tree mst summary Mode • Privileged EXEC • User EXEC Term Definition MST Instance ID List List of multiple spanning trees IDs currently configured. For each MSTID: • Associated FIDs • Associated VLANs • List of forwarding database identifiers associated with this instance. • List of VLAN IDs associated with this instance. Format show spanning-tree summary Mode • Privileged EXEC • User EXEC

show spanning-tree vlan This command displays the association between a VLAN and a multiple spanning tree instance. The corresponds to an existing VLAN ID. Term Definition Spanning Tree Adminmode Enabled or disabled. Spanning Tree Version Version of 802.1 currently supported (IEEE 802.1s, IEEE 802.1w, or IEEE 802.1d) based upon the Force Protocol Version parameter. BPDU Guard Mode Enabled or disabled. BPDU Filter Mode Enabled or disabled. Configuration Name Identifier used to identify the configuration currently being used. Configuration Revision Level Identifier used to identify the configuration currently being used. Configuration Digest Key A generated Key used in the exchange of the BPDUs. Configuration Format Selector Specifies the version of the configuration format being used in the exchange of BPDUs. The default value is zero. MST Instances List of all multiple spanning tree instances configured on the switch. Format show spanning-tree vlan Mode • Privileged EXEC • User EXEC Term Definition VLAN Identifier The VLANs associated with the selected MST instance. Associated Instance Identifier for the associated multiple spanning tree instance or “CST” if associated with the Common and Internal Spanning Tree.

VLAN Commands This section describes the commands you use to configure VLAN settings. vlan database This command gives you access to the VLAN Config mode, which allows you to configure VLAN characteristics. network mgmt_vlan This command configures the Management VLAN ID. no network mgmt_vlan This command sets the Management VLAN ID to the default. vlan This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN). The vlan-list contains VlanId's in range <1-4093>. Separate non-consecutive IDs with ',' and no spaces and no zeros in between the range; Use '-' for range. Format vlan database Mode Privileged EXEC Default 1 Format network mgmt_vlan <1-4093> Mode Privileged EXEC Format no network mgmt_vlan Mode Privileged EXEC Format vlan Mode VLAN Config

no vlan This command deletes an existing VLAN. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN). The vlan-list contains VlanId's in range <1-4093>. Separate non-consecutive IDs with ',' and no spaces and no zeros in between the range; Use '-' for range. vlan acceptframe This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification. no vlan acceptframe This command resets the frame acceptance mode for the interface to the default value. vlan ingressfilter This command enables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN. Format no vlan Mode VLAN Config Default all Format vlan acceptframe {untaggedonly | vlanonly | all} Mode Interface Config Format no vlan acceptframe Mode Interface Config Default disabled Format vlan ingressfilter Mode Interface Config

no vlan ingressfilter This command disables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN. vlan internal allocation Use this command to configure which VLAN IDs are used for port-based routing interfaces. When a port-based routing interface is created, an unused VLAN ID is assigned internally. vlan makestatic This command changes a dynamically created VLAN (one that is created by GVRP registration) to a static VLAN (one that is permanently configured and defined). The ID is a valid VLAN identification number. VLAN range is 2-4093. vlan name This command changes the name of a VLAN. The name is an alphanumeric string of up to 32 characters, and the ID is a valid VLAN identification number. ID range is 1-4093. Format no vlan ingressfilter Mode Interface Config Format vlan internal allocation {base | policy ascending | policy decending} Mode Global Config Parameter Description base vlan-id The first VLAN ID to be assigned to a port-based routing interface. policy ascending The VLAN IDs that are assigned to port-based routing interfaces start at the base VLAN ID and increase in value. policy descending The VLAN IDs that are assigned to port-based routing interfaces start at the base VLAN ID and decrease in value. Format vlan makestatic <2-4093> Mode VLAN Config Default • VLAN ID 1 - default • other VLANS - blank string Format vlan name <1-4093> Mode VLAN Config

no vlan name This command sets the name of a VLAN to a blank string. vlan participation This command configures the degree of participation for a specific interface in a VLAN. The ID is a valid VLAN identification number, and the interface is a valid interface number. Participation options are: vlan participation all This command configures the degree of participation for all interfaces in a VLAN. The ID is a valid VLAN identification number. You can use the following participation options: Format no vlan name <1-4093> Mode VLAN Config Format vlan participation {exclude | include | auto} <1-4093> Mode Interface Config Participation Options Definition include The interface is always a member of this VLAN. This is equivalent to registration fixed. exclude The interface is never a member of this VLAN. This is equivalent to registration forbidden. auto The interface is dynamically registered in this VLAN by GVRP. The interface will not participate in this VLAN unless a join request is received on this interface. This is equivalent to registration normal. Format vlan participation all {exclude | include | auto} <1-4093> Mode Global Config Participation Options Definition include The interface is always a member of this VLAN. This is equivalent to registration fixed. exclude The interface is never a member of this VLAN. This is equivalent to registration forbidden. auto The interface is dynamically registered in this VLAN by GVRP. The interface will not participate in this VLAN unless a join request is received on this interface. This is equivalent to registration normal.

vlan port acceptframe all This command sets the frame acceptance mode for all interfaces. The modes defined as follows: With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification. no vlan port acceptframe all This command sets the frame acceptance mode for all interfaces to Admit All. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification. vlan port ingressfilter all This command enables ingress filtering for all ports. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN. Default all Format vlan port acceptframe all {vlanonly | all} Mode Global Config Mode Definition VLAN Only mode Untagged frames or priority frames received on this interface are discarded. Admit All mode Untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. Format no vlan port acceptframe all Mode Global Config Default disabled Format vlan port ingressfilter all Mode Global Config

no vlan port ingressfilter all This command disables ingress filtering for all ports. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN. vlan port pvid all This command changes the VLAN ID for all interface. no vlan port pvid all This command sets the VLAN ID for all interfaces to 1. vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number. no vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to disabled. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number. Format no vlan port ingressfilter all Mode Global Config Default 1 Format vlan port pvid all <1-4093> Mode Global Config Format no vlan port pvid all Mode Global Config Format vlan port tagging all <1-4093> Mode Global Config Format no vlan port tagging all Mode Global Config

vlan protocol group This command adds protocol-based VLAN groups to the system. When it is created, the protocol group will be assigned a unique number (1-128) that will be used to identify the group in subsequent commands. no vlan protocol group This command removes a protocol group. vlan protocol group name This command assigns a name to a protocol-based VLAN group. The groupname variable can be a character string of 0–16 characters. no vlan protocol group name This command removes the name from a protocol-based VLAN group. vlan protocol group add protocol This command adds the protocol to the protocol-based VLAN identified by groupid. A group may have more than one protocol associated with it. Each interface and protocol combination can only be associated with one group. If adding a protocol to a group causes any conflicts with interfaces currently associated with the group, this command fails and the protocol is not added to the group. The possible values for protocol-list include the keywords ip, arp, and ipx and hexadecimal or decimal values ranging from 0x0600 (1536) to 0xFFFF (65535). The protocol list can accept up to 16 protocols separated by a comma. Format vlan protocol group <1-128> Mode Global Config Format no vlan protocol group <1-128> Mode Global Config Format vlan protocol group name <1-128> Mode Global Config Format no vlan protocol group name <1-128> Mode Global Config Default none Format vlan protocol group add protocol ethertype { | arp | ip | ipx} Mode Global Config

