advertisement
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Virtual LAN (VLAN) Commands
61-1 vlan
This command is used to create VLANs and enter the VLAN configuration mode. Use the no vlan configuration command to remove VLANs.
vlan VLAN-ID [, | -]
no vlan VLAN-ID [, | -]
Parameters
VLAN-ID
,
-
Specifies the ID of the VLAN to be created, removed or configured. The valid VLAN
ID range is from 1 to 4094. The default VLAN with VLAN ID 1 can not be removed.
Specifies a series of VLANs, or separate a range of VLANs from a previous range.
No space is required before and after the comma.
(Optional) Specifies a range of VLANs. No space is required before and after the hyphen.
Default
VLAN ID 1 exists in the system as the default VLAN.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
This command can be used to create VLANs. Entering the vlan command with a
VLAN ID enters VLAN configuration mode. Entering the VLAN ID of an existing
VLAN does not create a new VLAN, but allows the user to modify VLAN parameters for the specified VLAN. When the user enters the VLAN ID of a new VLAN, the
VLAN will be automatically created. If the new VLAN is a port allowed VLAN, the port will join to the new VLAN automatically.
The user can use the no vlan command to remove VLANs. The default VLAN cannot be removed. The dynamic VLAN that is created through GVRP cannot be removed through this command. If the VLAN is used as ERPS R-APS VLAN,
RSPAN VLAN, voice VLAN, subnet VLAN or MAC-based VLAN, it cannot be removed too.
Removing VLAN doesn’t remove the association of the VLAN with its static member ports. Once the VLAN is re-created, these ports will join into it automatically.
The learned dynamic FDB entries in the removed VLAN will be cleared. The static
FDB entries in this VLAN will not be removed.
If the removed VLAN is a private VLAN, the configuration for the private VLAN will be cleared.
If the removed VLAN is a port’s access VLAN, the port’s access VLAN will be reset to VLAN 1.
If the VLAN is used as protocol VLAN or VLAN translation, removing it doesn’t affect the VLAN assignment.
If the VLAN is used as super VLAN or L3 interface, removing it will lead to these functions become unavailable until this VLAN is re-created.
516
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Example
In the following example, the user adds a new VLAN, assigning the new VLAN with the VLAN IDs 1000 to 1005.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#vlan 1000-1005
DXS-3600-32S(config-vlan)#
Example
In the following example, the user removes the existing VLANs with the VLAN IDs.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#no vlan 1000-1005
DXS-3600-32S(config)#
61-2 name
This command is used to specify the name of a VLAN. Use the no name command to reset the VLAN name to the default VLAN name.
name VLAN-NAME
no name
Parameters
VLAN-NAME
Specifies the VLAN name. This name is an ASCII string from 1 to 32 characters that must be unique within the administrative domain. The syntax is a general string that does not allow spaces.
Default
The default VLAN name is VLANxxxx, where xxxx represents four numeric digits
(including the leading zeros) that are equal to the VLAN ID.
VLAN Configuration Mode.
Command Mode
Command Default Level
Level: 12
Usage Guideline
The user can use the name VLAN-NAME VLAN configuration command to specify a
VLAN name. The VLAN name length must be between 1 and32 characters, and it must be unique within the administrative domain.
Example
In the following example, the user configures the VLAN name of VLAN 1000 to be
“admin-vlan”.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#vlan 1000
DXS-3600-32S(config-vlan)#name admin-vlan
DXS-3600-32S(config-vlan)#
61-3 switchport mode
This command is used to specify the VLAN mode for the port. Use no switchport command to reset the VLAN mode to default setting.
switchport mode {access | hybrid | trunk | dot1q-tunnel} no switchport mode
Parameters access hybrid trunk
Specifies the port as an access port.
Specifies the port as a hybrid port.
Specifies the port as a trunk port.
517
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Specifies the port as a dot1q-tunnel port.
dot1q-tunnel
Default
Command Mode
Access mode.
Interface Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The valid interfaces for this command are physical ports or link aggregation groups.
When the port changes the VLAN mode, the VLAN membership setting related to the previous mode will be lost. The PVID is set to default value too. If setting the port mode to access or dot1q tunnel, the GVRP status of the port will be disabled.
The user can specify the access VLAN for an access port. On an access port, only untagged packets are processed, they are transmitted and received on the access
VLAN. The user can specify multiple VLANs for a trunk port. Packets on a trunk port are received and transmitted on trunk VLANs in tagged form. The user can specify multiple VLANs for a hybrid port. Packets on a hybrid can be received and transmitted in tagged form or untagged form.
Creating a link aggregation doesn’t need the VLAN setting of its member ports are same as. The VLAN setting of the new link aggregation is default value. The VLAN setting of member ports become inactive. Once a member port is removed from the link aggregation group, its VLAN setting becomes active again.
Example
This example shows how to set an interface port 1 as a trunk port.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1
DXS-3600-32S(config-if)#switchport mode trunk
DXS-3600-32S(config-if)#
61-4 switchport access vlan
This command is used to specify the access VLAN for the interface. Use no switchport access vlan interface command to reset to default setting.
switchport access vlan VLAN-ID
no switchport access vlan
Parameters
VLAN-ID
Specifies the access VLAN for the interface.
Default
Command Mode
VLAN 1.
Interface Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The command can only be configured on physical ports or link aggregation groups that are set to access mode or dot1q-tunnel mode.
This command sets the access VLAN for an access port. The port becomes an untagged member of access VLAN and the port’s PVID will also be changed to the access VLAN. If the specified access VLAN does not exist, it will be created automatically. Only one access VLAN can be specified. The succeeding command overwrites the previous command.
518
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
The switchport access vlan command can also be used to configure the tunnel
VLAN for a Dot1q-tunnel port. Removing the VLAN that is used as a port’s access
VLAN will lead to the port’s access VLAN to reset to the default VLAN.
Example
This example shows how to set an interface port 1 to access mode with access
VLAN 1000.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1
DXS-3600-32S(config-if)#switchport mode access
DXS-3600-32S(config-if)#switchport access vlan 1000
DXS-3600-32S(config-if)#
61-5 switchport trunk allowed vlan
This command is used to configure the VLANs that will be allowed to receive and send traffic on the specified interface in a tagged format. Use the no switchport trunk allowed vlan command to reset the VLAN membership of the port.
switchport trunk allowed vlan {all | {add | remove } VLAN-ID [, | -]}
no switchport trunk allowed vlan
Parameters
, all add remove
VLAN-ID
-
Specifies to add all VLANs to the allowed VLAN list.
Specifies to add the specified VLAN list to the allowed VLAN list.
Specifies to remove the specified VLAN list from the allowed VLAN list.
Specifies the VLAN list that will be added or removed from.
(Optional) Specifies a series of VLANs, or separate a range of VLANs from a previous range. No space is required before and after the comma.
(Optional) Specifies a range of VLANs. No space is required before and after the hyphen.
Default
By default a port that is set to trunk mode allows all VLANs.
Command Mode
Interface Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The command can only be configured on physical ports or link aggregation groups that are set to trunk mode.
