Home

ProSafe Managed Switch Command Line Interface (CLI) User Manual

1. Receive Shows whether the interface receives LLDPDUs Notify Shows whether the interface sends remote data change notifications Shows whether the interface sends optional TLVs in the LLDPDUs The TLV codes can be 0 Port Description 1 System Name 2 System Description or 3 System Capability Mgmt Shows whether the interface transmits system management address information in the LLDPDUs Switching Commands 186 M4100 Series ProSAFE Managed Switches show Ildp statistics Use this command to display the current LLDP traffic and remote table statistics for a specific interface or for all interfaces Format show lldp statistics lt slot port gt all Mode Privileged Exec Term Definition The amount of time since the last update to the remote table in days hours minutes and seconds Last Update Total Inserts Total number of inserts to the remote data table Total Deletes Total number of deletes from the remote data table Total number of times the complete remote data received was not inserted due to insufficient resources Total Drops Total number of times a complete remote data entry was deleted because the Time to Live interval expired Total Ageouts The table contains the following column headings Term Definition Interface The interface in slot port format Transmit Total Total number of LLDP packets transmitted on the port Receive
2. lt url gt nvram sshkey dsa Downloads an SSH key file For more information see Secure Shell SSH Commands on page 457 lt url gt lt url gt nvram sshkey rsal nvram sshkey rsa2 Downloads an SSH key file Downloads an SSH key file Utility Commands 373 M4100 Series ProSAFE Managed Switches Table 1 Parameters for the copy command continued Source Destination Description lt url gt nvram sslpem dhweak Downloads an HTTP secure server certificate lt url gt nvram sslpem dhstrong Downloads an HTTP secure server certificate nvram sslpem root Downloads an HTTP secure server certificate For more information see Hypertext Transfer Protocol HTTP Commands on page 460 lt url gt nvram sslpem server Downloads an HTTP secure server certificate nvram startup config Downloads the startup configuration file to the system nvram license key Download the license date to the system ias users Downloads IAS users file by SFTP SCP or TFTP imagel image2 Download an image from the remote server to either image In a stacking environment the downloaded image is distributed to the stack nodes imagel image2 Upload either image to the remote server imagel Copy imagel to image2 image2 imagel Copy image2 to imagel write memory Use this command to save running configuration changes to NVRAM so that the changes you m
3. Switching Commands 58 M4100 Series ProSAFE Managed Switches Term Definition MAC Address A MAC address for which the switch has forwarding and or filtering information The format is 6 or 8 two digit hexadecimal numbers that are separated by colons for example 01 23 45 67 89 AB In an IVL system the MAC address will be displayed as 8 bytes VLAN ID A VLAN Identifier VID is associated with each VLAN Switch Port Commands This section describes the commands used for switch port mode switchport mode Use this command to configure the mode of a switch port as access trunk or general Trunk mode In trunk mode the port becomes a member of all VLANs on the switch unless specified in the allowed list in the switchport trunk allowed vlan command The PVID of the port is set to the native VLAN as specified in the switchport trunk native vlan command This means that trunk ports accept both tagged and untagged packets Untagged packets are processed on the native VLAN and tagged packets are processed on the VLAN for which the ID is contained in the packet MAC learning is performed on both tagged and untagged packets Tagged packets that are received with a VLAN ID of which the port is not a member are discarded and MAC learning is not performed The trunk ports always transmit packets untagged on a native VLAN Access mode In access mode the port becomes a member of only one VLAN The port sends and receive
4. Mode Privileged EXEC Utility Commands 334 M4100 Series ProSAFE Managed Switches Term Definition Switch Text used to identify the product name of this switch Description Machine Type The machine model as defined by the Vital Product Data Machine Model The machine model as defined by the Vital Product Data Serial Number The unique box serial number for this switch FRU Number The field replaceable unit number Manufacturer Manufacturer descriptor field Burned in MAC Universally assigned network address Address Software Version The release version revision number of the code currently running on the switch Additional The additional packages incorporated into this system Packages show interface This command displays a summary of statistics for a specific interface or a count of all CPU traffic based upon the argument Format show interface lt slot port gt switchport lag lt lag intf num gt Mode Privileged EXEC If the argument is lt slot port gt or lag the display parameters are as shown in the following table Parameters Definition Packets The total number of packets including broadcast packets and multicast packets Received received by the processor Without Error Packets The number of inbound packets that contained errors preventing them from being Received With deliverable to a higher layer protocol Error Broadcast Th
5. Mode e Privileged EXEC User EXEC Term Definition MST Instance ID The MST instance associated with this port Interface Valid slot and port number separated by forward slashes STP Mode Indicates whether spanning tree is enabled or disabled on the port Type Currently not used STP State The forwarding state of the port in the specified spanning tree instance Switching Commands 43 M4100 Series ProSAFE Managed Switches Port Role The role of the specified port within the spanning tree Desc Indicates whether the port is in loop inconsistent state or not This field is blank if the loop guard feature is not available show spanning tree mst port summary active This command displays settings for the ports within the specified multiple spanning tree instance that are active links Format show spanning tree mst port summary lt mstid gt active Mode e Privileged EXEC e User EXEC Term Definition msia o The ID of the existing MST instance Interface slot port STP Mode Indicates whether spanning tree is enabled or disabled on the port Type Currently not used STP State The forwarding state of the port in the specified spanning tree instance Port Role The role of the specified port within the spanning tree Desc Indicates whether the port is in loop inconsistent state or not This field is blank if the loop guard feature is not available
6. Default Disabled Format default udld packet transmit Mode Privileged EXEC Utility Commands 423 M4100 Series ProSAFE Managed Switches no debug udld packet transmit This command enables debugging on the transmitted UDLD PDUs Format debug udld packet transmit Mode Privileged EXEC debug aaa accounting This command is useful for debugging accounting configuration and functionality in User Manager Format debug aaa accounting Mode Privileged EXEC no debug aaa accounting Use this command to turn off debugging of User Manager accounting functionality Format no debug aaa accounting Mode Privileged EXEC debug aaa authorization This command is useful for debugging authorization configuration and functionality in User Manager Format debug aaa authorization commands exec Mode Privileged EXEC no debug aaa authorization Use this command to turn off debugging of User Manager authorization functionality Format no debug aaa authorization Mode Privileged EXEC Utility Commands 424 M4100 Series ProSAFE Managed Switches Cable Test Command The cable test feature enables you to determine the cable connection status on a selected port Note The cable test feature is supported only for copper cable It is not supported for optical fiber cable If the port has an active link while the cable test is run the link can go down for the duration of the
7. no vlan association subnet This command removes association of a specific IP subnet to a VLAN Format no vlan association subnet lt ipaddr gt lt netmask gt vlan association mac This command associates a MAC address to a VLAN Format wlan association mac lt macaddr gt lt 1 4093 gt Mode VLAN database Switching Commands 55 M4100 Series ProSAFE Managed Switches no vlan association mac This command removes the association of a MAC address to a VLAN no vlan association mac lt macaddr gt VLAN database remote span This command identifies the VLAN as the RSPAN VLAN Format remote span VLAN configuration show vlan This command displays a list of all configured VLANs or detailed information for a specific VLAN show vlan lt vlanid gt e Privileged EXEC e User EXEC Definition VLAN ID A VLAN Identifier VID is associated with each VLAN The range of the VLAN ID is 1 4093 VLAN Name A string associated with this VLAN as a convenience It can be up to 32 alphanumeric characters long including blanks The default is blank VLAN ID 1 always has a name of Default This field is optional VLAN Type Type of VLAN which can be Default VLAN ID 1 or static one that is configured and permanently defined or Dynamic one that is created by GVRP registration Switching Commands 56 M4100 Series ProSAFE Managed Switches If you e
8. show dot1x users This command displays 802 1x port security user information for locally configured users show dot1x users lt slot port gt Privileged EXEC Term Definition Users configured locally to have access to the specified port 802 1X Supplicant Commands 802 1X dot1x supplicant functionality is on point to point ports The administrator can configure the user name and password used in authentication and capabilities of the supplicant port dot1x pae Use this command to set the port s dot1x role The port can serve as either a supplicant or an authenticator Format dotlx pae supplicant authenticator Interface Config dot1x supplicant port control Use this command to set the ports authorization state Authorized or Unauthorized either manually or by setting the port to auto authorize upon startup By default all the ports are authenticators If the port s attribute must be moved from authenticator to supplicant or supplicant to authenticator use this command Switching Commands 94 M4100 Series ProSAFE Managed Switches Format dot1x supplicant port control auto force authorized force_unauthorized Mode Interface Config Parameter Description auto The port is in the Unauthorized state until it presents its user name and password credentials to an authenticator If the authenticator authorizes the port then it is placed in the Authorized state
9. Mode Privileged EXEC clear vlan This command resets VLAN configuration parameters to the factory defaults Format clear vlan Mode Privileged EXEC Utility Commands 368 M4100 Series ProSAFE Managed Switches enable password This command prompts you to change the Privileged EXEC password Passwords are a maximum of 64 alphanumeric characters The password is case sensitive The encrypted option allows you to transfer the enable password between devices without needing to know the password In this case the lt password gt parameter must be exactly 128 hexadecimal characters Format enable password lt password gt encrypted Mode Privileged EXEC logout This command closes the current telnet connection or resets the current serial connection Note Save configuration changes before logging out Format logout Modes e Privileged EXEC User EXEC ping Use this command to determine whether another computer is on the network Ping provides a synchronous response when initiated from the CLI and web interfaces Default The default count is 1 The default interval is 3 seconds The default size is O bytes Format ping lt ipaddress gt lt hostname gt count lt count gt interval lt interval gt size lt size gt Modes e Privileged EXEC User EXEC Using the options described below you can specify the number and size of Echo Requests a
10. Privileged EXEC Term Definition Interface The interface in a slot port format Port ID The port ID associated with this interface Port Description The port description associated with the interface show Ildp local device detail Use this command to display detailed information about the LLDP data a specific interface transmits Format show lldp local device detail lt slot port gt Mode Privileged EXEC re The interface that sends the LLDPDU o interface that sends the LLDPDU Chassis ID The type of identification used in the Chassis ID field Subtype Chassis ID The chassis of the local device Port ID Subtype The type of port on the local device Port ID The port number that transmitted the LLDPDU System Name The system name of the local device Switching Commands 190 M4100 Series ProSAFE Managed Switches Term Definition System Describes the local system by identifying the system name and versions of hardware Description operating system and networking software supported in the device Port Description Describes the port in an alpha numeric format System Indicates the primary function s of the device Capabilities Supported System Shows which of the supported system capabilities are enabled Capabilities Enabled Management The type of address and the specific address the local LLDP agent uses to send and Address receive information
11. Utility Commands 346 M4100 Series ProSAFE Managed Switches Term Definition Total MAC Number of MAC addresses currently in the forwarding database Addresses in use Total MAC Number of MAC addresses the forwarding database can handle Addresses available process cpu threshold Use this command to configure the CPU utilization thresholds The Rising and Falling thresholds are specified as a percentage of CPU resources The utilization monitoring time period can be configured from 5 seconds to 86 400 seconds in multiples of 5 seconds The CPU utilization threshold configuration is saved across a switch reboot Configuring the falling utilization threshold is optional If the falling CPU utilization parameters are not configured they take the same value as the rising CPU utilization parameters Format process cpu threshold type total rising lt 1 100 gt interval lt 5 86400 gt falling lt 1 100 gt interval lt 5 86400 gt Mode Global Config Parameter Description rising threshold rising interval falling threshold The percentage of CPU resources that when exceeded for the configured rising interval triggers a notification The range is 1 100 The default is O disabled The duration of the CPU rising threshold violation in seconds that must be met to trigger a notification The range is 5 86 400 The default is O disabled The percentage of CPU resources that when usage fa
12. show dot1x authentication history This command displays 802 1X authentication events and information during successful and unsuccessful Dot1x authentication process for all interfaces or the specified interface Use the optional keywords to display only failure authentication events in summary or in detail Format show dotlx authentication history slot port all failedauth only detail Privileged EXEC Time Stamp The exact time at which the event occurs Interface Physical Port on which the event occurs Mac Address The supplicant client MAC address VLAN assigned The VLAN assigned to the client port on authentication VLAN assigned The type of VLAN ID assigned which can be Guest VLAN Unauth Default RADIUS Reason Assigned or Monitor Mode VLAN ID Auth Status The authentication status Reason The actual reason behind the successful or failed authentication Switching Commands 88 M4100 Series ProSAFE Managed Switches show authentication methods This command displays information about the authentication methods Format show authentication methods Mode Privileged EXEC Command example Login Authentication Method Lists Console Default None Network_Default Local Enable Authentication Lists Console Default Enable None Network_Default Enable Line Login Method List Enable Method Lists Console Console _ Default Console Default Telnet Networ
13. show spanning tree mst summary This command displays summary information about all multiple spanning tree instances in the switch On execution the following details are displayed Format show spanning tree mst summary Mode e Privileged EXEC User EXEC Switching Commands 44 M4100 Series ProSAFE Managed Switches Term Definition MST Instance ID List For each MSTID e Associated FIDs e Associated VLANs List of multiple spanning trees IDs currently configured e List of forwarding database identifiers associated with this instance e List of VLAN IDs associated with this instance show spanning tree summary This command displays spanning tree settings and parameters for the switch The following details are displayed on execution of the command Format show spanning tree summary Mode e Privileged EXEC e User EXEC Term Definition Spanning Tree Adminmode Enabled or disabled Spanning Tree Version of 802 1 currently supported IEEE 802 1s IEEE 802 1w or IEEE 802 1d based Revision Level Version upon the Force Protocol Version parameter BPDU Guard Enabled or disabled Mode BPDU Filter Enabled or disabled Mode Configuration Identifier used to identify the configuration currently being used Name Configuration Identifier used to identify the configuration currently being used Format Selector MST Instances Configuratio
14. Invalid input detected at marker Indicates that you entered an incorrect or unavailable command The carat shows where the invalid text is detected This message also appears if any of the parameters or values are not recognized Command not found Incomplete Indicates that you did not enter the required keywords or values command Use a question mark 7 to list commands Ambiguous command Indicates that you did not enter enough letters to uniquely identify the command CLI Line Editing Conventions The following table describes the key combinations you can use to edit commands or increase the speed of command entry You can access this list from the CLI by entering help from the User or Privileged EXEC modes Table 8 CLI Editing Conventions Key Sequence Description DEL or Backspace Delete previous character Ctrl A Go to beginning of line Ctrl E Go to end of line Ctrl F Go forward one character Ctrl B Go backward one character Using the Command Line Interface 14 M4100 Series ProSAFE Managed Switches Table 8 CLI Editing Conventions continued Key Sequence Ctrl D Delete current character Ctrl U X Delete to beginning of line Ctrl K Delete to end of line Ctrl W Delete previous word Ctrl T Transpose previous character Ctrl P Go to previous line in history buffer Ctrl R Rewrites or pastes the line Ctrl N Go to next line in history buf
15. Privileged EXEC clear eventlog This command clears all event messages maintained in the switch Format clear eventlog Mode Privileged EXEC clear mac addr table This command clears the dynamically learned MAC addresses of the switch Format clear mac addr tabl Mode Privileged EXEC clear logging buffered This command clears the messages maintained in the system log Format clear logging buffered Mode Privileged EXEC Utility Commands 367 M4100 Series ProSAFE Managed Switches clear counters This command clears the statistics for a specified lt slot port gt for all the ports or for the entire switch based upon the argument Format clear counters lt slot port gt all Mode Privileged EXEC clear igmpsnooping This command clears the tables managed by the IGMP Snooping function and attempts to delete these entries from the Multicast Forwarding Database Format clear igmpsnooping Mode Privileged EXEC clear pass This command resets all user passwords to the factory defaults without powering off the switch You are prompted to confirm that the password reset should proceed Format clear pass Mode Privileged EXEC clear port channel This command clears all port channels LAGs Format clear port channel Mode Privileged EXEC clear traplog This command clears the trap log Format clear traplog
16. sftp scp lt username gt lt ipaddress gt lt filepath gt lt filename gt Note The maximum length for the file path is 160 characters and the maximum length for the file name is 31 characters For TFTP SFTP and SCP the lt ipaddr gt or lt hostname gt parameter is the IP address or host name of the server lt filepath gt is the path to the file and lt filename gt is the name of the file that you want to upload or download For SFTP and SCP the lt username gt parameter is the user name for logging into the remote server via SSH Note lt ip address gt is also a valid parameter for routing packages that support IPv6 For switches that support a USB device the copy command can be used to transfer files from and to the USB device The syntax for the USB file is usb lt fi1ename gt The USB device can be either a source or destination in the copy command It cannot be used as both source and destination in a copy command CAUTION Before you load a new release image to make a backup upload the existing startup config cfg file to the server Utility Commands 372 M4100 Series ProSAFE Managed Switches Parameters for the copy command are listed in the following table Table 1 Parameters for the copy command Source Destination Description nvram techsupport nvram backup config lt url gt nvram startup config Uploads the Technical Support file Copies the backup config
17. Format show dhcp client vendor id option Mode Privileged EXEC Command example NETGEAR Switch show dhcp client vendor id option Enabled Client DHCP Client Vendor Identifier Option DHCP Client Vendor Identifier Option string DHCP Snooping Configuration Commands This section describes commands you use to configure DHCP Snooping ip dhcp snooping Use this command to enable DHCP Snooping globally Default disabled Format ip dhcp snooping Mode Global Config no ip dhcp snooping Use this command to disable DHCP Snooping globally Format no ip dhcp snooping Mode Global Config ip dhcp snooping vlan Use this command to enable DHCP Snooping on a list of comma separated VLAN ranges disabled Default Format ip dhcp snooping vlan lt vlan list gt Mode Global Config Switching Commands 138 M4100 Series ProSAFE Managed Switches no ip dhcp snooping vlan Use this command to disable DHCP Snooping on VLANs Format no ip dhcp snooping vlan lt vlan list gt Mode Global Config ip dhcp snooping verify mac address Use this command to enable verification of the source MAC address with the client hardware address in the received DCHP message Default enabled Format ip dhcp snooping verify mac address no ip dhcp snooping verify mac address Use this command to disable verification of the source MAC address with th
18. May be enabled or disabled Term Definition SMACDMAC May be enabled or disabled The factory default is disabled Mode The factory default is disabled The factory default is disabled TCP Flag amp Sequence Mode May be enabled or disabled The factory default is disabled TCP SYN Mode TCP SYN amp FIN Mode TCP Fragment Mode May be enabled or disabled May be enabled or disabled May be enabled or disabled TCP Offset Mode May be enabled or disabled The factory default is disabled The factory default is disabled The factory default is disabled The factory default is disabled MAC Database Commands This section describes the commands you use to configure and view information about the MAC databases bridge aging time This command configures the forwarding database address aging timeout in seconds The lt seconds gt parameter must be within the range of 10 to 1 000 000 seconds Default 300 Format bridge aging time lt seconds gt Mode Global Config no bridge aging time This command sets the forwarding database address aging timeout to the default value Format no bridge aging time Mode Global Config Switching Commands 211 M4100 Series ProSAFE Managed Switches show forwardingdb agetime This command displays the timeout for address aging Default 300s show forwardingdb agetime Mode Privileged EXEC
19. Switching Commands 203 M4100 Series ProSAFE Managed Switches dos control tcpflag This command enables TCP Flag Denial of Service protections If the mode is enabled Denial of Service prevention is active for this type of attacks If packets ingress having TCP Flag SYN set and a source port less than 1024 or having TCP Control Flags set to 0 and TCP Sequence Number set to 0 or having TCP Flags FIN URG and PSH set and TCP Sequence Number set to 0 or having TCP Flags SYN and FIN both set the packets will be dropped if the mode is enabled Default disabled Format dos control tcpflag Mode Global Config no dos control tcpflag This command sets disables TCP Flag Denial of Service protections Format no dos control tcpflag Mode Global Config dos control l4port This command enables L4 Port Denial of Service protections If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having Source TCP UDP Port Number equal to Destination TCP UDP Port Number the packets will be dropped if the mode is enabled Note Some applications mirror source and destination L4 ports RIP for example uses 520 for both If you enable dos control l4port applications such as RIP may experience packet loss which would render the application inoperable Default disabled Format dos control 14port Mode Global Config Switching Commands 204 M4100 Series ProS
20. Switching Commands 48 M4100 Series ProSAFE Managed Switches vian participation This command configures the degree of participation for a specific interface in a VLAN The ID is a valid VLAN identification number and the interface is a valid interface number Format vlan participation exclude include auto lt 1 4093 gt Mode Interface Config Participation options are Participation Definition Options include The interface is always a member of this VLAN This is equivalent to registration fixed exclude The interface is never a member of this VLAN This is equivalent to registration forbidden auto The interface is dynamically registered in this VLAN by GVRP The interface will not participate in this VLAN unless a join request is received on this interface This is equivalent to registration normal vian participation all This command configures the degree of participation for all interfaces ina VLAN The IDisa valid VLAN identification number Format wlan participation all exclude include auto lt 1 4093 gt Mode Global Config You can use the following participation options Participation Definition Options include The interface is always a member of this VLAN This is equivalent to registration fixed exclude The interface is never a member of this VLAN This is equivalent to registration forbidden auto The interface is dynamically registered in this V
21. This command disables IGMP Snooping on all interfaces Format no set igmp interfacemode Mode Global Config set igmp fast leave This command enables or disables IGMP Snooping fast leave admin mode on a selected interface or VLAN Enabling fast leave allows the switch to immediately remove the layer 2 LAN interface from its forwarding table entry upon receiving an IGMP leave message for that multicast group without first sending out MAC based general queries to the interface You should enable fast leave admin mode only on VLANs where only one host is connected to each layer 2 LAN port This prevents the inadvertent dropping of the other hosts that were connected to the same layer 2 LAN port but were still interested in receiving multicast traffic directed to that group Also fast leave processing is supported only with IGMP version 2 hosts Default disabled Format set igmp fast leave Mode Interface Config Format set igmp fast leave lt vlan id gt Mode VLAN Config no set igmp fast leave This command disables IGMP Snooping fast leave admin mode on a selected interface Format no set igmp fast leave Mode Interface Config Format no set igmp fast leave lt vlan id gt Mode VLAN Config Switching Commands 156 M4100 Series ProSAFE Managed Switches set igmp groupmembership interval This command sets the IGMP Group Membership Interval time on a VLAN one interface or
22. passwords strength minimum lowercase letters lt number gt Mode Global Config no passwords strength minimum lowercase letters Use this command to reset the minimum number of lowercase letters to the default value Format no passwords strength minimum lowercase characters Mode Global Config passwords strength minimum numeric characters Use this command to enforce a minimum number of numeric characters that a password should contain The valid range is 0 16 The default is 2 Minimum of 0 means no restriction on that set of characters Default 2 Format passwords strength minimum numeric letters lt number gt Mode Global Config Management Commands 476 M4100 Series ProSAFE Managed Switches no passwords strength minimum numeric characters Use this command to reset the minimum number of numeric characters to the default value Format no passwords strength minimum numeric characters Mode Global Config passwords strength minimum special characters Use this command to enforce a minimum number of special characters that a password should contain The valid range is 0 16 The default is 2 Minimum of 0 means no restriction on that set of characters Default 2 Format passwords strength minimum special letters lt number gt Mode Global Config no passwords strength minimum special letters Use this command to reset the minimum number of special le
23. Address Aging This parameter displays the address aging timeout for the associated forwarding Timeout database show mac address table multicast This command displays the Multicast Forwarding Database MFDB information If you enter the command with no parameter the entire table is displayed You can display the table entry for one MAC Address by specifying the MAC address as an optional parameter Format show mac address table multicast lt macaddr gt Mode Privileged EXEC MAC Address A multicast MAC address for which the switch has forwarding and or filtering information The format is two digit hexadecimal numbers separated by colons for example 01 23 45 67 89 AB In an IVL system the MAC address will be displayed as a MAC address and VLAN ID combination of 8 bytes Type The type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as a result of a learning process or protocol Component The component that is responsible for this entry in the Multicast Forwarding Database Possible values are IGMP Snooping GMRP and Static Filtering Description The text description of this multicast table entry Interfaces The list of interfaces that are designated for forwarding Fwd and filtering FIt Forwarding The resultant forwarding list is derived from combining all the component s forwarding Interfaces interfaces and removing the interfaces t
24. Authentication era 0 Pending REQGUES ES wii cias aa a Kine aR ae ec 0 TIMEOUTS ose wea e a 0 Unknown TYPES iii aci a a a eRe we 0 Packets Dropped essc is a TA cata 0 Command example NETGEAR Switch show radius accounting statistics name Default_RADIUS_Server RADIUS Accounting Server NaMB o oo ooooooooo Default_RADIUS_Server Host AdIESS iria ns a ts 192 168 37 200 Ro nd Trip TIME a a a a 0 00 ROQUESES ie a iaa 0 REE Dan SMES SA OMS dad daa 0 RESPONSE eii A ras 0 Mal formed RESPONSES tec 6 5 rica iia nas 0 Bad AUthenticatoB Sven dia i 0 Pending Request SS aa 0 TIMEOUTS ai a nda 0 UNKNOWN TYPES ia ira a e wi eusal E 0 Packets DEO DCO snes auc is al wee ae es 0 show radius statistics Use this command to display the summary statistics of configured RADIUS Authenticating servers show radius statistics lt ipaddr gt lt dnsname gt name lt servername gt Mode Privileged EXEC Field Definition servername The alias name to identify the server RADIUS Server Name The name of the authenticating server Server Host Address The IP address of the host Access Requests The number of RADIUS Access Request packets sent to this server This number does not include retransmissions Access The number of RADIUS Access Request packets retransmitted to this RADIUS Retransmissions authentication server Access Accepts The number of RADIUS Access Accept packets including both va
25. Definition Packets Received Total Packets Received Octets The total number of octets of data including those in bad packets received on the network excluding framing bits but including Frame Check Sequence FCS octets This object can be used as a reasonable estimate of Ethernet utilization If greater precision is desired the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval The result of this equation is the value Utilization which is the percent utilization of the Ethernet segment on a scale of 0 100 percent Packets Received 64 Octets The total number of packets including bad packets received that were 64 octets in length excluding framing bits but including FCS octets Packets Received 65 127 Octets The total number of packets including bad packets received that were from 65 through 127 octets in length inclusive excluding framing bits but including FCS octets Packets Received 128 255 Octets The total number of packets including bad packets received that were from 128 through 255 octets in length inclusive excluding framing bits but including FCS octets Packets Received 256 511 Octets The total number of packets including bad packets received that were from 256 through 511 octets in length inclusive excluding framing bits but including FCS octets Utility Commands 337 Term M4100 Series ProSAFE Managed Switches Definition
26. Format no host Mode DHCP Pool Config lease This command configures the duration of the lease for an IP address that is assigned from a DHCP server to a DHCP client The overall lease time should be between 1 86400 minutes If you specify infinite the lease is set for 60 days You can also specify a lease duration lt days gt is an integer from 0 to 59 lt hours gt is an integer from 0 to 23 lt minutes gt is an integer from 0 to 59 Utility Commands 385 M4100 Series ProSAFE Managed Switches Default 1 day Format lease lt days gt lt hours gt lt minutes gt infinite DHCP Pool Config no lease This command restores the default value of the lease time for DHCP Server Format Mode DHCP Pool Config network DHCP Pool Config Use this command to configure the subnet number and mask for a DHCP address pool on the server Network number is a valid IP address made up of four decimal bytes ranging from 0 to 255 IP address 0 0 0 0 is invalid Mask is the IP subnet mask for the specified address pool The prefix length is an integer from 0 to 32 Defaut Format network lt networknumber gt lt mask gt lt prefixlength gt Mode DHCP Pool Config no network This command removes the subnet number and mask Format no network DHCP Pool Config bootfile The command specifies the name of the default boot image for a DHCP client The lt filename gt specifies the bo
27. Group 3 Ether History High Capacity Group Contains the High Capacity RMON extensions to RMON 1 etherHistoryTable RFC 2819 Group 2 e RFC 3434 Group 1 High Capacity Alarm Control Group Controls the configuration of alarms for high capacity MIB object instances Utility Commands 432 M4100 Series ProSAFE Managed Switches Group 2 High Capacity Alarm Capabilities Group Describes the high capacity alarm capabilities provided by the agent Group 3 High Capacity Alarm Notifications Group Provides new rising and falling threshold notifications for high capacity objects rmon alarm This command sets the RMON alarm entry in the RMON alarm MIB group Format rmon alarm lt alarm number gt lt variable gt lt sample interval gt lt sampling type gt rising threshold lt value gt falling threshold lt value gt startup rising falling rising falling owner lt string gt Mode Global Config Parameter Description lt alarm number gt The alarm number that identifies the alarm lt variable gt The object identifier of the particular variable to be sampled Only variables that resolve to an ASN 1 primitive type of integer lt sample interval gt The interval in seconds over which the data is sampled and compared with the rising and falling thresholds The range is 0 to 2147483647 The default is 0 lt sampling type gt The alarm sample type The method of sampling the selected v
28. LACP Mode The Link is up or down This object determines whether to send a trap when link status changes The factory default is enabled LACP is enabled or disabled on this port show port protocol This command displays the Protocol Based VLAN information for either the entire system or for the indicated group Format show port protocol lt groupid gt all Mode Privileged EXEC Switching Commands 24 M4100 Series ProSAFE Managed Switches Term Definition Group Name The group name of an entry in the Protocol based VLAN table Group ID The group identifier of the protocol group Protocol s VLAN The type of protocol s for this group The VLAN associated with this Protocol Group Interface s Lists the slot port interface s that are associated with this Protocol Group show port description This command displays the port description for every port Format show port description lt slot port gt Mode Privileged EXEC Term Definition Interface Valid slot and port number separated by forward slashes Description Shows the port description configured via the description command show port status This command displays the Protocol Based VLAN information for either the entire system or for the indicated group Physical Mode Format show port status lt slot port gt all Mode Privileged EXEC Term
29. Mode Global Config storm control unicast Interface Config This command enables unicast storm recovery mode for an interface If the mode is enabled unicast storm recovery is active and if the rate of unknown L2 unicast destination lookup failure traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore the rate of unknown unicast traffic will be limited to the configured threshold Default disabled Format storm control unicast Mode Interface Config Switching Commands 103 M4100 Series ProSAFE Managed Switches no storm control unicast This command disables unicast storm recovery mode for an interface Format no storm control unicast Mode Interface Config storm control unicast level Interface Config This command configures the unicast storm recovery threshold for an interface as a percentage of link speed and enables unicast storm recovery If the mode is enabled unicast storm recovery is active and if the rate of unknown L2 unicast destination lookup failure traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore the rate of unknown unicast traffic will be limited to the configured threshold This command also enables unicast storm recovery mode for an interface Default 5 Format storm control unicast level lt 0 100 gt Mode Interface Config no s
30. RMON Stats and History Commands The various MIBs within RFC 2819 3273 and 3434 are arranged into groups The managed switch supports some of the groups in these RFCs but not all The managed switch complies with MODULE COMPLIANCE and OBJECT GROUP definitions within these RFCs for supporting individual groups The managed switch supports the following groups RFC 2819 Group 1 Statistics Contains cumulative traffic and error statistics Group 2 History Generates reports from periodic traffic sampling that are useful for analyzing trends This group includes History Control Group and Ethernet History Group Group 3 Alarm Enables the definition and setting of thresholds for various counters Thresholds can be passed in either a rising or falling direction on existing MIB objects primarily those in the Statistics group An alarm is triggered when a threshold is crossed and the alarm is passed to the Event group The Alarm requires the Event Group Group 9 Event Controls the actions that are taken when an event occurs RMON events occur when e A threshold alarm is exceeded e There is a match on certain filters e RFC 3273 Group 1 Media Independent Group Contains media independent statistics that provide information for full and or half duplex links as well as high capacity links Group 2 Ether Stats High Capacity Group Contains the High Capacity RMON extensions to RMON 1 etherStatsTable RFC 2819 Group 1