no vlan protocol group add protocol This command removes the from this protocol-based VLAN group that is identified by this . The possible values for protocol are ip, arp, and ipx. protocol group This command attaches a to the protocol-based VLAN identified by . A group may only be associated with one VLAN at a time, however the VLAN association can be changed. no protocol group This command removes the from this protocol-based VLAN group that is identified by this . protocol vlan group This command adds the physical interface to the protocol-based VLAN identified by . You can associate multiple interfaces with a group, but you can only associate each interface and protocol combination with one group. If adding an interface to a group causes any conflicts with protocols currently associated with the group, this command fails and the interface(s) are not added to the group. Format no vlan protocol group add protocol ethertype { | arp | ip | ipx} Mode Global Config Default none Format protocol group Mode VLAN Config Format no protocol group Mode VLAN Config Default none Format protocol vlan group Mode Interface Config

no protocol vlan group This command removes the interface from this protocol-based VLAN group that is identified by this . protocol vlan group all This command adds all physical interfaces to the protocol-based VLAN identified by . You can associate multiple interfaces with a group, but you can only associate each interface and protocol combination with one group. If adding an interface to a group causes any conflicts with protocols currently associated with the group, this command will fail and the interface(s) will not be added to the group. no protocol vlan group all This command removes all interfaces from this protocol-based VLAN group that is identified by this . vlan pvid This command changes the VLAN ID per interface. no vlan pvid This command sets the VLAN ID per interface to 1. Format no protocol vlan group Mode Interface Config Default none Format protocol vlan group all Mode Global Config Format no protocol vlan group all Mode Global Config Default 1 Format vlan pvid <1-4093> Mode Interface Config Format no vlan pvid Mode Interface Config

vlan tagging This command configures the tagging behavior for a specific interface in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The vlan-list contains VlanId's in range <1-4093>. Separate non-consecutive IDs with ',' and no spaces and no zeros in between the range; Use '-' for range. no vlan tagging This command configures the tagging behavior for a specific interface in a VLAN to disabled. If tagging is disabled, traffic is transmitted as untagged frames. The vlan-list contains VlanId's in range <1-4093>. Separate non-consecutive IDs with ',' and no spaces and no zeros in between the range; Use '-' for range. vlan association subnet This command associates a VLAN to a specific IP-subnet. no vlan association subnet This command removes association of a specific IP-subnet to a VLAN. vlan association mac This command associates a MAC address to a VLAN. Format vlan tagging Mode Interface Config Format no vlan tagging Mode Interface Config Format vlan association subnet <1-4093> Mode VLAN Config Format no vlan association subnet Mode VLAN Config Format vlan association mac <1-4093> Mode VLAN Config

no vlan association mac This command removes the association of a MAC address to a VLAN. show vlan This command displays a list of all configured VLAN. show vlan This command displays detailed information, including interface information, for a specific VLAN. The ID is a valid VLAN identification number. Format no vlan association mac Mode VLAN Config Format show vlan Mode • Privileged EXEC • User EXEC Term Definition VLAN ID A VLAN Identifier (VID) is associated with each VLAN. The range of the VLAN ID is 1–4093. VLAN Name A string associated with this VLAN as a convenience. It can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always has a name of “Default.” This field is optional. VLAN Type Type of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and permanently defined), or Dynamic (one that is created by GVRP registration). Format show vlan Mode • Privileged EXEC • User EXEC Term Definition VLAN ID A VLAN Identifier (VID) is associated with each VLAN. The range of the VLAN ID is 1–4093. VLAN Name A string associated with this VLAN as a convenience. It can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always has a name of “Default.” This field is optional. VLAN Type Type of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and permanently defined), or Dynamic (one that is created by GVRP registration). Interface Valid slot and port number separated by forward slashes. It is possible to set the parameters for all ports by using the selectors on the top line.

show vlan internal usage This command displays information about the VLAN ID allocation on the switch. show vlan port This command displays VLAN port information. Current The degree of participation of this port in this VLAN. The permissible values are: • Include - This port is always a member of this VLAN. This is equivalent to registration fixed in the IEEE 802.1Q standard. • Exclude - This port is never a member of this VLAN. This is equivalent to registration forbidden in the IEEE 802.1Q standard. • Autodetect - To allow the port to be dynamically registered in this VLAN via GVRP. The port will not participate in this VLAN unless a join request is received on this port. This is equivalent to registration normal in the IEEE 802.1Q standard. Configured The configured degree of participation of this port in this VLAN. The permissible values are: • Include - This port is always a member of this VLAN. This is equivalent to registration fixed in the IEEE 802.1Q standard. • Exclude - This port is never a member of this VLAN. This is equivalent to registration forbidden in the IEEE 802.1Q standard. • Autodetect - To allow the port to be dynamically registered in this VLAN via GVRP. The port will not participate in this VLAN unless a join request is received on this port. This is equivalent to registration normal in the IEEE 802.1Q standard. Tagging The tagging behavior for this port in this VLAN. • Tagged - Transmit traffic for this VLAN as tagged frames. • Untagged - Transmit traffic for this VLAN as untagged frames. Format show vlan internal usage Mode • Privileged EXEC • User EXEC Term Definition Base VLAN ID Identifies the base VLAN ID for internal allocation of VLANs to the routing interface. Allocation policy Identifies whether the system allocates VLAN IDs in ascending or descending order. Format show vlan port { | all} Mode • Privileged EXEC • User EXEC Term Definition

show vlan association subnet This command displays the VLAN associated with a specific configured IP-Address and net mask. If no IP address and net mask are specified, the VLAN associations of all the configured IP subnets are displayed. show vlan association mac This command displays the VLAN associated with a specific configured MAC address. If no MAC address is specified, the VLAN associations of all the configured MAC addresses are displayed. Term Definition Interface Valid slot and port number separated by forward slashes. It is possible to set the parameters for all ports by using the selectors on the top line. Port VLAN ID The VLAN ID that this port will assign to untagged frames or priority tagged frames received on this port. The value must be for an existing VLAN. The factory default is 1. Acceptable Frame Types The types of frames that may be received on this port. The options are 'VLAN only' and 'Admit All'. When set to 'VLAN only', untagged frames or priority tagged frames received on this port are discarded. When set to 'Admit All', untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance to the 802.1Q VLAN specification. Ingress Filtering May be enabled or disabled. When enabled, the frame is discarded if this port is not a member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is identified by the VLAN ID in the tag. In an untagged frame, the VLAN is the Port VLAN ID specified for the port that received this frame. When disabled, all frames are forwarded in accordance with the 802.1Q VLAN bridge specification. The factory default is disabled. GVRP May be enabled or disabled. Default Priority The 802.1p priority assigned to tagged packets arriving on the port. Format show vlan association subnet [ ] Mode Privileged EXEC Term Definition IP Subnet The IP address assigned to each interface. IP Mask The subnet mask. VLAN ID A VLAN Identifier (VID) is associated with each VLAN. Format show vlan association mac [] Mode Privileged EXEC