If a trunk port is allowed all VLANs, the traffic of all VLANs can be transmitted over it.
Entering the switchport trunk allowed vlan command to restrict the traffic of some
VLANs from passing the trunk port. A trunk port is a tagged member of a VLAN if the
VLAN is existed and it is in the allowed VLAN list of this port. If an allowed VLAN is created at later, the trunk port joins to it automatically.
Using no switchport trunk allowed-vlan command resets the allowed VLAN list of the trunk port to default.
Example
This example shows how to configure an interface port 1 allowed VLAN list to 1-
1000.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1
DXS-3600-32S(config-if)#switchport mode trunk
DXS-3600-32S(config-if)#switchport trunk allowed vlan add 1-1000
DXS-3600-32S(config-if)#
519
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
61-6 switchport hybrid allowed vlan
This command is used to specify if the port will be a tagged or untagged member of the specified VLAN for a hybrid port. Use the no switchport hybrid allowed vlan command to reset the membership.
switchport hybrid allowed vlan {add {tagged | untagged} | remove} VLAN-ID [, | -]
no switchport hybrid allowed vlan
Parameters
VLAN-ID add remove tagged
, untagged
-
Specifies the VLAN to add or remove the VLAN membership from.
Specifies the port will be added into the specified VLAN(s).
Specifies the port will be removed from the specified VLAN(s).
Specifies the port as a tagged member of the specified VLAN(s).
Specifies the port as an untagged member of the specified VLAN(s).
(Optional) Specifies a series of VLANs, or separate a range of VLANs from a previous range. Enter a space before and after the comma.
(Optional) Specifies a range of VLANs. Enter a space before and after the hyphen.
Default
Command Mode
By default, no VLAN memberships are configured for a hybrid port.
Interface Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The command can only be configured on physical ports or port-channels that are set to hybrid mode or dot1q-tunnel mode. The command can be used to setting the
VLAN membership of a hybrid port. If the port has already been the tagged member of a VLAN, adding the VLAN into the port untagged membership VLAN will lead to the port becomes its untagged member, and vice versa. You cannot add a port into its forbidden membership VLAN.
Use no switchport hybrid allowed vlan command all VLAN membership will be removed, and the port will reset to default VLAN as untagged member. The port remains in hybrid mode. The switchport hybrid allowed vlan command can also be used to specify the VLAN membership for a dot1q-tunnel port.
The configuration doesn’t need the specified VLAN exist. Once the VLAN is created, the interface will join to the VLAN automatically.
Example
In the following example, the user configures interface port 1 to be a tagged member of VLAN 1000, and an untagged member of VLAN 2000 & 3000.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1
DXS-3600-32S(config-if)#switchport mode hybrid
DXS-3600-32S(config-if)#switchport hybrid allowed vlan add tagged 1000
DXS-3600-32S(config-if)#switchport hybrid allowed vlan add untagged 2000,3000
DXS-3600-32S(config-if)#
61-7 switchport native vlan
This command is used to specify the native VLAN (PVID) of a trunk or hybrid mode interface. Use the no switchport
native vlan command to reset to the native VLAN ID to the default setting.
switchport native vlan VLAN-ID
no switchport native vlan
520
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Parameters
VLAN-ID
Specifies the native VLAN ID for the trunk or hybrid interface.
Default
Command Mode
The default is VLAN 1.
Interface Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
This command can only be configured on physical ports or link aggregation groups that set to trunk or hybrid mode. This command is used to set the native VLAN
(PVID) of a trunk or hybrid port.
An interface can be specified with only one native VLAN. The succeeding command overwrites the previous command.
The configuration doesn’t need the specified VLAN exist. For making the port join to its native VLAN, the user shall add the native VLAN into its allowed VLAN. If the port mode is trunk, the port will join to its native VLAN as untagged member. If the port mode is hybrid, user can set its native VLAN as tagged or untagged.
Example
In the following example, the user configures interface port 1 to become a trunk interface and configure its native VLAN to 20.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1
DXS-3600-32S(config-if)#switchport mode trunk
DXS-3600-32S(config-if)#switchport native vlan 20
DXS-3600-32S(config-if)#
61-8 acceptable-frame
This command is used to set acceptable frame type of a port. The default acceptable frame type is admit-all.
acceptable-frame {tagged-only | untagged-only | admit-all}
Parameters tagged-only untagged-only admit-all
Specifies that only tagged frames will be accepted by the interface.
Specifies that only untagged frames will be accepted by the interface.
Specifies that all frames will be accepted by the interface.
Default
Command Mode
The default acceptable frame setting is admit-all.
Interface Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The valid interfaces for this command are physical port or link aggregation groups.
The acceptable-frame interface command can be used to set the acceptable frame type for an interface. If the acceptable frame type is set to tagged-only, only tagged incoming packets will be received by the interface and untagged packets will be dropped. If specifying untagged-only, only untagged packets will be received and tagged packets will be dropped. If specifying admit-all, the interface will receive all packets.
The access port only accepts untagged packets, no matter its acceptable-frame type.
521
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Example
In the following example, the user sets the acceptable frame type to be tagged-only on port 1.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1
DXS-3600-32S(config-if)#acceptable-frame tagged-only
DXS-3600-32S(config-if)#
61-9 ingress-checking
This command is used to enable the ingress checking of the received frames on a port. Use the no ingress-checking interface command to disable the ingress checking function.
ingress-checking no ingress-checking
Parameters
Default
None.
By default, ingress checking is enabled.
Command Mode
Interface Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The valid interfaces for this command are physical ports or link aggregation groups.
You can use the ingress-checking interface command to enable ingress checking on interfaces. If ingress checking is enabled, if the port is not member port of the
VLAN that has been classified for the received packet, the packet will be dropped.
The user can use the no ingress-checking interface command to disable this function on a port.
Example
This example shows how to set ingress checking to enable of port 1.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1
DXS-3600-32S(config-if)#ingress-checking
DXS-3600-32S(config-if)#
61-10 mac-base (vlan)
This command is used to create a MAC-based VLAN classification entry. Use the no mac-base command to remove a
MAC-based VLAN classification entry.
mac-base MAC-ADDRESS [priority COS-VALUE]
no mac-base MAC-ADDRESS
Parameters
MAC-ADDRESS
priority COS-VALUE
Specifies the MAC address for the entry.
Specifies the priority for the entry. The value is a number from 0 to 7, if the priority is not specified, the default value is 0.
Default
No MAC-based VLAN ID classification entries exist.
Command Mode
VLAN Configuration Mode.
Command Default Level
Level: 12
522
Usage Guideline
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
The user can use the mac-base command in VLAN configuration mode to create the
MAC entry that will be classified to the MAC based VLAN. If MAC based VLAN entries are configured, the packet received by the switch regardless of the incoming port that have a source MAC address matching an the entry will be classified to the corresponding MAC-based VLAN. The maximum number of MAC-based VLAN assignment entry is project dependent.
The precedence to classify the VLAN for an untagged packet is
MAC-based > Subnet-based > Protocol VLAN > Port-based VLAN
The user should use the switchport hybrid allowed vlan command to set the
VLAN membership for the MAC-based VLAN.