31. lt queue id n gt Modes e Global Config Interface Config random detect exponential weighting constant Use this command to configure the WRED decay exponent for a CoS queue interface Format random detect exponential weighting constant lt 0 15 gt Modes e Global Config e Interface Config Default 9 no random detect exponential weighting constant Use this command to reset the WRED decay exponent to the default value on all interfaces or one interface Format no random detect exponential weighting constant Modes e Global Config Interface Config random detect queue parms Use this command to configure WRED parameters for each drop precedence level supported by a queue Use it only when per COS queue configuration is enabled using the cos queue random detect commana e lt min thresh gt is the minimum threshold the queue depth as a percentage where WRED starts marking and dropping traffic e lt max thresh gt is the maximum threshold is the queue depth as a percentage above which WRED marks or drops all traffic e lt drop probability gt is the percentage probability that WRED marks or drops a packet when the queue depth is at the maximum threshold The drop probability increases linearly from 0 just before the minimum threshold to this value at the maximum threshold then goes to 100 percent for larger queue depths Each parameter is specified for each possible drop preceden
32. lt slot port gt access trunk general lt slot port gt Mode Privileged EXEC Switching Commands 61 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show interfaces switchport 1 0 Port 1 0 VLAN Membership Mode General Access Mode VLAN 1 default General Mode PVID 1 default General Mode Ingress Filtering Disabled General Mode Acceptable Frame Type Admit all General Mode Dynamically Added VLANs General Mode Untagged VLANs 1 General Mode Tagged VLANs General Mode Forbidden VLANs Trunking Mode Native VLAN 1 default Trunking Mode Native VLAN tagging Disable Trunking Mode VLANs Enabled All Protected Port False Command example NETGEAR Switch show interfaces switchport access 1 0 Command example NETGEAR Switch show interfaces switchport trunk 1 6 Intf PVID Allowed Vlans List Command example NETGEAR Switch show interfaces switchport general 1 5 Intf PVID Ingress Acceptable Untagged Tagged Forbidden Dynamic Filtering Frame Type Vlans Vlans Vlans Vlans 1 5 1 Enabled Admit All 7 10 50 55 9 100 200 88 96 Switching Commands 62 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show interfaces switchport general Intf PVID Ingress Acceptable Untagged Tagged Forbidden Dynamic Filtering Frame Type Vlans Vlans Vlans Vlans 1 0 1 1 Enabled Admit All 1 4 7 30 40 55 3 100 2
33. no Ildp notification interval Use this command to return the notification interval to the default value Format no lldp notification interval clear Ildp statistics Use this command to reset all LLDP statistics including MED related information Format clear lldp statistics Mode Privileged Exec clear lldp remote data Use this command to delete all information from the LLDP remote data table including MED related information Format clear lldp remote data Mode Global Config Switching Commands 185 M4100 Series ProSAFE Managed Switches show Ildp Use this command to display a summary of the current LLDP configuration Format show lldp Privileged Exec Transmit Interval How frequently the system transmits local data LLDPDUs in seconds Transmit Hold The multiplier on the transmit interval that sets the TTL in local data LLDPDUs Multiplier Re initialization The delay before re initialization in seconds Delay Notification How frequently the system sends remote data change notifications in seconds Interval show Ildp interface Use this command to display a summary of the current LLDP configuration for a specific interface or for all interfaces Format sho lldp interface lt slot port gt all Mode Privileged Exec The interface in a slot port format Shows whether the link is up or down Transmit Shows whether the interface transmits LLDPDUs
34. 273 M4100 Series ProSAFE Managed Switches Format match ethertype lt keyword gt custom lt range gt Mode e Class Map Config e Ipv6 Class Map Config match any This command adds to the specified class definition a match condition whereby all packets are considered to belong to the class Default none Format match any Mode e Class Map Config e Ipv6 Class Map Config match class map This command adds to the specified class definition the set of match conditions defined for another class The lt refclassname gt is the name of an existing DiffServ class whose match conditions are being referenced by the specified class definition Default match class map lt refclassname gt e Class Map Config e Ipv6 Class Map Config Note the following e The parameters lt refclassname gt and lt class map name gt cannot be the same Only one other class might be referenced by a class Any attempts to delete the lt refclassname gt class while the class is still referenced by any lt class map name gt fails The combined match criteria of lt class map name gt and lt refclassname gt must be an allowed combination based on the class type e Any subsequent changes to the lt refclassname gt class match criteria must maintain this validity or the change attempt fails The total number of class rules formed by the complete reference class chain including both predecessor and
35. 47 M4100 Series ProSAFE Managed Switches vian ingressfilter This command enables ingress filtering If ingress filtering is disabled frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN Default disabled Format vlan ingressfilter Mode Interface Config no vian ingressfilter This command disables ingress filtering If ingress filtering is disabled frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN Format no vlan ingressfilter Mode Interface Config vlan makestatic This command changes a dynamically created VLAN one that is created by GVRP registration to a static VLAN one that is permanently configured and defined The ID is a valid VLAN identification number VLAN range is 2 4093 Format vlan makestatic lt 2 4093 gt Mode VLAN Config vlan name This command changes the name of a VLAN The name is an alphanumeric string of up to 32 characters and the ID is a valid VLAN identification number ID range is 1 4093 Default VLAN ID 1 default other VLANS blank string Format vlan name lt 1 4093 gt lt name gt Mode VLAN Config no vlan name This command sets the name of a VLAN to a blank string no vlan name lt 1 4093 gt VLAN Config
36. 532 Core M4100 Series ProSAFE Managed Switches Table 3 BSP Log Messages Component Message Cause BSP Event Oxaaaaaaaa Switch has restarted BSP Starting code BSP initialization complete starting application Table 4 NIM Log Messages Component Cause NIM NIM L7_ATTACH out of order for Interface creation out of order intlfNum x unit x slot x port x NIM NIM Failed to find interface at unit x slot x There is no mapping between the USP and port x for event x Interface number NIM NIM L7_DETACH out of order for Interface creation out of order intlfNum x unit x slot x port x NIM NIM L7_DELETE out of order for Interface creation out of order intlfNum x unit x slot x port x NIM NIM event x intf x component x in An event was issued to NIM during the wrong phase wrong configuration phase probably Phase 1 2 or WMU NIM NIM Failed to notify users of interface Event was not propagated to the system change NIM NIM failed to send message to NIM NIM message queue full or non existent message Queue NIM NIM Failed to notify the components of Interface not created L7_CREATE event NIM NIM Attempted event x on USP x x x a ell ae o lod before phase 3 el iNe Wong del p NIM NIM incorrect phase for operation An API call was made during the wrong initialization phase NIM NIM Component x failed on event x for A component responded with a fail intl Num x indicatio
37. 84 M4100 Series ProSAFE Managed Switches dot1x system auth control Use this command to enable the dot1x authentication support on the switch While disabled the dot1x configuration is retained and can be changed but is not activated Default disabled Format dotlx system auth control no dot1x system auth control This command is used to disable the dot1x authentication support on the switch Format no dotlx system auth control Mode Global Config dot1x timeout This command sets the value in seconds of the timer used by the authenticator state machine on this port Depending on the token used and the value in seconds passed various time out configurable parameters are set Default guest vlan period 90 seconds e reauth period 3600 seconds e quiet period 60 seconds e tx period 30 seconds supp timeout 30 seconds e server timeout 30 seconds Format dot1x timeout guest vlan period lt seconds gt reauth period lt seconds gt quiet period lt seconds gt tx period lt seconds gt supp timeout lt seconds gt server timeout lt seconds gt Mode Interface Config The following table describes the tokens that are supported Tokens Definition guest vlan period The time in seconds for which the authenticator waits to see if any EAPOL packets are received on a port before authorizing the port and placing the port in the guest vlan if confi
38. Format no auto negotiate all Mode Global Config description Use this command to create an alpha numeric description of the port description lt description gt Interface Config mtu Use the mtu command to set the maximum transmission unit MTU size in bytes for frames that ingress or egress the interface You can use the mtu command to configure jumbo frame support for physical and port channel LAG interfaces The MTU size is a valid integer between 1522 9216 for tagged packets and a valid integer between 1518 9216 for untagged packets Note To receive and process packets the Ethernet MTU must include any extra bytes that Layer 2 headers might require To configure the IP MTU size which is the maximum size of the IP packet IP Header IP payload see jo mtu on page 239 Switching Commands 20 M4100 Series ProSAFE Managed Switches Default 1518 untagged Format mtu lt 1518 9216 gt Mode Interface Config no mtu This command sets the default MTU size in bytes for the interface Format no mtu Mode Interface Config shutdown This command disables a port Note You can use the shutdown command on physical and port channel LAG interfaces but not on VLAN routing interfaces Mode Interface Config no shutdown This command enables a port Format no shutdown Mode Interface Config shutdown all This command disables all ports Note You c
39. Format show tech support Mode Privileged EXEC length Use this command to set the pagination length to value number of lines for the sessions specified by configuring on different Line Config modes telnet ssh and console and is persistent The lt number gt argument is a number in the range of 5 48 lines Enter 0 to specify no pagination Default 24 Format length lt number gt Mode Line Config no length value Use this command to set the pagination length to the default value of 24 number of lines Format no length Mode Line Config terminal length Use this command to set the number of lines of output to be displayed on the screen i e pagination for the show running config and show running config all commands The terminal length size is either zero or a number in the range of 5 48 After the user configured number of lines is displayed in one page the system prompts the user More or q uit Press q or Q to quit or press any key to display the next set of 5 48 lines The command terminal length 0 disables pagination and as a result the output of the show running config command is displayed immediately Default 24 lines per page Utility Commands 351 M4100 Series ProSAFE Managed Switches Format terminal length lt number gt Mode Privileged EXEC no terminal length Use this command to set the terminal length to the default value of 24 lines Format no
40. IP Address IP address of the management interface or another device on the management network MAC Address Hardware MAC address of that device Interface For a service port the output is Management For a network port the output is the slot port of the physical interface show eventlog This command displays the event log which contains error messages from the system The event log is not cleared on a system reset The lt unit gt is the switch identifier Format show eventlog lt unit gt Mode Privileged EXEC Utility Commands 333 M4100 Series ProSAFE Managed Switches AA The file in which the event originated The line number of the event The task ID of the event The event code The time this event occurred unit The unit for the event Note Event log information is retained across a switch reset show hardware This command displays inventory information for the switch Note The show version command and the show hardware command display the same information In future releases of the software the show hardware command will not be available For a description of the command output see the command show version on page 334 Format show hardware Mode Privileged EXEC show version This command displays inventory information for the switch Note The show version command will replace the show hardware command in future releases of the software Format show version
41. Maximum The maximum number of times the authenticator state machine on this port will Requests retransmit an EAPOL EAP Request Identity before timing out the supplicant The value will be in the range of 1 and 10 VLAN Id The VLAN assigned to the port by the radius server This is only valid when the port control mode is not Mac based VLAN Assigned The reason the VLAN identified in the VLAN Idfield has been assigned to the port Reason Possible values are RADIUS Unauthenticated VLAN Guest VLAN default and Not Assigned When the VLAN Assigned Reason is Not Assigned it means that the port has not been assigned to any VLAN by dot1x This only valid when the port control mode is not MAC based Reauthentication Period The timer used by the authenticator state machine on this port to determine when reauthentication of the supplicant takes place The value is expressed in seconds and will be in the range of 1 and 65535 Reauthentication Enabled Indicates if reauthentication is enabled on this port Possible values are True or False Key Transmission Enabled Indicates if the key is transmitted to the supplicant for the specified port Possible values are True or False Control Direction Maximum Users Unauthenticated VLAN ID Session Timeout Session Termination Action The control direction for the specified port or ports Possible values are both or in The maximum number of cli
42. Mode Privileged EXEC Command example NETGEAR Switch show mbuf total mbufSize 9284 0x2444 Current Time 0x1897fa MbufsFree 150 MbufsRxUsed 0 Total Rx Norm Alloc Attempts 26212 Total Rx Mid2 Alloc Attempts 4087 Total Rx Midl Alloc Attempts 188943 Utility Commands 348 Total Tx Alloc Failures M4100 Series ProSAFE Managed Switches Total Rx High Alloc Attempts 384555 Total Tx Alloc Attempts 2478536 otal Rx Norm Alloc Failures 0 otal Rx Mid2 Alloc Failures 0 otal Rx Midl Alloc Failures 0 Total Rx High Alloc Failures 0 0 show running config Use this command to display or capture the current setting of different protocol packages supported on the switch This command displays or captures commands with settings and configurations that differ from the default value To display or capture the commands with settings and configurations that are equal to the default value include the a11 option Note The output of the show running config command does not display the user password even if you set one different from the default The output is displayed in the script format which can be used to configure another switch with same configuration If the optional lt scriptname gt is provided with a file name extension of scr the output is redirected to a script file Note Note If you issue the show running config command from a serial connection access to the switch through remote c
43. Parameter Definition capabilities Transmit the LLDP capabilities TLV ex pd Transmit the LLDP extended PD TLV ex pse Transmit the LLDP extended PSE TLV inventory Transmit the LLDP inventory TLV location Transmit the LLDP location TLV network policy Transmit the LLDP network policy TLV Note The current implementation supports one network policy the voice VLAN as defined by the voice vlan commands Switching Commands 192 M4100 Series ProSAFE Managed Switches no Ildp med transmit tlv Use this command to remove a TLV Format no lldp med transmit tlv capabilities network policy ex pse ex pd location inventory Interface Config lldp med all Use this command to configure LLDP MED on all the ports Mode Global Config no Ildp med all Use this command to remove LLDP MD on all ports Format no lldp med all Mode Global Config Ildp med confignotification all Use this command to configure all the ports to send the topology change notification Format lidp med confignotification all Mode Global Config no Ildp med confignotification all Use this command to disable all the ports to send the topology change notification Format no lldp med confignotification all Mode Global Config Ildp med faststartrepeatcount Use this command to set the value of the fast start repeat count lt count gt is the number of LLDP PDUs th
44. e 2 Optional 3 84 6 49 e 3 Optional 6 49 12 95 e 4 Optional 12 95 25 5 Power The power supplied to the powered device in watts Output Current The current supplied to the powered device in mA mA Output Voltage The voltage supplied to the powered device in volts volts Status The Status field reports the state of power supplied to the port The possible values are e Disabled The PoE function is disabled on this port e Searching The port is detecting the PoE device e Delivering Power The port is providing power to the PoE device e Fault The POE device is not IEEE compliant no power is provided e Test The port is in testing state e Other Fault The port has experienced problems other than compliance issues When a port begins to deliver power there is a trap indicating so When a port stops delivering power there is a trap indicating so Command example NETGEAR Switch show poe port info all High Max Output Output Intf Power Power Class Power Current Voltage Status Fault W W mA volt Status 0 1 Yes 32 0 Unknown 00 000 0 00 00 Searching No Error Power over Ethernet Commands 326 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show poe port info 0 33 High Max Output Output Intf Power Power Class Power Current Voltage Status Fault W W mA volt Status 0 33 No 18 0 2 04 400 84 53 33 Delivering Power No Error show poe
45. force authorized Sets the authorization state of the port to Authorized bypassing the authentication process force unauthorized Sets the authorization state of the port to Unauthorized bypassing the authentication process no dot1x supplicant port control Use this command to set the port control mode to the default auto Default Auto Format no dotlx supplicant port control Interface Config dot1x supplicant max start Use this command to configure the number of attempts that the supplicant makes to find the authenticator before the supplicant assumes that there is no authenticator Default 3 Format dot1x supplicant max start lt 1 10 gt Mode Interface Config no dot 1x supplicant max start Use this command to set the max start value to the default Format no dotlx supplicant max start Mode Interface Config Switching Commands 95 M4100 Series ProSAFE Managed Switches dot1x supplicant timeout start period Use this command to configure the start period timer interval in seconds to wait for the EAP identity request from the authenticator Default 30 seconds Format dot1x supplicant timeout start period lt 1 65535 gt Mode Interface Config no dot 1x supplicant timeout start period Use this command to set the start period value to the default Format no dot1x supplicant timeout start period Interface Config dot1x supplicant timeout
46. match secondary vlan This command adds to the specified class definition a match condition based on the value of the layer 2 secondary VLAN Identifier field the 802 1Q tag of a double VLAN tagged packet The VLAN is an integer from 0 to 4095 Default none Format match secondary vlan lt 0 4095 gt Mode e Class Map Config Ipv6 Class Map Config DiffServ Policy Commands Use the DiffServ policy commands to specify traffic conditioning actions such as policing and marking to apply to traffic classes Use the policy commands to associate a traffic class that you define by using the class command set with one or more QoS policy attributes Assign the class policy association to an interface to form a service Specify the policy name when you create the policy Each traffic class defines a particular treatment for packets that match the class definition You can associate multiple traffic classes with a single policy When a packet satisfies the conditions of more than one class preference is based on the order in which you add the classes to the policy The first class you add has the highest precedence This set of commands consists of policy creation deletion class addition removal and individual policy attributes Quality of Service Commands 280 M4100 Series ProSAFE Managed Switches Note The only way to remove an individual policy attribute from a class instance within a policy is to remove the class ins
47. s address it stops sending periodic queries If the Snooping Querier wins the election then it will continue sending periodic queries Default disabled Format set igmp querier election participate no set igmp querier election participate Use this command to set the Snooping Querier not to participate in querier election but go into non querier mode as soon as it discovers the presence of another querier in the same VLAN Format no set igmp querier election participate Mode VLAN Config show igmpsnooping querier Use this command to display IGMP Snooping Querier information Configured information is displayed whether or not IGMP Snooping Querier is enabled Format show igmpsnooping querier detail vlan lt vlan id gt Mode Privileged EXEC If you do not use the optional lt vlan id gt argument the command displays the information that is shown in the following table Admin Mode Indicates whether or not IGMP Snooping Querier is active on the switch The version of IGMP that will be used while sending out the queries Switching Commands 166 M4100 Series ProSAFE Managed Switches Term Description Querier Address Query Interval Querier Timeout The IP Address which will be used in the IPv4 header while sending out IGMP queries It can be configured using the appropriate command The amount of time in seconds that a Snooping Querier waits before sending
48. udid message time This command configures the interval between UDLD probe messages on ports that are in the advertisement phase The range is from 7 to 90 seconds Default 15 Format udld message time lt interval gt Mode Global Config udid timeout interval This command configures the time interval after which UDLD link is considered to be unidirectional The range is from 5 to 60 seconds Default 5 Format udld timeout interval lt interval gt Utility Commands 438 M4100 Series ProSAFE Managed Switches udld enable Interface Config This command enables UDLD on the specified interface Default disabled Format udld enable Mode Interface Config no udld enable Interface Config This command disables UDLD on the specified interface Format no udld enable Mode Interface Config udid port This command selects the UDLD mode operating on this interface If you do not enter the aggressive keyword the port operates in normal mode Default normal Format udld port aggressive Mode Interface Config udid reset This command resets all interfaces that have been shutdown by UDLD Format udld reset Mode Privileged EXEC show udld This command displays either the global UDLD settings or the UDLD settings for a specified lt slot port gt lf the a11 keyword is entered the command displays information for all ports Fo
49. For additional information refer to RFC 3513 Interface or slot port Valid slot and port number separated by forward slashes For example 0 1 represents slot number 0 and port number 1 Logical Interface Represents a logical slot and port number This is applicable in the case of a port channel LAG You can use the logical slot port to configure the port channel Character strings Use double quotation marks to identify character strings for example System Name with Spaces An empty string is not valid Using the Command Line Interface 9 M4100 Series ProSAFE Managed Switches Slot Port Naming Convention Managed switch software references physical entities such as cards and ports by using a slot port naming convention The software also uses this convention to identify certain logical entities such as port channel interfaces The slot number has two uses In the case of physical ports it identifies the card containing the ports In the case of logical and CPU ports it also identifies the type of interface or port Table 3 Type of slots Slot Type Description Physical slot numbers Physical slot numbers begin with zero and are allocated up to the maximum number of physical slots Logical slot numbers Logical slots immediately follow physical slots and identify port channel LAG or router interfaces CPU slot numbers The CPU slots immediately follo
50. Format dos control tcpsyn Switching Commands 207 M4100 Series ProSAFE Managed Switches no dos control tcpsyn This command sets disables TCP SYN and L4 source 0 1023 Denial of Service protection Format no dos control tcpsyn Mode Global Config dos control tcpsynfin This command enables TCP SYN and FIN Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having TCP flags SYN and FIN set the packets will be dropped if the mode is enabled Default disabled Format dos control tcpsynfin Mode Global Config no dos control tcpsynfin This command sets disables TCP SYN amp FIN Denial of Service protection Format no dos control tcpsynfin Mode Global Config dos control tcpfinurgpsh This command enables TCP FIN and URG and PSH and SEQ 0 checking Denial of Service protections If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having TCP FIN URG and PSH all set and TCP Sequence Number set to 0 the packets will be dropped if the mode is enabled Default disabled Format dos control tcpfinurgpsh Mode Global Config no dos control tcpfinurgpsh This command sets disables TCP FIN and URG and PSH and SEQ 0 checking Denial of Service protections Format no dos control tcpfinurgpsh Switching Commands 208 M4100 Series
51. Format snmp server community lt name gt Mode Global Config Management Commands 491 M4100 Series ProSAFE Managed Switches no snmp server community Use this command to remove this community name from the table The lt name gt is the community name to be deleted Format no snmp server community lt name gt Mode Global Config snmp server community ipaddr Use this command to set a client IP address for an SNMP community The address is the associated community SNMP packet sending address and is used along with the client IP mask value to denote a range of IP addresses from which SNMP clients might use that community to access the device A value of 0 0 0 0 allows access from any IP address Otherwise this value is ANDed with the mask to determine the range of allowed client IP addresses The name is the applicable community name Default 0 0 0 0 Format snmp server community ipaddr lt ipaddr gt lt name gt Mode Global Config no snmp server community ipaddr Use this command to set a client IP address for an SNMP community to 0 0 0 0 The name is the applicable community name Format no snmp server community ipaddr lt name gt snmp server community ipmask Use this command to set a client IP mask for an SNMP community The address is the associated community SNMP packet sending address and is used along with the client IP address value to denote a range of IP addresses
52. LLDP MED Commands Link Layer Discovery Protocol Media Endpoint Discovery LLDP MED ANSI TIA 1057 provides an extension to the LLDP standard Specifically LLDP MED provides extensions for network configuration and policy device location Power over Ethernet PoE management and inventory management lldp med Use this command to enable MED By enabling MED you will be effectively enabling the transmit and receive function of LLDP Default enabled Format lldp med Mode Interface Config no lldp med Use this command to disable MED Format no lldp med Mode Interface Config Switching Commands 191 M4100 Series ProSAFE Managed Switches lIldp med confignotification Use this command to configure all the ports to send the topology change notification Default enabled lidp med confignotification Mode Interface Config no Idp med confignotification Use this command to disable notifications Format no lldp med confignotification Mode Interface Config lldp med transmit tlv Use this command to specify which optional Type Length Values TLVs in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units LLDPDUs Default By default the capabilities and network policy TLVs are included Format lidp med transmit tlv capabilities ex pd ex pse inventory location network policy Mode Interface Config
53. Mac based Unable to register for VLAN change Appears when this component unable to VLANS callback register for VLAN change notifications Mac based vlanMacCnfgrFiniPhase1 Process could Appears when a semaphore deletion of this VLANS not delete avl semaphore component fails Mac based vlanMacAddApply Failed to add an entry Appears when a dtl call fails to add an entry VLANS into the table Mac based vlanMacDeleteApply Unable to delete an Appears when a dil fails to delete an entry VLANS Entry from the table Log Messages 542 M4100 Series ProSAFE Managed Switches Table 23 Mac based VLANs Log Messages Component Message Cause Mac based vlanMacVlanChangeCallback Failed to Appears when a dtl fails to add an entry for VLANS add an entry a VLAN add notify event Mac based vlanMacVlanChangeCallback Failed to Appears when a dtl fails to delete an entry VLANS delete an entry for an VLAN delete notify event Table 24 802 1x Log Messages Component Message Cause 802 1X function Failed calling dot1xlssueCmd 802 1X message queue is full 802 1X function EAP message not received from RADIUS server did not send required EAP server message 802 1X function Out of System buffers 802 1X cannot process transmit message due to lack of internal buffers 802 1X function could not set state to DTL call failed setting authorization state of lt authorized unauthorized gt intf xxx the port 80
54. Mode Privileged EXEC no ip http session maxsessions Use this command to restore the number of allowable unsecure HTTP sessions to the default value Format no ip http session maxsessions Mode Privileged EXEC ip http session soft timeout Use this command to configure the soft time out for unsecure HTTP sessions in minutes Configuring this value to zero sets an infinite soft time out When this time out expires the user must reauthenticate This timer begins on initiation of the web session and is restarted with each access to the switch Default 5 Format ip http session soft timeout lt 0 60 gt Privileged EXEC Management Commands 463 M4100 Series ProSAFE Managed Switches no ip http session soft timeout Use this command to reset the soft time out for unsecure HTTP sessions to the default value Format no ip http session soft timeout Mode Privileged EXEC ip http secure session maxsessions Use this command to limit the number of secure HTTP sessions Zero is the configurable minimum Default 16 Format ip http secure session maxsessions lt 0 16 gt Mode Privileged EXEC no ip http secure session maxsessions Use this command to restore the number of allowable secure HTTP sessions to the default value Format no ip http secure session maxsessions Mode Privileged EXEC ip http secure session soft timeout Use this command to configu
55. SHOW POE crrerrese otit tt RIEDET EEEE EEEE A aa 324 SNOW POG PO s scrcr aia 327 SHOW POS port configurada A age swe seee decal 323 SHOW POS POLCIMPO 032 cionado dinero ddr periper drid 326 SHOW POLICY MaPesissssssrsirari saciar IEA 289 shoWipolicy Map Interface cinancsanererarywds a aa RERI 292 SMOW DONE sarita A AMI Rial 24 SHOW PONE AAVEFtISE 5 0 0 0 0 5ananMaPETRTSTTTTOS S645 60 0042 009 a OER HEE 23 SHOW PONE descriptos ss picar ports besiitos 25 SHOW POLE protocol asissrtsia ares vi sao 24 SHON POr SEE asar rl eat 25 SHOW por ehan cs ie 124 573 M4100 Series ProSAFE Managed Switches SHOW port Chanhel Brief asia arcaicas a 124 show port channel system priority 0 ccc eee cent eee Eee Aene nes 125 SHOW POIt SECUN oi aoc eidi nas roscar Simian eA Swe Tee E RE dee iaa 181 SHOW PORESSECUNILY CY MAN cisco ira doe tea iaaea iai 181 SHOW POFE SECUPity Static ssssssrrsprecsesiarirersss estii Koss edad e EHS 182 SHOW PORE SECUTILY Molt di ccicagecdage cigs sete ta totad Oiesteaetemimeas gases tatetwtededecus 182 SHOW PROCESS EP suis Aid 347 SHOW TACUIS ves taroges ira RNE ol ela atea 507 SHOW HAdiliS ACCOUNLING oe said 510 show radius ACCOUNTING STAUISHICS sesicrama datada cv aa AA a 511 SHOW ACIUS SERVERS o arta pa 508 SHOW ACIS StALISHIES cansando dida 512 SHOW MMOM 44266060550 nirin aaeeea rro eses aid nate 436 SHOW mon collectHOnhistOR asdncetjen ata nunnana naa sr aa a ea eai 436 SHOW FIMOMEVE NS caen iaa oe
56. The factory default is 1000 centiseconds 10 seconds Port GVMRP The GVRP administrative mode for the port which is enabled or disabled default If this Mode parameter is disabled Join Time Leave Time and Leave All Time have no effect GMRP Commands This section describes the commands you use to configure and view GARP Multicast Registration Protocol GMRP information Like IGMP snooping GMRP helps control the flooding of multicast packets GMRP enabled switches dynamically register and deregister group membership information with the MAC networking devices attached to the same segment GMRP also allows group membership information to propagate across all networking devices in the bridged LAN that support Extended Filtering Services Note If GMRP is disabled the system does not forward GMRP messages set gmrp adminmode This command enables GARP Multicast Registration Protocol GMRP on the system Default disabled Format set gmrp adminmode Mode Privileged EXEC no set gmrp adminmode This command disables GARP Multicast Registration Protocol GMRP on the system Format no set gmrp adminmode Mode Privileged EXEC set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a single interface Interface Config mode or all interfaces Global Config mode If an interface which has GARP enabled is enabled for routing or is enlisted as a member of a port channel LAG
57. Unicast Packets Received The number of subnetwork unicast packets delivered to a higher layer protocol Multicast Packets Received The total number of good packets received that were directed to a multicast address Note that this number does not include packets directed to the broadcast address Broadcast Packets Received The total number of good packets received that were directed to the broadcast address Note that this does not include multicast packets Utility Commands 338 M4100 Series ProSAFE Managed Switches Term Definition Receive Packets Discarded The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher layer protocol One possible reason for discarding such a packet could be to free up buffer space Packets Received with MAC Errors Total Packets Received with MAC Errors The total number of inbound packets that contained errors preventing them from being deliverable to a higher layer protocol Jabbers Received The total number of packets received that were longer than 1518 octets excluding framing bits but including FCS octets and had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets Alignment Error Note that this definition of jabber is different than the definition in IEEE 802 3 section 8 2 1 5 10BASE5 and sec
58. Use this command to remove the IP address from the previously configured list The no command without an lt ip address gt argument removes the entire list of helper addresses on that interface Format no ip helper address lt ip address gt lt dest udp port gt dhcp domain isakmp mobile ip nameserver netbios dgm netbios ns ntp pim auto rip rip tacacs tftp time GlobalConfig ip helper enable Use this command to enable relay of UDP packets This command can be used to temporarily disable IP helper without deleting all IP helper addresses This command replaces the bootpdhcprelay enable command but affects not only relay of DHCP packets but also relay of any other protocols for which an IP helper address has been configured Default disabled Format ip helper enable no ip helper enable Use this command to disable relay of all UDP packets Format no ip helper enable Mode Global Config ip helper address Interface Config Use this command to add a unicast helper address to the list of helper addresses on an interface This is the address of a DHCP server This command can be applied multiple times on the routing interface to form the helper addresses list until the list reaches the maximum supported helper addresses Default No helper addresses are configured Format ip helper address lt ip address gt lt dest udp port gt dhcp domain isakmp mobile i
59. aii ii a A eaesad eeanrnaadd 454 LEMECCONTIMEOUL essa ariadna ie 455 terminal lengtes ses ipisaritaris deis at dada ea ditatetedadatag 351 timeout CTACACS Config aras E A 517 UNES tot e EEN aden Sig E taa 309 LACT OS sss te hom be SB are ra EEE eens eres Gixk ate nb oe rte B Bo eE E E E Sear deb ara Seales 365 traceroute IPVG decere eteicemtnaunsepeoeminneeeeee eh aokd aba haciadeude sus Powineddde hoe tae eee 367 tales happen EE E EE ptes 267 tansportinput telnet coxe dada dos pes id pes 453 transport outp ttelnet sirceracscorbe rra 453 udldenable Global Comi besan iii nee dido 438 tidld enable Interface Config wissrcwmsergacesdees ad oyenrdoaahenrhareageeueseeeaeenanegewens 439 udldmessage time s 52 2 5 reiaidaduedsesuimoousssienedhaseeeiawgadududeeseeere oa 438 Teleno e a AE E E E E E E EE 4 vse Aro day DROS UEEEEEETER Gow ood ere yes ae 439 O 439 tidlditimeoutimterval ocrcinras rara 438 Update DOOLCOdE eiii RRA 333 username Global CONTIG soon add e eds 468 user ame Mail Server Conflicto acabo dai SOG et alas ems 364 Username MAME NOPASSWOME sion cannot deberia 469 USERNAME SHMPVSACCESSIMODS ausosaidaa decret di a 470 USERNAME SNMPVS authentication osorno dape 470 USERNAME SAMPV SIENEHY PON sucre rr rs 471 577 M4100 Series ProSAFE Managed Switches USERMAMEIUIMIGER 6 6 2 5 4 4 5 ira id ea aid 469 A Ste ela hr sr Benen ces E greening Brahh Seah arpa E E EEEE RE Ragas 47 Vian Private VLAN casa daca atacacados
60. all interfaces The Group Membership Interval time is the amount of time in seconds that a switch waits for a report from a particular group on a particular interface before deleting the interface from the entry This value must be greater than the IGMPv3 Maximum Response time value The range is 2 3600 seconds Default 260 seconds Format set igmp groupmembership interval lt 2 3600 gt Mode Interface Config e Global Config Format set igmp groupmembership interval lt vlan id gt lt 2 3600 gt Mode VLAN Config no set igmp groupmembership interval This command sets the IGMPv3 Group Membership Interval time to the default value Format no set igmp groupmembership interval Mode e Interface Config e Global Config Format no set igmp groupmembership interval lt vlan id gt Mode VLAN Config set igmp maxresponse This command sets the IGMP Maximum Response time for the system or on a particular interface or VLAN The Maximum Response time is the amount of time in seconds that a switch will wait after sending a query on an interface because it did not receive a report for a particular group in that interface This value must be less than the IGMP Query Interval time value The range is 1 25 seconds Default 10 seconds Format set igmp maxresponse lt 1 25 gt Mode e Global Config Interface Config Format set igmp maxresponse lt vlan id gt lt 1 25 gt Mode