Double VLAN Commands This section describes the commands you use to configure double VLAN (DVLAN). Double VLAN tagging is a way to pass VLAN traffic from one customer domain to another through a Metro Core in a simple and cost effective manner. The additional tag on the traffic helps differentiate between customers in the MAN while preserving the VLAN identification of the individual customers when they enter their own 802.1Q domain. dvlan-tunnel ethertype This command configures the ether-type for all interfaces. The ether-type may have the values 802.1Q, vMAN, or custom. If the ether-type has a value of custom, the optional value of the custom ether type must be set to a value from 0 to 65535. mode dot1q-tunnel This command is used to enable Double VLAN Tunneling on the specified interface. no mode dot1q-tunnel This command is used to disable Double VLAN Tunneling on the specified interface. By default, Double VLAN Tunneling is disabled. Term Definition MAC Address A MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes. VLAN ID A VLAN Identifier (VID) is associated with each VLAN. Default vman Format dvlan-tunnel ethertype {802.1Q | vman | custom <0-65535>} Mode Global Config Default disabled Format mode dot1q-tunnel Mode Interface Config Format no mode dot1q-tunnel Mode Interface Config

mode dvlan-tunnel Use this command to enable Double VLAN Tunneling on the specified interface. Note: When you use the mode dvlan-tunnel command on an interface, it becomes a service provider port. Ports that do not have double VLAN tunneling enabled are customer ports. no mode dvlan-tunnel This command is used to disable Double VLAN Tunneling on the specified interface. By default, Double VLAN Tunneling is disabled. show dot1q-tunnel Use this command without the optional parameters to display all interfaces enabled for Double VLAN Tunneling. Use the optional parameters to display detailed information about Double VLAN Tunneling for the specified interface or all interfaces. Default disabled Format mode dvlan-tunnel Mode Interface Config Format no mode dvlan-tunnel Mode Interface Config Format show dot1q-tunnel [interface { | all}] Mode • Privileged EXEC • User EXEC Term Definition Interface Valid slot and port number separated by forward slashes. Mode The administrative mode through which Double VLAN Tunneling can be enabled or disabled. The default value for this field is disabled. EtherType A 2-byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel. There are three different EtherType tags. The first is 802.1Q, which represents the commonly used value of 0x8100. The second is vMAN, which represents the commonly used value of 0x88A8. If EtherType is not one of these two values, it is a custom tunnel value, representing any value in the range of 0–65535.

show dvlan-tunnel Use this command without the optional parameters to display all interfaces enabled for Double VLAN Tunneling. Use the optional parameters to display detailed information about Double VLAN Tunneling for the specified interface or all interfaces. Voice VLAN Commands This section describes the commands you use for Voice VLAN. Voice VLAN enables switch ports to carry voice traffic with defined priority to enable separation of voice and data traffic coming onto the port. The benefits of using a voice VLAN are to ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high. Also the inherent isolation provided by VLANs ensures that inter-VLAN traffic is under management control and that network- attached clients cannot initiate a direct attack on voice components. QoS-based on IEEE 802.1P Class of Service (CoS) uses classification and scheduling to sent network traffic from the switch in a predictable manner. The system uses the source MAC of the traffic traveling through the port to identify the IP phone data flow. voice vlan (Global Config) Use this command to enable the Voice VLAN capability on the switch. Format show dvlan-tunnel [interface { | all}] Mode • Privileged EXEC • User EXEC Term Definition Interface Valid slot and port number separated by forward slashes. Mode The administrative mode through which Double VLAN Tunneling can be enabled or disabled. The default value for this field is disabled. EtherType A 2-byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel. There are three different EtherType tags. The first is 802.1Q, which represents the commonly used value of 0x8100. The second is vMAN, which represents the commonly used value of 0x88A8. If EtherType is not one of these two values, it is a custom tunnel value, representing any value in the range of 0–65535. Default disabled Format voice vlan Mode Global Config

no voice vlan (Global Config) Use this command to disable the Voice VLAN capability on the switch. voice vlan (Interface Config) Use this command to enable the Voice VLAN capability on the interface. You can configure Voice VLAN in any of the following ways: no voice vlan (Interface Config) Use this command to disable the Voice VLAN capability on the interface. voice vlan data priority Use this command to either trust or untrust the data traffic arriving on the Voice VLAN port. Format no voice vlan Mode Global Config Default disabled Format voice vlan { | dot1p | none | untagged} Mode Interface Config Parameter Description vlan-id Configure the IP phone to forward all voice traffic through the specified VLAN. Valid VLAN IDs are from 1 to 4093 (the maximum supported by the platform). dot1p Configure the IP phone to use 802.1p priority tagging for voice traffic and to use the default native VLAN (VLAN 0) to carry all traffic. Valid range is 0–7. none Allow the IP phone to use its own configuration to send untagged voice traffic. untagged Configure the phone to send untagged voice traffic. Format no voice vlan Mode Interface Config Default trust Format voice vlan data priority {untrust | trust} Mode Interface Config

show voice vlan When the interface parameter is not specified, only the global mode of the Voice VLAN is displayed. When the interface is specified: Provisioning (IEEE 802.1p) Commands This section describes the commands you use to configure provisioning, which allows you to prioritize ports. vlan port priority all This command configures the port priority assigned for untagged packets for all ports presently plugged into the device. The range for the priority is 0-7. Any subsequent per port configuration will override this configuration setting. Format show voice vlan [interface { | all}] Mode Privileged EXEC Term Definition Administrative Mode The Global Voice VLAN mode. Term Definition Voice VLAN Interface Mode The admin mode of the Voice VLAN on the interface. Voice VLAN ID The Voice VLAN ID Voice VLAN Priority The do1p priority for the Voice VLAN on the port. Voice VLAN Untagged The tagging option for the Voice VLAN traffic. Voice VLAN CoS Override The Override option for the voice traffic arriving on the port. Voice VLAN Status The operational status of Voice VLAN on the port. Format vlan port priority all Mode Global Config

vlan priority This command configures the default 802.1p port priority assigned for untagged packets for a specific interface. The range for the priority is 0–7. GARP Commands This section describes the commands you use to configure Generic Attribute Registration Protocol (GARP) and view GARP status. The commands in this section affect both GARP VLAN Registration Protocol (GVRP) and Garp Multicast Registration Protocol (GMRP). GARP is a protocol that allows client stations to register with the switch for membership in VLANS (by using GVMP) or multicast groups (by using GVMP). set garp timer join This command sets the GVRP join time for one port (Interface Config mode) or all (Global Config mode) and per GARP. Join time is the interval between the transmission of GARP Protocol Data Units (PDUs) registering (or re-registering) membership for a VLAN or multicast group. This command has an effect only when GVRP is enabled. The time is from 10 to 100 (centiseconds). The value 20 centiseconds is 0.2 seconds. no set garp timer join This command sets the GVRP join time (for one or all ports and per GARP) to the default and only has an effect when GVRP is enabled. set garp timer leave This command sets the GVRP leave time for one port (Interface Config mode) or all ports (Global Config mode) and only has an effect when GVRP is enabled. Leave time is the time to wait after receiving an unregister request for a VLAN or a multicast group before deleting the VLAN entry. Default 0 Format vlan priority Mode Interface Config Default 20 Format set garp timer join <10-100> Mode • Interface Config • Global Config Format no set garp timer join Mode • Interface Config • Global Config