Example
This example shows how to create a MAC-based VLAN entry for the MAC address
00-80-cc-00-00-11.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#vlan 101
DXS-3600-32S(config-vlan)#mac-base 00-80-cc-00-00-11 priority 4
DXS-3600-32S(config-vlan)#
61-11 subnet-base (vlan)
This command is used to specify subnet-based VLAN ID assignment entry for un-tagged incoming packets. Use the no
subnet-base command to remove a subnet-based VLAN ID assignment entry.
subnet-base {NETWORK-PREFIX /PREFIX-LENGTH | IPV6-NETWORK-PREFIX /PREFIX-LENGTH} [priority
COS-VALUE]
no subnet-base {NETWORK-PREFIX /PREFIX-LENGTH | IPV6-NETWORK-PREFIX /PREFIX-LENGTH}
Parameters
NETWORK-PREFIX /
PREFIX-LENGTH
IPV6-NETWORK-PREFIX /
PREFIX-LENGTH
priority COS-VALUE
Specifies the network prefix and the prefix length in the form of A.B.C.D/x
Specities the IPv6 network prefix and the prefix length in the form of x:x:x:x:x:x:x:x/n.
The prefix length of IPv6 network address shall not greater than 64 bits.
Specifies the priority for the entry. The value is a number from 0 to 7, if the priority is not specified, the default value is 0.
Default
Command Mode
No subnet-based VLAN.
VLAN Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
A subnet VLAN entry is an IP subnet-based VLAN classification rule. If an untagged or priority-tagged IP packet is received on a port, its source IPv4 address or the upper 64 bits of source IPv6 address will be used to match the subnet VLAN entries.
If the source IP matches the subnet of an entry, the packet will be classified to the
VLAN of this entry. If the packet is untagged, the priority will be picked up from it too.
For priority-tagged packet, its priority will not change. The number of subnet-based
VLAN entries is project dependent.
The precedence to classify an untagged packet is
MAC-based > Subnet-based > Protocol VLAN > Port-based VLAN
The user should use the switchport hybrid allowed vlan command to set the
VLAN membership for the subnet-based VLAN user.
523
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Example
In the following example, the user creates a subnet-based VLAN entry for VLAN
100, specifying the subnets 20.0.1.0/8, 192.0.1.0/8 and 3ffe:22:33:44::55/64.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#vlan 100
DXS-3600-32S(config-vlan)#subnet-base 20.0.1.0/8
DXS-3600-32S(config-vlan)#subnet-base 192.0.1.0/8 priority 4
DXS-3600-32S(config-vlan)#subnet-base 3ffe:22:33:44::55/64
DXS-3600-32S(config-vlan)#
61-12 show vlan
This command is used to display the parameters for all configured VLANs or one VLAN (if the VLAN ID or name is specified) on the switch.
show vlan [VLAN-ID [, | -] | interface [INTERFACE-ID [, | -]] | subnet-base | mac-base]
Parameters
VLAN-ID
interface
,
INTERFACE-ID
subnet-base mac-base
(Optional) Displays information about a signal VLAN identified by VLAN ID number.
The VLAN ID range is 1 to 4094. Separate nonconsecutive VLAN-ID with a comma; use a hyphen to designate a range of VLAN-ID.
(Optional) Displays the port PVID, ingress checking, acceptable frame type information.
Specifies the port to display.
(Optional) Specifies a series of ports, or separate a range of ports from a previous range. No space before and after the comma.
(Optional) Specifies a range of ports. No space before and after the hyphen.
(Optional) Displays the subnet-based VLAN related configuration.
(Optional) Displays the mac-based VLAN related configuration.
Default
Command Mode
None.
EXEC Mode.
Command Default Level
Level: 3
Usage Guideline
The user can use the show vlan command to display the current VLAN status. The user can display the VLAN list using the show vlan command. The user can display a specific VLAN entry by specifying a VLAN-ID. The user can use the show vlan
interface command to show port related VLAN information, such as port PVID, ingress checking, and acceptable frame type information.
If no optional keywords are specified, all of the VLAN configurations will be displayed.
524
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Example
DXS-3600-32S#show vlan
This example displays all the current VLAN entries.
VLAN 1
Name : default
Tagged Member Ports : 1
Untagged Member Ports : 2-24
VLAN 100
Name : VLAN0100
Tagged Member Ports : 1
Untagged Member Ports :
VLAN 101
Name : VLAN0101
Tagged Member Ports : 1
Untagged Member Ports :
VLAN 1000
Name : admin-vlan
Tagged Member Ports : 1
Untagged Member Ports :
Total Entries : 4
DXS-3600-32S#
Example
This example displays the PVID, ingress checking, and acceptable frame type information for ports 1- 4.
DXS-3600-32S#show vlan interface tenGigabitEthernet 1-4
TGi1
VLAN mode : Trunk
Trunk allowed VLAN : 1-4094
Dynamic Tagged VLAN :
Native VLAN : 20
GVRP State : Disabled
Forbidden VLAN :
Ingress checking : Enabled
Acceptable frame type : Tagged-Only
TGi2
VLAN mode : Access
Access VLAN : 1
Ingress checking : Enabled
Acceptable frame type : Untagged-Only
TGi3
VLAN mode : Access
Access VLAN : 1
Ingress checking : Enabled
Acceptable frame type : Untagged-Only
TGi4
VLAN mode : Access
Access VLAN : 1
Ingress checking : Enabled
Acceptable frame type : Untagged-Only
DXS-3600-32S#
525
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Example
This example displays the MAC-based VLAN table: The MAC-based VLAN can be set by manual configuration or by MAC-based authorization. If the authorization assigns the MAC address that is set by manual configuration to different VLAN, the manual configuration MAC-based VLAN entry becomes inactive.
DXS-3600-32S#show vlan mac-base
MAC Address VLAN ID Priority Status
------------------ -------- -------- ----------
00-80-CC-00-00-11 101 4 Active
Total Entries: 1
DXS-3600-32S#
Example
This example displays the subnet-based VLAN table.
DXS-3600-32S#show vlan subnet-base
Subnet VLAN ID Priority
------------------------ ------- ---------
20.0.0.0/8 100 0
192.0.0.0/8 100 4
3FFE:22:33:44::/64 100 0
Total Entries: 3
DXS-3600-32S#
61-13 protocol-vlan profile
This command is used to create a protocol group. Use the no protocol-vlan profile command to remove the specified protocol group.
protocol-vlan profile PROFILE-ID frame-type {ethernet2 | snap | llc} ether-type TYPE-VALUE
no protocol-vlan profile PROFILE-ID
Parameters
PROFILE-ID
frame-type ethernet2 snap
Specifies the profile ID to add or delete.
Specifies the frame type that will be bound to the entry.
Specifies the operational protocol value of Ethernet II type frames.
Specifies the operational protocol value of SNAP type frames.
llc
Specifies the operational protocol value of LLC type frames.
ether-type TYPE-VALUE Specifies the protocol value of the specific frame type. The value is in hexadecimal form. The range is 0x0 to 0xFFFF.