61. d 02X 02X 002X 002X 02X 02X Mismatch between the gmd gmrp database and MFDB GARP GVRP GMRP gmd_create_entry GMRP failure adding MFDB entry vlan d and address s MFDB table is full Log Messages 544 M4100 Series ProSAFE Managed Switches Table 27 802 3ad Log Messages Component Message Cause 802 3ad dot3adReceiveMachine received default Received a LAG PDU and the RX state event x machine is ignoring this LAGPDU 802 3ad dot3adNimEventCompletionCallback The event sent to NIM was not completed dot3adNimEventCreateCompletionCallbac successfully k DOT3AD notification failed for event d intf d reason d Table 28 FDB Log Message Component Message Cause FDB fdbSetAddressAgingTimeOut Failure Unable to set the age time in the hardware setting fid d address aging timeout to d Table 29 Double VLAN Tag Log Message Component Message Cause Double Vian Tag dvlantagIntflsConfigurable Error accessing A default configuration does not exist for dvlantag config data for interface d this interface Typically a case when a new interface is created and has no pre configuration Table 30 IPv6 Provisioning Log Message Component Message Cause IPV6 Provisioning ipv6ProvintflsConfigurable Error accessing A default configuration does not exist for IPv6 Provisioning config data for interface this interface Typically a cas
62. e Static Power Management Available power power limit of the source total allocated power where total allocated power is calculated as the power limit configured on the port e Dynamic Power Management Available power power limit of the source total allocated power where total allocated power is calculated as the amount of power consumed by the port For example assume that the power limit of the source is 300 watts One port is powered up and is drawing 3 watts of power The power limit defined on the port is user defined as 15 watts In this case the available power for static and dynamic would be as follows Static Power Management Available power 300 watts 15 watts 285 watts e Dynamic Power Management Available power 300 watts 3 watts 297 watts Default dynamic Format poe power management lt unit gt all dynamic static Mode Global Config no poe power management Use this command to set the power management mode to the default Format no poe power management lt unit gt all Mode Global Config poe priority Use this command to configure the priority on a specific port This is used for power management purposes The switch might not be able to supply power to all connected devices so the port priority is used to determine which ports will supply power if adequate power capacity is not available for all enabled ports For ports that have the same priority level
63. host table A retry will be issued OS USL failed to sync L3 Intf table on unit x Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued OS USL failed to sync L3 Host table on unit x Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued Log Messages 555 M4100 Series ProSAFE Managed Switches Table 54 System General Error Messages Component Message Cause USL failed to sync L3 Route table on unit Xx USL failed to sync initiator table on unit x USL failed to sync terminator table on unit x USL failed to sync ip multicast table on unit x O S Support Table 55 OSAPI Log Messages Component Message Cause Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued ftruncate failed File resides on a read only file system ftruncate failed File is open for reading only ftruncate is called to
64. invalid event XXXX indicates the event to be dispatched SSLT ssltApiCnfgrCommand Failed calling Failed to send the message to the SSLT ssltlssueCmd message queue SSLT SSLT Error loading certificate from file Failed while loading the SSLcertificate from XXXX specified file XXXX indicates the file from where the certificate is being read SSLT SSLT Error loading private key from file Failed while loading private key for SSL connection SSLT SSLT Error setting cipher list no valid Failed while setting cipher list ciphers SSLT SSLT Could not delete the SSL Failed to delete SSL semaphores during semaphores cleanup of all resources associated with the OpenSSL Locking semaphores Log Messages 540 M4100 Series ProSAFE Managed Switches Table 20 User_Manager Log Messages Component Message Cause User_Manager User Login Failed for XXXX Failed to authenticate user login XXXX indicates the user name to be authenticated User_Manager Access level for user XXXX could not be Invalid access level specified for the user determined Setting to READ_ONLY The access level is set to READ_ONLY XXXX indicates the user name User_Manager Could not migrate config file XXXX from Failed to migrate the config file XXXX is version YYYY to ZZZZ Using defaults the config file name YYYY is the old version number and ZZZZ is the new version number Switching Table 21 Protected Ports Log Messages
65. lt 1 4294967295 gt Modes e Global Config e Interface Config no ipv6 traffic filter This command removes an IPv6 ACL identified by lt name gt from the interface or interfaces in a specific direction no ipv6 traffic filter lt name gt in vlan lt vlan id gt in e Global Config Interface Config show ipv6 access lists This command displays an IPv6 access list and all of the rules that are defined for the IPv6 ACL Use the lt name gt parameter to identify a specific IPv6 ACL to display Format show ipv6 access lists lt name gt Mode Privileged EXEC Rule Number The ordered rule number identifier defined within the IPv6 ACL The action associated with each rule The possible values are Permit or Deny Match All Indicates whether this access list applies to every packet Possible values are True or False Protocol The protocol to filter for this rule Source IP The source IP address for this rule Address Source L4 Port The source port for this rule Keyword Destination IP The destination IP address for this rule Address Destination L4 The destination port for this rule Port Keyword IP DSCP The value specified for IP DSCP Flow Label The value specified for IPv6 Flow Label Quality of Service Commands 308 M4100 Series ProSAFE Managed Switches Term Definition Log Displays when you enable logging for the rule Assign Queue The queu
66. lt count gt Mode Interface Config no dot1x max users This command resets the maximum number of clients allowed per port to its default value Format no dotlx max req Mode Interface Config dot1x port control This command sets the authentication mode to use on the specified port Select force unauthorized to specify that the authenticator PAE unconditionally sets the controlled port to unauthorized Select force authorized to specify that the authenticator PAE unconditionally sets the controlled port to authorized Select auto to specify that the authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant authenticator and the authentication server If the mac based option is specified MAC based dot1x authentication is enabled on the port Default auto Format dot1x port control force unauthorized force authorized auto mac based Mode Interface Config no dot1x port control This command sets the 802 1x port control mode on the specified port to the default value Format no dot1x port control Mode Interface Config dot1x port control all This command sets the authentication mode to use on all ports Select force unauthorized to specify that the authenticator PAE unconditionally sets the controlled port to unauthorized Select force authorized to specify that the authenticator PAE unconditionally sets the controlled port to authori
67. lt list name gt Mode e Line console e Line telnet e Line SSH no authorization console Telnet SSH This command is used to remove command authorization from a line configuration mode Format no authorization commands exec e Line console e Line telnet e Line SSH show authorization methods This command displays the configured authorization method lists Format show authorization methods Privileged EXEC Command example NETGEAR Switch show authorization methods Command Authorization List Method df1tCmdAuthList none undefined undefined undefined Line Command Method List Console df1tCmdAuthList Telnet df1tCmdAuthList SSH df1tCmdAuthList Management Commands 487 M4100 Series ProSAFE Managed Switches Exec Authorization List Method dfltExecAuthList none undefined undefined undefined Line Exec Method List Console dfltExecAuthList Telnet dfltExecAuthList SSH dfltExecAuthList domain name Global Config The managed switch supports authentication based on domain name in addition to the user name and password This command allows the switch to be configured in a domain Users can enable or disable domain functionality Domain enabled In this case when the user enters only the user name the managed switch sends the domain name that is configured on the switch and the user name that the user enters in the format domainnamelusername to the RADIUS server If the use
68. no SNMP requests using this community are accepted In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable Format no snmp server community mode lt name gt snmp server community ro Use this command to restrict access to switch information The access mode is read only also called public Format snmp server community ro lt name gt Mode Global Config Management Commands 493 M4100 Series ProSAFE Managed Switches snmp server community rw Use this command to restrict access to switch information The access mode is read write also called private Format snmp server community rw lt name gt Mode Global Config snmp server enable traps violation Use this command to enable sending new violation traps designating when a packet with a disallowed MAC address is received on a locked port Note For other port security commands see Protected Ports Commands on page 68 Default disabled Format snmp server enable traps violation Mode Interface Config no snmp server enable traps violation Use this command to disable sending new violation traps Format no snmp server enable traps violation Interface Config snmp server enable traps Use this command to enable the Authentication Flag Defaut Format snmp server enable traps Mode Global Config no snmp server en
69. otherwise the switch rejects the change You can remove a class reference from a class definition The only way to remove an individual match criterion from an existing class definition is to delete the class and re create it Note The mark possibilities for policing include CoS IP DSCP and IP Precedence While the latter two are only meaningful for IP packet types CoS marking is allowed for both IP and non IP packets since it updates the 802 1p user priority field contained in the VLAN tag of the layer 2 packet header diffserv This command sets the DiffServ operational mode to active While disabled the DiffServ configuration is retained and can be changed but it is not activated When enabled DiffServ services are activated Format diffserv Mode Global Config Quality of Service Commands 271 M4100 Series ProSAFE Managed Switches no diffserv This command sets the DiffServ operational mode to inactive While disabled the DiffServ configuration is retained and can be changed but it is not activated When enabled DiffServ services are activated Format no diffserv Mode Global Config DiffServ Class Commands Use the DiffServ class commands to define traffic classification To classify traffic you specify Behavior Aggregate BA based on DSCP and Multi Field MF classes of traffic name match criteria This set of commands consists of class creation deletion and matching with th
70. queries It can be configured using the appropriate command Shows the amount of time in seconds that a Snooping Querier waits before sending out the periodic general query Displays the amount of time to wait in the Non Querier operational state before moving to a Querier state When you specify a value for vlania the following information appears Term Description VLAN Admin Mode Indicates whether MLD Snooping Querier is active on the VLAN VLAN Operational State Operational Max Response Time Indicates whether MLD Snooping Querier is in Querier or Non Querier state When the switch is in Querier state it will send out periodic general queries When in Non Querier state it will wait for moving to Querier state and does not send out any queries Indicates the time to wait before removing a Leave from a host upon receiving a Leave request This value is calculated dynamically from the Queries received from the network If the Snooping Switch is in Querier state then it is equal to the configured value Switching Commands 177 M4100 Series ProSAFE Managed Switches Term Description Querier Election Indicates whether the MLD Snooping Querier participates in querier election if it Participate discovers the presence of a querier in the VLAN Querier VLAN The IP address will be used in the IPv6 header while sending out MLD queries on this Address VLAN It can
71. remote vlan lt vlan id gt rx tx destination interface lt slot port gt remote vlan lt vlan id gt reflector port lt slot port gt mode Mode Global Config Command example To configure the RSPAN VLAN source monitor session lt session id gt source interface lt slot port gt vlan lt vlan id gt remote vlan lt vian id gt rx tx Command example To the configure RSPAN VLAN destination monitor session lt session id gt destination interface lt slot port gt remote vlan lt vlan 1d gt reflector port lt slot port gt Switching Commands 126 M4100 Series ProSAFE Managed Switches no monitor session Use this command without optional parameters to remove the monitor session port monitoring designation from the source probe port the destination monitored port and all VLANs Once the port is removed from the VLAN you must manually add the port to any desired VLANs Use the source interface lt slot port gt parameter or destination interface to remove the specified interface from the port monitoring session Use the mode parameter to disable the administrative mode of the session Note Because the current version of NETGEAR Managed Switch SMB software only supports one session if you do not supply optional parameters the behavior of this command is similar to the behavior of the no monitor command Format no monitor session lt session id gt source interface lt slot port g
72. the lower numbered port will have higher priority There are three options e cerit Critical priority e high High priority e low Low priority Power over Ethernet Commands 321 M4100 Series ProSAFE Managed Switches Default low Format poe priority crit high low Mode e Global Config Interface Config no poe priority Use this command to set the priority to the default Format no poe priority Mode e Global Config Interface Config poe reset Use this command to reset the PoE state of every port in global mode or a specific port in interface mode When the PoE port status is shown to be in an error state this command can be used to reset the PoE port The command can also reset the power delivering ports Note that this command takes effect only once after it is executed and cannot be saved across power cycles Format poe reset Mode e Global Config Interface Config poe timer schedule name Use this command to allow you to attach a timer schedule to a PoE port You can define a time schedule using the existing time range commands This schedule has start and stop times When this timer schedule is applied to a PoE enabled port the capability of the port to deliver power is affected At the scheduled start time the PoE port is disabled such that it cannot deliver any power At the scheduled stop time the PoE port is reenabled so that it can deliver power Note For infor
73. this output line is replaced with a Global Config indication Interface The maximum transmission bandwidth limit for the interface as a whole It is independent Shaping Rate of any per queue maximum bandwidth value s in effect for the interface This is a configured value show interfaces random detect This command displays the global WRED settings for each CoS queue If you specify the slot port the command displays the WRED settings for each CoS queue on the specified interface Format show interfaces random detect lt slot port gt Mode Privileged EXEC An interface supports n queues numbered 0 to n 1 The specific n value is platform dependent WRED Minimum The configured minimum threshold the queue depth as a percentage where WRED Threshold starts marking and dropping traffic WRED Maximum The configured maximum threshold is the queue depth as a percentage above which Threshold WRED marks drops all traffic WRED Drop The configured percentage probability that WRED will mark drop a packet when the Probability queue depth is at the maximum threshold The drop probability increases linearly from 0 just before the minimum threshold to this value at the maximum threshold then goes to 100 for larger queue depths Differentiated Services DiffServ Commands This section describes the commands you use to configure QOS Differentiated Services DiffServ You configure DiffServ in several
74. 0 to 7 or symbolically through one of the following keywords emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 or debug 7 Specify none to indicate that log messages are collected and sent in a batch email at a specified interval Default Alert 1 and emergency 0 messages are sent immediately Format logging email urgent lt severitylevel gt none Mode Global Config no logging email urgent This command resets the urgent severity level to the default value Format no logging email urgent Mode Global Config logging email message type to addr This command configures the email address to which messages are sent The message types supported are urgent non urgent Or both For each supported severity level multiple email addresses can be configured The lt to emai 1 addr gt variable is a standard email address for example admin yourcompany com Format logging email message type urgent non urgent both to addr lt to email addr gt Mode Global Config Utility Commands 359 M4100 Series ProSAFE Managed Switches no logging email message type to addr This command removes the configured to addr field of email Format no logging email message type urgent non urgent both to addr lt to email addr gt Mode Global Config logging email from addr This command configures the email address of the sender tha
75. 1 Web MO Gia tio 2 eile cs aa a ia lied al ae Enable Java MODS cr AS A a Weta SS Enable Console Port Access Commands This section describes the commands you use to configure the console port You can use a serial cable to connect a management host directly to the console port of the switch configuration Use this command to access Global Config mode From Global Config mode you can configure various system settings including user accounts You can also enter other command modes including Line Config mode Format configuration Mode Privileged EXEC line Use this command to access Line Config mode which allows you to configure various Telnet settings ssh settings and the console port Format line console telnet ssh Mode Global Config Management Commands 449 M4100 Series ProSAFE Managed Switches serial baudrate Use this command to specify the communication rate of the terminal interface The supported rates are 1200 2400 4800 9600 19200 38400 57600 115200 Default 115200 Format serial baudrate 1200 2400 4800 9600 19200 38400 57600 115200 Mode Line Config no serial baudrate Use this command to set the communication rate of the terminal interface Format no serial baudrate Mode Line Config serial timeout Use this command to specify the maximum connect time in minutes without console activity A value of 0 indicates tha
76. 120 M4100 Series ProSAFE Managed Switches Default enabled Format port channel linktrap lt slot port gt lag lt lag group id gt all Mode Global Config no port channel linktrap This command disables link trap notifications for the port channel LAG The interface is a logical slot and port for a configured port channel The option a11 disables link trap notifications for all the configured port channels Format no port channel linktrap lt slot port gt lag lt lag group id gt all Mode Global Config port channel load balance This command selects the load balancing option used on a port channel LAG Traffic is balanced on a port channel LAG by selecting one of the links in the channel over which to transmit specific packets The link is selected by creating a binary pattern from selected fields in a packet and associating that pattern with a particular link Load balancing is not supported on every device The range of options for load balancing can vary per device The switch also supports enhanced hashing mode which has the following advantages e MODULO N where N is the number of active link members in a LAG operation based on the number of ports in the LAG e Packet attributes selection based on the packet type For L2 packets source and destination MAC address are used for hash computation For L3 packets source IP destination IP address TCP UDP ports are used e No
77. 49 IGMP Proxy Log Messages Component Message Cause IGMP Proxy Error getting memory for igmp host group When we are unable to allocate memory for record the IGMP group record in the Host Proxy table IGMP Proxy Error getting memory for source record When we are unable to allocate memory for the IGMP source record in the Host Proxy table Table 50 PIM SM Log Messages Component Message Cause PIM SM PIM SM not initialized This message arises when trying to activate pimsm interfaces or receiving pimsm packets when pimsm component is not initialized PIM SM Unable to take xxx semaphore This message is logged when failed to acquire semaphore to access source list or group list or candidate Rp list or virtual interface list The xxx specifies the list for which the access is denied PIM SM Warning Could not send packet type xxx this warning is logged when failed to send a pimsm packet type on rtrifNum pimsm control packet on the specified router interface PIM SM add_kernel_cache memory allocation This message is logged when there is failed insufficient memory to add a mroute entry into cache PIM_SM Config error Trying to add static RP Router learns RP group mapping through Dynamic RP with same ip addr exists Bootstrap messages received This message pops when the static RP is configured which conflicts the mapping learnt dynamically through Bootstrap messages PIM SM Inner xxx source group address of
78. A A A AE TEN 236 PO aaa O anes 433 mon colection Sto sistiese nia as lr ds lis 435 FIMOM CVGNE omar gina AS il AAA in a 435 mon ica OA 434 FOULING 6 26 sccis sii emcee AA A de eee 234 SAVE erre NANA as 371 SENEE o AEEA LEATA A da reine br iii dde cercar i se 519 sept delte iodo A e aaa 519 SEPSA A dado alae Rae aiblanns eagle was Backs Bates 519 SEMPLE SNOW sio orar IIA AAA AAA AA ea 520 Script Validate 2200003 ii AA 520 security MailServer COMO nirraniaca tera A 363 seriallbaudrate seeder sidad eddie pida 450 serial HIME OU ss asa 450 service NED voor RAEE A ne CESSES ERO MRR ER REE 390 SERVICE PONGY euro a be e e do iia 286 A A ade ReleGGEG6GS665855959555 a4 dose ERE ETORIHSEITET9043RH 454 SESSION UNNGCOUEs 2404 ch ed aca ds saca dais dica 454 SEVEIDANNEN ri SINS ETT 521 set ganp MEN JOM sis e tit Cid a s de AAA EA al de 74 set garptmernicaVe sebas vc ea 74 Set Garp timer leavealll vocoder rad rr RODEO 75 set QMAPAUMINMOE 2 02 c c00reersonad na niti ini idiin e a a 78 SEU OMAP inteniacomode seann ea Fossil EAS as 78 set GVIDAdMINMOdE dd A Ar 76 set OVTpintertacemode soso aiii ad dads it 77 SEUIGIND privar E LAA e aa 155 setigmp taste ave sarema eeen sea sada dha deuGaduGudhereweUer Giese seseadacwae 156 set igmp groupmembership interVal c ccccicieneecececreres orca ge dees eeFEsGbau sess eee siesencoa 157 Set igmp Neader ValidatiOM sec srorii a riera donde pits 160 setigmpinterfacemode ves ocios iia er ettr
79. DHCP client requests relayed to a DHCP server This information is included in DHCP Option 60 Vendor Class Identifier The information is a string of 128 octets dhcp client vendor id option Use this command to enable the inclusion of DHCP Option 60 Vendor Class Identifier included in the requests transmitted to the DHCP server by the DHCP client operating in the switch Format dhcp client vendor id option no dhcp client vendor id option Use this command to disable the inclusion of DHCP Option 60 Vendor Class Identifier included in the requests transmitted to the DHCP server by the DHCP client operating in the switch Format no dhcp client vendor id option Mode Global Config dhcp client vendor id option string Use this command to set the DHCP Vendor Option 60 string to be included in requests transmitted to the DHCP server by the DHCP client operating in the switch Format ncp client vendor id option string lt string gt Mode Global Config no dhcp client vendor id option string Use this command to clear the DHCP Vendor Option 60 string Format no dhcp client vendor id option string Mode Global Config Switching Commands 137 M4100 Series ProSAFE Managed Switches show dhcp client vendor id option Use this command to display the configured administration mode of the vendor id option and the vendor id string to be included in Option 43 in DHCP requests
80. DHCP messages filtration by the DHCP Snooping application Format fro ip dhcp snooping log invalid Mode Interface Config ip dhcp snooping trust Use this command to configure the port as trusted Default disabled Format ip dhcp snooping trust Interface Config Switching Commands 141 M4100 Series ProSAFE Managed Switches no ip dhcp snooping trust Use this command to configure the port as untrusted Format no ip dhcp snooping trust Mode Interface Config ip verify source Use this command to configure the IPSG source ID attribute to filter the data traffic in the hardware Source ID is the combination of IP address and MAC address Normal command allows data traffic filtration based on the IP address With the port security option the data traffic will be filtered based on the IP and MAC addresses Default The source ID is the IP address Format ip verify source port security Mode Interface Config no ip verify source Use this command to disable the IPSG configuration in the hardware You cannot disable port security alone if it is configured Format no ip verify source Mode Interface Config show ip dhcp snooping Use this command to display the DHCP Snooping global configurations and per port configurations Format show ip dhcp snooping Mode e Privileged EXEC e User EXEC Term Definition Interface The interface for which data is dis
81. Definition Interface Valid slot and port number separated by forward slashes Media Type Copper or Fiber for combo port STP Mode Indicate the spanning tree mode of the port Either Auto or fixed speed and duplex mode Physical Status The actual speed and duplex mode Link Status Loop Status Whether the link is Up or Down Whether the port is in loop state or not Partner Flow Control Whether the remote side is using flow control or not Switching Commands 25 M4100 Series ProSAFE Managed Switches Loopback Interface Commands The commands in this section describe how to create delete and manage loopback interfaces A loopback interface is always expected to be up This interface can provide the source address for sent packets and can receive both local and remote packets The loopback interface is typically used by routing protocols To assign an IP address to the loopback interface see ip address on page 234 interface loopback Use this command to enter the Interface Config mode for a loopback interface The range of the loopback ID is 0 7 Format interface loopback lt loopback id gt Mode Global Config no interface loopback This command removes the loopback interface and associated configuration parameters for the specified loopback interface Format no interface loopback lt loopback 1d gt Mode Global Config show interface
82. Detect Opr Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Inactive Short Reach Config Auto Forced Short Reach Opr show green mode 0 25 Admin MOE a ci iia Enabled Transmit Idle Ti ns dis aia 0 Transmit Wake Til imitacion eee iaa 0 Rx Low Power Idle Event Count 0 Rx Low Power Idle Duration uSec 0 Tx Low Power Idle Event Count 0 Tx Low Power Idle Duration uSec 0 TW Sys tx USEC ui iva iaa XX Tw_sys tx Echo USEC wc ccs deed wee eee aes XX TW SY SEX USEC oh se dace eee Bie wale ae a XX Tw sys rx Echo USEC wes ee eee XX Fallback Tw_SYS USEC o XX TX DEL nal diras dad dove na Yes TX DLE A ae ee ee er RC a a E a Yes Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Green Ethernet Commands 529 M4100 Series ProSAFE Managed Switches Rx DEL enabled sanae aa e Ea Yes RX DLL CAA Ya ia s e eed 0 aaa Gaeta Gass a Tea es B A E Yes Cumulative Energy Saving W H XX Time Since Counters Last Cleared 1 day 20 hr 47 min 34 sec green mode eee
83. EXEC arp resptime This command configures the ARP request response time out The value for lt seconds gt is a valid positive integer which represents the IP ARP entry response time out time in seconds The range for lt seconds gt is between 1 10 seconds Default 1 Format arp resptime lt seconds gt Mode Global Config no arp resptime This command configures the default ARP request response time out Format no arp resptime Mode Global Config arp retries This command configures the ARP count of maximum request for retries The value for lt retries gt is an integer which represents the maximum number of requests for retries The range for lt ret ries gt is an integer between 0 10 retries Default 4 Format arp retries lt retries gt Routing Commands 230 M4100 Series ProSAFE Managed Switches no arp retries This command configures the default ARP count of maximum request for retries Format no arp retries Mode Global Config arp timeout This command configures the ARP entry ageout time The value for lt seconds gt is a valid positive integer which represents the IP ARP entry ageout time in seconds The range for lt seconds gt is between 15 21600 seconds Default 1200 Format arp timeout lt seconds gt Mode Global Config no arp timeout This command configures the default ARP entry ageout time Format no arp tim
84. EXEC User EXEC Term Definition OUI OUI of the source MAC address Status Default or Configured entry OUI Description Description of the OUI Command example Netgear Switch show auto voip oui table OUI Status Description 00 01 E3 Default SIEMENS 00 03 6B Default CISCO1 00 01 01 Configured VoIP phone Quality of Service Commands 316 Power over Ethernet Commands 6 This chapter contains the following sections e About PoE PoE Commands 317 M4100 Series ProSAFE Managed Switches About PoE Power over Ethernet PoE describes a technology to pass electrical power safely along with data on existing Ethernet cabling The PSE or power supply equipment is the device or switch that delivers electrical power and the PD or powered device is the end device that powers up through the power delivered along the Ethernet cable This technology is governed by two standards e IEEE 802 3af 2003 This is the original standard also known as the low power standard which mandates delivery of up to 15 4 watts by the PSE Because of power dissipation only 12 95 watts are assured to be available at the powered device PD The PD needs to be designed so that it can accept power over Ethernet cabling Category 3 cables can be used to deliver power to the PD However with the advent of 802 11n the newer wireless APs required more power To account for this a newer standard was developed in 2009 know
85. Energy detect Config Energy detect Admin mode is enabled or disabled Energy detect Opr Energy detect mode is currently active or inactive The energy detect mode might be administratively enabled but the operational status might be inactive EEE EEE Config EEE Admin Mode is enabled or disabled Global Cumulative Energy Estimated cumulative energy saved per stack in watts hours due to all green Saving per Stack modes enabled Current Power Power consumption by all ports in stack in mWatts Consumption per Stack Power Saving Estimated percentage power saved on all ports in stack due to green mode s enabled Unit index of the stack member Green Ethernet Features List of green features supported on the unit which could be one or more of the supported following Energy Detect Energy Detect Short Reach Short Reach EEE Energy Efficient Ethernet LPI History EEE Low Power Idle History LLDP Cap Exchg EEE LLDP Capability Exchange Pwr Usg Est Power Usage Estimates The following table shows the fields that display if you specify a slot and port Field Definition Energy detect admin Energy detect mode is enabled or disabled mode Energy detect Energy detect mode is currently active or inactive The energy detect mode might be operational status administratively enabled but the operational status might be inactive The reasons for the same are described below Green Ethernet Comm
86. Exec Switching Commands 194 M4100 Series ProSAFE Managed Switches Term Definition Fast Start The number of LLDP PDUs that will be transmitted when the protocol is enabled Repeat Count Device Class The local device s MED Classification There are four different kinds of devices three of them represent the actual end points classified as Class Generic IP Communication Controller etc Class Il Media Conference Bridge etc Class III Communication IP Telephone etc Class IV Network Connectivity Device which is typically a LAN Switch Router IEEE 802 11 Wireless Access Point etc Command example NETGEAR Switch show lldp med LLDP MED Global Configuration Fast Start Repeat Count 3 Device Class Network Connectivity show lldp med interface Use this command to display a summary of the current LLDP MED configuration for a specific interface lt slot port gt indicates a specific physical interface a11 indicates all valid LLDP interfaces Format show lldp med interface lt slot port gt all Mode Privileged Exec Term Definition Interface The interface in a slot port format Link Shows whether the link is up or down ConfigMED Shows if the LLPD MED mode is enabled or disabled on this interface OperMED Shows if the LLPD MED TLVs are transmitted or not on this interface ConfigNotify Shows if the LLPD MED topology notification mode of this interface TLVs
87. Field Description VoIP The global VoIP VLAN ID Prioritize Type The type of prioritization used on voice traffic Quality of Service Commands 314 M4100 Series ProSAFE Managed Switches Field Description Class Value If the Prioritization Type is configured as traffic class this value is the queue value If the Prioritization Type is configured as remark this value is 802 1p priority used to remark the voice traffic Priority The 802 1p priority This field is valid for OUI auto VoIP AutoVolPMode The Auto VolP mode on the interface Command example NETGEAR Switch show auto voip protocol based interface all VOLBUVDAN Dis id ii adas ida e 2 PYLOETEUZA ELO TYPE atole so laa ia lora li traffic class CLASS MAL to as tala alto 7 Interface Auto VoIP Operational Status Mode 0 1 Disabled Down 0 2 Disabled Down 0 3 Disabled Down 0 4 Disabled Down Command example Netgear Switch show auto voip oui based interface all VOIP VLAN Tdi di RR a a Bae iaa 2 Pirity ss onae Saree Boa eae eel AE Se tea Maw 6 7 Interface Auto VoIP Operational Status ode 0 1 Disabled Down 0 2 Disabled Down 0 3 Disabled Down 0 4 Disabled Down 0 5 Disabled Down Quality of Service Commands 315 M4100 Series ProSAFE Managed Switches show auto voip oui table This command lists all of the configured OUls Format show auto voip oui table Mode e Privileged
88. GARP functionality is disabled on that interface GARP functionality is subsequently re enabled if routing is Switching Commands 78 M4100 Series ProSAFE Managed Switches disabled and port channel LAG membership is removed from an interface that has GARP enabled Default disabled Format set gmrp interfacemode Mode Interface Config e Global Config no set gmrp interfacemode This command disables GARP Multicast Registration Protocol on a single interface or all interfaces If an interface which has GARP enabled is enabled for routing or is enlisted as a member of a port channel LAG GARP functionality is disabled GARP functionality is subsequently re enabled if routing is disabled and port channel LAG membership is removed from an interface that has GARP enabled Format Mode no set gmrp interfacemode Interface Config Global Config show gmrp configuration This command displays Generic Attributes Registration Protocol GARP information for one or all interfaces Format show gmrp configuration lt slot port gt all Mode e Privileged EXEC User EXEC Term Definition Interface The slot port of the interface that this row in the table describes Join Timer The interval between the transmission of GARP PDUs registering or re registering membership for an attribute Current attributes are a VLAN or multicast group There is an instance of this timer on a per Po
89. Global Config set garp timer leaveall This command sets how frequently Leave All PDUs are generated A Leave All PDU indicates that all registrations will be unregistered Participants would need to rejoin in order to maintain registration The value applies per port and per GARP participation The time may range from 200 to 6000 centiseconds The value 1000 centiseconds is 10 seconds You can use this command on all ports Global Config mode or a single port Interface Config mode and it only has an effect only when GVRP is enabled Default 1000 Format set garp timer leaveall lt 200 6000 gt Mode Interface Config e Global Config no set garp timer leaveall This command sets how frequently Leave All PDUs are generated the default and only has an effect when GVRP is enabled Format no set garp timer leaveall Mode Interface Config e Global Config Switching Commands 75 M4100 Series ProSAFE Managed Switches show garp This command displays GARP information Format show garp Mode e Privileged EXEC e User EXEC GMRP Admin Mode The administrative mode of GARP Multicast Registration Protocol GMRP for the system GVRP Admin Mode The administrative mode of GARP VLAN Registration Protocol GVRP for the system GVRP Commands This section describes the commands you use to configure and view GARP VLAN Registration Protocol GVRP information GVRP enabl
90. IP Helper COMMANGS isc iii stars ICMP Throttling COmMANdS sicaskderestarddendetnr sen ss4eneess ean ke Chapter 5 Quality of Service Commands Class of Service CoS Commands 0 0 ccc ccc cee cee cece ee Differentiated Services DiffServ Commands 0 000 DiffServ Glass COMMANAS sca 50 4000n2danayeaanieiekersesesoeeeewees DiEESEFY Policy COMMAS 6 0 asec rca ea DiffServ Service Commands 00 0 ccc unrar ereere DiffServ Show ComimMandS vestida vda aba bac wees MAC Access Control List ACL Commands 0 00 00 0c cece ee eee IP Access Control List ACL Commands 02 0 ccc eee eee eee IPv6 Access Control List ACL Commands 0 00 00 cee ee eee Time Range Commands for Time Based ACLS 0 000 eee eee AULGVOIPCOMMANRES ssceesseti erres adcnuhiotiuckeemouened ae eene Reta Chapter 6 Power over Ethernet Commands ADOUL POE utorrent ridad cia tre POE COMMANGS deverian ie Chapter 7 Utility Commands Auto Install COMMANGS sesse rasejo krenienn rinne Pee ee OWES SESE SOOM ES Dualilimage CommMandSs vst s 24 sia stilo singe aay System Information and Statistics Commands 0000 eee o M4100 Series ProSAFE Managed Switches LOQging Commands coxctcsctaivsetocededacdceesiinmieeeasedecadasins 353 Email Alerting and Mail Server Commands 0 00055 358 System Utility and Clear Commands 0 0 c cece ee eee eee eee 365 Simple Network