This can be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service. The leave time is 20–600 (centiseconds). The value 60 centiseconds is 0.6 seconds. no set garp timer leave This command sets the GVRP leave time on all ports or a single port to the default and only has an effect when GVRP is enabled. set garp timer leaveall This command sets how frequently Leave All PDUs are generated. A Leave All PDU indicates that all registrations will be unregistered. Participants would need to rejoin in order to maintain registration. The value applies per port and per GARP participation. The time may range from 200 to 6000 (centiseconds). The value 1000 centiseconds is 10 seconds. You can use this command on all ports (Global Config mode) or a single port (Interface Config mode), and it only has an effect only when GVRP is enabled. no set garp timer leaveall This command sets how frequently Leave All PDUs are generated the default and only has an effect when GVRP is enabled. Default 60 Format set garp timer leave <20-600> Mode • Interface Config • Global Config Format no set garp timer leave Mode • Interface Config • Global Config Default 1000 Format set garp timer leaveall <200-6000> Mode • Interface Config • Global Config Format no set garp timer leaveall Mode • Interface Config • Global Config

show garp This command displays GARP information. GVRP Commands This section describes the commands you use to configure and view GARP VLAN Registration Protocol (GVRP) information. GVRP-enabled switches exchange VLAN configuration information, which allows GVRP to provide dynamic VLAN creation on trunk ports and automatic VLAN pruning. Note: If GVRP is disabled, the system does not forward GVRP messages. set gvrp adminmode This command enables GVRP on the system. no set gvrp adminmode This command disables GVRP. Format show garp Mode • Privileged EXEC • User EXEC Term Definition GMRP Admin Mode The administrative mode of GARP Multicast Registration Protocol (GMRP) for the system. GVRP Admin Mode The administrative mode of GARP VLAN Registration Protocol (GVRP) for the system. Default disabled Format set gvrp adminmode Mode Privileged EXEC Format no set gvrp adminmode Mode Privileged EXEC

set gvrp interfacemode This command enables GVRP on a single port (Interface Config mode) or all ports (Global Config mode). no set gvrp interfacemode This command disables GVRP on a single port (Interface Config mode) or all ports (Global Config mode). If GVRP is disabled, Join Time, Leave Time, and Leave All Time have no effect. show gvrp configuration This command displays Generic Attributes Registration Protocol (GARP) information for one or all interfaces. Default disabled Format set gvrp interfacemode Mode • Interface Config • Global Config Format no set gvrp interfacemode Mode • Interface Config • Global Config Format show gvrp configuration { | all} Mode • Privileged EXEC • User EXEC Term Definition Interface Valid slot and port number separated by forward slashes. Join Timer The interval between the transmission of GARP PDUs registering (or re-registering) membership for an attribute. Current attributes are a VLAN or multicast group. There is an instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 10–100 centiseconds (0.1 to 1.0 seconds). The factory default is 20 centiseconds (0.2 seconds). The finest granularity of specification is one centisecond (0.01 seconds). Leave Timer The period of time to wait after receiving an unregister request for an attribute before deleting the attribute. Current attributes are a VLAN or multicast group. This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service. There is an instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 20–600 centiseconds (0.2 to 6.0 seconds). The factory default is 60 centiseconds (0.6 seconds).

GMRP Commands This section describes the commands you use to configure and view GARP Multicast Registration Protocol (GMRP) information. Like IGMP snooping, GMRP helps control the flooding of multicast packets. GMRP-enabled switches dynamically register and deregister group membership information with the MAC networking devices attached to the same segment. GMRP also allows group membership information to propagate across all networking devices in the bridged LAN that support Extended Filtering Services. Note: If GMRP is disabled, the system does not forward GMRP messages. set gmrp adminmode This command enables GARP Multicast Registration Protocol (GMRP) on the system. no set gmrp adminmode This command disables GARP Multicast Registration Protocol (GMRP) on the system. set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a single interface (Interface Config mode) or all interfaces (Global Config mode). If an interface which has GARP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG), GARP functionality is LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are generated. A LeaveAll PDU indicates that all registrations will shortly be deregistered. Participants will need to rejoin in order to maintain registration. There is an instance of this timer on a per-Port, per-GARP participant basis. The Leave All Period Timer is set to a random value in the range of LeaveAllTime to 1.5*LeaveAllTime. Permissible values are 200–6000 centiseconds (2–60 seconds). The factory default is 1000 centiseconds (10 seconds). Port GVMRP Mode The GVRP administrative mode for the port, which is enabled or disabled (default). If this parameter is disabled, Join Time, Leave Time, and Leave All Time have no effect. Default disabled Format set gmrp adminmode Mode Privileged EXEC Format no set gmrp adminmode Mode Privileged EXEC Term Definition

disabled on that interface. GARP functionality is subsequently re-enabled if routing is disabled and port-channel (LAG) membership is removed from an interface that has GARP enabled. no set gmrp interfacemode This command disables GARP Multicast Registration Protocol on a single interface or all interfaces. If an interface which has GARP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG), GARP functionality is disabled. GARP functionality is subsequently re-enabled if routing is disabled and port-channel (LAG) membership is removed from an interface that has GARP enabled. show gmrp configuration This command displays Generic Attributes Registration Protocol (GARP) information for one or all interfaces. Default disabled Format set gmrp interfacemode Mode • Interface Config • Global Config Format no set gmrp interfacemode Mode • Interface Config • Global Config Format show gmrp configuration { | all} Mode • Privileged EXEC • User EXEC Term Definition Interface The slot/port of the interface that this row in the table describes. Join Timer The interval between the transmission of GARP PDUs registering (or re-registering) membership for an attribute. Current attributes are a VLAN or multicast group. There is an instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 10–100 centiseconds (0.1 to 1.0 seconds). The factory default is 20 centiseconds (0.2 seconds). The finest granularity of specification is 1 centisecond (0.01 seconds). Leave Timer The period of time to wait after receiving an unregister request for an attribute before deleting the attribute. Current attributes are a VLAN or multicast group. This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service. There is an instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 20–600 centiseconds (0.2 to 6.0 seconds). The factory default is 60 centiseconds (0.6 seconds).

show mac-address-table gmrp This command displays the GMRP entries in the Multicast Forwarding Database (MFDB) table. Alternative Store and Forward Commands The Alternative Store and Forward (ASF) mode, also referred to as cut-through mode, enables the egress interface of the switch to begin transmitting a packet before the ingress interface has completely received the packet. The ASF mode reduces latency for large packets. cut-through mode Use this command to enable the Alternative Store and Forward (ASF) mode, also referred to as cut-through mode, on the switch. If you change the mode, you must reboot the switch for the mode to take effect. By default, cut-through mode is disabled. LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are generated. A LeaveAll PDU indicates that all registrations will shortly be deregistered. Participants will need to rejoin in order to maintain registration. There is an instance of this timer on a per-Port, per-GARP participant basis. The Leave All Period Timer is set to a random value in the range of LeaveAllTime to 1.5*LeaveAllTime. Permissible values are 200–6000 centiseconds (2–60 seconds). The factory default is 1000 centiseconds (10 seconds). Port GMRP Mode The GMRP administrative mode for the port. It may be enabled or disabled. If this parameter is disabled, Join Time, Leave Time, and Leave All Time have no effect. Format show mac-address-table gmrp Mode Privileged EXEC Term Definition Mac Address A unicast MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address is displayed as 8 bytes. Type The type of the entry. Static entries are those that are configured by the end user. Dynamic entries are added to the table as a result of a learning process or protocol. Description The text description of this multicast table entry. Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:). Format cut-through mode Mode Global Config Term Definition