Default
By default, the protocol VLAN table is empty.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The protocol-vlan profile configuration command can be used to create a protocol group.
The no protocol-vlan profile command can be used to delete an existing protocol
VLAN group.
526
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
Example
This example shows how to create a protocol VLAN group with a group ID of 10, specifying that the IPv6 protocol (frame type is ethernet2 value is 0x86dd) will be used.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#protocol-vlan profile 10 frame-type ethernet2 ether-type 0x86dd
DXS-3600-32S(config)#
61-14 protocol-vlan profile (interface)
This command is used to bind the protocol VLAN classification rule to a port. The no protocol-vlan profile command is used to remove the binding of a protocol VLAN classification from the port.
protocol-vlan profile PROFILE-ID vlan VLAN-ID [priority COS-VALUE]
no protocol-vlan profile [PROFILE-ID]
Parameters
PROFILE-ID
vlan VLAN-ID
priority COS-VALUE
Specifies the profile ID to be classified. The range is 1 to 32.
Specifies the VLAN ID of the protocol VLAN. Only one VLAN ID can be specified for each binding group on a port.
Specifies the priority of the protocol VLAN to a port. The value is a number from 0 to
7, if the priority is not specified, the default value is 0.
Default
No protocol classification rules are created.
Command Mode
Interface Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The valid interfaces for this command are either physical ports or link aggregation groups. The command can only be configured on hybrid port or dot1q-tunnel port.
The user can use the protocol-vlan profile interface command to bind a protocol
VLAN group with a VLAN id. As a result, the packet received by the port that matches the specified protocol group will be classified to the binding VLAN. The number of supported protocol classification entries is depending on hardware. The
VLAN does not need to exist to successfully execute the command. If the user does not specify the profile ID with the no protocol-vlan profile command, the switch will remove all the protocol group and VLAN bindings on the specified interface.
The precedence for classifying the untagged packet is
MAC-based > Subnet-based > Protocol VLAN > Port-based VLAN
The user should use the switchport hybrid allowed vlan command to set the
VLAN member port for the protocol-based VLAN user.
Example
This example shows how to bind the protocol VLAN group 10 with VLAN ID 3000 on port 2.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 2
DXS-3600-32S(config-if)#switchport mode hybrid
DXS-3600-32S(config-if)#switchport hybrid allowed vlan add untagged 3000
DXS-3600-32S(config-if)#protocol-vlan profile 10 vlan 3000
DXS-3600-32S(config-if)#
527
DXS-3600-32S 10GbE Layer 2/3 Switch CLI Reference Guide
61-15 show protocol-vlan
This command is used to display the configuration settings of a protocol VLAN. The show protocol-vlan profile command displays the protocol VLAN list and its protocols. The show protocol-vlan interface command displays the protocol group binding VLAN of the ports.
show protocol-vlan {profile [PROFILE-ID] | interface [INTERFACE-ID [, | -]]}
Parameters profile
PROFILE-ID
, interface
INTERFACE-ID
-
Specifies the display protocol group.
(Optional) Specifies the profile ID of the protocol group. If not specified, display all protocol groups.
Specifies the display protocol VLAN that is associated to interfaces
Specifies the interface to display.
(Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No space is required before or after the comma.
(Optional) Specifies a range of interfaces. No space is required before or after the hyphen.
Default
Command Mode
None.
EXEC Mode.
Command Default Level
Level: 3
Usage Guideline
The user can use the show protocol-vlan command to display the current protocol
VLAN status. The user can display the protocol VLAN group list table by using the
show protocol-vlan profile command. The user can display the protocol VLAN binding of the ports by using the show protocol-vlan interface command.
Example
This example shows how to display the protocol VLAN binding of ports 1-3.
DXS-3600-32S#show protocol-vlan interface tenGigabitEthernet 1-3
Interface Profile ID/Binding-VLAN/Priority
--------- ------------------------------------------
TGi2 10/3000/ -
DXS-3600-32S#
Example
This example shows how to display the protocol group settings.
DXS-3600-32S#show protocol-vlan profile
Profile ID Frame-type Ether-type
---------- ----------- ----------------
10 Ethernet2 0x86DD(IPv6)
DXS-3600-32S#
528
advertisement
* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project
Related manuals
advertisement
Table of contents
- 9 Basic CLI Commands
- 9 1-1 help
- 10 1-2 prompt
- 10 1-3 banner login
- 12 1-4 exit
- 12 1-5 end
- 14 802.1X Commands
- 14 2-1 dot1x default
- 14 2-2 dot1x port-control
- 15 2-3 dot1x pae authenticator
- 15 2-4 dot1x control-direction
- 16 2-5 dot1x timeout
- 17 2-6 dot1x max-req
- 17 2-7 dot1x reauthentication
- 18 2-8 dot1x re-authenticate
- 18 2-9 dot1x initialize
- 19 2-10 dot1x system-auth-control
- 19 2-11 dot1x system-max-user
- 20 2-12 dot1x port-max-user
- 20 2-13 dot1x system-fwd-pdu
- 21 2-14 dot1x port-fwd-pdu
- 21 2-15 show dot1x
- 25 Authentication, Authorization, and Accounting (AAA) Commands
- 25 3-1 aaa
- 25 3-2 aaa authentication login
- 26 3-3 aaa authentication enable
- 27 3-4 login authentication
- 27 3-5 aaa authorization exec
- 28 3-6 aaa authorization console
- 29 3-7 authorization exec
- 29 3-8 aaa accounting exec
- 30 3-9 accounting exec
- 31 3-10 ip http authentication aaa
- 32 3-11 aaa local authentication attempts