91. IPv6 ACL identified by lt name gt from the system Format no ipv6 access list lt name gt Mode Global Config ipv6 access list rename This command changes the name of an IPv6 ACL The lt name gt parameter is the name of an existing IPv6 ACL The lt newname gt parameter is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IPv6 access list This command fails is an IPv6 ACL by the name lt newname gt already exists Format ipv6 access list rename lt name gt lt newname gt Mode Global Config deny permit IPv6 This command creates a new rule for the current IPv6 access list Each rule is appended to the list of configured rules for the list Note The no form of this command is not supported because the rules within an IPv6 ACL cannot be deleted individually Rather the entire IPv6 ACL must be deleted and respecified Quality of Service Commands 306 M4100 Series ProSAFE Managed Switches Note An implicit deny all IPv6 rule always terminates the access list A rule might either deny or permit traffic according to the specified classification fields Ata minimum either the every keyword or the protocol source address and destination address values must be specified The source and destination IPv6 address fields might be specified using the any keyword to indicate a match on any value in that field The remaining command parameters are all opti
92. Interface The interface whose configuration is displayed Control Mode The configured control mode for this port Possible values are force unauthorized force authorized auto mac based authorized unauthorized Operating The control mode under which this port is operating Possible values are authorized Control Mode unauthorized Reauthentication Indicates whether re authentication is enabled on this port Enabled Port Status Indicates whether the port is authorized or unauthorized Possible values are authorized unauthorized If you use the optional parameter detail lt slot port gt the detailed dot1x configuration for the specified port is displayed Port The interface whose configuration is displayed Protocol Version The protocol version associated with this port The only possible value is 1 corresponding to the first version of the dot1x specification PAE Capabilities The port access entity PAE functionality of this port Possible values are Authenticator or Supplicant Control Mode The configured control mode for this port Possible values are force unauthorized force authorized auto mac based Authenticator PAE Current state of the authenticator PAE state machine Possible values are Initialize Disconnected Connecting Authenticating Authenticated Aborting Held ForceAuthorized and ForceUnauthorized When MAC based authentication is enabled on the port this parameter is de
93. Ipi history Configure the global EEE LPI history collection interval and buffer size using this command This value is applied globally on all interfaces on the stack Note The sampling interval configured by the user takes effect immediately The current and future samples are collected at this new sampling interval Default sampling interval 3600 max samples 168 Format green mod lpi history sampling interval lt 30 36000sec gt max samples lt 1 168 gt Mode Global Config no green mode eee Ipi history Use this command to set the sampling interval or max samples values to defaults e sampling interval 3600 e max samples 168 Format fro green mod lpi history sampling interval max samples Mode Global Config show green mode eee Ipi history interface This command displays the interface green mode EEE LPI history show green mod lpi history interface lt slot port gt Privileged Exec Field Description Sampling Interval Interval at which EEE LPI statistics is collected Total No of Samples to Keep Maximum number of samples to keep Green Ethernet Commands 530 M4100 Series ProSAFE Managed Switches Field Description Percentage LPI time per stack Percentage of Total time spent in LPI mode by all port in stack when compared to total time since reset Sample No Sample Index Sample Time Time since last reset time spent in LPI mode sin
94. Keywords checking is enabled Management Commands 479 M4100 Series ProSAFE Managed Switches show passwords result Use this command to display the last password set result information Format show passwords result Privileged EXEC Term Definition Last User Whose Shows the name of the user with the most recently set password Password Is Set Password Strength Shows whether password strength checking is enabled Check Last Password Set Shows whether the attempt to set a password was successful If the attempt Result failed the reason for the failure is included aaa authentication login Use this command to set authentication at login The default and optional list names created with the command are used with the aaa authentication login command Create a list by entering the aaa authentication login list name method command where list name is any character string used to name this list The method argument identifies the list of methods that the authentication algorithm tries in the sequence The additional methods of authentication are used only if the previous method returns an error not if an authentication failure occurs To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line For example if none is specified as an authentication method after radius no authentication is used if the RADIUS server is down If you confi
95. Number of packets received with a checksum error ISDP Transmission Failure Number of packets which failed to transmit ISDP Invalid Format Number of invalid packets received ISDP Table Full Number of times a neighbor entry was not added to the table due to a full database ISDP IP Address Table Full Displays the number of times a neighbor entry was added to the table without an IP address debug isdp packet This command enables tracing of ISDP packets processed by the switch ISDP must be enabled on both the device and the interface in order to monitor packets for a particular interface Format debug isdp packet receive transmit Mode Privileged EXEC no debug isdp packet This command disables tracing of ISDP packets on the receive or the transmit sides or on both sides Format no debug isdp packet receive transmit Privileged EXEC Switching Commands 218 Multicast VLAN Registration Commands This chapter contains the following sections e About MVR MVR Commands M4100 Series ProSAFE Managed Switches About MVR Internet Group Management Protocol IGMP Layer 3 is widely used for IPv4 network multicasting In Layer 2 networks IGMP uses resources inefficiently For example a Layer 2 switch sends multicast frames to all ports even if there are receivers connected to only a few ports To address this problem the IGMP Snooping protocol was developed The problem still appears
96. ProSAFE Managed Switches dos control icmpv4 This command enables Maximum ICMPv4 Packet Size Denial of Service protections If the mode is enabled Denial of Service prevention is active for this type of attack If ICMPv4 Echo Request PING packets ingress having a size greater than the configured value the packets will be dropped if the mode is enabled Default disabled lt 512 gt Format dos control icmpv4 lt 0 16384 gt Mode Global Config no dos control icmpv4 This command disables Maximum ICMP Packet Size Denial of Service protections Format no dos control icmpv4 Mode Global Config dos control icmpv6 This command enables Maximum ICMPv6 Packet Size Denial of Service protections If the mode is enabled Denial of Service prevention is active for this type of attack If ICMPv6 Echo Request PING packets ingress having a size greater than the configured value the packets will be dropped if the mode is enabled Default disabled lt 512 gt Format dos control icmpv6 lt 0 16384 gt no dos control icmpv6 This command disables Maximum ICMP Packet Size Denial of Service protections Format no dos control icmpv6 Mode Global Config dos control icmpfrag This command enables ICMP Fragment Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having fragmented ICMP packets the packets will
97. Relayed Packets The number of packets discarded Discarded IP Helper Commands This section describes the commands to configure a DHCP relay agent with multiple DHCP server addresses per routing interface and to use different server addresses for client packets arriving on different interfaces on the relay agent clear ip helper statistics Use this command to reset the statistics displayed in the show ip helper statistics command to zero Format clear ip helper statistics Mode Privileged EXEC Routing Commands 254 M4100 Series ProSAFE Managed Switches ip helper address Global Config Use the Global Configuration ip helper address command to have the switch forward User Datagram Protocol UDP broadcasts received on an interface To disable the forwarding of broadcast packets to specific addresses use the no form of this command The ip helper address command forwards specific UDP broadcast from one interface to another You can define many helper addresses but the total number of address port pairs is limited to 128 for the whole device The setting of a helper address for a specific interface has precedence over a setting of a helper address for all interfaces e lt ip address gt is the destination broadcast or host address to be used when forwarding UDP broadcasts You can specify 0 0 0 0 to indicate not to forward the UDP packet to any host and enter 255 255 255 255 to broadcast the UDP packets to al
98. Routing Table Manager RTO no longer full Bad adds 10 Routing table contains 7999 best routes 7999 total routes Table 43 VRRP Log Messages When the number of best routes drops below full capacity RTO logs this notice The number of bad adds might give an indication of the number of route adds that failed while RTO was full but a full routing table is only one reason why this count is incremented Component Message Cause VRRP Changing priority to 255 for virtual router When the router is configured with the with VRID 1 on interface 0 1 address being used as the virtual router ID the router s priority is automatically set to the maximum value to ensure that the address owner becomes the VRRP master VRRP Changing priority to 100 for virtual router When the router is no longer the address with VRID 1 on interface 0 1 owner Switch CLI reverts the router s priority to the default VRRP vrrpPacketValidate Invalid TTL VRRP ignored an incoming message whose time to live TTL in the IP header was not 255 Table 44 ARP Log Message Component Message Cause ARP ARP received mapping for IP address xxx to MAC address yyy This IP address might be configured on two stations When we receive an ARP response with different MAC address from another station with the same IP address as ours This might be a case of misconfiguration Log Messages 550 M4100 Series ProSAFE
99. Sampling Rate The statistical sampling rate for packet sampling from this source A value of zero 0 disables sampling A value of N means that out of N incoming packets 1 packet will be sampled The range is 1024 65536 and 0 The default is O When you issue a show command for the sampling rate the configured sampling rate on an interface changes Each time that you configure a sampling rate a threshold value is calculated This threshold value is configured in the hardware register When you issue a show command for the sampling rate the threshold value is queried from the hardware and the sampling rate is calculated in the following way threshold value 2 24 sampling rate Because only an integer operation is supported the sampling rate is not the same as the configured value The following is an example configured sampling rate is 60000 threshold value 2 24 60000 279 from integer division recalculated sampling rate 2 24 279 60133 Maxheadersize The maximum number of bytes that should be copied from the sampler packet The range is 20 256 The default is 128 When set to zero 0 all the sampler parameters are set to their corresponding default value no sflow sampler Use this command to reset the sFlow sampler instance to the default settings Format no sflow sampler lt rcvr indx gt rate lt sampling rate gt maxheadersize lt size gt Interface Config Utility Commands 42
100. Service Commands 310 M4100 Series ProSAFE Managed Switches Format periodic lt frequency gt lt days of the week gt lt time gt to lt days of the week gt lt time gt Time Range Config no periodic Use this command to delete a periodic time entry from a time range Format no periodic lt frequency gt lt days of the week gt lt time gt to lt days of the week gt lt time gt Mode Time Range Config periodic time Use this command to configure the start or end time for the time range Format periodic start end time Mode Time Range Config show time range Use this command to display a time range and all the absolute periodic time entries that are defined for the time range Use the lt name gt parameter to identify a specific time range to display When lt name gt is not specified all the time ranges defined in the system are displayed Format show time range lt name gt Mode Privileged EXEC Term Definition Number of Time Ranges Number of time ranges configured in the system Time Range Name Name of the time range Time Range Status Status of the time range active inactive Absolute start Start time and day for absolute time entry Absolute end End time and day for absolute time entry Periodic Entries Number of periodic entries in a time range Periodic start Start time and day for periodic entry
101. T 00 00 00 00 00 09 1 2 3 4 dhcp snooping 3 0 1 00 00 00 00 00 0A 1 2 3 4 dhcp snooping 4 0 1 Dynamic ARP Inspection Commands Dynamic ARP Inspection DAI is a security feature that rejects invalid and malicious ARP packets DAI prevents a class of man in the middle attacks where an unfriendly station intercepts traffic for other stations by poisoning the ARP caches of its unsuspecting neighbors The miscreant sends ARP requests or responses mapping another station s IP address to its own MAC address DAI relies on DHCP snooping DHCP snooping listens to DHCP message exchanges and builds a binding database of valid MAC address IP address VLAN and interface tuples When DAI is enabled the switch drops ARP packets whose sender MAC address and sender IP address do not match an entry in the DHCP snooping bindings database You can optionally configure additional ARP packet validation Switching Commands 147 M4100 Series ProSAFE Managed Switches ip arp inspection vlan Use this command to enable Dynamic ARP Inspection on a list of comma separated VLAN ranges Default disabled Format ip arp inspection vlan lt vlan list gt Mode Global Config no ip arp inspection vlan Use this command to disable Dynamic ARP Inspection on a list of comma separated VLAN ranges Format no ip arp inspection vlan lt vlan list gt Mode Global Config ip arp inspection validate Us
102. The following output parameters are displayed Term Description System Priority The system priority assigned to the Aggregation Port Admin Key The administrative value of the Key Port Priority The priority value assigned to the Aggregation Port Admin State The administrative values of the actor state as transmitted by the Actor in LACPDUs show lacp partner Use this command to display LACP partner attributes The interface is a logical lt slot port gt for a configured port channel The option a11 displays the configuration for all the configured port channels Instead of lt slot port gt you can use lag lt lag group 1d gt as an alternate way to specify the LAG interface in which lt lag group id gt is the LAG port number Format show lacp partner lt slot port gt lag lt lag group id gt all Mode Privileged EXEC Switching Commands 123 M4100 Series ProSAFE Managed Switches The following output parameters are displayed Term Description System Priority The administrative value of priority associated with the Partner s System ID System ID The value representing the administrative value of the Aggregation Port s protocol Partner s System ID Admin Key The administrative value of the Key for the protocol Partner Port Priority The administrative value of the port priority for the protocol Partner Port ID The administrative value of the port number for the p
103. The manner in which IP address was assigned to the client show ip dhcp global configuration This command displays address bindings for the specific IP address on the DHCP server If no IP address is specified the bindings corresponding to all the addresses are displayed Format show ip dhcp global configuration Modes e Privileged EXEC e User EXEC Service DHCP The field to display the status of dhcp protocol Number of Ping The maximum number of Ping Packets that will be sent to verify that an ip address id not Packets already assigned Conflict Logging Shows whether conflict logging is enabled or disabled BootP Automatic Shows whether BootP for dynamic pools is enabled or disabled Utility Commands 392 M4100 Series ProSAFE Managed Switches show ip dhcp pool configuration This command displays pool configuration If a11 is specified configuration for all the pools is displayed Format show ip dhcp pool configuration lt name gt all Modes e Privileged EXEC User EXEC Field Definition Pool Name The name of the configured pool Pool Type The pool type Lease Time The lease expiration time of the IP address assigned to the client DNS Servers The list of DNS servers available to the DHCP client Default Routers The list of the default routers available to the DHCP client For the dynamic pool type the fields that are shown in the following table are d
104. Total Total number of LLDP packets received on the port Discards Total number of LLDP frames discarded on the port for any reason Errors The number of invalid LLDP frames received on the port Ageouts Total number of times a complete remote data entry was deleted for the port because the Time to Live interval expired TLV Discards The number of TLVs discarded TLV Unknowns Total number of LLDP TLVs received on the port where the type value is in the reserved range and not recognized TLV MED Total number of LLDP MED TLVs received on the local ports TVL802 1 Total number of 802 1 LLDP TLVs received on the local ports TVL802 3 Total number of 802 3 LLDP TLVs received on the local ports Switching Commands 187 M4100 Series ProSAFE Managed Switches show lldp remote device Use this command to display summary information about remote devices that transmit current LLDP data to the system You can show information about LLDP remote data received on all ports or on a specific port Format show lldp remote device lt slot port gt all Mode Privileged EXEC Local Interface The interface that received the LLDPDU from the remote device An internal identifier to the switch to mark each remote device to the system Chassis ID The ID that is sent by a remote device as part of the LLDP message it is usually a MAC address of the device Port ID The port number that transmitted the LLDPDU Syst
105. VLAN secondary vlan id Secondary isolated or community VLAN ID of a private VLAN mapping Defines the private VLAN mapping for promiscuous ports add Associates the secondary VLAN with the primary one remove Deletes the secondary VLANSs from the primary VLAN association lt secondary vlan list gt A list of secondary VLANs to be mapped to a primary VLAN no switchport private vlan This command is used to remove the private VLAN association or mapping from the port Format no switchport private vlan host association mapping Mode Interface Config Switching Commands 71 M4100 Series ProSAFE Managed Switches switchport mode private vlan This command is used to configure a port as a promiscuous or host private VLAN port Note that the properties of each mode can be configured even when the switch is not in that mode However they will only be applicable once the switch is in that particular mode Format switchport mode private vlan host promiscuous Mode Interface Config Default General Parameter Definition Configures an interface as a private VLAN host port It can be either isolated or community port depending on the secondary VLAN it is associated with promiscuous Configures an interface as a private VLAN promiscuous port The promiscuous ports are members of the primary VLAN no switchport mode This command is used to remove the private VLAN asso
106. a processing response larger than resources allow RADIUS RADIUS Could not allocate accounting Resource issue with RADIUS Client requestinfo service RADIUS RADIUS Could not allocate requestinfo Resource issue with RADIUS Client service RADIUS RADIUS osapiSocketRecvFrom returned Error while attempting to read data from the error RADIUS server RADIUS RADIUS Accounting Response failed to The RADIUS Client received an invalid validate id xxx message from the server RADIUS RADIUS User xxx needs to respond for An unexpected challenge was received for challenge a configured user RADIUS RADIUS Could not allocate a buffer for the Resource issue with RADIUS Client packet service RADIUS RADIUS Access Challenge failed to The RADIUS Client received an invalid validate id xxx message from the server RADIUS RADIUS Failed to validate The RADIUS Client received an invalid Message Authenticator id xxx message from the server RADIUS RADIUS Access Accpet failed to validate The RADIUS Client received an invalid id Xxx message from the server RADIUS RADIUS Invalid packet length xxx The RADIUS Client received an invalid message from the server RADIUS RADIUS Response is missing The RADIUS Client received an invalid Message Authenticator id xxx message from the server RADIUS RADIUS Server address does not match RADIUS Client received a server response configured server from an unconfigured ser
107. a specific switch port within the Common and Internal Spanning Tree The lt slot port gt is the desired switch port The following details are displayed on execution of the command Format show spanning tr interface lt slot port gt Mode e Privileged EXEC e User EXEC Term Definition Hello Time Admin hello time for this port Port Mode Enabled or disabled BPDU Guard Effect Enabled or disabled Root Guard Enabled or disabled Loop Guard Enabled or disabled TCN Guard Enable or disable the propagation of received topology change notifications and topology changes to other ports BPDU Filter Mode Enabled or disabled BPDU Flood Mode Enabled or disabled Auto Edge To enable or disable the feature that causes a port that has not seen a BPDU for edge delay time to become an edge port and transition to forwarding faster Port Up Time Since Time since port was reset displayed in days hours minutes and seconds Counters Last Cleared STP BPDUs Transmitted Spanning Tree Protocol Bridge Protocol Data Units sent STP BPDUs Received Spanning Tree Protocol Bridge Protocol Data Units received RSTP BPDUs Rapid Spanning Tree Protocol Bridge Protocol Data Units sent Transmitted RSTP BPDUs Received Rapid Spanning Tree Protocol Bridge Protocol Data Units received MSTP BPDUs Multiple Spanning Tree Protocol Bridge Protocol Data Units sent Transmitted MSTP BPDUs Received M
108. aa 2 IGMP Report VL Transmitted eaae eaaa la a a ee eee 0 IGMP Report V2 TRANSMIT CES ria oy cin Maier dee eine ated 3 EGMP gt Leave Transmitted ratere aia ania eye iaa era adios 1 IGMP Packet Receive Pal lUtS usadas ia aria atadas 0 EGMP Packet Transmit Mea Ir 6S iii di di a a aio 0 Multicast VLAN Registration Commands 226 Routing Commands This chapter describes the routing commands The chapter contains the following sections Address Resolution Protocol ARP Commands IP Routing Commands Virtual LAN Routing Commands DHCP and BOOTP Relay Commands IP Helper Commands ICMP Throttling Commands The commands in this chapter are in three functional groups Show commands display switch settings statistics and other information Configuration commands configure features and options of the switch Every switch command has a show command that displays the configuration setting Clear commands clear some or all of the settings to factory defaults 227 M4100 Series ProSAFE Managed Switches Address Resolution Protocol ARP Commands This section describes the commands you use to configure ARP and to view ARP information about the switch ARP associates IP addresses with MAC addresses and stores the information as ARP entries in the ARP cache arp This command creates an ARP entry The value for lt ipaddress gt is the IP address of a device on a subnet attached to an existing routing interface lt macaddr gt
109. are valid IP addresses each made up of four decimal bytes ranging from 0 to 255 IP address 0 0 0 0 is invalid Default none dns server lt address1 gt lt address2 gt lt address8 gt Mode DHCP Pool Config no dns server This command removes the DNS Server list Format no dns server Mode DHCP Pool Config Utility Commands 384 M4100 Series ProSAFE Managed Switches hardware address This command specifies the hardware address of a DHCP client Hardware address is the MAC address of the hardware platform of the client consisting of 6 bytes in dotted hexadecimal format Type indicates the protocol of the hardware platform It is 1 for 10 MB Ethernet and 6 for IEEE 802 Default ethernet Format hardware address lt hardwareaddress gt lt type gt Mode DHCP Pool Config no hardware address This command removes the hardware address of the DHCP client Format no hardware address Mode DHCP Pool Config host This command specifies the IP address and network mask for a manual binding to a DHCP client Address and Mask are valid IP addresses each made up of four decimal bytes ranging from 0 to 255 IP address 0 0 0 0 is invalid The prefix length is an integer from 0 to 32 Default none Format host lt address gt lt mask gt lt prefix length gt DHCP Pool Config no host This command removes the IP address of the DHCP client
110. authentication This method can be used in conjunction with any one of the existing methods such as local or radius e local Uses the local user name database for authentication none Uses no authentication radius Uses the list of all RADIUS servers for authentication Format aaa authentication dotlx default lt method1 gt lt method2 gt Mode Global Config Management Commands 482 M4100 Series ProSAFE Managed Switches no aaa authentication dot1x Use this command to remove the authentication at login Format no aaa authentication dotlx default Mode Global Config aaa accounting The command creates an accounting method list This list is identified by the default keyword or by a user specified lt 1ist name gt Accounting records when enabled for a line mode can be sent at both the beginning and at the end start stop or only at the end stop only If none is specified accounting is disabled for the specified list If tacacs is specified as the accounting method accounting records are notified to a TACACS server If radius is the specified accounting method accounting records are notified to a RADIUS server For the same set of accounting type and list name the administrator can change the record type or the methods list without having to first delete the previous configuration Note the following e A maximum of five accounting method lists can be created for each
111. be configured using the appropriate command Operational This version of IPv6 will be used while sending out MLD queriers on this VLAN Version Last Querier Indicates the IP address of the most recent Querier from which a Query was received Address Last Querier Indicates the MLD version of the most recent Querier from which a Query was received Version on this VLAN When the optional argument det ail is used the command shows the global information and the information for all Querier enabled VLANs Port Security Commands This section describes the commands you use to configure Port Security on the switch Port security which is also known as port MAC locking allows you to secure the network by locking allowable MAC addresses on a port Packets with a matching source MAC address are forwarded normally and all other packets are discarded Note To enable the SNMP trap specific to port security see snmp server enable traps violation on page 494 port security This command enables port locking at the system level Global Config or port level Interface Config Default disabled Format port security Mode e Global Config e Interface Config Switching Commands 178 M4100 Series ProSAFE Managed Switches no port security This command disables port locking for one Interface Config or all Global Config ports Format no port security Mode e Global Config Interface Config port se
112. be dropped if the mode is enabled Switching Commands 209 M4100 Series ProSAFE Managed Switches Default disabled Format dos control icmpfrag no dos control icmpfrag This command disabled ICMP Fragment Denial of Service protection Format fro dos control icmpfrag Mode Global Config show dos control This command displays Denial of Service configuration information Format show dos control Mode Privileged EXEC Note Not all messages below might be displayed for the M4100 series switches First Fragment May be enabled or disabled The factory default is disabled Mode Min TCP Hdr The factory default is 20 Size lt 0 255 gt ICMP Mode May be enabled or disabled The factory default is disabled Max ICMPv4 Pkt The range is 0 1023 The factory default is 512 Size Max ICMPv6 Pkt The range is 0 16384 The factory default is 512 Size ICMP Fragment May be enabled or disabled The factory default is disabled Mode L4 Port Mode May be enabled or disabled The factory default is disabled TCP Port Mode May be enabled or disabled The factory default is disabled UDP Port Mode May be enabled or disabled The factory default is disabled SIPDIP Mode May be enabled or disabled The factory default is disabled Switching Commands 210 M4100 Series ProSAFE Managed Switches TCP Flag Mode TCP FINSURGE8 PSH Mode May be enabled or disabled
113. be set to TLS1 SSL3 or to both TLS1 and SSL3 ip http secure protocol SSL3 TLS1 Privileged EXEC show ip http Use this command to display the http settings for the switch Format show ip http Privileged EXEC HTTP Mode Unsecure The unsecure HTTP server administrative mode Java Mode The java applet administrative mode which applies to both secure and unsecure web connections Maximum Allowable HTTP The number of allowable unsecure http sessions Sessions HTTP Session Hard The hard time out for unsecure http sessions in hours Timeout HTTP Session Soft Timeout The soft time out for unsecure http sessions in minutes HTTP Mode Secure The secure HTTP server administrative mode Management Commands 466 M4100 Series ProSAFE Managed Switches Term Definition Secure Port The secure HTTP server port number Secure Protocol Level s The protocol level might have the values of SSL3 TSL1 or both SSL3 and TSL1 Maximum Allowable HTTPS The number of allowable secure http sessions Sessions HTTPS Session Hard The hard time out for secure http sessions in hours Timeout HTTPS Session Soft The soft time out for secure http sessions in minutes Timeout Certificate Present Indicates whether the secure server certificate files are present on the device Certificate Generation in Indicates whether certificate generation is currently in progress Progress Acce
114. before the receiver is released and stops sending samples to sFlow receiver The maximum number of bytes that can be sent in a single sFlow datagram Port The destination Layer4 UDP port for sFlow datagrams IP Address The sFlow receiver IP address Utility Commands 429 M4100 Series ProSAFE Managed Switches id Description CIC Address Type The sFlow receiver IP address type For an IPv4 address the value is 1 and for an IPv6 address the value is 2 Datagram The sFlow protocol version to be used while sending samples to sFlow receiver Version Command example NETGEAR Switch show sflow receivers 1 Receiver TNS vive eed acdsee ava aaa tesa wha eae dearer aie arnt 1 A Time ULA ad Serie EEE eer RA 0 TP COTS SS sate eiae paa aa aa E ab co toi 0 0 0 0 Address TY PGi rara a dl POLE sai a A a A ues eens fad 6343 Datagram Vel STO nta a ia 5 Maximum Datagram Lian ro wets wd ede are wos 1400 show sflow samplers Use this command to display the sFlow sampling instances created on the switch Format show sflow samplers Privileged EXEC Fiet Description OO Sampler Data The sFlowDataSource slot port for this sFlow sampler This agent will support Physical Source ports only Receiver Index The sFlowReceiver configured for this sFlow sampler Packet Sampling The statistical sampling rate for packet sampling from this source Rate Max Header Size The maximu
115. beyond the configured threshold the traffic is dropped Therefore the rate of unicast traffic is limited to the configured threshold Default 0 Format storm control unicast rate lt 0 14880000 gt no storm control unicast rate This command sets the multicast storm recovery threshold to the default value for an interface and disables multicast storm recovery Format no storm control unicast rate Mode Global Config show storm control This command displays switch configuration information If you do not use any of the optional parameters this command displays global storm control configuration parameters e Broadcast Storm Control Mode Might be enabled or disabled The factory default is disabled Broadcast Storm Control Level The factory default is 5 percent e Multicast Storm Control Mode Might be enabled or disabled The factory default is disabled e Multicast Storm Control Level The factory default is 5 percent Unicast Storm Control Mode Might be enabled or disabled The factory default is disabled e Unicast Storm Control Level The factory default is 5 percent Switching Commands 106 M4100 Series ProSAFE Managed Switches Use the a11 keyword to display the per port configuration parameters for all interfaces or specify the slot port to display information about a specific interface Format show storm control all lt slot port gt Mode Privileged EXEC Term De
116. clear logging email statistics This command resets the email alerting statistics Format clear logging email statistics Mode Privileged EXEC mail server Use this command to configure the SMTP server to which the switch sends email alert messages and change the mode to Mail Server Configuration mode The server address can be in the IPv4 IPv6 or DNS name format Format mail server lt ip address gt lt ipv address gt lt hostname gt Mode Global Config no mail server Use this command to remove the specified SMTP server from the configuration Format no mail server lt ip address gt lt ipv6 address gt lt hostname gt security Mail Server Config Use this command to set the email alerting security protocol by enabling the switch to use TLS authentication with the SMTP Server If the TLS mode is enabled on the switch but the SMTP server does not support TLS mode no email is sent to the SMTP server Default none Format security tlsvl none Mail Server Config Utility Commands 363 M4100 Series ProSAFE Managed Switches port Mail Server Config Use this command to configure the TCP port to use for communication with the SMTP server For lt portid gt you enter any nonstandard port in the range 1 65535 For TLSv1 the recommended port is number 465 If you do not use security the recommended port is number 25 Default 25 Format port lt
117. clear radius statistics This command is used to clear all RADIUS statistics Format clear radius statistics Mode Privileged EXEC dot1x eapolflood Use this command to enable EAPOL flood support on the switch Default Disabled Format dotlx eapolflood Mode Global Config no dot1x eapolflood This command disables EAPOL flooding on the switch Format no dot1x eapolflood Mode Global Config dot1x guest vlan This command configures VLAN as guest vlan on a per port basis The command specifies an active VLAN as an IEEE 802 1x guest VLAN The range is 1 to the maximum VLAN ID supported by the platform Default disabled Format dotlx guest vlan lt vlan id gt Mode Interface Config no dot1x guest vlan This command disables Guest VLAN on the interface Default disabled Format no dotix guest vlan Mode Interface Config Switching Commands 81 M4100 Series ProSAFE Managed Switches dot1x initialize This command begins the initialization sequence on the specified port This command is only valid if the control mode for the specified port is auto or mac based If the control mode is not auto or mac based an error is returned Format dot 1x initialize lt slot port gt Mode Privileged EXEC dot1x mac auth bypass This command enables MAC Based Authentication Bypass MAB for 802 1x unaware clients MAB provides 802 1x unawa
118. command will reset the poll retry for SNTP unicast clients to its default value Format no sntp unicast client poll retry Mode Global Config sntp server This command configures an SNTP server a maximum of three The optional priority can be a value of 1 3 the version a value of 1 4 and the port id a value of 1 65535 Format sntp server lt ipaddress gt lt ipv6 address gt lt hostname gt lt priority gt lt version gt lt portid gt Mode Global Config no sntp server This command deletes a server from the configured SNTP servers Format no sntp server remove lt ipaddress gt lt ipv6 address gt lt hostname gt Mode Global Config Utility Commands 377 M4100 Series ProSAFE Managed Switches clock timezone When using SNTP NTP time servers to update the switch s clock the time data received from the server is based on Coordinated Universal Time UTC which is the same as Greenwich Mean Time GMT This might not be the time zone in which the switch is located Use the clock timezone command to configure a time zone specifying the number of hours and optionally the number of minutes difference from UTC To set the switch clock to UTC use the no form of the command Default no clock timezone Format clock timezone lt zone name gt lt hours offset gt lt minutes offset gt Mode Global Config Term Definition lt zone nam
119. configuration includes the source mac validation destination mac validation and invalid IP validation information Format show ip arp inspection vlan lt vlan list gt Mode e Privileged EXEC User EXEC Term Definition Source MAC Displays whether Source MAC Validation of ARP frame is enabled or disabled Validation Destination MAC Displays whether Destination MAC Validation is enabled or disabled Validation IP Address Displays whether IP Address Validation is enabled or disabled Validation VLAN The VLAN ID for each displayed row Configuration Displays whether DAI is enabled or disabled on the VLAN Log Invalid Displays whether logging of invalid ARP packets is enabled on the VLAN ACL Name The ARP ACL Name if configured on the VLAN Static Flag If the ARP ACL is configured static on the VLAN Switching Commands 151 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch Source Mac Validation Destination Mac Validation IP Address Validation show ip arp inspection vlan 10 12 Disabled Disabled Disabled Configuration Log Invalid ACL Name Static flag Enabled Enabled H2 Enabled Disabled Enabled Enabled Disabled show ip arp inspection statistics Use this command to display the statistics of the ARP packets processed by Dynamic ARP Inspection Give the vlan list argument and the command displays the statistics on all DAI enabled VLANs in that lis
120. connected ospf rip Or static Use the a11 parameter to display all routes including best and non best routes If you do not use the a11 parameter the command only displays the best route A T flag appended to a route indicates that it is an ECMP route but only one of its next hops has been installed in the forwarding table The forwarding table might limit the number of ECMP routes or the number of ECMP groups When an ECMP route cannot be installed because such a limit is reached the route is installed with a single next hop Such truncated routes can be identified by a T after the interface name Routing Commands 245 M4100 Series ProSAFE Managed Switches Note If you use the connected keyword for lt protoco1 gt the al1 option is not available because there are no best or non best connected routes show ip route lt ip address gt lt protocol gt lt ip address gt lt mask gt longer prefixes lt protocol gt lt protocol gt all all e Privileged EXEC e User EXEC Term Definition Route Codes The key for the routing protocol codes that might appear in the routing table output The show ip route command displays the routing tables in the following format Code IP Address Mask Preference Metric via Next Hop Route Timestamp Interface The columns for the routing table display the following information Term Definition Code The codes for the routing proto