no cut-through mode This command disables the cut-through mode. show cut-through mode Use this command to view the current and configured status of the cut-through mode. Flow Control Commands In 802.3x flow control, the MAC control PAUSE operation is specified in IEEE 802.3 Annex 31 B. It allows traffic from one device to be throttled for a specified period of time and is defined for devices that are directly connected. A device that needs to inhibit transmission of data frames from another device on the LAN transmits a PAUSE frame as defined in the IEEE specification. This feature allows the user to configure the switch to use symmetric, asymmetric, or no flow control. Asymmetric flow control allows the switch to respond to received PAUSE frames, but the port cannot generate PAUSE frames. Symmetric flow control allows the switch to both respond to and generate MAC control PAUSE frames. flowcontrol Use this command to enable or disable the symmetric or asymmetric flow control on the switch. Use the no form of command to disable the symmetric or asymmetric flow control. Asymmetric here means that Tx Pause can never be enabled. Only Rx Pause can be enabled. Format no cut-through mode Mode Global Config Format show cut-through mode Mode Global Config Default Disabled Format flowcontrol {symmetric | asymmetric} Mode • Global Config • Interface Config

no flowcontrol show flowcontrol Use this command to display the IEEE 802.3 Annex 31B flow control settings and status for a specific interface or all interfaces. It also displays 802.3 Tx and Rx pause counts. Priority Flow Control frames counts are not displayed. If the port is enabled for priority flow control, operational flow control status is displayed as “Inactive”. Operational flow control status for stacking ports is always displayed as “N/A”. Examples: (switch)#show flowcontrol Admin Flow Control: Symmetric Port Flow Control RxPause TxPause Oper ------ ------------ -------- --------- 0/1 Active 310 611 0/2 Inactive 0 0 (switch)#show flowcontrol interface 0/1 Admin Flow Control: Symmetric Port Flow Control RxPause TxPause Oper --------- ------- -------- ------- 0/1 Active 310 611 Format no flowcontrol Mode • Global Config • Interface Config Format show flowcontrol [slot/port] Mode Privileged Exec

Port-Channel/LAG (802.3ad) Commands This section describes the commands you use to configure port-channels, which are also known as link aggregation groups (LAGs). Link aggregation allows you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, which increases fault tolerance and provides load sharing. The LAG feature initially load shares traffic based upon the source and destination MAC address. Assign the port-channel (LAG) VLAN membership after you create a port-channel. If you do not assign VLAN membership, the port-channel might become a member of the management VLAN which can result in learning and switching issues. A port-channel (LAG) interface can be either static or dynamic, but not both. All members of a port channel must participate in the same protocols.) A static port-channel interface does not require a partner system to be able to aggregate its member ports. Note: If you configure the maximum number of dynamic port-channels (LAGs) that your platform supports, additional port-channels that you configure are automatically static. addport This command adds one port to the port-channel (LAG). The interface is a logical slot/port number or a group ID of a configured port-channel. Note: Before adding a port to a port-channel, set the physical mode of the port. For more information, see speed on page 25. deleteport (Interface Config) This command deletes the port from the port-channel (LAG). The interface is a logical slot/port number or a group ID of a configured port-channel. Format addport {|lag } Mode Interface Config Format deleteport {|lag } Mode Interface Config

deleteport (Global Config) This command deletes all configured ports from the port-channel (LAG). The interface is a logical slot/port number of a configured port-channel. To clear the port channels, see clear port-channel on page 405. lacp admin key Use this command to configure the administrative value of the key for the port-channel. The value range of is 0–65535. Note: This command is only applicable to port-channel interfaces. no lacp admin key Use this command to configure the default administrative value of the key for the port-channel. lacp collector max-delay Use this command to configure the port-channel collector max delay. The valid range of is 0-65535. Note: This command is only applicable to port-channel interfaces. Format deleteport Mode Global Config Default 0x8000 Format lacp admin key Mode Interface Config Format no lacp admin key Mode Interface Config Default 0x8000 Format lacp collector max-delay Mode Interface Config

no lacp collector max delay Use this command to configure the default port-channel collector max delay. lacp actor admin key Use this command to configure the administrative value of the LACP actor admin key. The valid range for is 0-65535. Note: This command is only applicable to physical interfaces. no lacp actor admin key Use this command to configure the default administrative value of the key. lacp actor admin state individual Use this command to set LACP actor admin state to individual. Note: This command is only applicable to physical interfaces. no lacp actor admin state individual Use this command to set the LACP actor admin state to aggregation. Format no lacp collector max-delay Mode Interface Config Default Internal Interface Number of this Physical Port Format lacp actor admin key Mode Interface Config Format no lacp actor admin key Mode Interface Config Format lacp actor admin state individual Mode Interface Config Format no lacp actor admin state individual Mode Interface Config

lacp actor admin state longtimeout Use this command to set LACP actor admin state to longtimeout. Note: This command is only applicable to physical interfaces. no lacp actor admin state longtimeout Use this command to set the LACP actor admin state to short timeout. Note: This command is only applicable to physical interfaces. lacp actor admin state passive Use this command to set the LACP actor admin state to passive. Note: This command is only applicable to physical interfaces. no lacp actor admin state passive Use this command to set the LACP actor admin state to active. Format lacp actor admin state longtimeout Mode Interface Config Format no lacp actor admin state longtimeout Mode Interface Config Format lacp actor admin state passive Mode Interface Config Format no lacp actor admin state passive Mode Interface Config

lacp actor port priority Use this command to configure the priority value assigned to the Aggregation Port. The valid range for is 0–255. Note: This command is only applicable to physical interfaces. no lacp actor port priority Use this command to configure the default priority value assigned to the Aggregation Port. lacp partner admin key Use this command to configure the administrative value of the Key for the protocol partner. The valid range for is 0–65535. Note: This command is only applicable to physical interfaces. no lacp partner admin key Use this command to configure the administrative value of the Key for the protocol partner. Default 0x80 Format lacp actor port priority Mode Interface Config Format no lacp actor port priority Mode Interface Config Default 0x0 Format lacp partner admin key Mode Interface Config Format no lacp partner admin key Mode Interface Config

lacp partner admin state individual Use this command to set LACP partner admin state to individual. Note: This command is only applicable to physical interfaces. no lacp partner admin state individual Use this command to set the LACP partner admin state to aggregation. lacp partner admin state longtimeout Use this command to set LACP partner admin state to longtimeout. Note: This command is only applicable to physical interfaces. no lacp partner admin state longtimeout Use this command to set the LACP partner admin state to short timeout. Note: This command is only applicable to physical interfaces. Format lacp partner admin state individual Mode Interface Config Format no lacp partner admin state individual Mode Interface Config Format lacp partner admin state longtimeout Mode Interface Config Format no lacp partner admin state longtimeout Mode Interface Config