- 32 3-12 aaa local authentication lockout-time
- 33 3-13 aaa authentication network
- 33 3-14 aaa authorization network
- 34 3-15 aaa accounting network
- 35 3-16 aaa group server
- 35 3-17 server
- 36 3-18 show aaa
- 36 3-19 show aaa server group
- 37 3-20 show aaa authentication
- 38 3-21 show aaa authorization
- 38 3-22 show aaa accounting
- 39 3-23 show aaa application
- 42 Access Control List (ACL) Commands
- 42 4-1 ip access-list standard
- 42 4-2 permit | deny (ip standard access-list)
- 43 4-3 ip access-list extended
- 44 4-4 permit | deny (ip extended access-list)
- 46 4-5 ipv6 access-list
- 46 4-6 permit | deny (ipv6 access-list)
- 48 4-7 mac access-list
- 49 4-8 permit | deny (mac access-list)
- 50 4-9 expert access-list
- 51 4-10 permit | deny (expert access-list)
- 53 4-11 ip access-list resequence
- 54 4-12 list-remark text
- 54 4-13 show access-lists
- 55 4-14 ip access-group
- 56 4-15 ipv6 traffic-filter
- 57 4-16 mac access-group
- 57 4-17 expert access-group
- 58 4-18 show access-group
- 59 4-19 show ip access-group
- 59 4-20 show ipv6 access-group
- 60 4-21 show mac access-group
- 60 4-22 show expert access-group
- 61 4-23 vlan access-map
- 61 4-24 match ip / mac address
- 62 4-25 action
- 63 4-26 vlan filter
- 63 4-27 show vlan access-map
- 64 4-28 show vlan filter
- 65 Address Resolution Protocol (ARP) Commands
- 65 5-1 arp
- 65 5-2 arp timeout
- 66 5-3 clear arp cache
- 67 5-4 show arp
- 69 5-5 show arp counter
- 69 5-6 show arp timeout
- 70 5-7 show ip arp
- 71 Alternate Store and Forward (ASF) Commands
- 71 6-1 enable asf
- 71 6-2 no asf
- 71 6-3 show asf
- 73 Border Gateway Protocol (BGP) Commands
- 73 7-1 aggregate-address
- 73 7-2 bgp router-id
- 74 7-3 bgp aggregate-next-hop-check
- 75 7-4 bgp always-compare-med
- 75 7-5 bgp bestpath as-path ignore
- 76 7-6 bgp bestpath compare-confed-aspath
- 77 7-7 bgp bestpath compare-routerid
- 77 7-8 bgp bestpath med confed
- 78 7-9 bgp bestpath med missing-as-worst
- 78 7-10 bgp client-to-client reflection
- 79 7-11 bgp cluster-id
- 79 7-12 bgp confederation identifier
- 80 7-13 bgp confederation peers
- 81 7-14 bgp dampening
- 82 7-15 bgp default local-preference
- 83 7-16 bgp deterministic-med
- 84 7-17 bgp enforce-first-as
- 84 7-18 bgp fast-external-fallover
- 85 7-19 clear ip bgp
- 86 7-20 clear ip bgp dampening
- 87 7-21 clear ip bgp external
- 88 7-22 clear ip bgp flap-statistics
- 88 7-23 clear ip bgp peer-group
- 90 7-24 ip as-path access-list
- 90 7-25 ip community-list
- 92 7-26 neighbor activate
- 92 7-27 neighbor advertisement-interval
- 93 7-28 neighbor allowas-in
- 94 7-29 neighbor capability orf prefix-list
- 95 7-30 neighbor default-originate
- 96 7-31 neighbor description
- 97 7-32 neighbor ebgp-multihop
- 98 7-33 neighbor filter-list
- 98 7-34 neighbor maximum-prefix
- 99 7-35 neighbor next-hop-self
- 100 7-36 neighbor password
- 101 7-37 neighbor peer-group (add group member)
- 103 7-38 neighbor peer-group (create group)
- 103 7-39 neighbor prefix-list
- 104 7-40 neighbor remote-as
- 105 7-41 neighbor remove-private-as
- 106 7-42 neighbor route-map
- 106 7-43 neighbor route-reflector-client
- 107 7-44 neighbor send-community
- 108 7-45 neighbor shutdown
- 108 7-46 neighbor soft-reconfiguration inbound
- 109 7-47 neighbor timers
- 110 7-48 neighbor unsuppress-map
- 111 7-49 neighbor update-source
- 111 7-50 neighbor weight
- 112 7-51 network (BGP)
- 113 7-52 redistribute
- 114 7-53 route-preference
- 114 7-54 router bgp
- 115 7-55 show ip as-path access-list
- 116 7-56 show ip bgp
- 118 7-57 show ip bgp aggregate
- 119 7-58 show ip bgp cidr-only
- 120 7-59 show ip bgp community
- 122 7-60 show ip bgp community-list
- 123 7-61 show ip bgp confederation
- 124 7-62 show ip bgp dampening dampened-paths
- 125 7-63 show ip bgp dampening parameters
- 125 7-64 show ip bgp dampening flap-statistics
- 126 7-65 show ip bgp filter-list
- 127 7-66 show ip bgp inconsistent-as
- 129 7-67 show ip bgp neighbors
- 137 7-68 show ip bgp network
- 137 7-69 show ip bgp reflection
- 138 7-70 show ip bgp route-map
- 139 7-71 show ip bgp parameters
- 141 7-72 show ip bgp peer-group
- 143 7-73 show ip bgp quote-regexp
- 145 7-74 show ip bgp summary
- 146 7-75 show ip community-list
- 147 7-76 synchronization
- 147 7-77 timers bgp
- 148 7-78 debug ip bgp
- 148 7-79 debug ip bgp fsm-event
- 149 7-80 debug ip bgp packet
- 150 7-81 debug ip bgp error
- 150 7-82 debug ip bgp route-map
- 150 7-83 debug ip bgp access-list
- 151 7-84 debug ip bgp prefix-list
- 151 7-85 debug ip bgp show global
- 152 7-86 debug ip bgp show neighbors
- 153 7-87 debug ip bgp show peer-group
- 154 7-88 debug ip bgp show network
- 155 7-89 debug ip bgp show aggregate
- 155 7-90 debug ip bgp show damp
- 156 7-91 debug ip bgp show interface
- 157 7-92 debug ip bgp show timer
- 157 7-93 debug ip bgp show redistribution
- 158 7-94 debug ip bgp show as-path-access-list
- 159 7-95 debug ip bgp show community-list
- 160 Compound Authentication Commands
- 160 8-1 network-access guest-vlan
- 160 8-2 show network-access guest-vlan
- 161 8-3 network-access authentication-mode
- 161 8-4 show network-access auth-configure
- 163 Configuration Commands
- 163 9-1 show running-config
- 163 9-2 show bootup-config
- 164 9-3 execute flash:
- 165 9-4 configure replace
- 166 9-5 boot config flash
- 167 9-6 copy running-config
- 168 9-7 copy bootup-config
- 170 9-8 copy
- 174 Counter Commands
- 174 10-1 clear counters
- 174 10-2 show interfaces counters
- 175 10-3 show utilization
- 177 CPU Commands
- 177 11-1 show cpu
- 178 Debug Commands
- 178 12-1 debug enable
- 178 12-2 error-reboot enable
- 179 12-3 copy error-log
- 179 12-4 copy debug buffer
- 180 12-5 debug output
- 180 12-6 show error-log
- 181 12-7 clear error-log
- 181 12-8 show error-reboot