121. default is 5 Remote Connection Sessions Allow New Telnet New Telnet sessions will not be allowed when this field is set to no The factory default Sessions value is yes Management Commands 456 M4100 Series ProSAFE Managed Switches Secure Shell SSH Commands This section describes the commands you use to configure SSH access to the switch Use SSH to access the switch from a remote management host Note The system allows a maximum of five SSH sessions ip ssh Use this command to enable SSH access to the system This command is the short form of the ip ssh server enable command Default disabled Format ip ssh Mode Privileged EXEC ip ssh protocol Use this command to set or remove protocol levels or versions for SSH Either SSH1 1 SSH2 2 or both SSH 1 and SSH 2 1 and 2 can be set Defaut Format ip ssh protocol 1 2 Mode Privileged EXEC ip ssh server enable Use this command to enable the IP secure shell server Default disabled Format ip ssh server enable Mode Privileged EXEC no ip ssh server enable Use this command to disable the IP secure shell server Format no ip ssh server enable Mode Privileged EXEC Management Commands 457 M4100 Series ProSAFE Managed Switches sshcon maxsessions Use this command to specify the maximum number of SSH connection sessions that can be established A value of 0 indicates
122. disabled Format debug clear Mode Privileged EXEC debug console This command enables the display of debug trace output on the login session in which it is executed Debug console display must be enabled in order to view any trace output The output of debug trace commands will appear on all login sessions for which debug console has been enabled The configuration of this command remains in effect for the life of the login session The effect of this command is not persistent across resets Default disabled Format debug console Mode Privileged EXEC no debug console This command disables the display of debug trace output on the login session in which it is executed Format no debug console Mode Privileged EXEC debug crashlog Use this command to view information contained in the crash log file that the system maintains when it experiences an unexpected reset The crash log file contains the following information e Call stack information in both primitive and verbose forms e Log Status e Buffered logging Utility Commands 404 M4100 Series ProSAFE Managed Switches e Event logging e Persistent logging e System Information output of sysapiMbufDump e Message Queue Debug Information e Memory Debug Information e Memory Debug Status e OS Information output of osapiShowTasks e proc information meminfo cpuinfo interrupts version and net sockstat Format debug crashl
123. downloaded RSA key files crypto key generate rsa Mode Global Config no crypto key generate rsa Use this command to delete the RSA key files from the device Format no crypto key generate rsa Mode Global Config crypto key generate dsa Use this command to generate a DSA key pair for SSH The new key files will overwrite any existing generated or downloaded DSA key files crypto key generate dsa Mode Global Config no crypto key generate dsa Use this command to delete the DSA key files from the device Format no crypto key generate dsa Mode Global Config Hypertext Transfer Protocol HTTP Commands This section describes the commands you use to configure HTTP and secure HTTP access to the switch Access to the switch by using a Web browser is enabled by default Everything you can view and configure by using the CLI is also available by using the Web Management Commands 460 M4100 Series ProSAFE Managed Switches ip http server Use this command to enable access to the switch through the Web interface When access is enabled the user can login to the switch from the Web interface When access is disabled the user cannot login to the switch s web server Disabling the Web interface takes effect immediately All interfaces are affected Default enabled Format ip http server Mode Privileged EXEC no ip http server Use this command to disable access t
124. eames 85 dot lx system auth Control MONON veviscimnos sor sae dss e e AE 88 GOCI DCT 1 4395 arcadas 85 dotilbeunauthenticated Vlan tir 86 COtTMUSE amorosa AAA AAA AS ae 87 A do kaodouadoeeewe eee dieu ees shd ddsGeoasaseeekeeOersusuGedees res ade 281 Avlan tunNneletherty Pe coco ciscrcarinevedataderens ro aan 63 enable Privileged EXEC access 66 65 64 5 0 0 040 040400000s 4o008 ded EEE ee datas eoeoeeeee 446 enable autnenticati n ss oss sa daa4s arias asidero 451 enable PASSWOK o rrerdrer ttt aia A a 369 ENCAPSULATION corr A ado 240 erase StartUp CONHO oc 4sdenrnnnrici ence si A ete na oars 331 ECONO cdta das one thet as oda 444 tledeser coria isa 332 TOW COREG cores arar rre E 107 green MOJE Ce errar 525 Greeh MOde CeesIPISMIStONY eiaiaciaooprrass rai Seer raras ere 530 562 M4100 Series ProSAFE Managed Switches gre en modevenergy detect 2020s sossea rra 524 NardWare ad dress cevivero rara iaa 385 NOSE irradia AAA EA A 385 MENACE corr 19 interface lag snes cece css ria A De aNtD 19 interface loopback ascioinidar dida dorsal irene 26 Intertaco VAN esisiosos ciones css s rre 19 PrAtEBss QrOUD casada accord idas aya aida ideo 303 paecess HTS Eg catia a ls A a 300 IPACCESS IISETENAME esmrmrirnrida ria RRA a caia 300 P ACCOUN EXEC ro e e e as 484 IPaddress EL EE E E EEA AS NA 234 T a aA e EE AE S EE IOE EEE E E E E L EEEE 235 Ipvaddress COnfliCk deteCt TUM avoid dore dl so 431 ip arp Inspection filter 2 oat da
125. entry from the list of configured RADIUS servers If the RADIUS authenticating server being removed is the active server in the servers that are identified by the same server name then the RADIUS client selects another server for making RADIUS transactions If you use the auth parameter the previously configured RADIUS authentication server is removed from the configuration Similarly If you use the acct parameter the previously configured RADIUS accounting server is removed from the configuration The lt ipaddr gt or lt dnsname gt parameter must match the IP address or DSN name of the previously configured RADIUS authentication or accounting server Format no radius server host auth acct lt ipaddr gt lt dnsname gt Mode Global Config Command example TGEAR Switch Config radius server host acct 192 168 37 60 TGEAR Switch Config radius server host acct 192 168 37 60 port 1813 NE NE NETGEAR Switch Config radius server host auth 192 168 37 60 name Network1_RADIUS_Auth_Server port 1813 NE Net NE TGEAR Switch Config radius server host acct 192 168 37 60 name work2_RADIUS_Auth_Server TGEAR Switch Config no radius server host acct 192 168 37 60 radius server key Use this command to configure the key to be used in RADIUS client communication with the specified server Depending on whether the auth or acct keyword is used the shared secret is configured for t
126. exec and commands type e The same list name can be used for both exec and commands accounting type e AAA accounting for commands with RADIUS as the accounting method is not supported Format aaa accounting exec commands default lt list name gt start stop stop only none lt method1 gt lt method2 gt Mode Global Config Term Definition exec Provides accounting for user EXEC terminal sessions commands Provides accounting for all user executed commands default The default list of methods for accounting services lt list name gt Character string used to name the list of accounting methods start stop Sends a start accounting notice at the beginning of a process and a stop accounting notice at the end of a process stop only Sends a stop accounting notice at the end of the requested user process none Disables accounting services on this line lt method1 gt Use either tacacs or radius for accounting purpose lt method2 gt Management Commands 483 M4100 Series ProSAFE Managed Switches no aaa accounting This command deletes the accounting method list no aaa accounting exec commands default lt list name gt Global Config accounting console Telnet SSH This command applies the accounting method list to a line configuration console Telnet SSH Apply this command in Line Config mode Format accounting exec commands default lt list na
127. fro passwords strength exclude keyword lt keyword gt Mode Global Config show passwords configuration Use this command to display the configured password management settings Format show passwords configuration Mode Privileged EXEC Term Definition Minimum Password Minimum number of characters required when changing passwords Length Password History Number of passwords to store for reuse prevention Password Aging Length in days that a password is valid Lockout Attempts Number of failed password login attempts before lockout Minimum Password Minimum number of uppercase characters required when configuring passwords Uppercase Letters Minimum Password Minimum number of lowercase characters required when configuring passwords Lowercase Letters Minimum Password Minimum number of numeric characters required when configuring passwords Numeric Characters Maximum Password Maximum number of consecutive characters required that the password should Consecutive Characters contain when configuring passwords Maximum Password Maximum number of repetitions of characters that the password should contain Repeated Characters when configuring passwords Minimum Password Minimum number of character classes uppercase lowercase numeric and Character Classes special required when configuring passwords Password Exclude The set of keywords to be excluded from the configured password when strength
128. gt Mode Global Config no dhcp I2relay circuit id vlan Use this parameter to clear the DHCP Option 82 Circuit ID for a VLAN Format no dhcp 12relay circuit id vlan lt vlan list gt Mode Global Config Switching Commands 133 M4100 Series ProSAFE Managed Switches dhcp I2relay remote id vlan Use this parameter to set the DHCP Option 82 Remote ID for a VLAN and subscribed service based on subscription name The vlan list range is 1 4093 Separate non consecutive IDs with a comma and do not insert spaces or zeros between the range Use a dash for the range Format dhcp 12relay remote id lt remote id string gt vlan lt vlan list gt Mode Global Config no dhcp 2relay remote id vlan Use this parameter to clear the DHCP Option 82 Remote ID for a VLAN and subscribed service based on subscription name Format no dhcp 12relay remote id vlan lt vlan list gt Mode Global Config dhcp I2relay vlan Use this command to enable the DHCP L2 Relay agent for a set of VLANs All DHCP packets which arrive on interfaces in the configured VLAN are subject to L2 Relay processing vlan list range is 1 4093 Separate non consecutive IDs with a comma and do not insert spaces or zeros between the range Use a dash for the range Default disabled Format dhcp 12relay vlan lt vlan list gt Mode Global Config no dhcp 2relay vlan Use this com
129. gt JAN 01 14 04 51 10 254 24 31 1 DOT3AD 183697744 dot3ad_debug c 385 58 Pkt TX Intf 0 1 1 Type LACP Sys 00 11 88 14 62 el State 0x47 Key 0x36 no debug lacp packet This command disables tracing of LACP packets Format no debug lacp packet Mode Privileged EXEC debug midsnooping packet Use this command to trace MLD snooping packet reception and transmission f you use the receive option only received MLD packets are traced If you use the transmit option only transmitted MLD packets are traced When neither keyword is used in the command then all MLD snooping packet traces are dumped Vital information such as source address destination address control packet type packet length and the interface on which the packet is received or transmitted is displayed on the console Utility Commands 414 M4100 Series ProSAFE Managed Switches Default disabled Format debug mldsnooping packet receive transmit Mode Privileged EXEC no debug midsnooping packet Use this command to disable debug tracing of MLD snooping packet reception and transmission Format no debug mldsnooping packet receive transmit Mode Privileged EXEC debug ospf packet This command enables tracing of OSPF packets received and transmitted by the switch Default disabled Format debug ospf packet Mode Privileged EXEC Command example NETGEAR Switch debug ospf packet lt 1
130. in a unique fashion It is recommended that this be the numerically smallest MAC address of all ports that belong to this bridge However it is only required to be unique When concatenated with dot1dStpPriority a unique Bridgeldentifier is formed which is used in the Spanning Tree Protocol MAC Address The MAC address which should be used for in band connectivity The choices are the Type burned in or the Locally Administered address The factory default is to use the burned in MAC address Management Commands 448 M4100 Series ProSAFE Managed Switches Command example This output is for the network port NETGEAR Switch show network Interface Status a ee a one Always Up IP AARES Sid as DAA ere van eee ere awe 10 250 351 Subnet Mask a A AO A 255 255 255 0 Default GAweway sees cae eda a a is 10 250 33 IPv6 Administrative Mode o o oooooooomo ooo Enabled TPy6 Address Lengtk LS eri ada da FE80 210 18FF FE82 337 64 IPv6 Address Length LS ghepd saco dadao naaa nana 3099 1 64 TPy6 Address Length 1S siii aaa 3099 210 18FF FE82 337 64 IPy6 Default Router TS aisre eis we eee new aie FE80 204 76FF FE73 423A Burned In MAC AUT ES Semi eins Stree Be aes 00 10 18 82 03 37 Locally Administered MAC Address 00 00 00 00 00 00 MAC Address TY Des alee a Sree el Maree ee AW ae eee a ee ae oe Burned In Network Configuration Protocol Current None Management VLAN LD sce sio bane tid etn a aaa
131. ire aqgn gars oa 436 SHOW imon Bed eee a aa aida 437 SIOWFMOMNISEONY exvrs narrar 436 SHOW FMMI serier eripit ondea aie a ei dida idea ade 437 SHOW MON statistics IMLEMACS 3 162c scneceuiursosercads babs dbwcmdudacemurmmemedgadad ees denen 437 shoW roUting heap Summat y cxanicincrerrvarews ASASEN RTR ice eee ERRET 251 SHOW FUNNING COMNG oo 24 1 pin panon EEEE EEE a EEEE E OEE EEO EOE 349 shoW running contig NECMACE E EEE E EEEE 350 DONS eda ted odd at a a a a sot a EA a e aaaea aA 451 siOW Service pollEy 23 c0od cr wisnvononceued ake ii aa 293 SHOW SHOW AGENE esos orina a eee de e ees he acy 428 SHOW STIOW polera Tr RE R EENE EE T r 429 Show SHOW TECEIVElS ccoo rra ea Ae eve are R eadd 429 SNOWSHOWSaMplerS so cuns sacacasa rad 430 SHOW SHIMPCOMMUNILY ss scsi de teria Koa So EE E ERE REEE sass He 499 SHOW SHIMPUAD 446434 040005 40 4eacaehwbonese desert desasasagigatecsawebebedatateshtasssasesa 499 SHOW SMUD dr A season dci 380 SHOW SNEP CHEN eee 240524c5anmnnnmperGITATIOSSOO GOGO AS ea 380 SHOW SMUD SOLVED eri 381 SHOW spanning tree conan A e A 38 Show spanning tred brief icoaaiaian iria par edo 39 shoW spannings tree interface vivcainocs cuasi A sedans 40 show spanning tree mst port detailed ooooooocococccccccccccccccrrr rr 41 snow spaning tieemst port Summary senado oir ic to bs nh ae aia en bs 43 show spanning tree mst port summary active 0 cee eee E ences 44 SHOW SPanNing thee MSESUMMALY ccc csacagedeteoeecteerGd
132. is Enabled Interface L2RelayMode TrustMode 0 2 Enabled untrusted 0 4 Disabled trusted Switching Commands 135 M4100 Series ProSAFE Managed Switches show dhcp I2relay stats interface Use this command to display statistics specific to DHCP L2 Relay configured interface Format show dhcp 12relay stats interface all lt slot port gt Mode Privileged EXEC Command example NETGEAR Switch show dhcp l12relay stats interface all DHCP L2 Relay is Enabled Interface UntrustedServer UntrustedClient TrustedServer TrustedClient MsgsWithOpt 82 MsgsWithOpt 82 MsgsWithoutOpt82 MsgsWithoutOpt82 0 1 0 0 0 0 0 2 0 0 3 7 0 3 0 0 0 0 0 4 0 12 0 0 0 5 0 0 0 0 0 6 3 0 0 0 0 7 0 0 0 0 0 8 0 0 0 0 0 9 0 0 0 0 show dhcp I2relay agent option vlan Use this command to display the DHCP L2 Relay Option 82 configuration specific to VLAN Format show dhcp 12relay agent option vlan lt vlan range gt Mode Privileged EXEC Command example NETGEAR Switch show dhcp 12relay agent option vlan 5 10 DHCP L2 Relay is Enabled VLAN Id L2 Relay Circuitld Remoteld 5 Enabled Enabled NULL 6 Enabled Enabled netgear 7 Enabled Disabled NULL 8 Enabled Disabled NULL 9 Enabled Disabled NULL 10 Enabled Disabled NULL Switching Commands 136 M4100 Series ProSAFE Managed Switches DHCP Client Commands DHCP Client can include vendor and configuration information in
133. is a unicast MAC address for that device The format of the MAC address is 6 two digit hexadecimal numbers that are separated by colons for example 00 06 29 32 81 40 Format arp lt ipaddress gt lt macaddr gt Mode Global Config no arp This command deletes an ARP entry The value for lt arpent ry gt is the IP address of the interface The value for lt ipaddress gt is the IP address of a device on a subnet attached to an existing routing interface lt macaddr gt is a unicast MAC address for that device Format no arp lt ipaddress gt lt macaddr gt Mode Global Config ip local proxy arp This command enables local proxy arp on interface or range of interfaces The switch only responds if all next hops in its route to the destination are through interfaces other than the interface that received the ARP request Enabling local proxy ARP removes this restriction Default disabled Format ip local proxy arp Mode Interface Config no ip local proxy arp This command disables local proxy arp on the interface or a range of interfaces Format no ip local proxy arp Mode Interface Config Routing Commands 228 M4100 Series ProSAFE Managed Switches ip proxy arp This command enables proxy ARP on a router interface Without proxy ARP a device only responds to an ARP request if the target IP address is an address configured on the interface where the ARP request arrived Wi
134. is changed to Class Map Config or lov6 Class Map Config when this command is successfully executed depending on the ipv4 ipv6 keyword specified Format class map match all lt class map name gt ipv4 ipv6 no class map This command eliminates an existing DiffServ class The lt class map name gt is the name of an existing DiffServ class The class name default is reserved and is not allowed here This command might be issued at any time if the class is currently referenced by one or more policies or by any other class the delete action fails Format no class map lt class map name gt class map rename This command changes the name of a DiffServ class The lt class map name gt is the name of an existing DiffServ class The lt new class map name gt parameter is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying the class Default none Format class map rename lt class map name gt lt new class map name gt match ethertype This command adds to the specified class definition a match condition based on the value of the ethertype The ethert ype value is specified as a lt keyword gt argument that can be one of the following types appletalk arp ibmsna ipv4 ipv6 ipx mplsmcast mplsucast netbios novell pppoe Or rarp Or aS a lt range gt argument that represents an EtherType value in the range of 0x0600 0xF FFF Quality of Service Commands
135. is configurable Cache Size The maximum number of entries in the ARP table This value is configurable Dynamic Renew Displays whether the ARP component automatically attempts to renew dynamic ARP Mode entries when they age out Total Entry Count The total entries in the ARP table and the peak entry count in the ARP table Current Peak Static Entry Count The static entry count in the ARP table the active entry count in the ARP table the Configured Active active entry count in the ARP table and maximum static entry count in the ARP table Max The following are displayed for each ARP entry Term Definition IP Address The IP address of a device on a subnet attached to an existing routing interface MAC Address The hardware MAC address of that device Interface The routing slot port associated with the device ARP entry Type The type that is configurable The possible values are Local Gateway Dynamic and Static The current age of the ARP entry since last refresh in hh mm ss format show arp brief This command displays the brief Address Resolution Protocol ARP table information Mode Privileged EXEC Routing Commands 232 M4100 Series ProSAFE Managed Switches Term Definition Age Time The time it takes for an ARP entry to age out This value is configurable Age time is seconds measured in seconds Response Time The time it takes for an ARP request timeout This
136. loopback This command displays information about configured loopback interfaces show interface loopback lt loopback id gt Privileged EXEC If you do not specify a loopback ID the following information appears for each loopback interface on the system Term Definition Loopback ID The loopback ID associated with the rest of the information in the row Interface The interface name IP Address The IPv4 address of the interface Received The number of packets received on this interface Packets Sent Packets The number of packets transmitted from this interface IPv6 Address The IPv6 address of this interface Switching Commands 26 M4100 Series ProSAFE Managed Switches If you specify a loopback ID the following information appears Term Definition Interface Link Shows whether the link is up or down Status IP Address The IPv4 address of the interface IPv6 is enabled Shows whether IPv6 is enabled on the interface disabled IPv6 Prefix is The IPv6 address of the interface MTU size The maximum transmission size for packets on this interface in bytes Spanning Tree Protocol STP Commands This section describes the commands you use to configure Spanning Tree Protocol STP STP helps prevent network loops duplicate messages and network instability spanning tree This command sets the spanning tree operational mode to enabled Default e
137. lt maxTt1 gt As an option specify the maximum TTL Range is 1 255 Utility Commands 365 M4100 Series ProSAFE Managed Switches maxFail lt maxFail gt As an option specify when the traceroute is terminated after failing to receive a response for the number of consecutive probes Range is 0 255 interval lt interval gt As an option specify the time between probes in seconds Range is 1 60 seconds count lt count gt As an option specify the number of probes to send for each TTL value Range is 1 10 probes port lt port gt As an option specify destination UDP port of the probe This should be an unused port on the remote destination system Range is 1 65 535 size lt size gt As an option specify the size in bytes of the payload of the Echo Requests sent Range is 0 65507 bytes source lt ip address gt As an option specify the source IP address or interface for the lt slot port gt loopback lt 0 7 gt traceroute Command example The traceroute succeeds NETGEAR Switch traceroute 10 240 10 115 initTtl 1 maxTtl 4 maxFail 0 interval 1 count 3 port 33434 size 43 Traceroute to 10 240 10 115 4 hops max 43 byte packets 1 10 240 4 1 708 msec 41 msec 11 msec 2 10 240 10 115 0 msec 0 msec 0 msec Hop Count 1 Last TIL 2 Test attempt 6 Test Success 6 Command example The traceroute fails NETGEAR Switch traceroute 10 40 1 1 initTtl 1 maxFail 0 interval
138. meanings of the values are e Static The value of the corresponding instance was added by the system or a user when a static MAC filter was defined It cannot be relearned e Learned The value of the corresponding instance was learned by observing the source MAC addresses of incoming traffic and is currently in use e Management The value of the corresponding instance system MAC address is also the value of an existing instance of dotidStaticAddress It is identified with interface 0 1 and is currently used when enabling VLANs for routing e Self The value of the corresponding instance is the address of one of the switch s physical interfaces the system s own MAC address GMRP Learned The value of the corresponding was learned via GMRP and applies to Multicast e Other The value of the corresponding instance does not fall into one of the other categories If you enter the interface lt slot port gt parameter in addition to the MAC Address and Status fields the VLAN ID field displays Term Definition VLAN ID The VLAN on which the MAC address was learned The information that is shown in the following table displays if you enter the count parameter Term Definition Dynamic Number of MAC addresses in the forwarding database that were automatically learned Address count Static Address Number of MAC addresses in the forwarding database that were manually entered by a User defined user count
139. messages Default disabled Format debug ip vrrp Privileged EXEC no debug ip vrrp Use this command to disable VRRP debug protocol messages Format no debug ip vrrp Mode Privileged EXEC Utility Commands 411 M4100 Series ProSAFE Managed Switches debug ipv6 dhcp Use this command to display debug information about DHCPv 6 client activities and trace DHCPV6 packets to and from the local DHCPv 6 client Default disabled Format debug ipv6 dhcp Mode Privileged EXEC no ipv6 debug dhcp Use this command to disable the display of debug trace output for DHCPVv6 client activity Format no debug ipv6 dhcp Privileged EXEC debug ipv6 mcache packet Use this command to trace MDATAV6 packet reception and transmission If you use the receive option only received MDATAV6 packets are traced If you use the transmit option only transmitted MDATAV6 packets are traced When neither keyword is used in the command then all data packet traces are dumped Vital information such as source address destination address packet length and the interface on which the packet is received or transmitted is displayed on the console Default disabled Format debug ipv6 mcache packet receive transmit Mode Privileged EXEC no debug ipv6 mcache packet Use this command to disable debug tracing of MDATAV6 packet reception and transmission Format no debug ipv6 mcach
140. mode lt name gt lt ipaddr gt lt ipbaddr gt lt hostname gt Mode Global Config no snmptrap mode Use this command to deactivate an SNMP trap Disabled trap receivers are unable to receive traps Format no snmptrap mode lt name gt lt ipaddr gt lt ip6addr gt lt hostname gt Mode Global Config Management Commands 497 M4100 Series ProSAFE Managed Switches snmp trap link status Use this command to enable link status traps by interface Note This command is valid only when the Link Up Down Flag is enabled For more information see snmp server enable traps linkmode on page 495 snmp trap link status Interface Config no snmp trap link status Use this command to disable link status traps by interface Note This command is valid only when the Link Up Down Flag is enabled Format no snmp trap link status Mode Interface Config snmp trap link status all Use this command to enable link status traps for all interfaces Note This command is valid only when the Link Up Down Flag is enabled For more information see snmp server enable traps linkmode on page 495 Format snmp trap link status all Mode Global Config no snmp trap link status all Use this command to disable link status traps for all interfaces Note This command is valid only when the Link Up Down Flag is enabled For more information see snmp server enable tra
141. most recent Querier from which a Query was received Last Querier Version Indicates the IGMP version of the most recent Querier from which a Query was received on this VLAN If you use the optional detail argument the command shows the global information and the information for all querier enabled VLANs Switching Commands 167 M4100 Series ProSAFE Managed Switches MLD Snooping Commands This section describes commands used for MLD Snooping In IPv4 Layer 2 switches can use IGMP Snooping to limit the flooding of multicast traffic by dynamically configuring Layer 2 interfaces so that multicast traffic is forwarded only to those interfaces associated with IP multicast addresses In IPv6 MLD Snooping performs a similar function With MLD Snooping IPv6 multicast data is selectively forwarded to a list of ports that want to receive the data instead of being flooded to all ports in a VLAN This list is constructed by snooping IPv6 multicast control packets set mld Use this command to enable MLD Snooping on the system Global Config Mode or an interface Interface Config Mode This command also enables MLD Snooping on a particular VLAN and enables MLD Snooping on all interfaces participating in a VLAN If an interface has MLD Snooping enabled and you enable this interface for routing or enlist it as a member of a port channel LAG MLD Snooping functionality is disabled on that interface MLD Snooping functional
142. mvr interface 0 23 members 235 0 0 1 STATIC ACTIVE Command example NETGEAR Switch show mvr interface 0 23 members vlan 12 235 0 0 1 STATIC ACTIVE 235 1 1 1 STATIC ACTIVE Multicast VLAN Registration Commands 225 M4100 Series ProSAFE Managed Switches show mvr traffic This command displays global MVR statistics Format show mvr traffic Mode Privileged EXEC The following table explains the output parameters Term Definition IGMP Query Received Number of received IGMP queries IGMP Report V1 Received Number of received IGMP reports V1 IGMP Report V2 Received Number of received IGMP reports V2 IGMP Leave Received Number of received IGMP leaves IGMP Query Transmitted Number of transmitted IGMP queries IGMP Report V1 Transmitted Number of transmitted IGMP reports V1 IGMP Report V2 Transmitted Number of transmitted IGMP reports V2 IGMP Leave Transmitted Number of transmitted IGMP leaves IGMP Packet Receive Failures Number of failures on receiving the IGMP packets IGMP Packet Transmit Failures Number of failures on transmitting the IGMP packets Command example NETGEAR Switch show mvr traffic IGMP Query Received seert d al EE etre E TE A eee acess alee eos 2 TGMP Report VI Receive inercia a Ra e a 0 IGMP Report Vz Receive dineral ei EAE RT eee ae eee aca 3 IGMP Leave REFCLVO Osos aaa aid ad a de ernie ee aero abe 0 IGMP Query TEEANSMLE dt
143. nected boda aaa CASES RADA oA ONES 73 ME A a o eiaa a pi 47 Vidi ASSOCIA ON IMAG ss irradia 55 Vlam association SUBNET ss tecate oa 55 ee e e ii di a E EET EEE EET 46 vlaningressfilter sisi rra ir NS e KOs dec 48 Vlanimakestatie rr 48 MSNM aci a A AAA sani 48 vian alll GID AU OM e saram E ELE EL pE EE pa A da ras ae ane guid basen gut ea 49 Vian participatiomall ic 4 5 ncimednusisrsdanrinnseesPeees 7455555 hosel iuulidie io 49 Vidiiportacceptiraine all s nncccaccisvmarnnrdocedded pea baaRetiddentarne neeesdeeesed RER badd 50 van portingresstilter all sssrini cla ack a ae 50 lan port priorityaall evi cnn ee ean SG So GL ars ET 67 Mani port pvidialll 2 245444 55652tccecelia behets dosed ida o 51 vManporttaggingall so5 occwmrendsewewewereren suae darrse EA 51 VIAN alla A PP Ei a aa a ai i prdetes 68 Vian protocol GhOUD EEE E EA AA A sh sa E E E E E TAE EEE E 52 vlan protoco group add protocol evocan estt EE AMARA PEPEES eee eee EREE EE OTE 52 vlanprotocol group TAME eric ara TEEPE EAER REAA EEEE Paar 52 VIG PMIG ussesssisiaio crasas iii dake ias 54 Man Tous satigiss patada adosada ada 251 Ms A Code NEEE CE EE EEE E EE malts 55 Voice Vian Global Config icon ani ir si a eae Gm PASE ang das bai 65 Voice vlam Intertaco COM arre 66 Voice Mlamdata priori rre ianicmamareriniminnncoed ee boab ad aaninhemdmsmedeneeeaees oo RER goats 66 WISE MEMORY secan ane rer decied nadaae cane MOREE EO A ea 374 578
144. network to be dropped if STP is disabled Format no spanning tree bpduforwarding Mode Global Config show spanning tree This command displays spanning tree settings for the Common and Internal Spanning Tree The following details are displayed Format show spanning tree Mode e Privileged EXEC e User EXEC Bridge Priority Specifies the bridge priority for the Common and Internal Spanning Tree CST The value lies between 0 and 61440 It is displayed in multiples of 4096 Bridge Identifier The bridge identifier for the CST It is made up using the bridge priority and the base MAC address of the bridge Time Since Time in seconds Topology Change Topology Number of times changed Change Count Topology Boolean value of the Topology Change parameter for the switch indicating if a topology Change change is in progress on any port assigned to the Common and Internal Spanning Tree Designated Root The bridge identifier of the root bridge It is made up from the bridge priority and the base MAC address of the bridge Root Path Cost Value of the Root Path Cost parameter for the Common and Internal Spanning Tree Root Port Identifier of the port to access the Designated Root for the CST Identifier Root Port Max Derived value Age Root Port Bridge Derived value Forward Delay Hello Time Configured value of the parameter for the CST Switching Commands 38 M4100 Ser
145. no ip mtu This command resets the IP MTU to the default value Format no ip mtu Interface Config encapsulation This command configures the link layer encapsulation type for the packet The encapsulation type can be ethernet or snap Default ethernet Format encapsulation ethernet snap Mode Interface Config Note Routed frames are always Ethernet encapsulated when a frame is routed to a VLAN clear ip route all This command removes all the route entries learned over the network Format clear ip route all Mode Privileged EXEC Routing Commands 240 M4100 Series ProSAFE Managed Switches Protocol Tells which protocol added the specified route The possibilities are local static OSPF or RIP Total Number The total number of routes of Routes clear ip route counters This command resets to zero the IPv4 routing table counters reported in the output of the show ip route summary command The command resets only the event counters Counters that report the current state of the routing table such as the number of routes of each type are not reset Format clear ip route counters Privileged EXEC show ip brief This command displays all the summary information of the IP including the ICMP rate limit configuration and the global ICMP Redirect configuration Format show ip brief Modes e Privileged EXEC User EXEC Term Definition De
146. of the packet Version Spanning tree protocol version 0 3 O refers to STP 2 RSTP and 3 MSTP Root_Mac MAC address of the CIST root bridge Root_Priority Priority of the CIST root bridge The value is between 0 and 61440 It is displayed in hex in multiples of 4096 Path_Cost External root path cost component of the BPDU no debug spanning tree bpdu receive This command disables tracing of received spanning tree BPDUs Format no debug spanning tree bpdu receive Mode Privileged EXEC Utility Commands 421 M4100 Series ProSAFE Managed Switches debug spanning tree bpdu transmit This command enables tracing of spanning tree BPDUs transmitted by the switch Spanning tree should be enabled on the device and on the interface in order to monitor packets ona particular interface Default disabled Format debug spanning tree bpdu transmit Mode Privileged EXEC Command example NETGEAR Switch debug spanning tree bpdu transmit lt 15 gt JAN 01 01 02 04 192 168 17 29 1 DOT1S 191096896 dotls_debug c 1249 101 Pkt TX Intf 0 7 7 Source Mac 00 11 88 4e c2 00 Version 3 Root_Mac 00 11 88 4e c2 00 Root_Priority 0x8000 Path_Cost 0 The parameters that are shown in the following table are displayed in the trace message Parameter Definition A packet transmitted by the device Intf The interface that the packet went out on Format used is slot port internal interface number Unit is alway
147. of the particular variable to be sampled Only variables that resolve to an ASN 1 primitive type of integer The interval in seconds over which the data is sampled and compared with the rising and falling thresholds The range is 1to 2147483647 The method of sampling the selected variable and calculating the value to be compared against thresholds Possible types are Absolute or Delta High capacity alarm rising threshold absolute value high The upper 32 bits of the absolute value for threshold for the sampled statistics High capacity alarm rising threshold absolute value low The lower lt value gt 32 bits of the absolute value for threshold for the sampled statistics falling threshold high High capacity alarm falling threshold absolute value high The upper lt value gt 32 bits of the absolute value for threshold for the sampled statistic falling threshold low High capacity alarm falling threshold absolute value high The upper lt value gt 32 bits of the absolute value for threshold for the sampled statistic startup rising falling rising f owner lt alling string gt no rmon hcalarm High capacity alarm startup alarm that may be sent Possible values are Rising Alarm Falling Alarm or both High capacity alarm owner The owner string associated with the entry This command deletes the RMON hcalarm entry Format no rmon hcalarm lt alarm number gt Mode Global Config
148. or redirect interface which is the lt lag group id gt lt slot port gt lt lag group id gt or lt slot port gt to which packets matching this rule are copied or forwarded respectively ip access group This command either attaches a specific IP ACL identified by lt accesslistnumber gt to an interface or associates with a VLAN ID in a specific direction The parameter lt name gt is the name of the access control list An optional sequence number might be specified to indicate the order of this IP access list relative to other IP access lists already assigned to this interface and direction A lower number indicates higher precedence order If a sequence number is already in use for this interface and direction the specified access list replaces the currently attached IP access list using that sequence number If the sequence number is not specified for this command a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used Default none Format ip access group lt accesslistnumber gt lt name gt in vlan lt vlan 1d gt in sequence lt 1 4294967295 gt Modes Interface Config e Global Config no ip access group This command removes a specified IP ACL from an interface Default none Format no ip access group lt accesslistnumber gt lt name gt in vlan lt vlan id gt in Mode Interface Config e Globa
149. parameter for the Common and Internal Spanning Tree to the default value Format no spanning tree max age Mode Global Config spanning tree max hops This command sets the MSTP Max Hops parameter to a new value for the Common and Internal Spanning Tree The max hops value is a range from 6 to 40 Defaut Format spanning tree max hops lt 1 127 gt Mode Global Config no spanning tree max hops This command sets the Bridge Max Hops parameter for the Common and Internal Spanning Tree to the default value Format no spanning tree max hops Mode Global Config spanning tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the Common and Internal Spanning Tree If you specify an lt mstid gt parameter that corresponds to an existing multiple spanning tree instance the configurations are done for that multiple spanning tree instance If you specify 0 defined as the default CIST ID as the lt mstid gt the configurations are done for the Common and Internal Spanning Tree instance If you specify the cost option the command sets the path cost for this port within a multiple spanning tree instance or the Common and Internal Spanning Tree instance depending on Switching Commands 33 M4100 Series ProSAFE Managed Switches the lt mst id gt parameter You can set the path cost as a number in the range of 1 200000000 or auto If you