lacp partner admin state passive Use this command to set the LACP partner admin state to passive. Note: This command is only applicable to physical interfaces. no lacp partner admin state passive Use this command to set the LACP partner admin state to active. lacp partner port id Use this command to configure the LACP partner port id. The valid range for is 0–65535. Note: This command is only applicable to physical interfaces. no lacp partner port id Use this command to set the LACP partner port id to the default. Format lacp partner admin state passive Mode Interface Config Format no lacp partner admin state passive Mode Interface Config Default 0x80 Format lacp partner portid Mode Interface Config Format no lacp partner portid Mode Interface Config

lacp partner port priority Use this command to configure the LACP partner port priority. The valid range for is 0–255. Note: This command is only applicable to physical interfaces. no lacp partner port priority Use this command to configure the default LACP partner port priority. lacp partner system id Use this command to configure the 6-octet MAC Address value representing the administrative value of the Aggregation Port’s protocol Partner’s System ID. The valid range of is 00:00:00:00:00:00 - FF:FF:FF:FF:FF. Note: This command is only applicable to physical interfaces. no lacp partner system id Use this command to configure the default value representing the administrative value of the Aggregation Port’s protocol Partner’s System ID. Default 0x0 Format lacp partner port priority Mode Interface Config Format no lacp partner port priority Mode Interface Config Default 00:00:00:00:00:00 Format lacp partner system id Mode Interface Config Format no lacp partner system id Mode Interface Config

lacp partner system priority Use this command to configure the administrative value of the priority associated with the Partner’s System ID. The valid range for is 0–65535. Note: This command is applicable only to physical interfaces. no lacp partner system priority Use this command to configure the default administrative value of priority associated with the Partner’s System ID. port-channel local-preference This command enables the local-preference mode on a port-channel (LAG) interface or range of interfaces. By default, the local-preference mode for a port-channel is disabled. This command can be used only on port-channel interfaces. no port-channel local-preference This command disables the local-preference mode on a port-channel. port-channel static This command enables the static mode on a port-channel (LAG) interface. By default the static mode for a new port-channel is disabled, which means the port-channel is dynamic. However if the maximum number of allowable dynamic port-channels are already present in the system, the Default 0x0 Format lacp partner system priority Mode Interface Config Format no lacp partner system priority Mode Interface Config Default disabled Format port-channel local-preference Mode Interface Config Format no port-channel local-preference Mode Interface Config

static mode for a new port-channel enabled, which means the port-channel is static. You can only use this command on port-channel interfaces. no port-channel static This command sets the static mode on a particular port-channel (LAG) interface to the default value. This command will be executed only for interfaces of type port-channel (LAG). port lacpmode This command enables Link Aggregation Control Protocol (LACP) on a port. no port lacpmode This command disables Link Aggregation Control Protocol (LACP) on a port. port lacpmode enable all This command enables Link Aggregation Control Protocol (LACP) on all ports. no port lacpmode enable all This command disables Link Aggregation Control Protocol (LACP) on all ports. Default disabled Format port-channel static Mode Interface Config Format no port-channel static Mode Interface Config Default enabled Format port lacpmode Mode Interface Config Format no port lacpmode Mode Interface Config Format port lacpmode enable all Mode Global Config Format no port lacpmode enable all Mode Global Config

port lacptimeout (Interface Config) This command sets the time-out on a physical interface of a particular device type (actor or partner) to either a long or a short time-out. no port lacptimeout This command sets the time-out back to its default value on a physical interface of a particular device type (actor or partner). port lacptimeout (Global Config) This command sets the time-out for all interfaces of a particular device type (actor or partner) to either a long or a short time-out. no port lacptimeout This command sets the time-out for all physical interfaces of a particular device type (actor or partner) back to their default values. port-channel adminmode This command enables a port-channel (LAG). This command sets every configured port-channel with the same administrative mode setting. Default long Format port lacptimeout {actor | partner} {long | short} Mode Interface Config Format no port lacptimeout {actor | partner} Mode Interface Config Default long Format port lacptimeout {actor | partner} {long | short} Mode Global Config Format no port lacptimeout {actor | partner} Mode Global Config Format port-channel adminmode all Mode Global Config

no port-channel adminmode This command disables a port-channel (LAG). This command clears every configured port-channel with the same administrative mode setting. port-channel linktrap This command enables link trap notifications for the port-channel (LAG). The interface is a logical slot/port for a configured port-channel. The option all enables link trap notifications for all the configured port-channels. no port-channel linktrap This command disables link trap notifications for the port-channel (LAG). The interface is a logical slot and port for a configured port-channel. The option all disables link trap notifications for all the configured port-channels. port-channel load-balance This command selects the load-balancing option used on a port-channel (LAG). Traffic is balanced on a port-channel (LAG) by selecting one of the links in the channel over which to transmit specific packets. The link is selected by creating a binary pattern from selected fields in a packet, and associating that pattern with a particular link. Load-balancing is not supported on every device. The range of options for load-balancing can vary per device. The managed switch also supports enhanced hashing mode, which has the following advantages: • MODULO-N (where N is the number of active link members in a LAG) operation based on the number of ports in the LAG • Packet attributes selection based on the packet type: For L2 packets, source and destination MAC address are used for hash computation. For L3 packets, source IP, destination IP address, TCP/UDP ports are used. • Non-Unicast traffic and unicast traffic is hashed using a common hash algorithm • Excellent load balancing performance. Format no port-channel adminmode [all] Mode Global Config Default enabled Format port-channel linktrap { | lag | all} Mode Global Config Format no port-channel linktrap { | all} Mode Global Config

no port-channel load-balance This command reverts to the default load balancing configuration. port-channel min-links This command configures the minimum links for lag interfaces on a port channel. The default is one link. The maximum number of supported links is eight. Default 3 Format port-channel load-balance {1 | 2 | 3 | 4 | 5 | 6 | 7} { | all} Mode Interface Config Global Config Term Definition 1 Source MAC, VLAN, EtherType, and incoming port associated with the packet 2 Destination MAC, VLAN, EtherType, and incoming port associated with the packet 3 Source/Destination MAC, VLAN, EtherType, and incoming port associated with the packet 4 Source IP and Source TCP/UDP fields of the packet 5 Destination IP and Destination TCP/UDP Port fields of the packet 6 Source/Destination IP and source/destination TCP/UDP Port fields of the packet 7 Enhanced Hashing Mode | all Global Config Mode only: The interface is a logical slot/port number of a configured port-channel. "All" applies the command to all currently configured port-channels. Format no port-channel load-balance { | all} Mode Interface Config Global Config Term Definition | all Global Config Mode only: The interface is a logical slot/port number of a configured port-channel. "All" applies the command to all currently configured port-channels. Default 1 Format port-channel min-links <1-8> Mode Interface Config

port-channel name This command defines a name for the port-channel (LAG). The interface is a logical slot/port for a configured port-channel, and is an alphanumeric string up to 15 characters. port-channel system priority Use this command to configure port-channel system priority. The valid range of is 0-65535. no port-channel system priority Use this command to configure the default port-channel system priority value. show lacp actor Use this command to display LACP actor attributes. The following output parameters are displayed. Format port-channel name { | } Mode Global Config Default 0x8000 Format port-channel system priority Mode Global Config Format no port-channel system priority Mode Global Config Format show lacp actor { | all} Mode Global Config Parameter Description System Priority The system priority assigned to the Aggregation Port. Admin Key The administrative value of the Key. Port Priority The priority value assigned to the Aggregation Port. Admin State The administrative values of the actor state as transmitted by the Actor in LACPDUs.