- 182 12-9 clear debug buffer
- 182 12-10 show debug buffer
- 183 12-11 show debug status
- 183 12-12 show tech-support
- 184 12-13 copy tech-support
- 185 12-14 debug show module_version
- 186 DHCP Relay Commands
- 186 13-1 service dhcp
- 186 13-2 ip helper-address
- 186 13-3 ip dhcp relay information option82
- 187 13-4 ip dhcp relay option60
- 187 13-5 ip dhcp relay option60 identifier
- 188 13-6 ip dhcp relay option60 default
- 188 13-7 show ip dhcp relay option60
- 189 13-8 ip dhcp relay option61
- 190 13-9 ip dhcp relay option61 identifier
- 190 13-10 ip dhcp relay option61 default
- 191 13-11 show ip dhcp relay option61
- 192 DHCP Server Commands
- 192 14-1 bootfile
- 192 14-2 default-router
- 193 14-3 dns-server
- 193 14-4 domain-name
- 194 14-5 hardware-address
- 194 14-6 host
- 195 14-7 ip dhcp excluded-address
- 195 14-8 ip dhcp ping packet
- 196 14-9 ip dhcp ping timeout
- 196 14-10 ip dhcp pool
- 197 14-11 lease
- 198 14-12 netbios-name-server
- 198 14-13 netbios-node-type
- 199 14-14 network
- 200 14-15 next-server
- 200 14-16 service dhcp
- 201 14-17 clear ip dhcp binding
- 201 14-18 clear ip dhcp conflict
- 202 14-19 show ip dhcp binding
- 202 14-20 show ip dhcp conflict
- 204 D-Link License Management System Commands
- 204 15-1 install dlms activation_code
- 204 15-2 show dlms license
- 206 Domain Name System (DNS) Commands
- 206 16-1 ip domain-lookup
- 206 16-2 ip name-server
- 206 16-3 ip host
- 207 16-4 clear host
- 207 16-5 show hosts
- 208 16-6 ip dns server
- 209 DoS Attack Prevention Commands
- 209 17-1 defense
- 211 17-2 show defense
- 212 Distance Vector Multicast Routing Protocol (DVMRP) Commands
- 212 18-1 ip dvmrp
- 212 18-2 ip dvmrp metric
- 213 18-3 show ip dvmrp interface
- 214 18-4 show ip dvmrp neighbor
- 215 18-5 show ip dvmrp route
- 217 Filter Database (FDB) Commands
- 217 19-1 mac-address-table aging-time
- 217 19-2 clear mac-address-table
- 218 19-3 mac-address-table static
- 219 19-4 mac-address-table filtering
- 220 19-5 mac-address-table notification
- 221 19-6 snmp trap mac-notification
- 221 19-7 show mac-address-table aging-time
- 221 19-8 show mac-address-table notification
- 222 19-9 show mac-address-table
- 225 File System Commands
- 225 20-1 dir
- 225 20-2 ls
- 226 20-3 cp
- 226 20-4 cd
- 227 20-5 rename
- 227 20-6 mkdir
- 228 20-7 rmdir
- 228 20-8 rm
- 228 20-9 del
- 229 20-10 makefs
- 229 20-11 pwd
- 231 GARP VLAN Registration Protocol (GVRP) Commands
- 231 21-1 clear gvrp statistics interface
- 231 21-2 gvrp (Global)
- 231 21-3 gvrp (Interface)
- 232 21-4 gvrp advertise (Interface)
- 233 21-5 gvrp dynamic-vlan-creation
- 233 21-6 forbidden vlan
- 234 21-7 gvrp timer
- 234 21-8 show gvrp
- 235 21-9 show gvrp statistics
- 237 Internet Group Management Protocol (IGMP) Commands
- 237 22-1 clear ip igmp group
- 237 22-2 ip igmp static-group
- 238 22-3 ip igmp last-member-query-interval
- 238 22-4 ip igmp query-interval
- 239 22-5 ip igmp query-max-response-time
- 239 22-6 ip igmp robustness-variable
- 240 22-7 ip igmp version
- 241 22-8 ip igmp check-subscriber-source-network
- 241 22-9 show ip igmp interface
- 242 22-10 show ip igmp groups
- 246 IGMP Snooping Commands
- 246 23-1 ip igmp snooping
- 246 23-2 ip igmp snooping fast-leave
- 247 23-3 ip igmp snooping mrouter
- 248 23-4 ip igmp snooping dyn-mr-aging-time
- 248 23-5 ip igmp snooping querier
- 249 23-6 ip igmp snooping static-group
- 250 23-7 ip igmp snooping max-response-time
- 251 23-8 ip igmp snooping query-interval
- 251 23-9 ip igmp snooping version
- 252 23-10 clear ip igmp snooping statistics
- 253 23-11 show ip igmp snooping
- 254 23-12 show ip igmp snooping querier
- 255 23-13 show ip igmp snooping groups
- 256 23-14 show ip igmp snooping static-group
- 257 23-15 show ip igmp snooping mrouter
- 258 23-16 show ip igmp snooping forwarding-table
- 259 23-17 show ip igmp snooping statistics
- 261 Interface Commands
- 261 24-1 interface out-band
- 261 24-2 shutdown
- 261 24-3 show interface out-band
- 263 IP Access List Commands
- 263 25-1 ip standard access-list
- 263 25-2 deny
- 264 25-3 permit
- 264 25-4 show ip standard access-list
- 266 IP Address Commands
- 266 26-1 ip address
- 266 26-2 ip address dhcp
- 267 26-3 ip directed-broadcast
- 267 26-4 ip default-gateway
- 268 26-5 show ip interface
- 269 IP Prefix List Commands
- 269 27-1 ip prefix-list
- 270 27-2 ip prefix-list description
- 270 27-3 clear ip prefix-list counter
- 271 27-4 show ip prefix-list
- 273 IP Multicast (IPMC) Commands
- 273 28-1 ip mroute
- 274 28-2 ip multicast-routing
- 274 28-3 show ip mroute
- 276 28-4 show ip rpf
- 277 28-5 show ip multicast interface
- 278 28-6 show ip multicast-routing
- 280 LINE Commands
- 280 29-1 line
- 280 29-2 exec-timeout
- 281 29-3 speed
- 281 29-4 show line
- 283 Link Aggregation Commands
- 283 30-1 aggregateport load-balance
- 283 30-2 lacp port-priority
- 284 30-3 lacp system-priority
- 284 30-4 lacp timeout
- 285 30-5 port-group
- 285 30-6 port-group mode
- 286 30-7 show aggregateport
- 286 30-8 show lacp summary
- 289 Link Layer Discovery Protocol (LLDP) Commands
- 289 31-1 lldp run
- 289 31-2 lldp forward
- 290 31-3 lldp message-tx-interval
- 290 31-4 lldp message-tx-hold-multiplier
- 291 31-5 lldp tx-delay
- 291 31-6 lldp reinit-delay
- 292 31-7 lldp notification-interval
- 293 31-8 lldp notification
- 293 31-9 lldp management-address
- 294 31-10 lldp transmit
- 295 31-11 lldp receive
- 295 31-12 lldp tlv-select
- 296 31-13 lldp dot1-tlv-select
- 298 31-14 lldp dot3-tlv-select
- 299 31-15 show lldp
- 299 31-16 show lldp management-address
- 300 31-17 show lldp interface
- 301 31-18 show lldp local interface
- 303 31-19 show lldp remote interface
- 305 31-20 show lldp statistic
- 305 31-21 show lldp statistic interface