150. pd Note This command is supported on the M4100 D12G POE GSM5212P only Use this command to get information about the PD ports You can display information based on each individual port or all the PD ports collectively Format show poe pd lt port gt all Mode e Privileged EXEC User EXEC Term Definition Intf Show the PD device interface number only 0 1 or 0 2 on the GSM5212P In other devices the table is empty If lt port id gt is not specified all PD ports are displayed Mode Displays the port POE role and is always PD Class Displays the POE class Detection Mode PD detection mode when getting power from the PSE e 1 event PSE detects the PD in 1 event mode 802 1f e 2 event PSE detects the PD in 2 event mode 802 1at LLDP PSE detects the PD in LLDP mode 802 1at Status Shows whether the port 0 1 or 0 2 is providing power Powered Receiving power from PSE Off No power from the PSE when main AC is in used Command example NETGEAR Switch show poe pd all Intf Mode Class Detection Mode Status 0 1 PD class 4 2 event powered 0 2 PD class 4 LLDP powered Power over Ethernet Commands 327 Utility Commands This chapter describes the utility commands available in the CLI The chapter contains the following sections Auto Install Commands Dual Image Commands System Information and Statistics Commands Logging Commands Email Alerting and Mail S
151. port less than 1024 or having TCP Control Flags set to 0 and TCP Sequence Number set to 0 or having TCP Flags FIN URG and PSH set and Switching Commands 206 M4100 Series ProSAFE Managed Switches TCP Sequence Number set to 0 or having TCP Flags SYN and FIN both set the packets will be dropped if the mode is enabled Default disabled Format dos control tcpflagsegq Mode Global Config no dos control tcpflagseq This command sets disables TCP Flag and Sequence Denial of Service protection Format fro dos control tcpflagseq Mode Global Config dos control tcpoffset This command enables TCP Offset Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having TCP Header Offset equal to one 1 the packets will be dropped if the mode is enabled Default disabled Format dos control tcpoffset Mode Global Config no dos control tcpoffset This command disabled TCP Offset Denial of Service protection Format no dos control tcpoffset Mode Global Config dos control tcpsyn This command enables TCP SYN and L4 source 0 1023 Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having TCP flag SYN set and an L4 source port from 0 to 1023 the packets will be dropped if the mode is enabled Default disabled
152. privileges for the specified login user The valid accessmode values are readonly and readwrite The lt username gt is the login user name for which the specified access mode applies The default is readwrite for the admin user and readonly for all other users You must enter the lt username gt in the same case you used when you added the user To see the case of the lt username gt enter the show users command Defaults e admin readwrite e other readonly Format username snmpv3 accessmode lt username gt readonly readwrite Mode Global Config no username snmpv3 accessmode Use this command to set the SNMPv3 access privileges for the specified user as readwrite for the admin user and readonly for all other users The lt username gt value is the user name to which the specified access mode applies Format no username snmpv3 accessmode lt username gt Mode Global Config username snmpv3 authentication Use this command to specify the authentication protocol to be used for the specified user The valid authentication protocols are none md5 and sha If you specify md5 or sha the login password is also used as the SNMPv3 authentication password and therefore must be at least eight characters in length The lt username gt is the user name associated with the authentication protocol You must enter the lt username gt in the same case you used when you added the user To see the cas
153. received that were 64 octets in length excluding framing bits but including FCS octets Packets Transmitted 65 127 Octets The total number of packets including bad packets received that were from 65 through 127 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 128 255 Octets The total number of packets including bad packets received that were from 128 through 255 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 256 511 Octets The total number of packets including bad packets received that were from 256 through 511 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 512 1023 Octets The total number of packets including bad packets received that were from 512 through 1023 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 1024 1518 Octets The total number of packets including bad packets received that were from 1024 through 1518 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted gt 1518 Octets The total number of packets transmitted that were longer than 1518 octets excluding framing bits but including FCS octets and were otherwise well formed Max Frame Size The maximum size of the Info non MAC field that this port will receive or transmit Total Packets Transmitted Successfully Th
154. redondas 182 Ap transmiti sss lt varios dor Fes FE e 184 ld ptransMmitstl 4 24252 as a tives dues a al 183 logging BUTIETER siria citada da dude deed 353 logging buffered Wrap oir e ie 353 LOGGING CU COMMAN 23 23 rrrdr creian rie 354 lOGGINGICONSOLE esoo dora a E E ana 354 A E d pte de eed E EE E 358 logging email frOMaaddh 6s 2 0 cscccnorruiurinrrsioese sino 6 dhadednage an aed 360 logging emaillogtime s22ccacanidianwedevewende NEEE ENRERE E E rede Teese eRedes oe ete 361 logging emallimessaGge tyV PE subject curia aiii isa 360 logging emallimessagestype tos add eiii a is ae am 359 logging email test MesSage type 6 deiadar in ana a aa aeaaea 361 logging email Urgent sodas cana edeier Ere ia RA naa 359 Koele iole AE E EE A I E E E T T E E EEEE 354 OJOS ENEMY esti a a E a E A rded 355 565 M4100 Series ProSAFE Managed Switches logging persistemt 204 24 05 uie qd janrepierninsteens ones agngadhdiayieeessokwiw esoeniagageo ens 358 NEE E EE E EEA E E A det dia 355 logging syslog Solirce interface sssrsrrereereii tati Ere rea 355 Koree lialear oE PE EEE E E E L E EEE E E E E E EEE 361 lOGINMAUTNENTICATION 6 5 5 505 c2cccdop ii ee EE ae 450 oO AA ct E mgs oor Ge testta tee es esasbenenenehessatetttadaded edad enae 369 MAE ACCESS QNOUP cuina lr e saan Gan e ia gio aaa 296 mac access list extended serio A ea 293 Mac access list EXENTOS e 294 mac address table multicast forbidden unregistered Vian 0 66 cee eens 160 m
155. register This log message appears when a register message is invalid message is received with invalid inner ip source or group address Log Messages 552 M4100 Series ProSAFE Managed Switches Table 51 PIM DM Log Messages Table 52 DVMRP Log Messages Component Message Cause PIM DM Out of memory when creating xxx This message is logged when there is insufficient memory to accommodate a new neighbor S G Entry Prune Graft Join etc PIM DM Error entry gt ll_xxx LL creation error This message is logged when the SLL creation is Failed PIM DM pim_interface_set Could not give This message is logged when Task taskSema synchronization Semaphore release fails PIM DM Error initializing CACHE This message is logged when the PIM DM S G entry Cache table initialization fails PIM DM Error creating PIM DM pipe This message is logged when the PIM DM Pipe that receives control messages creation fails Stacking Table 53 EDB Log Message Component Message Component Cause DVMRP dvmrp_send_graft failed getting memory Failed to allocate memory while sending a for graft graft DVMRP dvmrp_register_neighbor failed getting Failed to allocate memory while registering memory for nbr a neighbor DVMRP dvmrp_recv_prune failed getting memory Failed to allocate memory while receiving a for prune prune DVMRP dvmrp_new_route failed getting memory Failed to get memory for a new ro
156. rro pdas de 9 Slot Port Naming COnventiON res sssskesrincoroni esere aerea 10 Using a Commands No FORM ie ocrrrrirmara aora ree 10 Managed Switch Modules 0 c cece tonr eee eee eens 11 Command MOGES ccxeutetetienjahesotehanmaaeaeeesedertecesde dete 11 Command Completion and Abbreviation 0 cesses 14 CLIError Messages vicio RRA ai 14 CLI Line Editing Conventions 0 cece eee cee eee ees 14 Using CUIMEID ciscwiuuieee rossi rs aes 15 ACCESSING CMS Cll cesantes 16 Chapter 2 Switching Commands Port Configuration Commands 0 cece cee eee eee eee 19 Loopback Interface Commamnds 0 0c cece cnc 26 Spanning Tree Protocol STP Commands 2 cece eee ee 27 VEAN COMMMOS issues raros 46 Switch Port Command S evo o 59 Double VLAN COMMANUS a sis sad dado dea ripeado ra dae 63 Voice VLAN Commands cs4s24004 2 oesndvarnanisdion peeke TEER EEs 65 Provisioning IEEE 802 1p Commands 0 cece eee eee eee eee 67 Protected Ports Command sear ne sesseeesenages 68 Private VLAN CONMMANAS arias acces a Sd ee cad 70 GARP COMmMMAROS enmendada criado Roa 74 GVRP COMMANS asic08 lt asis dabas 76 GMRP COmMAaNdS ss iis5o5ccse soos cas cnica eee aida 78 Port Based Network Access Control Commands 0 0 eee ee eee 80 802 1X Supplicant Commands e hina a 94 Storm Coantrol Commands 32405 aa adi Fede ados 97 Flow Control COMMAN S s05 0 008 66666 cara
157. rule is appended to the list of configured rules for the list Note The no form of this command is not supported since the rules within an IP ACL cannot be deleted individually Rather the entire IP ACL must be deleted and respecified Quality of Service Commands 300 M4100 Series ProSAFE Managed Switches Note An implicit deny a11 IP rule always terminates the access list Note The mirror parameter allows traffic matching this rule to be copied to the specified lt slot port gt while the redirect parameter allows traffic matching this rule to be forwarded to the specified lt slot port gt The assign queue and redirect parameters are valid only for a permit rule A rule might either deny or permit traffic according to the specified classification fields Ata minimum either every keyword or the protocol source address and destination address values must be specified The source and destination IP address fields might be specified using the keyword any to indicate a match on any value in that field The remaining command parameters are all optional but the most frequently used parameters appear in the same relative order as shown in the command format The assign queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule The allowed lt queue id gt value is 0 n 1 where nis the number of user configurable queues available for the hardware platform The assign queue par
158. select auto the path cost value is set based on Link Speed If you specify the external cost option this command sets the external path cost for MST instance O that is CIST instance You can set the external cost as a number in the range of 1 200000000 or auto If you specify auto the external path cost value is set based on Link Speed If you specify the port priority option this command sets the priority for this port within a specific multiple spanning tree instance or the Common and Internal Spanning Tree instance depending on the lt mst id gt parameter The port priority value is a number in the range of 0 240 in increments of 16 Default e cost auto external cost auto e port priority 128 spanning tree mst lt mstid gt cost lt 1 200000000 gt auto external cost lt 1 200000000 gt auto port priority lt 0 240 gt Mode Interface Config no spanning tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the Common and Internal Spanning Tree to the respective default values If you specify an lt mst id gt parameter that corresponds to an existing multiple spanning tree instance you are configuring that multiple spanning tree instance If you specify O defined as the default CIST ID as the lt mstid gt you are configuring the Common and Internal Spanning Tree instance If you specify cost this command sets the path cost for t
159. show lldp med local device detail lt slot port gt Mode Privileged EXEC Term Definition Media Application Shows the application type Types are unknown voice voicesignaling guestvoice Type guestvoicesignaling sfotphonevoice videoconferencing streamingvideo videosignaling Vlan ID Shows the VLAN id associated with a particular policy type Priority Shows the priority associated with a particular policy type DSCP Shows the DSCP associated with a particular policy type Switching Commands 196 M4100 Series ProSAFE Managed Switches Term Definition Unknown Indicates if the policy type is unknown In this case the VLAN ID Priority and DSCP are ignored Tagged Indicates if the policy type is using tagged or untagged VLAN Hardware Rev Shows the local hardware version Firmware Rev Shows the local firmware version Software Rev Shows the local software version Serial Num Shows the local serial number Mfg Name Shows the manufacture name Model Name Shows the model name Command example NETGEAR Switch show lldp med local device detail 0 8 LLDP MED Local Device Detail Interface 0 8 etwork Policies edia Policy Application Type voice Vlan ID 10 Priority 5 DSCP 1 Unknown False Tagged True Media Policy Application Type streamingvideo Vlan ID 20 Priority 1 DSCP 2 Unknown False Tagged True Inventory Hardware Rev XX
160. stages by specifying three DiffServ components 1 Class a Creating and deleting classes b Defining match criteria for a class Quality of Service Commands 270 M4100 Series ProSAFE Managed Switches 2 Policy a Creating and deleting policies b Associating classes with a policy c Defining policy statements for a policy class combination 3 Service a Adding and removing a policy to from an inbound or outbound interface The DiffServ class defines the packet filtering criteria The attributes of a DiffServ policy define the way the switch processes packets You can define policy attributes on a per class instance basis The switch applies these attributes when a match occurs Packet processing begins when the switch tests the match criteria for a packet The switch applies a policy to a packet when it finds a class match within that policy The following rules apply when you create a DiffServ class e Each class can contain a maximum of one referenced nested class e Class definitions do not support hierarchical service policies A class definition can contain a maximum of one reference to another class You can combine the reference with other match criteria The referenced class is truly a reference and not a copy because additions to a referenced class affect all classes that reference it Changes to any class definition currently referenced by any other class must result in valid class definitions for all derived classes
161. terminal length Mode Privileged EXEC show terminal length Use this command to display the value of the user configured terminal length size Format show terminal length Mode Privileged EXEC memory free low watermark processor Use this command to get notifications when the CPU free memory falls below the configured threshold A notification is generated when the free memory falls below the threshold Another notification is generated once the available free memory rises to 10 percent above the specified threshold To prevent generation of excessive notifications when the CPU free memory fluctuates around the configured threshold only one Rising or Falling memory notification is generated over a period of 60 seconds The threshold is specified in kilobytes The CPU free memory threshold configuration is saved across a switch reboot Format memory free low watermark processor lt 1 1034956 gt Mode Global Config Parameter Description low watermark When CPU free memory falls below this threshold a notification message is triggered The range is 1 to the maximum available memory on the switch The default is 0 disabled Utility Commands 352 M4100 Series ProSAFE Managed Switches Logging Commands This section describes the commands you use to configure system logging and to view logs and the logging settings logging buffered This command enables logging to an in memory
162. test cablestatus This command returns the status of the specified port Format cablestatus lt slot port gt Mode Privileged EXEC Field Description Cable Status One of the following statuses is returned e Normal The cable is working correctly e Open The cable is disconnected or there is a faulty connector e Short There is an electrical short in the cable e Cable Test Failed The cable status could not be determined The cable may in fact be working Cable Length If this feature is supported by the PHY for the current link speed the cable length is displayed as a range between the shortest estimated length and the longest estimated length Note that if the link is down and a cable is attached to a 10 100 Ethernet adapter then the cable status may display as Open or Short because some Ethernet adapters leave unused wire pairs unterminated or grounded Unknown is displayed if the cable length could not be determined sFlow Commands sFlow is the standard for monitoring high speed switched and routed networks sFlow technology is built into network equipment and gives complete visibility into network activity enabling effective management and control of network resources Utility Commands 425 M4100 Series ProSAFE Managed Switches sflow receiver Use this command to configure the sFlow collector parameters owner string receiver time out maximum datagram size IP address and port for a pol
163. the forwarding plane requires pps versus an absolute rate kbps For example if the configured limit is 10 percent this is converted to 25000 pps and this pps limit is set in forwarding plane hardware You get the approximate desired output when 512 bytes packets are used Switching Commands 97 M4100 Series ProSAFE Managed Switches storm control broadcast Interface Config Use this command to enable broadcast storm recovery mode for a specific interface If the mode is enabled broadcast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic is dropped Therefore the rate of broadcast traffic will be limited to the configured threshold Default enabled Format storm control broadcast Mode Interface Config no storm control broadcast Use this command to disable broadcast storm recovery mode for a specific interface Format no storm control broadcast Mode Interface Config storm control broadcast level Interface Config Use this command to configure the broadcast storm recovery threshold for an interface as a percentage of link speed and enable broadcast storm recovery If the mode is enabled broadcast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic is dropped Therefore the rate of broadcast traffic is limi
164. the group The possible values for protocol list includes the keywords ip arp and ipx and hexadecimal or decimal values ranging from 0x0600 1536 to OxFFFF 65535 The protocol list can accept up to 16 protocols separated by a comma Default none Format vlan protocol group add protocol lt groupid gt lt ethertype gt lt protocol list gt arp ip ipx Mode Global Config Switching Commands 52 M4100 Series ProSAFE Managed Switches no vian protocol group add protocol This command removes the lt protoco1 gt from this protocol based VLAN group that is identified by this lt groupid gt The possible values for protocol are ip arp and ipx no vlan protocol group add protocol lt groupid gt lt ethertype gt lt protocol list gt arp ip ipx Mode Global Config protocol group This command attaches a lt vlanid gt to the protocol based VLAN identified by lt groupid gt A group may only be associated with one VLAN at a time however the VLAN association can be changed Default none Format protocol group lt groupid gt lt vlanid gt Mode VLAN Config no protocol group This command removes the lt vlanid gt from this protocol based VLAN group that is identified by this lt groupid gt Format no protocol group lt groupid gt lt vlanid gt Mode VLAN Config protocol vlan group This command adds the physical interface to the protocol ba
165. the interface to monitor Use rx to monitor only ingress packets or use tx to monitor only egress packets If you do not specify an rx or tx option the destination port monitors both ingress and egress packets Switching Commands 125 M4100 Series ProSAFE Managed Switches A VLAN can be configured as the source to a session all member ports of that VLAN are monitored Remote port mirroring is configured by adding the RSPAN VLAN ID At the source switch the destination is configured as the RSPAN VLAN and at the destination switch the source is configured as the RSPAN VLAN Note The source and destination cannot be configured as remote on the same device The reflector port is configured at the source switch The reflector port forwards the mirrored traffic towards the destination switch Note This port must be configured with RSPAN VLAN membership IP MAC ACL can be attached to a session by giving the access list number name Use the destination interface lt slot port gt to specify the interface to receive the monitored traffic Use the mode parameter to enable the administrative mode of the session If enabled the probe port monitors all the traffic received and transmitted on the physical monitored port Use the filter parameter to filter a specified access group either by IP address or MAC address Format monitor session lt session 1d gt source interface lt slot port gt cpu vlan lt vlan id gt
166. the known OUI of the phone Default oui based Format auto voip protocol based oui based Mode e Global Config Interface Config no auto voip protocol based oui based This command is used to set default mode Format no auto voip protocol based oui based Mode e Global Config Interface Config Quality of Service Commands 312 M4100 Series ProSAFE Managed Switches auto voip oui This command is used to configure an OUI for Auto VoIP The traffic from the configured OUI will get the highest priority over the other traffic A list of known OUls is present auto voip oui lt oui prefix gt oui desc lt string gt no auto voip oui This command is to delete already configured OUI Format no auto voip oui lt oui prefix gt Mode Global Config auto voip vian This command is used to configure the global auto VoIP VLAN ID The VLAN behavior depends on the configured auto VoIP mode Default None Format auto voip vlan lt vlan id gt Mode Global Config no auto voip vlan This command is used to remove the configured auto VoIP mode Format no auto voip vlan Mode Global Config auto voip oui based priority This command is used to configure the global OUI based auto VoIP priority If the phone OUI is matches one of the configured OUI the priority of traffic from the phone is changed to OUI priority configured through this c
167. the switch management CPU It will allow you to save the changes at the end After the session simply use the newly assigned IP address to access the Web GUI using any public domain Web browser Admin password not defined Do you want to change the password Y N 0 y Enter new password x x Confirm new password x x x x Password Changed The enable password required for switch configuration via the command line interface is currently not configured Do you wish to change it Y N 0 y Enter new password x x Confirm new password x x x x Password Changed Assigning an IP address to your switch management Current IP Address Configuration IP address 0 0 0 0 Subnet mask 0 0 0 0 Gateway address 0 0 0 0 Would you like to assign an IP address now Y N Q y IP Address 10 10 10 1 Subnet mask 255 255 255 0 Gateway address 10 10 10 10 Do you want to assign switch name and location information Y N Q y System Name testunit1 System Location testlab System Contact Bud Lightyear There are changes detected do you wish to save the changes permanently Y N y The configuration changes have been saved successfully Please enter show running config to see the final configuration Thanks for using EzConfig Management Commands 445 M4100 Series ProSAFE Managed Switches Management Interface Commands This section describes the commands you
168. though when receivers are in different VLANs Multicast VLAN registration MVR is intended to solve the problem of receivers in different VLANs It uses a dedicated manually configured VLAN called the multicast VLAN to forward multicast traffic over a Layer 2 network with IGMP snooping MVR Commands mvr This command enables MVR Default Disabled Format mvr Mode Global Config Interface Config no mvr This command disables MVR Format no mvr Mode Global Config Interface Config mvr group This command adds an MVR membership group lt A B C D gt is the IP multicast group being added The count is the number of incremental multicast groups being added the first multicast group is A B C D If a count is not specified only one multicast group is added Format nvr group lt A B C D gt count Mode Global Config Multicast VLAN Registration Commands 220 M4100 Series ProSAFE Managed Switches no mvr group This command removes the MVR membership group Format no mvr group lt A B C D gt count Mode Global Config mvr mode This command changes the MVR mode type If the mode is set to compatible the switch does not learn multicast groups they need to be configured by the operator as the protocol does not forward joins from the hosts to the router To operate in this mode the IGMP router needs to be statically configured to transmit all required multi
169. to a default value Format no poe usagethreshold lt unit gt all Mode Global Config poe traps Use this command to enable logging of specific PoE related events such as a PoE port powering a device the threshold being exceeded and so on Default Enable Format poe traps Mode Global Config Power over Ethernet Commands 323 no poe traps M4100 Series ProSAFE Managed Switches Use this command to disable logging the PoE traps no poe traps Global Config show poe Use this command to get global information regarding the PoE status Format show poe Mode e Privileged EXEC User EXEC Term Definition Firmware Version The firmware version of the PoE controller on the switch PSE Main Operational Status Indicates the status of the PoE controller e ON Indicates that the PoE controller is actively delivering power e OFF Indicates that the PoE controller is not delivering power e FAULTY Indicates that the PoE controller is not functioning Total Power Main AC Indicates the maximum amount of power that can be delivered by this PoE unit when on system power Total Power RPS Total Power PD Power Source Threshold Power Indicates the maximum amount of power that can be delivered by this PoE unit when on RPS Indicates the maximum amount of power that can be delivered by this PoE unit when on the PD source This field
170. to be used for the specified login user Authentication SNMPv3 The encryption protocol to be used for the specified login user Encryption show users accounts Use this command to display the local user status about user account lockout and password aging Format show users accounts Mode Privileged EXEC Term Definition User Name The local user account s user name Privilege The user s privilege level 1 15 Password aging The password aging time for the local users Lockout Status Indicates whether the user account is locked out true or false Password The current password expiration date in date format Expiration Date show users accounts detail This command displays the local user status about user account lockout and password aging It also includes information about Password strength and complexity Format show users accounts detail Mode Privileged EXEC Command example NETGEAR Switch show users accounts detail UserName iii rig Goer dared athe ed oe tere ee admin THO GRO U tiene scene erases Marbut asd actin ds nd a a False Override Complexity CheCk ooooooomomoo eee Disable Password GEREN GUI sct wide cit la Grete dine igen w end a e DUSSE AIMES 1 hee ae ASADAS RARAS AAA A guest PETT Oia A E aaa add ay 1 Password AGEN Fira a a a iii eiii aa Management Commands 472 M4100 Series ProSAFE Managed Switches PAS SWOT TER P Vi Wi
171. to create semaphore for global data semaphore protection SSHD SSHD Msg Queue is full event XXXX Failed to send the message to the SSHD message queue as message queue is full XXXX indicates the event to be sent Log Messages 539 M4100 Series ProSAFE Managed Switches Table 18 SSHD Log Messages Component Message Cause SSHD Unknown UI event in message Failed to dispatch the UI event to the event XXXX appropriate SSHD function as it s an invalid event XXXX indicates the event to be dispatched sshdApiCnfgrCommand Failed calling Failed to send the message to the SSHD sshdlssueCmd message queue Table 19 SSLT Log Messages Component Message Cause SSLT SSLT Exceeded maximum Exceeded maximum allowed SSLT ssltConnectionTask connections SSLT SSLT Error creating Secure server socket6 Failed to create secure server socket for IPV6 SSLT SSLT Can t connect to unsecure server at Failed to open connection to unsecure XXXX result YYYY errno ZZZZ server XXXX is the unsecure server socket address YYYY is the result returned from connect function and ZZZZ is the error code SSLT SSLT Msg Queue is full event XXXX Failed to send the received message to the SSLT message queue as message queue is full XXXX indicates the event to be sent SSLT SSLT Unknown UI event in message Failed to dispatch the received UI event to event XXXX the appropriate SSLT function as it s an
172. use to configure a logical interface for management access enable Privileged EXEC access Use this command to access the Privileged EXEC mode From the Privileged EXEC mode you can configure the network interface Format enable Mode User EXEC ip management Use this command to specify the source IP address for all applications syslog SNMP client and so on Default vlan 1 Format ip management serviceport vlan lt number gt port lt slot port gt loopback lt number gt Mode User EXEC no ip management Use this command to specify the IP address of the management VLAN VLAN 1 as the source IP address for all applications syslog SNMP client and so on Format no ip management serviceport vlan lt number gt port lt slot port gt loopback lt number gt Mode User EXEC network mac address Use this command to set locally administered MAC addresses The following rules apply e Bit 6 of byte O called the U L bit indicates whether the address is universally administered b 0 or locally administered b 1 e Bit 7 of byte 0 called the I G bit indicates whether the destination address is an individual address b 0 or a group address b 1 e The second character of the twelve character macadadr must be 2 6 A or E Management Commands 446 M4100 Series ProSAFE Managed Switches A locally administered address must have bit 6 On b 1 and b
173. with 4 next hops used by 1 route 172 20 31 100 on interface 2 31 172 20 32 100 on interface 2 32 172 20 33 100 on interface 2 33 172 20 34 100 on interface 2 34 Routing Commands 247 M4100 Series ProSAFE Managed Switches show ip route summary Use this command to display the routing table summary Use the optional a11 parameter to show the number of all routes including best and non best routes To include only the number of best routes do not use the optional parameter If you enter the optional a11 keyword some statistics such as the number of routes from each source include counts for alternate routes An alternate route is a route that is not the most preferred route to its destination and therefore is not installed in the forwarding table If you do not enter the optional a11 keyword the output reports only the best routes Format show ip route summary all Modes e Privileged EXEC e User EXEC Connected The total number of connected routes in the routing table Routes Static Routes Total number of static routes in the routing table RIP Routes Total number of routes installed by RIP protocol OSPF Routes Total number of routes installed by OSPF protocol Reject Routes Total number of reject routes installed by all protocols Total Routes Total number of routes in the routing table Best Routes The number of best routes currently in the routing table This number counts only the
174. 00 88 96 1 0 2 1 Disabled Admit All 1 30 40 55 none none Double VLAN Commands This section describes the commands you use to configure double VLAN DVLAN Double VLAN tagging is a way to pass VLAN traffic from one customer domain to another through a Metro Core in a simple and cost effective manner The additional tag on the traffic helps differentiate between customers in the MAN while preserving the VLAN identification of the individual customers when they enter their own 802 1Q domain dvlan tunnel ethertype This command configures the ether type for all interfaces The ether type may have the values of 802 10 vman or custom If the ether type has a value of custom the optional value of the custom ether type must be set to a value from 0 to 65535 Default vman Format dvlan tunnel ethertype 802 10 vman custom lt 0 65535 gt mode dot1q tunnel This command is used to enable Double VLAN Tunneling on the specified interface Default disabled Format mode dotlg tunnel Mode Interface Config no mode dot1q tunnel This command is used to disable Double VLAN Tunneling on the specified interface By default Double VLAN Tunneling is disabled Format fro mode dotlig tunnel Mode Interface Config Switching Commands 63 M4100 Series ProSAFE Managed Switches mode dvlan tunnel Use this command to enable Double VLAN Tunneling on the specified interface Note When you use the mode dvlan tun
175. 1 count 3 port 33434 size 43 Traceroute to 10 40 1 1 30 hops max 43 byte packets 1 10 240 4 1 19 msec 18 msec 9 msec 2 10 240 1 252 0 msec 0 msec 1 msec 3 172 812029 277 msec 276 msec 277 msec 4 10 254 1 1 289 msec 327 msec 282 msec 5 10 254 21 2 287 msec 293 msec 296 msec 6 192 168 76 2 290 msec 291 msec 289 msec 7 0 0 0 0 0 msec Hop Count 6 Last TIL 7 Test attempt 19 Test Success 18 Utility Commands 366 M4100 Series ProSAFE Managed Switches traceroute ipv6 Use the traceroute command to discover the routes that packets actually take when traveling to their destination through the network on a hop by hop basis The IPv6 address or host name must be a valid The optional lt port gt parameter is the UDP port used as the destination of packets sent as part of the traceroute This port should be an unused port on the destination system The range for lt port gt is zero 0 to 65535 The default value is 33434 Default port 33434 Format traceroute ipv6 lt ipv6 address gt lt hostname gt port lt port gt Mode Privileged EXEC clear config This command resets the configuration to the factory defaults without powering off the switch When you issue this command a prompt appears to confirm that the reset should proceed When you enter y you automatically reset the current configuration on the switch to the default values It does not reset the switch Format clear config Mode
176. 1500 176 16 1 18 176 16 1 19 not configured Name servers DNS Client Preference order Source Interface Configured host name to address mapping Host Addresses aa aaaea A oo Host Total Elapsed Type Addresses tara e e Op tenes Utility Commands 399 M4100 Series ProSAFE Managed Switches Packet Capture Commands Packet capture commands assist in troubleshooting protocol related problems with the management CPU The packets to and from the management CPU can be captured in an internally allocated buffer area for export to a PC host for protocol analysis Public domain packet analysis tools like Ethereal can be used to decode and review the packets in detail Capturing can be performed in a variety of modes either transmit side only receive side only or both The number of packets captured will depend on the size of the captured packets capture start stop Use the capture start command to manually start capturing CPU packets for packet trace Capturing packets is stopped automatically when 128 packets are captured and have not yet been displayed during a capture session It is guaranteed that packets not displayed and not saved will not be lost when capturing is in progress Use the capture stop command to manually stop capturing CPU packets for packet trace before the moment when 128 packets are captured and capturing packets is stopped automatically The packet capture operates in three modes e C
177. 151 DING sita restar iaa AAA AAN cece see eeveweye anon ane 369 POC corrida tarta aii crasas 318 poe CELECHON c csvesecenedodsnotniiseneuonGusrareedeesesen en cuanamaniadauanomeminad osey es on 2 319 POS MIGM OW Sb arenom aar I daran bla pata 319 DOS POWER oido 320 567 M4100 Series ProSAFE Managed Switches poe power management a 6 5 sip Susisnspens aid e a a 320 POS PROFE coser idas cant acide da bab h seh aoe 321 POCTCSOE vaciar rr ri AS De OEE TR SEE A 322 poe timer schedule name seria crios area dd eee 322 POMMAPS i cciiccrtcthasss nar A ea ded 323 pos usagethresnold ss ctor ctacecmenede none cata bid daa 323 polite siMple esca A A id 284 police EWO FA S 4 5 oo ne e 285 poll MiP escoria eaea deus 285 police Y MaPrENaMe seed AA 286 port Mall SErver COMM ssecirianass ropa peta 364 port TACACSICONMO sscrainjaalaa aller da na 517 port ACDMOME tibia RRA AAA aaa 118 port lacpmode Smableralll ci a id 119 port lacptimeout Global CONTIG cian e ad e ee aa ad 120 port lacptimegut Interface Config debito ice 119 port channeliadminmMOde sous ecc 120 port channellinktrap e oeicrmdradc n sitiar eddie 120 port channel load balance otto 121 port channel local preference acicate nie aa 118 portsehannelMaMe sorser k oraa dra 122 HOKt E 118 POKt ChannelSYStEMIPHONILY sccdd ncieadenedeteleiieetecedetesteatacad bade cased rated 122 PORL SECUTILY esta ones oda touS UINE EEN EEEE dau ee a e 178 port security Macs dd NESS irra
178. 2 af33 af41 af42 af43 be csO cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef Note The match ip dscp match ip precedence and match ip tos commands provide alternative ways to specify a match criterion for the same Service Type field in the IP header but each command requires a slightly different user notation Defaut Format match ip dscp lt dscpval gt Mode e Class Map Config e Ipv6 Class Map Config match ip precedence This command adds to the specified class definition a match condition based on the value of the IP Precedence field in a packet which is defined as the high order three bits of the Service Type octet in the IP header the low order five bits are not checked The precedence value is an integer from 0 to 7 Note The match ip dscp match ip precedence and match ip tos commands provide alternative ways to specify a match criterion for the same Service Type field in the IP header but each command requires a slightly different user notation Default none Format match ip precedence lt 0 7 gt Mode Class Map Config match ip tos This command adds to the specified class definition a match condition based on the value of the IP ToS field in a packet which is defined as all eight bits of the Service Type octet in the IP header The value of lt tosbit s gt is a two digit hexadecimal number from 00 to ff The value of lt tosmask gt is a two digit hexadecimal number from 00 to ff The lt tosmask
179. 2 1X dot1xApplyConfigData Unable to DTL call failed enabling disabling 802 1X lt enable disable gt dot1x in driver 802 1X dotixSendRespToServer Failed sending message to RADIUS server dot1xRadiusAccessRequestSend failed 802 1X dot1xRadiusAcceptProcess error calling Failed sending accounting start to RADIUS radiusAccountingStart iflndex xxx server 802 1X function failed sending terminate cause Failed sending accounting stop to RADIUS intf xxx server Table 25 IGMP Snooping Log Messages Component Message Cause IGMP Snooping function osapiMessageSend failed IGMP Snooping message queue is full IGMP Snooping Failed to set global igmp snooping mode to Failed to set global IGMP Snooping mode due to message queue being full IGMP Snooping Failed to set igmp snooping mode xxx for Failed to set interface IGMP Snooping interface yyy mode due to message queue being full IGMP Snooping Failed to set igmp mrouter mode xxx for Failed to set interface multicast router interface yyy mode due to IGMP Snooping message queue being full IGMP Snooping Failed to set igmp snooping mode xxx for _ Failed to set VLAN IGM Snooping mode due to message queue being full Log Messages 543 M4100 Series ProSAFE Managed Switches Table 25 IGMP Snooping Log Messages Component Message Cause IGMP Snooping Failed to set igmp mrouter mode d for interface xxx on VLAN yyy Failed to set V