show lacp partner Use this command to display LACP partner attributes. The following output parameters are displayed. show port-channel brief This command displays the static capability of all port-channel (LAG) interfaces on the device as well as a summary of individual port-channel interfaces. For each port-channel the following information is displayed: Format show lacp partner { | all} Mode Privileged EXEC Parameter Description System Priority The administrative value of priority associated with the Partner’s System ID. System ID The value representing the administrative value of the Aggregation Port’s protocol Partner’s System ID. Admin Key The administrative value of the Key for the protocol Partner. Port Priority The administrative value of the port priority for the protocol Partner. Port-ID The administrative value of the port number for the protocol Partner. Admin State The administrative values of the actor state for the protocol Partner. Format show port-channel brief Mode • Privileged EXEC • User EXEC Term Definition Logical Interface The slot/port of the logical interface. Port-channel Name The name of port-channel (LAG) interface. Link-State Shows whether the link is up or down. Trap Flag Shows whether trap flags are enabled or disabled. Type Shows whether the port-channel is statically or dynamically maintained. Mbr Ports The members of this port-channel. Active Ports The ports that are actively participating in the port-channel.

show port-channel This command displays an overview of all port-channels (LAGs) on the switch. show port-channel counters Use this command to display port channel counters for a specified LAG interface or physical interface. Format show port-channel { | all} Mode • Privileged EXEC • User EXEC Term Definition Logical Interface Valid slot and port number separated by forward slashes. Port-Channel Name The name of this port-channel (LAG). You may enter any string of up to 15 alphanumeric characters. Link State Indicates whether the Link is up or down. Admin Mode May be enabled or disabled. The factory default is enabled. Type The status designating whether a particular port-channel (LAG) is statically or dynamically maintained. • Static - The port-channel is statically maintained. • Dynamic - The port-channel is dynamically maintained. Mbr Ports A listing of the ports that are members of this port-channel (LAG), in slot/port notation. There can be a maximum of eight ports assigned to a given port-channel (LAG). Device Timeout For each port, lists the timeout (long or short) for Device Type (actor or partner). Port Speed Speed of the port-channel port. Ports Active This field lists the ports that are actively participating in the port-channel (LAG). Load Balance Option The load balance option associated with this LAG. See port-channel load-balance on page 86. Local Preference Mode Indicates whether the local preference mode is enabled or disabled. Format show port-channel { | } counters Mode Privileged EXEC Term Definition Local Interface The valid slot/port number. Channel Name The name of this port-channel (LAG). Link State Indicates whether the Link is up or down.

The following CLI output is an example of the command output. (Netgear Switch) #show port-channel 0/3/1 counters Local Interface................................ 3/1 Channel Name........................................... ch1 Link State........................................... Down Admin Mode............................................ Enabled Port Channel Flap Count........................ 0 Mbr Mbr Flap Ports Counters ------ --------- 0/1 0 0/2 0 0/3 1 0/4 0 0/5 0 0/6 0 0/7 0 0/8 0 show port-channel system priority Use this command to display the port-channel system priority. Admin Mode Enabled or disabled. The factory default is enabled. Port Channel Flap Count The number of times the port-channel was inactive. Mbr Ports The slot/port for the port member. Mbr Flap Counters The number of times a port member is inactive, either because the link is down, or because the admin state is disabled. Default enabled Format show port-channel system priority Mode Privileged EXEC Term Definition

Multichassis LAG Commands In a Layer 2 network, a multichassis link aggregation group (MLAG) can provide a better convergency period and bandwidth than STP. If a port-channel member goes down, the MLAG provides a quicker convergence period than STP. An MLAG also provides more bandwidth than STP because all links across multiple devices can be used to handle traffic. With link aggregation, multiple links between two switches are bundled together in a link aggregation group (LAG). The advantages of link aggregation are that all member links are in the forwarding state, and a link failure does not cause any significant disruption because it takes less than one second for the LAG to resolve a link failure. An MLAG extends these advantages across multiple devices. An MLAG allows links that are on two different switches to pair with links on a partner device. The partner device does not detect that it is pairing with two devices to form a LAG. The advantages of multichassis link aggregation are that all links can carry data traffic, and a device failure does not cause any significant disruption because it takes less than one second for an MLAG to resolve the failure and to allow the traffic in the network to resume. feature vpc This command enables the MLAG feature globally. MLAG role election occurs if both the MLAG feature and the keep-alive state machine are enabled. no feature vpc This command disables the MLAG feature globally. vpc domain This command lets you enter the MLAG configuration mode.The range of the domain id is 1. Default Enabled Format feature vpc Mode Global Config Format no feature vpc Mode Global Config Format vpc domain Mode Global Config

role priority This command configures the priority of the MLAG switch. This value of the priority is used for the MLAG role election. The priority value is sent to the peer in the MLAG keep-alive messages. The configurable range for priority is 1-255. An MLAG switch with a lower priority becomes the primary switch and an MLAG switch with a higher priority becomes the secondary switch. If both the MLAG peer switches have the same role priority, the switch with the lower system MAC address becomes the primary switch. Note: Even if the keep-alive priority is modified after the election of the MLAG role, the keep-alive state machine is not restarted. no role priority This command resets the keep-alive priority to the default value of 100. peer-keepalive timeout This command configures the peer keep-alive timeout value in seconds. The configurable range for the keep-alive timeout value is 2 to 15 seconds. If an MLAG switch does not receive keep-alive messages from the peer when the timeout value is exceeded, the MLAG switch might transition to another MLAG role. Note: Even if the keep-alive priority is modified after the election of the MLAG role, the keep-alive state machine is not restarted. Default 100 Format role priority Mode VPC Domain Config Format no role priority Mode VPC Domain Config Default 5 seconds Format peer-keepalive timeout Mode VPC Domain Config

no peer-keepalive timeout This command resets the keep-alive timeout value to the default value of 5 seconds. peer-keepalive enable If MLAG is globally enabled, this command starts the keep-alive state machine on the MLAG switch. no peer-keepalive enable This command stops the keep-alive state machine on the MLAG switch. peer-keepalive destination This command configures the destination IP address of the peer MLAG switch and the source IP address for the local MLAG switch. This configuration is used by the dual control plane detection protocol (DCPDP) on the MLAG switches. You can also use this command to configure the UDP port through which the MLAG switch detects DCPDP messages. The configurable range for the UDP port 1 to 65535. After you have specified the IP addresses for the MLAG peers, you need to enter the peer detection enable command. Format no peer-keepalive timeout Mode VPC Domain Config Default Disabled Format peer-keepalive enable Mode VPC Domain Config Format no peer-keepalive enable Mode VPC Domain Config Default UDP port number 50000 Format peer-keepalive destination source [udp-port ] Mode VPC Domain Config