- 307 LLDP-MED Commands
- 307 32-1 lldp-med fast-start-repeat-count
- 307 32-2 lldp-med notification-topo-change
- 307 32-3 lldp-med tlv-select
- 308 32-4 show lldp-med
- 309 32-5 show lldp-med interface
- 309 32-6 show lldp-med local
- 310 32-7 show lldp-med remote
- 312 Memory Commands
- 312 33-1 show memory
- 313 Mirror Commands
- 313 34-1 monitor session
- 314 34-2 no monitor session all
- 314 34-3 show monitor
- 316 Multicast Filter Mode Commands
- 316 35-1 multicast filtering-mode
- 316 35-2 show multicast filtering-mode
- 318 Network Connectivity Test Commands
- 318 36-1 ping
- 318 36-2 traceroute
- 320 Open Shortest Path First (OSPF) Version 2 Commands
- 320 37-1 area
- 320 37-2 area default-cost
- 321 37-3 area nssa
- 322 37-4 area range
- 323 37-5 area stub
- 323 37-6 area virtual-link
- 325 37-7 clear ip ospf process
- 325 37-8 default-information originate
- 326 37-9 default-metric
- 326 37-10 route-preference ospf
- 327 37-11 distribute-list in
- 328 37-12 ip ospf authentication
- 329 37-13 ip ospf authentication-key
- 329 37-14 ip ospf cost
- 330 37-15 ip ospf dead-interval
- 330 37-16 ip ospf hello-interval
- 331 37-17 ip ospf message-digest-key
- 332 37-18 ip ospf priority
- 332 37-19 network area
- 333 37-20 passive-interface
- 334 37-21 redistribute
- 335 37-22 router ospf
- 336 37-23 router-id
- 336 37-24 show ip ospf
- 338 37-25 show ip ospf area
- 339 37-26 show ip ospf database
- 341 37-27 show ip ospf interface
- 343 37-28 show ip ospf neighbor
- 343 37-29 show ip ospf virtual-link
- 344 37-30 show ip ospf virtual-neighbor
- 345 37-31 debug ip ospf
- 345 37-32 debug ip ospf neighbor
- 346 37-33 debug ip ospf interface
- 346 37-34 debug ip ospf lsa-originating
- 347 37-35 debug ip ospf lsa-flooding
- 347 37-36 debug ip ospf packet-receiving
- 348 37-37 debug ip ospf packet-transmitting
- 348 37-38 debug ip ospf spf
- 349 37-39 debug ip ospf timer
- 349 37-40 debug ip ospf virtual-link
- 350 37-41 debug ip ospf route
- 350 37-42 debug ip ospf redistribution
- 351 37-43 debug ip ospf show counter
- 352 37-44 debug ip ospf clear counter
- 352 37-45 debug ip ospf show database
- 353 37-46 debug ip ospf show request-list
- 354 37-47 debug ip ospf show redistribution
- 354 37-48 debug ip ospf show summary-list
- 355 37-49 debug ip ospf log
- 356 Password Recovery Commands
- 356 38-1 clear
- 356 38-2 reload
- 357 38-3 password-recover
- 357 38-4 show password-recover
- 359 Peripheral Commands
- 359 39-1 show system-info
- 359 39-2 show device-status
- 360 39-3 logging-server enable device
- 361 Protocol Independent Multicast (PIM) Commands
- 361 40-1 ip pim
- 361 40-2 ip pim query-interval
- 362 40-3 ip pim join-prune-interval
- 363 40-4 ip pim dr-priority
- 363 40-5 ip pim register-suppression
- 364 40-6 ip pim rp-address
- 365 40-7 ip pim rp-candidate
- 367 40-8 ip pim spt-threshold
- 367 40-9 ip pim rp-register-kat
- 368 40-10 ip pim bsr-candidate
- 369 40-11 ip pim old-register-checksum
- 369 40-12 ip pim ssm
- 370 40-13 show ip pim dense-mode interface
- 371 40-14 show ip pim neighbor
- 372 40-15 show ip pim sparse-mode bsr-router
- 373 40-16 show ip pim sparse-mode interface
- 374 40-17 show ip pim sparse-mode rp mapping
- 375 40-18 show ip pim sparse-mode rp-hash
- 376 40-19 show ip pim
- 377 40-20 debug ip pim ssm
- 379 Port Commands
- 379 41-1 interface
- 379 41-2 medium-type
- 380 41-3 speed
- 380 41-4 shutdown
- 381 41-5 description
- 381 41-6 duplex
- 382 41-7 flowcontrol
- 382 41-8 mtu
- 383 41-9 snmp trap link-status
- 383 41-10 show interface
- 385 Port Security Commands
- 385 42-1 switchport port-security
- 386 42-2 switchport port-security aging
- 387 42-3 switchport port-security mac-address
- 389 42-4 clear port-security
- 390 42-5 show port-security
- 393 Protocol Independent Commands
- 393 43-1 clear ip route
- 393 43-2 route-preference default
- 394 43-3 route-preference static
- 394 43-4 ip mtu
- 395 43-5 ip ecmp load-balance
- 396 43-6 ip route
- 397 43-7 show ip route-preference
- 399 43-8 show ip ecmp load-balance
- 399 43-9 show ip route
- 402 Quality of Service (QoS) Commands
- 402 44-1 class
- 402 44-2 class-map
- 403 44-3 match
- 404 44-4 mls qos cos
- 404 44-5 mls qos map dscp-cos
- 405 44-6 mls qos scheduler
- 405 44-7 mls qos trust
- 406 44-8 police sr-tcm
- 408 44-9 police tr-tcm cir
- 409 44-10 police rate
- 410 44-11 policy-map
- 411 44-12 priority-queue cos-map
- 412 44-13 queue bandwidth
- 413 44-14 rate-limit
- 413 44-15 service-policy
- 414 44-16 set
- 415 44-17 show class-map
- 415 44-18 show mls qos interface
- 416 44-19 show mls qos maps
- 416 44-20 show mls qos queueing
- 417 44-21 show mls qos rate-limit
- 418 44-22 show mls qos scheduler
- 418 44-23 show policy-map
- 419 44-24 wdrr-queue bandwidth
- 420 44-25 wrr-queue bandwidth
- 421 RADIUS Commands
- 421 45-1 radius-server host
- 421 45-2 radius-server key
- 422 45-3 radius-server retransmit
- 422 45-4 radius-server timeout
- 423 45-5 show radius statistics
- 424 45-6 show radius-server configuration
- 426 Routing Information Protocol (RIP) Commands
- 426 46-1 route-preference
- 426 46-2 distribute-list in (RIP)
- 427 46-3 ip rip authentication mode
- 427 46-4 ip rip authentication text-password
- 428 46-5 ip rip receive enable
- 429 46-6 ip rip receive version
- 430 46-7 ip rip send enable
- 430 46-8 ip rip send version
- 431 46-9 ip rip v2-broadcast
- 432 46-10 network
- 432 46-11 redistribute (RIP)
- 433 46-12 router rip
- 434 46-13 show ip rip
- 435 46-14 show ip rip interface
- 436 46-15 timers basic
- 437 46-16 version
- 438 Remote Network MONitoring (RMON) Commands
- 438 47-1 rmon collection stats
- 438 47-2 rmon collection history
- 439 47-3 rmon alarm
- 440 47-4 rmon event
- 440 47-5 show rmon statistics