180. 3 show ip dhep Snooping sui dd ia was 142 show ip dhep Snooping Dinding scnrvcccsccercssosssecne rend ennernanNeeseaGa s a 143 SHOW ip dhep snooping database asin 144 show ip dh hepsnoopinginterfaces aianciacacadecdvaeeees ede srcdunvonowrekekeuaheeeerseseseaauas 144 show ip dhcp snooping statistics eos pra eee pases de 145 SHOW ID MEIPEN SLALISUES seccional TRE EEEE eaves perrera 259 show ip helper addiess oo c ccdaciaeemacnnerdededoaa RR tee oe MENTS SESE EERE RARER TEE 258 SHONI IE eea A A A AA aul Beene Bae 466 SHOW Ip Interface cavacasinida aia aaa 242 Show ip mtenace Bret sai a doc 243 SHOW IPiprotoc0ls esos terapia E 244 SHOW IP OULEs ni 0 4 04 4 0 03 eked daria died sedan obs 245 SHOW iprouteecmp groupS asis 247 SHOW Ip FOULE preferentes monarca rc ie Value eee eenedne anaes 250 SHOW ip FOULS SUMMAN eresie ra oia dad A aad been deeds eS 248 SHOW IP Source DINING e 5 ci cu wccndose es eee abe rs Ei Sadie darode rears ai gas 147 A tote a a a bet eot se doansadasteneucad bebe onset s ectoteqeseoas 459 SOW IDSLAES lt csvicwios on asii NN A a 250 SHOW IP Verify SOURCE soria ie a is hc 146 SHOW AS VIAN cerdo banda 252 SHOW IPVE ACCESSHIISES 2 5 o ccxdaainAerEITTTOE ee AA 308 SIMO WY AS CUD ware ae IE A gates eases baud nn Seah EAE eee Og I E a hae a oe 215 SHOW SdP ENUY lt span E ea 216 SHOW ISdp Interhace 4 44 arica aos 216 SHOWISAPINGIGHDONS ca kn decd cose stile il i 216 SHOWISAPAPRE a agaresrr ir eat 217 SHOW IAGO actor ci E
181. 447 network MAaCH AAFESS evi AA aaa 446 network mac type siii a Aaa 447 NETWORK MOMENISN escocesas took ekasatogadondekedaor Guewseeserersesaes 46 MEXESSCIVER sesprrmdateatariiar errada cats 388 no clock SUMMERTIME ds 380 OPLON sxcececegecs ara anos aerea 389 password AAAIAS User Configuration asias eiii ri ad anawdaaaes 490 password Mail Server Coni i005 0ranreGueracesices usii naida n EE 364 PassWordsiagidl t c40 0404ehidieacnande ona acabes 474 passwords NISLOLY ia AAA ASA AAA AAA AAA 474 passwords lO EK 0UE seers rn RR EE EEE aE SESH a la nt 475 passwords minalengtl sisi lcd ida bed 473 passwords strengtexciude keyword scsiniriorriornrrrs rra errar SE CRORE ORES 478 passwords strength maximum consecutive characters 0 0 cece cece eee 477 passwords strength maximum repeated characters 1 1 0 cece rro 478 passwords strength minimum character classes 0 c cece eee eee eee 478 passwords strength minimum lowercase letters 00 eee eee eee teen eee 476 passwords strength minimum numeric characters 0 0 02 cece eee eee 476 passwords strength minimum special characters 1 1 cc cece eect e eens 477 passwords strength minimum uppercase letters 2 0 eect teen e teen eens 475 passwords StIENGEMHACHEEK sic cerca rider 475 Parodie ME vecccccengentanwnaasauieuUareseeese 44504 ria 311 DEMOLER a eRe GRRE LEE AR OREMOAEMEMEMEDET ESSERE RRR ER HE 310 permit Ip MOStIMACMOSE sorsra ddar aula aga au Hem ad
182. 5 03045 The parameters that are shown in the following table are displayed in the trace message RX A packet received by the device Intf The interface that the packet went out on Format used is slot port internal interface number Unit is always shown as 1 for interfaces on a non stacking device Src_Mac Source MAC address of the packet Dest_Mac Destination multicast MAC address of the packet Src_IP The source IP address in the ip header in the packet Dest_IP The destination multicast ip address in the packet Type The type of IGMP packet Type can be one of the following e Membership Query IGMP Membership Query V1_Membership_ Report IGMP Version 1 Membership Report e V2_Membership_ Report IGMP Version 2 Membership Report V3 Membership Report IGMP Version 3 Membership Report e V2_Leave_Group IGMP Version 2 Leave Group Group Multicast group address in the IGMP header no debug igmpsnooping receive This command disables tracing of received IGMP Snooping packets Format no debug igmpsnooping receive Privileged EXEC debug ip acl Use this command to enable debug of IP Protocol packets matching the ACL criteria Default disabled debug ip acl lt acl number gt Privileged EXEC Utility Commands 408 M4100 Series ProSAFE Managed Switches no debug ip acl Use this command to disable debug of IP Protocol packets matching the ACL criteria Format no debug ip acl l
183. 5 gt JAN 02 11 03 31 10 50 50 1 2 OSPF 46300472 ospf_debug c 297 25430 Pkt RX Intf 2 0 48 Srce Ip 192 168 50 2 DestIp 224 0 0 5 Areald 0 0 0 0 Type HELLO NetMask 255 255 255 0 DesigRouter 0 0 0 0 Backup 0 0 0 0 lt 15 gt JAN 02 11 03 35 10 50 50 1 2 OSPF 46300472 ospf_debug c 293 25431 Pkt TX Intf 2 0 48 Srce Ip 10 50 50 1 DestIp 192 168 50 2 Areald 0 0 0 0 Type DB_DSCR Mtu 1500 Options Flags 1 M MS Seq 126166 GI lt 15 gt JAN 02 11 03 36 10 50 50 1 2 OSPF 46300472 ospf_debug c 297 25434 Pkt RX Intf 2 0 48 Sre Tp 192 168 50 2 DestIp 192 168 50 1 Areald 0 0 0 0 Type LS_REQ Length 1500 lt 15 gt JAN 02 11 03 36 10 50 50 1 2 OSPF 46300472 ospf_debug c 293 25435 Pkt TX Intf 2 0 48 Sre Ip 10 50 50 1 DestIp 192 168 50 2 AreaId 0 0 0 0 Type LS_UPD Length 1500 N Utility Commands 415 M4100 Series ProSAFE Managed Switches The parameters that are shown in the following table are displayed in the trace message Parameter Definition TX RX TX refers to a packet transmitted by the device RX refers to packets received by the device Intf The interface that the packet came in or went out on Format used is slot port internal interface number The source IP address in the IP header of the packet The destination IP address in the IP header of the packet The area ID in the OSPF header of the packet Could be one of the following HELLO Hello packet DB_DSCR Dat
184. 7 M4100 Series ProSAFE Managed Switches sflow poller A data source configured to collect counter samples is called a poller Use this command to enable a new sFlow poller instance for this data source if lt rcvr idx gt is valid Format sflow poller lt rcvr indx gt interval lt poll interval gt Mode Interface Config Field Description S O Receiver Index Enter the sFlow Receiver associated with the sampler poller A value of zero 0 means that no receiver is configured The range is 1 8 The default is 0 Poll Interval Enter the sFlow instance polling interval A poll interval of zero 0 disables counter sampling When set to zero 0 all the poller parameters are set to their corresponding default value The range is 0 86400 The default is 0 A value of N means once in N seconds a counter sample is generated no sflow poller Use this command to reset the sFlow poller instance to the default settings Format no sflow poller lt rcvr indx gt interval lt poll interval gt Mode Interface Config show sflow agent The sFlow agent collects time based sampling of network interface statistics and flow based samples These are sent to the configured sFlow receivers Use this command to display the sFlow agent information show sflow agent Mode Privileged EXEC Field Description III sFlow Version Uniquely identifies the version and implementation of this MIB The version s
185. 7 sntp unicast client poll interval cocino parrir reas eds 376 SHEP Unicast client pollretry sesosissreasiiasassnrrosias ii dbi En Ekr aA Enika 377 sntp unicast client poll timeout vescininonorrrrcitsaicsarr crab 376 ooe e a arca a oro EET 27 SPANNING MESAULO EdGE ds orrira wer eee ere Sess a e 27 spanning tree DPAUNILSE herrea oedeae poe ae daw ATATEN E E ERE RA 28 spanning tree bpdufilter default cece tint iC CEOE EEEE e tenes 28 Spanning tree bpdutlOOd vmcorianasa rr eee dla 29 spanni gstres DpdutorWardind mierda iras rs ns rl e A a 37 SPANNING MCSDPAUQUANA vorarrria arroces ander 29 spanning tres bpaumigrationcn csi ii il ii e MEARS 29 spanning tree configuration NAME cuecinmimcio rior carr 30 spanning tree configuration revision oooooooccococcconccnccro rr rr 30 SPANNING MWESCAQEPOME sonoras ri ie A 30 Spahning treSedgeportall vecrcua ni perdonar raro a 37 spanining tie e Orce Version scucisccerseavarerestereideds edb igussedsucherdiekoeseseaeediaadonanes 31 spanning tree for Ward tiMe cviicscviccvenswe cree ere e eii see seers eee ea 31 SPAMMING treg guard 2 0dcida rd os oi oa kbps 32 SPANNING WEE Max 29 6 hic scsisassseesssdeaseweewe reer ee essa ie 33 Spanming thee MaX NOPSi 05 o2 lt c acemuandeoeorgetsrt ee docngesasteaeecad e hekkda dadete daras 33 SPANMING WeSIMNSt 40405 Fe AAA AAA oe ee ee ewan 33 spanning ree mst instante susana dr in cid n y dan RAE THRE SHA VOW e Seg wig dt 35 spanning tree met pri
186. 819 2488 f177 is 01c8 1924 88f1 77 where 01 represents the Ethernet media type For more information refer to the Address Resolution Protocol Parameters section of RFC 1700 Assigned Numbers for a list of media type codes Default none Format client identifier lt uniqueidentifier gt Mode DHCP Pool Config no client identifier This command deletes the client identifier Format no client identifier Mode DHCP Pool Config client name This command specifies the name for a DHCP client Name is a string consisting of standard ASCII characters Defaut Format client name lt name gt Mode DHCP Pool Config Utility Commands 383 M4100 Series ProSAFE Managed Switches no client name This command removes the client name Format no client name Mode DHCP Pool Config default router This command specifies the default router list for a DHCP client lt address1 gt and lt address2 gt lt address8 gt must be valid IP addresses each made up of four decimal bytes ranging from 0 to 255 IP address 0 0 0 0 is invalid Default none Format default router lt address1 gt lt address2 gt lt address8 gt Mode DHCP Pool Config no default router This command removes the default router list Format no default router Mode DHCP Pool Config dns server This command specifies the IP servers available to a DHCP client Address parameters
187. AC address Destination MAC address e TCP Port Source TCP Port Destination TCP Port Switching Commands 201 M4100 Series ProSAFE Managed Switches UDP Port Source UDP Port Destination UDP Port e TCP Flag amp Sequence TCP Flag SYN set and Source Port lt 1024 or TCP Control Flags 0 and TCP Sequence Number 0 or TCP Flags FIN URG and PSH set and TCP Sequence Number 0 or TCP Flags SYN and FIN set TCP Offset TCP Header Offset 1 e TCP SYN TCP Flag SYN set TCP SYN FIN TCP Flags SYN and FIN set TCP FIN amp URG PSH TCP Flags FIN and URG and PSH set and TCP Sequence Number 0 e ICMP V6 Limiting the size of ICMPv6 Ping packets e ICMP Fragment Checks for fragmented ICMP packets dos control all This command enables Denial of Service protection checks globally Default disabled Format dos control all Mode Global Config no dos control all This command disables Denial of Service prevention checks globally Format no dos control all dos control sipdip This command enables Source IP address Destination IP address SIP DIP Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress with SIP DIP the packets will be dropped if the mode is enabled Default disabled Format dos control sipdip Switching Commands 202 M4100 Series ProSAFE Managed Switches no dos cont
188. AC addresses to statically locked addresses Format port security mac address move Interface Config port security mac address stick y This command enables sticky mode Port MAC Locking on a port If accompanied by a MAC address and a VLAN id for interface config mode only it adds a sticky MAC address to the list of statically locked MAC addresses These sticky addresses are converted back to dynamically locked addresses if sticky mode is disabled on the port The lt vid gt is the VLAN ID The Global command applies the sticky mode to all valid interfaces physical and LAG There is no global sticky mode as such Sticky addresses that are dynamically learned display in the output of the show running config command as port security mac address sticky lt mac gt lt vid gt entries This distinguishes them from static entries port security mac address sticky lt mac address gt lt vid gt Global Config Interface Config Switching Commands 180 M4100 Series ProSAFE Managed Switches no port security mac address sticky The no form removes the sticky mode The sticky MAC address can be deleted by using the command no port security mac address lt mac address gt lt vid gt Format no port security mac address sticky lt mac address gt lt vid gt Modes e Global Config Interface Config show port security This command displays the port security settings If you do not use a parameter t
189. AFE Managed Switches no dos control l4port This command disables L4 Port Denial of Service protections Format no dos control 14port Mode Global Config dos control icmp This command enables Maximum ICMP Packet Size Denial of Service protections If the mode is enabled Denial of Service prevention is active for this type of attack If ICMP Echo Request PING packets ingress having a size greater than the configured value the packets will be dropped if the mode is enabled Default disabled lt 512 gt Format dos control icmp lt 0 1023 gt Mode Global Config no dos control icmp This command disables Maximum ICMP Packet Size Denial of Service protections Format no dos control icmp Mode Global Config dos control smacdmac This command enables Source MAC address Destination MAC address SMAC DMAC Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress with SMAC DMAC the packets will be dropped if the mode is enabled Default disabled Format dos control smacdmac no dos control smacdmac This command disables Source MAC address Destination MAC address SMAC DMAC Denial of Service protection Format no dos control smacdmac Mode Global Config Switching Commands 205 M4100 Series ProSAFE Managed Switches dos control tcpport This command enables TCP L4 source
190. C debug ipv6 ospfv3 packet Use this command to enable OSPF v3 packet debug trace Default disabled Format debug ipv6 ospfv3 packet Mode Privileged EXEC no debug ipv6 ospfv3 packet Use this command to disable tracing of OSPFv3 packets Format no debug ipv ospfv3 packet Mode Privileged EXEC Utility Commands 417 M4100 Series ProSAFE Managed Switches debug ping packet This command enables tracing of ICMP echo requests and responses The command traces pings on the network port or service port for switching packages For routing packages pings are traced on the routing ports as well Default disabled Format debug ping packet Mode Privileged EXEC Command example NETGEAR Switch debug ping packet lt 15 gt JAN 01 00 21 22 192 168 17 29 1 SIM 181040176 sim_debug c 128 20 Pkt TX Intf 0 1 1 SRC_IP 10 50 50 2 DEST_IP 10 50 50 1 Type ECHO_REQUEST lt 15 gt JAN 01 00 21 22 192 168 17 29 1 SIM 182813968 sim_debug c 82 21 Pkt RX Intf 0 1 1 S RC_IP 10 50 50 1 DEST_IP 10 50 50 2 Type ECHO_REPLY The parameters that are shown in the following table are displayed in the trace message Parameter Definition TX RX TX refers to a packet transmitted by the device RX refers to packets received by the device Intf The interface that the packet came in or went out on Format used is slot port internal interface number Unit is always shown as 1
191. Class Type A class type of all means every match criterion defined for the class is evaluated simultaneously and must all be true to indicate a class match Class Layer3 The Layer 3 protocol for this class Possible values are IPv4 and IPv6 Protocol Match Criteria The Match Criteria fields are only displayed if they have been configured Not all platforms support all match criteria values They are displayed in the order entered by the user The fields are evaluated in accordance with the class type The possible Match Criteria fields are Destination IP Address Destination Layer 4 Port Destination MAC Address Ethertype Source MAC Address VLAN Class of Service Every IP DSCP IP Precedence IP TOS Protocol Keyword Reference Class Source IP Address and Source Layer 4 Port Values The values of the Match Criteria If you do not specify the class name this command displays a list of all defined DiffServ classes The fields that are shown in the following table are displayed Term Definition Class Name The name of this class Note that the order in which classes are displayed is not necessarily the same order in which they were created Class Type A class type of all means every match criterion defined for the class is evaluated simultaneously and must all be true to indicate a class match Reference Class The name of an existing DiffServ class whose match conditions are being referenced by Name the
192. Component Message Cause Protected Ports Protected Port failed to save configuration Appears when the protected port configuration cannot be saved Protected Ports protectedPortCnfgrinitPhase1 Process Appears when protectedPortCfgRWLock Unable to create r w lock for protectedPort Fails Protected Ports protectedPortCnfgrinitPhase2Process Appears when nimRegisterlntfChange with Unable to register for VLAN change VLAN fails callback Protected Ports Cannot add intlfNum xxx to group yyy Appears when an interface could not be added to a particular group Protected Ports Unable to set protected port group Appears when a dil call fails to add interface mask at the driver level Protected Ports Cannot delete intlfNum xxx from group yyy Appears when a dil call to delete an interface from a group fails Protected Ports Cannot update group YYY after deleting This message appears when an update interface XXX group for an interface deletion fails Protected Ports Received an interface change callback Appears when an interface change while not ready to receive it callback has come before the protected port component is ready Log Messages 541 M4100 Series ProSAFE Managed Switches Table 22 IP Subnet VLANS Log Messages Component Message Cause IPsubnet vlans ERROR vianlpSubnetSubnetvValid Invalid Occurs when an invalid pair of subnet and subnet netmask has come from the CLI IPsubnet
193. Config 0 0 c cece cece eee rr 103 storm control multicast rate Interface Config cece cece ete nett een ees 101 storm control unicast Global Config eiii ria e eee ae aia 105 storm control unicast Interface Config oooocccocccccccncccrcrrr nett t ene t nee eens 103 storm control unicast level Global Config 000 c cece cece eee een eee eeeees 105 storm control unicast level Interface Config 0 c cece cece eee eee e nee eenes 104 storm control unicast rate Global Config 0 cece eect rar 106 storm control unicast rate Interface Config 0 cece cece nett rr 104 SWITEMPOMEAECSSS VAM aia lr A 61 SWITCHPOFE MOUS c 45 00 008 se HEHE SETTLE AA AAA AA a cami 59 switchport mode PHVALESVIAM sara 72 SWitenport Private Vial sa sprocananincdgecacakermiaGn SAA 71 switchport protected Global Config 0 ccc cece rn 68 switchport protected Interface Config 0 cece cece cnn 69 switchport trunk allowed VIAN scccccrceerererdoscdcserone redone an 60 SWITCH POE trunk native Vian 5 09 0 nccee a a aD busied OES DRE ASS 60 LACACS SELVER NOSE sois iaa id ei ae alada 514 tacacs Server Key at a A AAA 515 tacacs seryer KeyString seconds nera ai a 515 tacacs server source interface oooooororr eee n enn e eee e tenn enn eee eees 516 LACACS SErVErUMEOUL rss aaeruveswOsetoecudsdsddaugaddaguvrmeboereidaeseeseaadeange 516 ler dra a desa iaa 452 LEIMETCOMMAKSESSIONS
194. Config no ip arp inspection trust Use this command to configure an interface as untrusted for Dynamic ARP Inspection Format no ip arp inspection trust Mode Interface Config ip arp inspection limit Use this command to configure the rate limit and burst interval values for an interface Configuring none for the limit means that the interface is not rate limited for Dynamic ARP Inspections Note The user interface will accept a rate limit for a trusted interface but the limit will not be enforced unless the interface is configured to be untrusted Default 15 pps for rate and 1 second for burst interval Format ip arp inspection limit rate lt pps gt burst interval lt seconds gt none Mode Interface Config Switching Commands 149 M4100 Series ProSAFE Managed Switches no ip arp inspection limit Use this command to set the rate limit and burst interval values for an interface to the default values of 15 pps and 1 second respectively Format no ip arp inspection limit Mode Interface Config ip arp inspection filter Use this command to configure the ARP ACL used to filter invalid ARP packets on a list of comma separated VLAN ranges If you enter the static keyword packets that do not match a permit statement are dropped without consulting the DHCP snooping bindings Default No ARP ACL is configured on a VLAN Format ip arp inspection filter lt acl name gt v
195. D is a valid VLAN identification number Format no vlan port tagging all Mode Global Config Switching Commands 51 M4100 Series ProSAFE Managed Switches vlan protocol group This command adds protocol based VLAN groups to the system When it is created the protocol group will be assigned a unique number 1 128 that will be used to identify the group in subsequent commands Format vian protocol group lt 1 128 gt Mode Global Config no vian protocol group This command removes a protocol group Format no vlan protocol group lt 1 128 gt Mode Global Config vlan protocol group name This command assigns a name to a protocol based VLAN group The groupname variable can be a character string of 0 16 characters Format vian protocol group name lt 1 128 gt lt groupname gt Mode Global Config no vlan protocol group name This command removes the name from a protocol based VLAN group Format no vlan protocol group name lt 1 128 gt Mode Global Config vlan protocol group add protocol This command adds the protocol to the protocol based VLAN identified by groupid A group may have more than one protocol associated with it Each interface and protocol combination can only be associated with one group If adding a protocol to a group causes any conflicts with interfaces currently associated with the group this command fails and the protocol is not added to
196. DIUS Attribute 4 Mode Enable RADIUS Attribute 4 Value 192 168 37 60 Command example NETGEAR Switch show radius servers 192 168 37 58 perver NEMO ei ak hae 44605 608 ROKR AKER ES Default_RADIUS_Server Host Addres Sis eaae te 192 168 37 58 Secret Contigua emi aa E No essage Authenticator Enable umber of Retransmits 6 3 Time DUCATI al aa 10 RADIUS Accounting MOde oo oooooo ooo Disable RADIUS Attribute 4 Mode Enable Management Commands 509 M4100 Series ProSAFE Managed Switches RADIUS Attribute 4 Value 192 168 37 60 show radius accounting Use this command to display a summary of configured RADIUS accounting servers show radius accounting name lt servername gt Privileged EXEC Field Description RADIUS Accounting A global parameter to indicate whether the accounting mode for all the servers is Mode enabled or not If you do not specify any parameters only the accounting mode and the RADIUS accounting server details are displayed Field Definition Host Address The IP address of the host Server Name The name of the accounting server Port The port used for communication with the accounting server Secret Configured Yes or No Boolean value indicating whether this server is configured with a secret Command example NETGEAR Switch show radius a
197. Default disabled Format routing Mode Interface Config no routing This command disables routing for an interface You can view the current value for this function with the show ip brief command The value is labeled as Routing Mode Format no routing Mode Interface Config ip routing This command enables the IP Router Admin Mode for the master switch Format ip routing no ip routing This command disables the IP Router Admin Mode for the master switch Format no ip routing Mode Global Config ip address This command configures an IP address on an interface You can also use this command to configure one or more secondary IP addresses on the interface The command supports RFC 3021 and accepts using 31 bit prefixes on IPv4 point to point links This command adds the label IP address in show ip interface Routing Commands 234 M4100 Series ProSAFE Managed Switches Note The 31 bit subnet mask is only supported on routing interface This feature is not supported on a network port because it acts as a host not a router on the management interface Format ip address lt ipaddr gt lt subnetmask gt lt prefix length gt secondary Mode Interface Config Parameter Description lt ipaddr gt The IP address of the interface lt subnetmask gt A four digit dotted decimal number that represents the subnet mask of the interface lt prefix length gt Implem
198. Description lt 1233 gt OF lt I00 7127 gt Range 1 99 is the access list number for an IP standard ACL Range 100 199 is the access list number for an IP extended ACL deny permit Specifies whether the IP ACL rule permits or denies an action Match every packet icmp igmp ip tcp udp lt number gt Specifies the protocol to filter for an extended IP ACL rule lt number gt can be a value from 0 255 lt srcip gt lt sremask gt Specifies a source IP address and source netmask for match condition of the IP ACL rule Quality of Service Commands 298 M4100 Series ProSAFE Managed Switches Parameter Description eq lt portkey gt lt 0 65535 gt lt dstip gt lt dstmask gt precedence lt precedence gt tos lt tos gt lt tosmask gt dscp Note This option is available only if the protocol is tep or udp When eq is specified an IP ACL rule matches only if the Layer 4 port number is equal to the specified port number or port key You can enter the port number which ranges from 0 65535 or the port key which can be one of the following keywords For tcp protocol bgp domain echo ftp ftp data http smtp telnet www pop2 Of pop3 For udp protocol domain echo ntp rip snmp tftp time or who Each of these keywords translates into its equivalent port number Note Port number matches only apply to unfragmented or first fragments Note You
199. Disabled Format green mode eee Mode Interface Config Interface Range Config no green mode eee This command disables EEE Format no green mode eee Mode e Interface Config Interface Range Config clear green mode statistics This command to clears the following for a specified lt slot port gt or for all ports EEE LPI event count and LPI duration e EEE LPI history table entries e Cumulative Power savings estimates Format clear green mode statistics lt slot port gt all Mode Privileged Exec Command example NETGEAR Switch clear green mode statistics 0 1 Are you sure you want to clear the green mode port stats y n y Green Mode Stats Cleared NETGEAR Switch clear green mode statistics all Are you sure you want to clear the green mode port stats y n y Green Mode Stats Cleared Green Ethernet Commands 525 M4100 Series ProSAFE Managed Switches show green mode This command displays the green mode configuration and operational status either for the whole system or for a port This command can display the per port configuration and operational status of the green mode The status is shown only for the modes supported on the switch Format show green mode lt slot port gt Mode Privileged Exec The following table shows the fields that display if you do not specify a slot and port fig pefintion n O Energy Detect
200. EC no boot host auto save This command is used to disable automatically saving the downloaded configuration on the switch Format no boot host auto save Mode Privileged EXEC boot autoinstall start The command is used to start Auto Install on the switch Auto Install tries to download a config file from a TFTP server Format boot autoinstall start Mode Privileged EXEC boot autoinstall stop The command is used to A user might terminate the Auto Install process at any time prior to the downloading of the config file This is most optimally done when the switch is disconnected from the network or if the requisite configuration files have not been configured on TFTP servers Termination of the Auto Install process ends further periodic requests for a host specific file Format boot autoinstall stop Mode Privileged EXEC boot host retry count This command is used to set the number of attempts to download a configuration The valid range is from 1 to 6 Default 3 Format boot host retry count lt count gt Mode Privileged EXEC Utility Commands 330 M4100 Series ProSAFE Managed Switches no boot host retry count This command is used to reset the number to the default The default number is 3 Format no boot host retry count Mode Privileged EXEC boot host dhcp This command is used to enable Autolnstall on the switch for the next reboot cycle The comm
201. EM SYSTEM SYSTEM Migrating config file lt filename gt from version lt version num gt to lt version num gt Building Defaults sysapiCfgFileGet failed size lt expected size of file gt version lt expected version gt The configuration file identified was migrated from a previous version number Both the old and new version number are specified This message might appear after upgrading the code image to a more current release Configuration did not exist or could not be read for the specified feature Default configuration values will be used Configuration did not exist or could not be read for the specified feature This message is usually followed by a message indicating that default configuration values will be used Log Messages 534 M4100 Series ProSAFE Managed Switches Utilities Table 6 Trap Mgr Log Message Component Message Cause Trap Mgr Link Up Down slot port An interface changed link state Table 7 DHCP Filtering Log Messages Component Message Cause DHCP Filtering Unable to create r w lock for DHCP Unable to create semaphore used for dhcp Filtering filtering configuration structure DHCP Filtering Failed to register with nv Store Unable to register save and restore functions for configuration save DHCP Filtering Failed to register with NIM Unable to register with NIM for interface callback functions DHCP Filtering Error on call
202. EOLOC O diana Vendor Dis seiteeietiiestiire lila Product ID dir usb This command displays USB device contents and memory statistics Mode Privileged EXEC Utility Commands 441 M4100 Series ProSAFE Managed Switches Filename File name Filesize File size Total Size USB flash device storage size Bytes Used Indicates size of memory used on the device Bytes Free Indicates size of memory free on the device Command example NETGEAR Switch dir USB Filename Filesize Modification Time Fl cfg 256 4 22 2009 8 00 12 Total Size xxxx Bytes Used yyyy Bytes Free 2222 Utility Commands 442 Management Commands This chapter describes the management commands available in the managed switch CLI The chapter contains the following sections Switch Management CPU Commands Management Interface Commands Console Port Access Commands Telnet Commands Secure Shell SSH Commands Management Security Commands Hypertext Transfer Protocol HTTP Commands Access Commands User Account Commands SNMP Commands RADIUS Commands TACACS Commands Configuration Scripting Commands Pre Login Banner and System Prompt Commands The commands in this chapter are in three functional groups Show commands display switch settings statistics and other information Configuration commands configure features and options of the switch Every switch command has a show command that displays the configur
203. EXEC Term Definition Host Index Used for deleting hosts IP Address IP address or hostname of the logging host Hostname The minimum severity to log to the specified address The possible values are emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 or debug 7 The server port number which is the port on the local host from which syslog messages are sent Severity Level Port Host Status The state of logging to configured syslog hosts If the status is disable no logging occurs show logging traplogs This command displays SNMP trap events and statistics show logging traplogs Mode Privileged EXEC Utility Commands 357 M4100 Series ProSAFE Managed Switches Number of Traps The number of traps since the last boot Since Last Reset Trap Log The number of traps the system can retain Capacity Number of Traps The number of new traps since the command was last executed Since Log Last Viewed Log The log number System Time Up How long the system had been running at the time the trap was sent Trap The text of the trap message logging persistent Use this command to configure the persistent logging for the switch You can specify the lt severitylevel gt value as either an integer from 0 to 7 or symbolically through one of the following keywords emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 i
204. Ethertype might be specified as either a keyword or a four digit hexadecimal value from 0x0600 OxFFFF The currently supported lt ethertypekey gt values are appletalk arp Quality of Service Commands 294 M4100 Series ProSAFE Managed Switches ibmsna ipv4 ipv6 ipx mplsmcast mplsucast netbios novell pppoe and rarp Each of these translates into its equivalent Ethertype value or values The time range parameter allows imposing time limitation on the MAC ACL rule as defined by the parameter lt time range name gt If a time range with the specified name does not exist and the MAC ACL containing this ACL rule is applied to an interface or bound to a VLAN then the ACL rule is applied immediately If a time range with a specified name exists and the MAC ACL containing this ACL rule is applied to an interface or bound to a VLAN then the ACL rule is applied when the time range with a specified name becomes active The ACL rule is removed when the time range with a specified name becomes inactive Ethertype Keyword Corresponding Value arp 0x0806 iobmsna 0x80D5 ipv6 0x86DD ipx 0x8037 mplsmcast 0x8848 mplsucast 0x8847 netbios 0x8191 novell 0x8137 0x8138 pppoe 0x8863 0x8864 rarp 0x8035 The vlan and cos parameters refer to the VLAN identifier and 802 1p user priority fields respectively of the VLAN tag For packets containing a double VLAN tag this is the first or outer tag The assign q
205. F v3 Redist table manager RTO6 to be notified of best route changes There are cases where OSPF v3 deregisters more than once causing the second deregistration to fail The failure is harmless OSPFv3 Warning OSPF LSDB is 90 full 15292 OSPFv limits the number of Link State LSAs Advertisements LSAs that can be stored in the link state database LSDB When the database becomes 90 or 95 percent full OSPFv3 logs this warning The warning includes the current size of the database OSPFv3 The number of LSAs 16992 in the OSPF When the OSPFv3 LSDB becomes full LSDB has exceeded the LSDB memory OSPF v3 logs this message OSPFv3 allocation reoriginates its router LSAs with the R bit clear indicating that OSPF v3 is overloaded OSPFv3 LSA Checksum error detected for LSID OSPFv3 periodically verifies the checksum 1 2 3 4 checksum 0x34f5 OSPFv3 of each LSA in memory OSPF v3 logs this Database might be corrupted Log Messages 549 M4100 Series ProSAFE Managed Switches Table 42 Routing Table Manager Log Messages Component Message Cause Routing Table Manager RTO is full Routing table contains 8000 best routes 8000 total routes The routing table manager also called RTO stores a limited number of best routes based on hardware capacity When the routing table becomes full RTO logs this alert The count of total routes includes alternate routes which are not installed in hardware
206. Format poe detection i pre i auto Mode e Global Config Interface Config no poe detection Use this command to set the detection mode to the default on a global basis or per interface Format no poe detection Mode Global Config Interface Config poe high power Use this command to switch a port from 802 3af mode to high power mode This mode is used to power up devices that require more power than the current IEEE 802 3af power more than 12 95 watts at the PD There are three options e legacy Use this mode if the device can power up more than 12 95 watts with higher current and it cannot identify itself as a Class 4 device e pre dot3at Use this mode if the device cannot identify itself as a Class 4 device and it does not have LLDP support e dot3at Use this mode if the device is a Class 4 device capable of figuring out power requirements through 2 event classification or LLDP Default dot3at Format poe high power legacy pre dot3at dot3at Mode Interface Config Power over Ethernet Commands 319 M4100 Series ProSAFE Managed Switches no poe high power Use this command to disable the high power mode The port will support only IEEE 902 3af devices This command works on a global basis or per interface Format no poe high power Mode Interface Config poe power limit Use this command to configure the type of power limit for a port If the power
207. IBRI The same used by Routing MAC Address is used by all VLAN routing interfaces It will be displayed above the VLANs per VLAN information VLAN ID The identifier of the VLAN Logical Interface The logical slot port associated with the VLAN routing interface IP Address The IP address associated with this VLAN Subnet Mask The subnet mask that is associated with this VLAN DHCP and BOOTP Relay Commands This section describes the commands you use to configure BootP DHCP Relay on the switch A DHCP relay agent operates at Layer 3 and forwards DHCP requests and replies between clients and servers when they are not on the same physical subnet bootpdhcprelay cidoptmode This command enables the circuit ID option mode for BootP DHCP Relay on the system Default disabled Format bootpdhcprelay cidoptmode Mode Global Config Routing Commands 252 M4100 Series ProSAFE Managed Switches no bootpdhcprelay cidoptmode This command disables the circuit ID option mode for BootP DHCP Relay on the system Format no bootpdhcprelay cidoptmode Mode Global Config bootpdhcprelay maxhopcount This command configures the maximum allowable relay agent hops for BootP DHCP Relay on the system The lt hops gt parameter has a range of 1 16 Default 4 Format bootpdhcprelay maxhopcount lt hops gt no bootpdhcprelay maxhopcount This command configures the default maximum allowable
208. IPINAMESENVEN 2 cunado 396 IP NELCIRDEASE so ooororirs di A ns a ia 239 IPPO P sai la ea naar es eo E 229 PICIE ES sesisssrsis sicarios Aaaa ind ricciaa 260 PQUES 1 42 46 daras atraca tata ab 237 piroute detalle aia 238 ipro te distante eoisicarioraa REE ARA A er ana 238 PIONO 4 4gyGuuts naa os AIOE sope ames ae Os eae A Ghee eas ee hanes asada 234 IPSS eerros 64444 0d5 202 AAA E ORE RTR SRRMEREMAMEMETHNSS CESS GRR R RRR REE 457 PSSM rO er tarran ir ends 457 Ip sshserver enables dasarossds ordeno bes E dnde Erin sm 457 iptelnet server enable os 330c08 adacqenobobeeed ised dhesasasadagacedsapebebedaseteseeasssasane 452 ipunteachables siii is dd 260 IP verify DiNdiNG 00 e a 140 ID VEHEY SOURCE separo data 142 IPVO ACCESS NS E bara AAA AAA Re esa 306 IPVG access list rename eso redid Enin pi katinai ia 306 IPVOMNOSE ETETETT ATE E A T T EA E E EEE S A AT AEAEE 397 PVO traffic filter cercesre carr a de as 307 E e a 2 E E E E TE E E E E EEE EEE 214 a Aee E EE E E E E A aa es 214 ISP MOlGtIME 244 504 08 840s TE a teas a acotados 213 ISCPTUN 5 uceriternes s seto TIENENIE Aa 213 COP UNET rarer Ea E EE EEEE EEEE EE E E A E ne 214 key CTACAES COMMO rada E E ga R 517 acp actoradimMinN KEY terrrernisiaigarer epeei e ie Aenean hed Skea R aAA 111 564 M4100 Series ProSAFE Managed Switches l cp actor admin State IndiVidUal lt ss si o0esbasidatatsseeSsac oseeacae ni enbebeoenetedetesssaseser 111 lacp actor ddmin State IONQGUIMCO