no peer-keepalive destination This command removes the IP addresses of the peer MLAG switches. peer detection enable This command enables the dual control plane detection protocol (DCPDC) on an MLAG switch. For the DCPDP to start on an MLAG switch, you first have to configure the IP addresses of the peer MLAG switches with the peer-keepalive destination command. no peer detection enable This command disabled the dual control plane detection protocol (DCPDC) on an MLAG switch. vpc This command configures a port channel as part of an MLAG. When you enter this command, the port channel remains down until the port-channel member information is exchanged and agreed upon between the MLAG peer switches. You need to enter the ID of the port channel that you want to configure. no vpc This command removes a port channel from an MLAG. You need to enter the ID of the port channel that you want to remove. Format no peer-keepalive destination source [udp-port ] Mode VPC Domain Config Default DCPDC is disabled Format peer detection enable Mode VPC Domain Config Format no peer detection enable Mode VPC Domain Config Format vpc Mode LAG Interface Format no vpc Mode LAG Interface

vpc peer-link This command configures a port channel as the MLAG peer link. no vpc peer-link This command removes a port channel as the MLAG peer link. show vpc brief This command displays the MLAG global status, including the MLAG operational mode, the peer link, the keep-alive status, the number of configured and operational MLAGs, and the roles. The following CLI output is an example of the command output. (Netgear Switch) #show vpc brief VPC config Mode................................ Enabled Keepalive config mode.......................... Enabled VPC operational Mode........................... Enabled Self Role...................................... Primary Peer Role...................................... Secondary Peer detection................................. Disabled Peer-Link details ----------------- Interface...................................... lag 2 Peer link status............................... UP Peer-link STP Mode............................. Disabled Configured Vlans............................... 1 Egress tagging................................. none VPC Details ----------- Number of VPCs configured...................... 1 Number of VPCs operational..................... 1 VPC id# 1 ----------- Interface...................................... lag 1 Configured Vlans............................... 1 Format vpc peer-link Mode LAG Interface Format no vpc peer-link Mode LAG Interface Format show vpc brief Mode Privileged EXEC

VPC Interface State............................ Active Local MemberPorts Status ----------------- ------ 0/19 UP 0/20 UP 0/21 UP 0/22 UP Peer MemberPorts Status ---------------- ------ 0/27 UP 0/28 UP 0/29 UP 0/30 UP show vpc This command displays information about an MLAG, which you specify by its ID. The command displays the configuration and operational modes, the port channel that is configured as the MLAG, and the member ports with their link status on the switch and the peer switch. The following CLI output is an example of the command output. (Netgear Switch) #show vpc 10 VPC id#10 ----------------- Config mode..............................Enabled Operational mode.........................Enabled Port channel.............................lag 1 Self member ports Status ------------------------ --------- 0/2 UP 0/6 DOWN Peer member ports Status ------------------------ --------- 0/8 UP show vpc role This command displays information about the keep-alive status and parameters, the role of the MLAG switch, the system MAC address, and the system priority. Format show vpc Mode Privileged EXEC Format show vpc role Mode Privileged EXEC

The following CLI output is an example of the command output. (Netgear Switch) #show vpc role Self ---- Keepalive config mode.......................... Enabled Keepalive operational mode..................... Enabled Priority....................................... 100 System MAC..................................... 00:10:18:82:18:63 Timeout........................................ 5 VPC State...................................... Primary VPC Role....................................... Primary Peer ---- Priority....................................... 100 VPC Role....................................... Secondary System MAC..................................... 00:10:18:82:1b:ab show vpc peer-keepalive This command displays the IP address of the peer MLAG switch, which is the IP address that is used by the DCPDP, the port that is used for the DCPDP, whether peer detection is enabled, and if enabled, the detection status. The following CLI output is an example of the command output. (Netgear Switch) #show vpc peer-keepalive Peer IP address.........................10.130.14.55 Source IP address.......................10.130.15.55 UDP port................................60000 Peer detection..........................ENABLED Peer is detected........................TRUE show vpc statistics This command displays counters for the keep-alive or peer link messages that the MLAG switch transmitted and received. Specify the peer-keepalive keyword to display the keep-alive messages; Specify the peer-link keyword to display the link messages such as the link control, link data, link BPDU, and link LACPDU messages. Format show peer-keepalive Mode Privileged EXEC Format show vpc statistics {peer-keepalive | peer-link} Mode Privileged EXEC

Example 1: The following shows example CLI display output for the command. (Netgear Switch) #show vpc statistics peer-keepalive Total trasmitted..................................123 Tx successful.....................................118 Tx errors........................................ 5 Total received....................................115 Rx successful.....................................108 Rx Errors.........................................7 Timeout counter...................................6 Example 2: The following shows another example CLI display output for the command. (Netgear Switch) #show vpc statistics peer-link Peer link control messages trasmitted.............123 Peer link control messages Tx errors..............5 Peer link control messages Tx timeout.............4 Peer link control messages ACK transmitted........34 Peer link control messages ACK Tx erorrs..........5 Peer link control messages received...............115 Peer link data messages transmitted...............123 Peer link data messages Tx errors.................5 Peer link data messages Tx timeout................4 Peer link data messages ACK transmitted...........34 Peer link data messages ACK Tx errors.............5 Peer link data messages received..................115 Peer link BPDU's transmitted to peer..............123 Peer link BPDU's Tx error.........................9 Peer link BPDU's received from peer...............143 Peer link BPDU's Rx error.........................1 Peer link LACPDU's transmitted to peer............123 Peer link LACPDU's Tx error.......................9 Peer link LACPDU's received from peer.............143 Peer link LACPDU's Rx error.......................1 clear vpc statistics This command clears the keep-alive statistics, that is, the command clears the counters for the keep-alive or peer link messages that the MLAG switch transmitted and received. Specify the peer-keepalive keyword to clear the keep-alive messages; Specify the peer-link keyword to clear the link messages. Format clear vpc statistics {peer-keepalive | peer-link} Mode Privileged EXEC

Port Mirroring Commands Port mirroring, which is also known as port monitoring, selects network traffic that you can analyze with a network analyzer, such as a SwitchProbe device or other Remote Monitoring (RMON) probe. In additional to the port mirroring, VLAN-based mirroring, remote switched port analyzer (RSPAN)-based and flow-based mirroring are also supported. VLAN-based mirroring allows traffic to and from a configured VLAN to be mirrored. That is, all packets that are transmitted and received on all the physical ports that are members of that particular VLAN are mirrored. RSPAN-based mirroring allows mirrored traffic to be sent to the remote analyzer across the entire Layer 2 network. Flow-based mirroring allows ACLs to be attached to the mirroring session. The network traffic that matches the ACL is only sent to the destination port. This feature is also supported for remote monitoring. You can attach an IP ACL or MAC ACL to a mirroring session. Note: ACL attributes (redirect, mirror, log, rate-limit, assign-queue, time-range) are not supported when applied to a mirroring session. monitor session source The command configures a source port to be mirrored. You can define the source as an interface (a particular port, the CPU, or a LAG), as a local VLAN, or as a remote VLAN. You can also specify whether only ingress or egress packets need to be monitored. The parameter is an integer value that is used to identify the session. However, you always need to enter 1 for the parameter. Remote port mirroring is configured by specifying the RSPAN VLAN ID. At the source switch, you configure the destination as an RSPAN VLAN, and at the destination switch, you configure the source as an RSPAN VLAN. Note: For an RSPAN VLAN, you cannot configure both the source and the destination as a remote VLAN on the same device. Default You need to enter 1 for the parameter. Format monitor session source {interface { | cpu | lag } | vlan | remote vlan } [rx/tx]} Mode Global Config