- 441 47-6 show rmon history
- 442 47-7 show rmon alarm
- 443 47-8 show rmon event
- 444 Route Map Commands
- 444 48-1 route-map
- 445 48-2 match as-path
- 445 48-3 match community
- 446 48-4 match interface
- 446 48-5 match ip address
- 447 48-6 match ip next-hop
- 448 48-7 match ip route-source
- 448 48-8 match metric
- 449 48-9 match route-type
- 449 48-10 set as-path prepend
- 450 48-11 set community
- 450 48-12 set dampening
- 451 48-13 set ip next-hop
- 452 48-14 set local-preference
- 453 48-15 set metric
- 453 48-16 set metric-type
- 454 48-17 set origin
- 454 48-18 set weight
- 455 48-19 show route-map
- 456 Simple Network Management Protocol (SNMP) Commands
- 456 49-1 snmp-server
- 456 49-2 no enable service snmp-agent
- 457 49-3 snmp-server name
- 457 49-4 snmp-server contact
- 458 49-5 snmp-server location
- 458 49-6 snmp-server view
- 459 49-7 snmp-server group
- 461 49-8 snmp-server user
- 462 49-9 snmp-server community
- 462 49-10 snmp-server enable traps
- 463 49-11 snmp-server host
- 464 49-12 show snmp community
- 465 49-13 show snmp user
- 465 49-14 show snmp group
- 466 49-15 show snmp view
- 467 49-16 show snmp host
- 468 Simple Network Time Protocol (SNTP) and Clock Commands
- 468 50-1 sntp enable
- 468 50-2 sntp server
- 469 50-3 sntp interval
- 469 50-4 show sntp
- 470 50-5 clock set
- 471 50-6 clock timezone
- 471 50-7 clock summer-time
- 472 50-8 show clock
- 474 Secure Shell (SSH) Commands
- 474 51-1 ip ssh time-out
- 474 51-2 ip ssh authentication-retries
- 475 51-3 ip ssh port
- 475 51-4 ip ssh server enable
- 476 51-5 show ip ssh server
- 476 51-6 show ip ssh sessions
- 478 Spanning Tree Protocol (STP) Commands
- 478 52-1 spanning-tree (global configuration)
- 478 52-2 spanning-tree reset
- 478 52-3 spanning-tree (timers)
- 479 52-4 spanning-tree tx-hold-count
- 480 52-5 spanning-tree max-hops
- 480 52-6 spanning-tree mode
- 481 52-7 spanning-tree mst configure
- 482 52-8 instance
- 482 52-9 name
- 483 52-10 revision_level
- 484 52-11 spanning-tree mst
- 484 52-12 spanning-tree mst priority
- 485 52-13 clear spanning-tree detected-protocols
- 485 52-14 spanning-tree (interface configuration)
- 486 52-15 spanning-tree hello-time
- 486 52-16 spanning-tree externalcost
- 487 52-17 spanning-tree portfast
- 488 52-18 spanning-tree autoedge
- 488 52-19 spanning-tree guard root
- 489 52-20 spanning-tree link-type
- 489 52-21 spanning-tree tc-guard
- 490 52-22 show spanning-tree
- 492 52-23 show spanning-tree interface
- 493 52-24 show spanning-tree mst
- 495 Storm Control Commands
- 495 53-1 storm-control
- 496 53-2 storm-control action
- 496 53-3 storm-control interval
- 497 53-4 show storm-control
- 500 Switch Management Commands
- 500 54-1 login (Console)
- 500 54-2 logout
- 501 54-3 username
- 501 54-4 login local
- 502 54-5 password
- 502 54-6 login (Line)
- 502 54-7 enable
- 503 54-8 disable
- 503 54-9 enable password
- 504 54-10 service password-encryption
- 504 54-11 show privilege
- 505 54-12 privilege
- 506 Syslog Commands
- 506 55-1 logging on
- 506 55-2 logging server
- 507 55-3 logging console
- 507 55-4 logging trap
- 508 55-5 logging source
- 508 55-6 logging facility
- 509 55-7 logging count
- 510 55-8 clear logging
- 510 55-9 show logging
- 511 55-10 show logging count
- 511 55-11 logging buffered
- 512 55-12 save log
- 513 TACACS+ Commands
- 513 56-1 tacacs-server host
- 513 56-2 tacacs-server key
- 514 56-3 tacacs-server timeout
- 514 56-4 show tacacs statistics
- 515 56-5 show tacacs-server configuration
- 517 Telnet Commands
- 517 57-1 ip telnet server enable
- 517 57-2 telnet
- 518 Time Range Commands
- 518 58-1 time-range
- 518 58-2 periodic
- 519 58-3 show time-range
- 520 Traffic Segmentation Commands
- 520 59-1 switchport protected unidirectional
- 520 59-2 show protected-ports
- 522 Upgrade and Maintenance Commands
- 522 60-1 copy
- 522 60-2 boot system
- 523 60-3 show bootup
- 524 Virtual LAN (VLAN) Commands
- 524 61-1 vlan
- 525 61-2 name
- 525 61-3 switchport mode
- 526 61-4 switchport access vlan
- 527 61-5 switchport trunk allowed vlan
- 528 61-6 switchport hybrid allowed vlan
- 528 61-7 switchport native vlan
- 529 61-8 acceptable-frame
- 530 61-9 ingress-checking
- 530 61-10 mac-base (vlan)
- 531 61-11 subnet-base (vlan)
- 532 61-12 show vlan
- 534 61-13 protocol-vlan profile
- 535 61-14 protocol-vlan profile (interface)
- 536 61-15 show protocol-vlan
- 537 VLAN Mapping Commands
- 537 62-1 vlan mapping profile
- 537 62-2 vlan mapping rule
- 539 62-3 show vlan mapping profile
- 539 62-4 switchport vlan mapping profile
- 541 VLAN Tunnel Commands
- 541 63-1 switchport mode dot1q-tunnel
- 542 63-2 frame-tag tpid
- 542 63-3 switchport vlan mapping
- 544 63-4 inner-priority-trust
- 544 63-5 insert-dot1q-tag
- 545 63-6 vlan mapping miss drop
- 545 63-7 show dot1q-tunnel
- 546 63-8 show frame-tag tpid
- 546 63-9 show vlan mapping
- 548 Virtual Router Redundancy Protocol (VRRP) Commands
- 548 64-1 vrrp authentication
- 548 64-2 vrrp critical-ip
- 549 64-3 vrrp ip
- 549 64-4 vrrp preempt
- 550 64-5 vrrp priority
- 551 64-6 vrrp timers advertise
- 552 64-7 show vrrp
- 554 64-8 debug vrrp
- 554 64-9 debug vrrp errors
- 555 64-10 debug vrrp events
- 555 64-11 debug vrrp packets
- 556 64-12 debug vrrp state
- 556 64-13 debug vrrp log
- 558 Weighted Random Early Detection (WRED) Commands
- 558 65-1 clear random-detect drop-counter
- 558 65-2 random-detect
- 559 65-3 random-detect exponential-weight
- 559 65-4 random-detect profile
- 560 65-5 show queueing random-detect
- 561 65-6 show random-detect drop-counter
- 561 65-7 show random-detect profile
- 563 Appendix A - Password Recovery Procedure
- 564 Appendix B - System Log Entries
- 582 Appendix C - Trap Entries
- 584 Appendix D - List of Commands