209. If Energy Detect mode is configured on a combination port it will only function when a copper media is active EEE LPI statistics are only collected if a copper media is used on the port If the media on a port changes from copper to fiber while EEE is enabled LPI statistics collection stops until the media changes back to copper The outputs of the show green mode lt slot port gt and show green mode eee lpi history interface lt slot port gt commands display updated LPI statistics only if the medium is copper Green Ethernet Commands green mode energy detect Use this command enables energy detect mode on an interface or on all the interfaces Default Disabled Format green mod nergy detect Mode e Interface Config Interface Range Config no green mode energy detect This command disables energy detect mode on an interface or on all the interfaces Format no green mod nergy detect Mode e Interface Config Interface Range Config Green Ethernet Commands 524 M4100 Series ProSAFE Managed Switches green mode eee This command enables EEE low power idle mode on an interface or on all interfaces It allows both send and receive sides of a link to disable some functionality for power savings when the port is lightly loaded Transition to Low Power Mode does not change the link status Frames in transit are not dropped or corrupted in transition to and from Low Power Mode Default
210. LAN by GVRP The interface will not participate in this VLAN unless a join request is received on this interface This is equivalent to registration normal Switching Commands 49 M4100 Series ProSAFE Managed Switches vian port acceptframe all This command sets the frame acceptance mode for all interfaces Default all Format vlan port acceptframe all vlanonly all Mode Global Config The modes defined as follows Mode Definite VLAN Only Untagged frames or priority frames received on this interface are discarded mode Admit All mode Untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port With either option VLAN tagged frames are forwarded in accordance with the IEEE 802 1Q VLAN Specification no vlan port acceptframe all This command sets the frame acceptance mode for all interfaces to Admit All For Admit All mode untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port With either option VLAN tagged frames are forwarded in accordance with the IEEE 802 1Q VLAN Specification Format no vlan port acceptframe all Mode Global Config vian port ingressfilter all This command enables ingress filtering for all ports If ingress filtering is disabled frames received with VLAN IDs that do not match the VLAN mem
211. LAN multicast router mode due to IGMP Snooping message queue being full IGMP Snooping snoopCnfgrinitPhase1 Process Error Could not allocate buffers for small IGMP allocating small buffers packets IGMP Snooping snoopCnfgrinitPhase1 Process Error Could not allocate buffers for large IGMP allocating large buffers packets Table 26 GARP GVRP GMRP Log Messages Component Message Cause GARP GVRP GMRP garpSpanState garplfStateChange GarplssueCmd garpDot1sChangeCallBack garpApiCnfgrCommand garpLeaveAllTimerCallback garpTimerCallback QUEUE SEND FAILURE The garpQueue is full logs specifics of the message content like internal interface number type of message and so on GARP GVRP GMRP GarpSendPDU QUEUE SEND FAILURE The garpPduQueue is full logs specific of the GPDU internal interface number VLAN id buffer handle and so on GARP GVRP GMRP garpMaplIntflsConfigurable gmrpMapIntflsConfigurable Error accessing GARP GMRP config data for interface d in garpMapintflsConfigurable A default configuration does not exist for this interface Typically a case when a new interface is created and has no pre configuration GARP GVRP GMRP garpTraceMsgQueueUsage garpQueue usage has exceeded fifty eighty ninety percent Traces the buildup of message queue Helpful in determining the load on GARP GARP GVRP GMRP gid_destroy_port Error Removing port d registration for vlan mac
212. MRP Commands e Port Based Network Access Control Commands e 802 1X Supplicant Commands e Storm Control Commands Flow Control Commands Port Mirroring Commands e Static MAC Filtering Commands DHCP L2 Relay Agent Commands e DHCP Client Commands e DHCP Snooping Configuration Commands e Dynamic ARP Inspection Commands IGMP Snooping Configuration Commands IGMP Snooping Querier Commands e MLD Snooping Commands 17 M4100 Series ProSAFE Managed Switches MLD Snooping Querier Commands Port Security Commands LLDP 802 1AB Commands LLDP MED Commands Denial of Service Commands MAC Database Commands ISDP Commands The commands in this chapter are in three functional groups Show commands display switch settings statistics and other information Configuration commands configure features and options of the switch Every switch command has a show command that displays the configuration setting Clear commands clear some or all of the settings to factory defaults Switching Commands 18 M4100 Series ProSAFE Managed Switches Port Configuration Commands This section describes the commands you use to view and configure port settings interface This command gives you access to the Interface Config mode which allows you to enable or modify the operation of an interface port Format interface lt slot port gt Mode Global Config interface vlan This command gives you access to t
213. Managed Switches Table 45 RIP Log Message Component Message Cause RIP RIP discard response from xxx via When RIP response is received with a unexpected interface source address not matching the incoming interface s subnet Table 46 DHCP6 Log Message Component Message Cause DHCP6 relay_to_server Cannot relay to relay Relay is enabled but neither the outgoing server intf xxx not IPv6 enabled interface nor the server IP address is specified Multicast Table 47 Cache Log Messages Component Message Cause Cache Out of memory when creating entry When we run out of memory while creating a new cache MFC entry Cache Out of memory when creating cache When we run out of memory while creating the cache itself Table 48 IGMP Log Messages Component Message Cause IGMP Error creating IGMP pipe When we fail to create open IGMP pipe for Error opening IGMP pipe Mcast control messages IGMP Error creating IGMP data pipe When we fail to create open IGMP data Error opening IGMP data pipe pipe for Mcast data messages IGMP Error getting memory for source record When we are unable to allocate memory for a source record in the received IGMP V3 report IGMP Failed getting memory for new group When we are unable to allocate memory for a group record in the received IGMP V3 V2 V1 report Log Messages 551 M4100 Series ProSAFE Managed Switches Table
214. Managed Switches show dvlan tunnel Use this command without the optional parameters to display all interfaces enabled for Double VLAN Tunneling Use the optional parameters to display detailed information about Double VLAN Tunneling for the specified interface or all interfaces Format show dvlan tunnel interface lt slot port gt all Mode e Privileged EXEC User EXEC Term Definition Interface Valid slot and port number separated by forward slashes Mode The administrative mode through which Double VLAN Tunneling can be enabled or disabled The default value for this field is disabled EtherType A 2 byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel There are three different EtherType tags The first is 802 1Q which represents the commonly used value of 0x8100 The second is vMAN which represents the commonly used value of 0x88A8 If EtherType is not one of these two values it is a custom tunnel value representing any value in the range of 0 65535 Voice VLAN Commands This section describes the commands you use for Voice VLAN Voice VLAN enables switch ports to carry voice traffic with defined priority to enable separation of voice and data traffic coming onto the port The benefits of using Voice VLAN is to ensure that the sound quality of an IP phone could be safeguarded from deteriorating when the data traffic on the port is high Also the inherent isolation provided by VLANs
215. Management Commands 500 M4100 Series ProSAFE Managed Switches Field Definition OSPFv2 Traps Can be enabled or disabled The factory default is disabled Indicates whether OSPF traps are sent If any of the OSPF trap flags are not enabled the command displays disabled Otherwise the command shows all the enabled OSPF traps information OSPFv3 Traps Can be enabled or disabled The factory default is disabled Indicates whether OSPF traps are sent If any of the OSPFv3 trap flags are not enabled the command displays disabled Otherwise the command shows all the enabled OSPF v3 traps information PIM Traps Can be enabled or disabled The factory default is disabled Indicates whether PIM traps are sent RADIUS Commands This section describes the commands you use to configure the switch to use a Remote Authentication Dial In User Service RADIUS server on your network for authentication and accounting authorization network radius Use this command to enable the switch to accept VLAN assignment by the radius server Default disable Format authorization network radius Mode Global Config no authorization network radius Use this command to disable the switch to accept VLAN assignment by the radius server Format no authorization network radius radius accounting mode Use this command to enable the RADIUS accounting function Default disabled Format radius acco
216. Mode Disable TIPS nda ia a aa ao Enable show poe port configuration Use this command to see how the PoE ports are configured You can display information based on each individual port or all the ports collectively Format show poe port configuration lt port gt all Mode e Privileged EXEC e User EXEC Command example NETGEAR Switch show poe port configuration all Admin Power Power Limit High Power Detection Intf Mode Priority Limit Type Mode Type W 0 1 Enable Low 15 400 User Defined Disable Auto 0 2 Enable Low 15 400 User Defined Disable Auto Command example NETGEAR Switch show poe port configuration 0 2 Admin Power Power Limit High Power Detection Intf Mode Priority Limit Type Mode Type W 0 2 Enable Low 15 400 User Defined Disable Auto Power over Ethernet Commands 325 M4100 Series ProSAFE Managed Switches show poe port info Use this command to get information about the status of the PoE ports You can display information based on each individual port or all the ports collectively The command displays only PSE capable ports Format show poe port info lt port gt all Mode e Privileged EXEC e User EXEC Term Definition Intf Interface on which PoE is configured Class Class of the powered device according to the IEEE802 3af and IEEE802 3at definition e Class Usage Max Power watts e 0 Default 0 44 12 95 e 1 Optional 0 44 3 84
217. Mode Global Config no passwords lock out Use this command to set the password lock out count to the default value Format no passwords lock out Mode Global Config passwords strength check Use this command to enable the password strength feature It is used to verify the strength of a password during configuration Default Disable Format passwords strength check no passwords strength check Use this command to disable the password strength check Format no passwords strength check Mode Global Config passwords strength minimum uppercase letters Use this command to enforce a minimum number of uppercase letters that a password should contain The valid range is 0 16 The default is 2 Minimum of 0 means no restriction on that set of characters Management Commands 475 M4100 Series ProSAFE Managed Switches Default 2 Format passwords strength minimum uppercase letters lt number gt no passwords strength minimum uppercase letters Use this command to reset the minimum number of uppercase letters to the default value Format no passwords strength minimum uppercase characters Mode Global Config passwords strength minimum lowercase letters Use this command to enforce a minimum number of lowercase letters that a password should contain The valid range is 0 16 The default is 2 Minimum of 0 means no restriction on that set of characters Default 2
218. NE PETE AEE E TEATRENE EE EREGAS EREATARA 397 Paama OUE eiii R A EARO aang TAE aes 398 ip helper enable 6 6 5 4 06 000 appHKHDApAT LETTERS eaa AERE EEEE aaa ci 256 ip helper address Global Config sa0s ds 00d 04 45546648200 ideada 255 ip helper address Interface Config 00 cece cece rr 256 ip helper address discard o sones rre leopard 257 AE EE aed eg bares baer argo A 397 563 M4100 Series ProSAFE Managed Switches IP http authentication 0 5 5 5 ae erep eres rs a ESOS ir Sow ceca 462 ME JAVA a gh dias 461 IP http SECURE POFE woos siria aii RR RARAS SD ED EWS TS CSCE SEEM RA ER DEE 466 ip http SECUFE PhOltOCOl exorcista ideada 466 IP MEEPS SECURE SEIVEN ssscosssanssar cigarros iia 461 ip http secure session hard timeout eee rr 465 ip http SECUFE SESSION MAXSESSIONS fais sie iioedadcd00 04422040 ii 464 ip http secure session soft timeout 0 cece nett EREDA E eens 464 IPAPER 461 ip http sessionihard tiMedU socorro 462 ip http SESSIOHIMAXSESSIONS casino pra repeat 463 Ip http SESSION so tt tMEQUE cremallera oa 463 Ip https aUtNenticatiON sicnarrcaraa rr ii aaa 465 IPIEMP EENO FER Y adri ia 261 IP ICMP EMOrsintErVal 4 645604445464 e RRA A aaa 261 Ip lOCal plOxy ON lt 3 54 54 540640acecetiwhebnbs tase teinsasasagieatiees bnonbi ees itetatedssasenec 228 IPMANAGEMENE cerecseiessiri dite EErEE EEEE AR E sar E NEN EE E a ower bee eee 446 PIMP soja ined ard aid add riada errar nd dada ee 239
219. NETGEAR M4100 Series ProSAFE Managed Switches CLI Command Reference Manual Software Version 10 0 2 April 2015 202 11166 04 350 East Plumeria Drive San Jose CA 95134 USA M4100 Series ProSAFE Managed Switches Support Thank you for selecting NETGEAR products After installing your device locate the serial number on the label of your product and use it to register your product at https my netgear com You must register your product before you can use NETGEAR telephone support NETGEAR recommends registering your product through the NETGEAR website For product updates and web support visit http support netgear com Phone US amp Canada only 1 888 NETGEAR Phone Other Countries Check the list of phone numbers at http support netgear com general contact default aspx Compliance For regulatory compliance information visit http www netgear com about regulatory See the regulatory compliance document before connecting the power supply Trademarks NETGEAR Inc NETGEAR and the NETGEAR Logo are trademarks of NETGEAR Inc Any non NETGEAR trademarks are used for reference purposes only Revision History Publication Part Number Publish Date Comments 202 11166 03 March 2015 First publication Contents Chapter 1 Using the Command Line Interface Command SYNtAX sotecarita sa radas cti sad dar 8 Command Conventions s csrorissircrrrarll erre 8 Common Parameter ValuEs ccosrrisastes aria rr
220. OUTSS cunas aa 1004 Intra Area ROUTE Sead aa a oe eae Watatet eee 4 Inter Area ROUTES uan mios 1000 External Type 1 RouteS o oooomooooooo om 0 External TYpe 2 ROUTE Sii a a 0 REJect ROULES it dd 0 TOTAL MOUS S ie oie a a a E eae tease a arg eee 1032 Best Routes HGH yesasia ak Aide aie 1032 1032 Alternate ROULES ii aise ate t oh ada 0 Rote Adda tarta RA ie 1010 ROUte MOdILETS Sa a sete en dete e 1 ROWS DeCS daa tea cis 10 Unresolved Route AddS ccc ceed eee enews 0 Invalid Route AddS sis gece ds wale wave Re AS wore Care 0 Failed Routes Addis ahead ahs an s Bie bed 0 Reserved TOCA Ss ninas da di 0 Unique Next Hops High conciso a es 13 13 Next Hop Groups High oniis sosa ass 13 14 Routing Commands 249 M4100 Series ProSAFE Managed Switches ECM GEO0UpS HAD ai ds aaa 2 3 ECM ROUTE Emei eaaa ds 00 A ar aise Gy Rute Gules teed taf Seva Ses meee 1001 Truncated CMP ROQUES ete gue ee enti alow ard iaa 0 ECM RETULO Sereen da A we Ate ences 0 Routes with 1 Next HOP tra aii ae Aes 31 Routes with 2 Next HOPS testes aia aa a T Routes with 4 Next HOP vena ae ae ee 1000 show ip route preferences This command displays detailed information about the route preferences Route preferences are used in determining the best route Lower router preference values are preferred over higher router preference values A route with a preference of 255 cannot be used to forward traffic Format show ip route
221. P registrations could not be completed GMRP PDUs Received The count of GMRP PDUs received in the GARP layer GMRP PDUs Transmitted The count of GMRP PDUs transmitted from the GARP layer GMRP Failed Registrations The number of times attempted GMRP registrations could not be completed STP BPDUs Transmitted Spanning Tree Protocol Bridge Protocol Data Units sent STP BPDUs Received Spanning Tree Protocol Bridge Protocol Data Units received RST BPDUs Transmitted Rapid Spanning Tree Protocol Bridge Protocol Data Units sent RSTP BPDUs Received Rapid Spanning Tree Protocol Bridge Protocol Data Units received MSTP BPDUs Transmitted Multiple Spanning Tree Protocol Bridge Protocol Data Units sent MSTP BPDUs Received Multiple Spanning Tree Protocol Bridge Protocol Data Units received EAPOL Frames Transmitted The number of EAPOL frames of any type that have been transmitted by this authenticator EAPOL Frames Received The number of valid EAPOL frames of any type that have been received by this authenticator The elapsed time in days hours minutes and seconds since the statistics for this port were last cleared Utility Commands 341 M4100 Series ProSAFE Managed Switches When you specify switchport the command output displays the information that is shown in the following table Term Definition Octets Received Total Packets Received Without Error Unicast Packets Received Multicast
222. P such as temperature voltage current input power output power Tx fault and LOS The values are derived from the SFP s A2 Diagnostics table using the l2C interface Format show fiber ports optics all lt slot port gt Mode Privileged EXEC Field Description Temp Internally measured transceiver temperature Voltage Internally measured supply voltage Current Measured TX bias current Output Power Measured optical output power relative to 1mW Input Power Measured optical power received relative to 1mW TX Fault Transmitter fault LOS Loss of signal Command example NETGEAR Switch show fiber ports optics all Output Input Port Temp Voltage Current Power Power TX LOS C Volt mA dBm dBm Fault 0 49 39 3 3 256 5 0 2 234 2 465 No No 0 50 33 9 3 260 a3 2 374 40 000 No Yes 0 51 32 2 3 256 5 2 300 2 897 No No Utility Commands 343 M4100 Series ProSAFE Managed Switches show fiber ports optics info This command displays the SFP vendor related information such as vendor name serial number of the SFP part number of the SFP The values are derived from the SFP s AO table using the l2C interface Format show fiber ports optics info all lt slot port gt Mode Privileged EXEC Field Description Vendor Name The vendor name is a 16 character field that contains ASCII charac ters left aligned and padded on the right with ASCII spaces 20h The vendor name shall
223. P6flowlbl of a packet The lt 1abe1 gt is the value to match in the Flow Label field of the IPv6 header range 0 1048575 Format match ip6flowlbl lt label gt Mode Ipv6 Class Map Configuration mode match destination address mac This command adds to the specified class definition a match condition based on the destination MAC address of a packet The lt macaddr gt parameter is any layer 2 MAC address formatted as six two digit hexadecimal numbers separated by colons for example Quality of Service Commands 275 M4100 Series ProSAFE Managed Switches 00 11 22 dd ee ff The lt macmask gt parameter is a layer 2 MAC address bit mask which need not to be contiguous and is formatted as six two digit hexadecimal numbers separated by colons for example ff 07 23 ff fe dc Default none Format match destination address mac lt macaddr gt lt macmask gt Mode e Class Map Config e Ipv6 Class Map Config match dstip This command adds to the specified class definition a match condition based on the destination IP address of a packet The lt ipaddr gt parameter specifies an IP address The lt ipmask gt parameter specifies an IP address bit mask and must consist of a contiguous set of leading 1 bits Default none Format match dstip lt ipaddr gt lt ipmask gt Mode Class Map Config match dstip6 This command adds to the specified class definition a match condition based
224. Packets Received The total number of octets of data received by the processor excluding framing bits but including FCS octets The total number of packets including broadcast packets and multicast packets received by the processor The number of subnetwork unicast packets delivered to a higher layer protocol The total number of packets received that were directed to a multicast address Note that this number does not include packets directed to the broadcast address Broadcast Packets Received The total number of packets received that were directed to the broadcast address Note that this does not include multicast packets Receive Packets Discarded The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher layer protocol A possible reason for discarding a packet could be to free up buffer space Octets Transmitted Packets Transmitted without Errors Unicast Packets Transmitted Multicast Packets Transmitted Broadcast Packets Transmitted The total number of octets transmitted out of the interface including framing characters The total number of packets transmitted out of the interface The total number of packets that higher level protocols requested be transmitted to a subnetwork unicast address including those that were discarded or not sent The total number of packets that higher level protocols reque
225. Periodic end End time and day for periodic entry Quality of Service Commands 311 M4100 Series ProSAFE Managed Switches AutoVoIP Commands AutoVolP detects the VoIP streams and put the VoIP streams in the specific VLAN auto voip VLAN and provides higher Class of Service to the VoIP streams automatically both data and signaling It detects the VoIP streams in two modes e Protocol based Auto VoIP In a VoIP system various signaling protocols are used to establish the connection between two VoIP devices The supported signaling protocols are SIP H 323 and SCOP e OUl based Auto VoIP The OUI based Auto VoIP feature prioritizes VoIP packets based on the OUI bytes in the source MAC address A default list of OUls is maintained User is also allowed to configure OUls that need prioritization apart from the default OUI list Up to 128 OUls are allowed on the device or system including the default OUIs Note If voice VLAN and Auto VolP are enabled at the same time one of them is operational If the connected phone is LLDP MED capable voice VLAN has precedence over the Auto VoIP and Auto VoIP is operational if the phone does not support LLDP MED auto voip This command is used to configure auto VoIP mode The supported modes are protocol based and OUI based Protocol based auto VoIP prioritizes the voice data based on the layer 4 port used for the voice session OUI based auto VOIP prioritizes the phone traffic based on
226. Precedence The IP Precedence value Traffic Class The traffic class internal queue identifier to which the IP Precedence value is mapped show classofservice ip dscp mapping This command displays the current IP DSCP mapping to internal traffic classes for the global configuration settings Format show classofservice ip dscp mapping Privileged EXEC The following information is repeated for each user priority Term Definition IP DSCP The IP DSCP value Traffic Class The traffic class internal queue identifier to which the IP DSCP value is mapped Quality of Service Commands 268 M4100 Series ProSAFE Managed Switches show classofservice trust This command displays the current trust mode setting for a specific interface The lt slot port gt parameter is optional and is only valid on platforms that support independent per port Class of Service mappings If you specify an interface the command displays the port trust mode of the interface If you do not specify an interface the command displays the most recent global configuration settings Format show classofservice trust lt slot port gt Mode Privileged EXEC Term Definition Non IP Traffic The traffic class used for non IP traffic This is only displayed when the COS trust mode Class is set to trust IP Precedence or IP DSCP on platforms that support IP DSCP Untrusted Traffic The traffic class used for all untrus
227. RRA eel BERT 399 SHOW NGMPSHOOPING escasas an bbs 161 show igmpsnooping mrouter interface oooocoocccoccccnccnn cr 162 SHOW igmpsndOping MOUSE corno ros eos ai ds 163 SHOW IQMPSNOOPING QUENER sessossnianleir doren is Todd aceros 166 SNOW Internac 2422434 so hake atacad Gamehabs tee Peahos as Aeacaceddd cise habeleredeesiesaeisasec 335 showintertace Counte iaa a died 336 show Interface ethernet cari ta e ie ae eas 337 show interface ethernet switchport 0 0 e cece cece rr 73 SHOW Interface loopback ornato cra o 26 show interfaces COS QUeUe 11 eee cence teen tte n nett e ent tenet eeenes 269 show interfaces random detect cece cece rr 270 show interfaces SWItCHPOFt arman cr a PA RE EREN 61 show interfaces switchport for a group lD cascada ica a ia Mocks 70 SHOW ip ACCESS SS coord AAA RO SSS SORES ORE SERRE 304 Show Ipaddhess cOntlict 2 cat ii tedio ica 431 SHOW Maro INSPECTION soii Ss al 151 SHOW iparp Inspection interfaces lt 2c655 20 sao lt 4 eroatsedeacennedaad saea aa ee aaa e pad 153 show iparp inspection statistics asia ir 152 571 M4100 Series ProSAFE Managed Switches SHOW IP DIET esssragarasioniaiir agrada 241 show ip dhep DINdiING lt dica 392 SHOW IP UHED CONMICE evadir oir era NE EERE 394 show ip dhep global ConfiQuratiOn vinos ia in rie ii dice delas 392 show Ip dhep pool configuration ososisiaarasario rec ciaii dora IE 393 SHOW p ahep server statistics sua gsrcita diras 39
228. Receiver Max The maximum number of data bytes that can be sent in a single sample datagram The Datagram Size management entity should set this value to avoid fragmentation of the sFlow datagrams The allowed range is 200 9 116 The default is 1400 Receiver IP The sFlow receiver IP address If set to 0 0 0 0 no sFlow datagrams will be sent The default is 0 0 0 0 Receiver Port The destination Layer4 UDP port for sFlow datagrams The range is 1 65535 The default is 6343 no sflow receiver Use this command to set the sFlow collector parameters back to the defaults Format no sflow receiver lt rcvr_idx gt owner maxdatagram ip port Mode Global Config Utility Commands 426 M4100 Series ProSAFE Managed Switches sflow sampler A data source configured to collect flow samples is called a poller Use this command to configure a new sFlow sampler instance for this data source if lt rcvr idx gt is valid Format sflow sampler lt rcvr indx gt rate lt sampling rate gt maxheadersize lt size gt Mode Interface Config Field Description Receiver Index The sFlow Receiver for this sFlow sampler to which flow samples are to be sent A value of zero 0 means that no receiver is configured no packets will be sampled Only active receivers can be set lf a receiver expires then all samplers associated with the receiver will also expire Possible values are 1 8 The default is O
229. S orcrocoriaia aire Re AR 491 SMOW access USES is ra 305 SHOW ACCOUNTING escoria e In a 485 SHOW accounting Methods escrita tds cata iba 485 SNOW Prisa Vi E AN A a 232 SHOW arp access list avia AAA A el re RS 154 SHOW ar DIE arriero 232 show arp switch Address Resolution Protocol commands ccc cece cette eee ees 233 show arp switch system information and statistics commands cece eee eee o 333 SHOW authentication methods sesos aos rra ddr eee rosa 89 SHOW authorization MEtNOdS voip raras 487 SHOW AULOINStAlll ai is A on dei ocean ean amare abies eae dads dates 329 SHOW AULO VOIP siii AE SO GO EROS OE RMEDEDRETAT EERE S ES RRR 314 SHOW GULO VOIPIOUI TADIE ire 316 SHOW DOOLPONCPKElAY surta Aaa 254 SHOW DOORV EI seins erario dido atada 332 SHOW capture PACKELS sss sardaaad seeder sEsso8G0se5655500SadqdeaeddaGUGad Vassseeswnessne aes 402 SHOW ClASSHIMAP socia OPA ATATAGTNTETETEG FOGG FOF eae eR ETRE a 288 SHOW ClassOfservice dotlp Mappidd vrai dins aid dai 267 show classofservice ip dscp mapping o ocooooccccccncccr rr 268 show classofservice ip precedence mapping occocoocccccccnccccr rr 268 shioWeclassotservica Must oscar iaa 269 AOE NA 382 show dhcp client vendor id 0ption sara 138 show dhep 2relay agent optioni Vlam miras signs carr raras cre 136 570 M4100 Series ProSAFE Managed Switches showrdhep 2relay alll s ct2cicetd sea6ca seca be tedereietade seeeneee weston begebabei ates aiades
230. S 123 SHOW IACP Partner sarixsraisis E A TE A E E E E A Aaa 123 ago A e e PEMET T EEE EE E A E E AE EEEE E A E ETE EEEE ee 186 SHOW dp nterkace 2 56 55 s0sancan ee eeewed sseerGad 4iarn5aqdadoasdhaaiedsieaseesoacnnce dae 186 show Ildplocal device es eririrsrints ETE snanta NEESER EERTE REER ENE PL Se SSCSER OR ER eR HEE 190 show llaplocal devics detail aria a Re 190 SHOW NOME escocia AAA A ea 194 show dp med interfaces idad tada 195 show lldp med local device detail unicos ostias tati aa 196 show lldp med remote device ooooocoococccccccn rr 198 show lldp med remote device detail 0 cece eee eee eens 199 show lldp remote device ecnssisrniirenr enirir y re ee EREIN Swe ee A 188 572 M4100 Series ProSAFE Managed Switches show lldp remote device detail 0 cece rete rr 189 SHOW APStatiStiCs soras0 oxacencdenGredatiesdeuchaaavesenataienndes4Gu E E 187 SHOW OQGING aaeeeiai a EE E Seb gar AA 356 SHOW OGGINGIDUPTETER 2s d 2 scsccssgesheeun Guerre dened Shand abd E Gadad hake deka 357 show logging email CONFIG cscscscicadrnmcrewesreeeseoe reed oruniainmeeenenew sss eee4enes ee ee ete 362 SHOW logging email SLAUISTIES saisd c 2 c10 d4 4 201s 4duslsetrresdaseeecnded ta adri 362 SHOW logging NOSES 5506s iciencronnreenunrereesges A Fossise aes 357 SHOW IGGGING traplogS 4022s ccicacnasuceaens side tates at eiasteeicndmiospntatedtadtetedadacec 357 SOW IOGINSESSIOM ius lr rd cta tha ara bree aed abe 467 SHOW mac ACCE
231. S USL failed to sync trunk table on unit x Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued OS USL Mcast entry not found on a join Possible synchronization issue between the application hardware and sync layer OS USL Mcast entry not found on a leave Possible synchronization issue between the application hardware and sync layer OS USL failed to sync dvlan data on unit x Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued OS USL failed to sync policy table on unit x Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued OS USL failed to sync VLAN table on unit x Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued OS Invalid LAG id x Possible synchronization issue between the BCM driver and HAPI OS Invalid uport calculated from the BCM uport Uport not valid from BCM driver bemx_l2_addr gt lport x OS Invalid USP calculated from the BCM USP not able to be calculated from the uport nbcmx_l2_addr gt lport x learn event for BCM driver OS Unable to insert route R P Route R with prefix P could not be inserted in the hardware route table A retry will be issued OS Unable to Insert host H Host H could not be inserted in hardware
232. SAFE Managed Switches e Wildcard masking for ACLs operates differently from a subnet mask A wildcard mask is in essence the inverse of a subnet mask With a subnet mask the mask has ones 1 s in the bit positions that are used for the network address and has zeros 0 s for the bit positions that are not used In contrast a wildcard mask has 0 s in a bit position that must be checked A 1 in a bit position of the ACL mask indicates the corresponding bit can be ignored access list This command creates an IP access control list ACL that is identified by the access list number which is 1 99 for standard ACLs or 100 199 for extended ACLs IP Standard ACL Format access list lt 1 99 gt deny permit every lt srcip gt lt srcmask gt log rate limit lt 1 4294967295 gt lt 1 128 gt assign queue lt queue id gt mirror redirect lt slot port gt Global Config IP Extended ACL Format access list lt 100 199 gt deny permit every icmp igmp ip tcp udp lt number gt lt srcip gt lt srcmask gt eq lt portkey gt lt 0 65535 gt lt dstip gt lt dstmask gt eq lt portkey gt lt 0 65535 gt precedence lt precedence gt tos lt tos gt lt tosmask gt dscp lt dscp gt log rate limit lt 1 4294967295 gt lt 1 128 gt assign queue lt queue 1d gt mirror redirect lt slot port gt Mode Global Config Parameter
233. SHIISl seme e riera a 150 MICAS a ecards TA TESE TE EEE E 229 arp GYMAanieneneW e s daa cidade gan tl a aH 229 AP PUGS 0 rrar iria de o4ese noaaage de 230 P RESP ME er A A ia dete A desewis 230 o RN 230 AP UIMCOUTS 64 dd id AA AN 231 ASSION QUEUCS eesicsorsrr irradia cai 281 authorization console Telnet SSH o o ooooooocoo cece cence eee eben eee eee nenes 487 authorization network radis 3 6 5 cramedereer reeds 65B555 94 Saagoa e 501 AUTOSNEGOUALCS 6 5 2 4 E SNARE NAAA Ae oe bn 19 auto negotiaterdll inode air A ad Osos sabes coa 20 AULO VOIP vorsiriasssoss atrocidad 312 auto VOP OUl dota daa as ais a o a 313 AULO VOIPOUl DASEC Priority ssssssrescseressitur trinni Ena iaa 313 AUTO VOIP PrOtOcOl based cicccncnsi cg sies rro a 314 ae E EEE TE E E T EEEE TE E T RES GES EES Ra Mama 313 boot autoinstall starte orinar 954 5u r eee e A oaGse n ee aR ER REE 330 boot AULOINStAll OP AA AAA 330 HOOUMOSE AULO SAVE sc cscs cine gsi ar Ere anA ren Canes aredewederesuurbasspemesesecadeceas 330 DOOUNOSt GNCpi 22 ctatatatocacseacnnoehnonset evar aorta 331 boot hostretry CoUnt anomia raro lia E R E 330 558 M4100 Series ProSAFE Managed Switches DOOUSYStEMcedtccktetsiadeeee ecnawe sige Geteiee ease aseeeede esha piteeseshietatadetac 332 A ARA O 386 bootpdheprelay CidOptMOde nn A aa 252 bobtpaheprelay MaxDOPEQUNE aussi 253 bootpdhecprelay MiIMWalttiMe sacan is iii Rs 253 Bridge IgG HIME oia irradia dnde ea 211 cablestatUs EAA ATAT
234. SSHLISES veros EGGS GO 49200 TRENT RT TE ROS cea 297 show mac address table multicast filtering 0 cece cece nor 163 show Mae address table Qniip s xcarioecauiewaseedusese KERE IEE EE GuiewesbeGuedeses es awake 80 show mac address table igmpsnooping 0 cece cece eee correr 163 show mac address table midsnooping 0 cece cece cece n i eee ee eee eee eens 174 show mac address table multicast 0 tee eee eee bbe been eens 212 show mac address table Statle 5 cscraedeadaesciedsccaads ri 132 show mac address table staticfiltering 0 etn nen een eens 132 show mac address table stats oooooocococccccoorrr rr 212 SHOW mac addr table a oaoigasaras als resta 345 shoW MallsSer ver CONG s20i0 cddsciade rra dd inet 364 SHOW MBUT total scary 348 SHOW MASNO PINO es cacao rre a e Aa 172 show mldsnoopingimrouter interface vinsiiaicn ia a aor 173 shoWmldsnooping Mrouter VIAN s s cc 0 0ccesrserreadees 05s Kosssg e dans 174 show mldsnooping querier s 3 242 46 40 00 0006466444644h0d0d0d 0906 ER ae DhOEOEbESESGd0d 0R05 0de0 177 SHOW MONIMOR SESSION vais ASIAN ooo aes 127 SHOW MVE escoria RRA a RRA A da a 223 SHOWIMVIINtEracE esos rr 225 SRHOW IMUFMEMBEES 25 25 02 cccdaanicasrePeeePEG Kode urene RRA iii RA 224 SNOWINWFATABIC E EEEE TA EAN A EENE E EEE iaa 226 SHOW MEIWONK ccaccssdosetanay anaE FECE AEn a ES EEE LAER ANd 448 Show passWordsconfiguratioN veracidad 479 SHOW pas Worda result nicas ii 480
235. Series ProSAFE Managed Switches NETGEAR Switch show port advertise Port Type Neg Operational Link Advertisement 0 1 Gigabit Level Enabled 1000f 100 100h 10f 10h 0 2 Gigabit Level Enabled 1000f 100 100h 10f 10h 0 3 Gigabit Level Enabled 1000f 100 100h 10f 10h show port This command displays port information Format Mode show port lt slot port gt all Privileged EXEC Term Definition Interface Valid slot and port number separated by forward slashes Type Admin Mode If not blank this field indicates that this port is a special type of port The possible values are e Mirror This port is a monitoring port For more information see Port Mirroring Commands on page 125 PC Mbr This port is a member of a port channel LAG e Probe This port is a probe port The Port control administration state The port must be enabled in order for it to be allowed into the network May be enabled or disabled The factory default is enabled Physical Mode Physical Status The desired port speed and duplex mode If autonegotiation support is selected the duplex mode and speed is set from the auto negotiation process Note that the maximum capability of the port full duplex 100M is advertised Otherwise this object determines the port s duplex mode and transmission rate The factory default is Auto The port speed and duplex mode Link Status Link Trap
236. Switching Commands 198 0 9 0 10 0 11 0 12 M4100 Series ProSAFE Managed Switches 2 Not Defined 3 Class II 4 Class III 5 Network Con show lldp med remote device detail Use this command to display detailed information about remote devices that transmit current LLDP MED data to an interface on the system Format show lldp med remote device detail lt slot port gt Mode Privileged EXEC Term Definition Supported Shows the supported capabilities that were received in MED TLV on this port Capabilities Enabled Shows the enabled capabilities that were enabled in MED TLV on this port capabilities Device Class Shows the device class as advertized by the device remotely connected to the port Network Policy Information Media Application Type Shows if network policy TLV is received in the LLDP frames on this port Shows the application type Types of applications are unknown voice voicesignaling guestvoice guestvoicesignaling sfotphonevoice videoconferencing streamingvideo videosignaling VLAN Id Shows the VLAN id associated with a particular policy type Priority Shows the priority associated with a particular policy type DSCP Shows the DSCP associated with a particular policy type Unknown Indicates if the policy type is unknown In this case the VLAN id Priority and DSCP are ignored Tagged Indicates if the policy type is using tagged or untagged VLAN Hardware Shows
237. The logical port number associated with a client Interface The physical port to which the supplicant is associated User Name The user name used by the client to authenticate to the server Supplicant MAC The supplicant device MAC address Address Session Time The time since the supplicant is logged on Filter ID Identifies the Filter ID returned by the RADIUS server when the client was authenticated This is a configured DiffServ policy name on the switch VLAN ID The VLAN assigned to the port Switching Commands 93 M4100 Series ProSAFE Managed Switches VLAN Assigned The reason the VLAN identified in the VLAN ID field has been assigned to the port Possible values are RADIUS Unauthenticated VLAN or Default When the VLAN Assigned reason is Default it means that the VLAN was assigned to the port because the PVID of the port was that VLAN ID Session Timeout This value indicates the time for which the session is valid The time period in seconds is returned by the RADIUS server on authentication of the port This value is valid for the port only when the port control mode is not MAC based Session This value indicates the action to be taken once the session timeout expires Possible Termination values are Default and Radius Request If the value is Default the session is terminated Action and client details are cleared If the value is Radius Request a reauthentication of the client is performed
238. This command enables tracing of IGMP Snooping packets received and transmitted by the switch Default disabled debug igmpsnooping packet Privileged EXEC no debug igmpsnooping packet This command disables tracing of IGMP Snooping packets Format no debug igmpsnooping packet Mode Privileged EXEC debug igmpsnooping packet transmit This command enables tracing of IGMP Snooping packets transmitted by the switch Snooping should be enabled on the device and the interface in order to monitor packets for a particular interface Default disabled Format debug igmpsnooping packet transmit Mode Privileged EXEC Utility Commands 406 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch debug igmpsnooping packet transmit lt 15 gt JAN 01 02 45 06 192 168 17 29 1 IGMPSNOOP 185429992 igmp_snooping_debug c 116 908 Pkt TX Intf 0 20 20 Vlan_Id 1 Src_Mac 00 03 0e 00 00 00 Dest_Mac 01 00 5e 00 00 01 Src_IP 9 1 1 1 Dest_IP 225 0 0 1 Type V2_Membership_Report Group 225 0 0 1 The parameters that are shown in the following table are displayed in the trace message Parameter Definition TX A packet transmitted by the device Intf The interface that the packet went out on Format used is slot port internal interface number Unit is always shown as 1 for interfaces on a non stacking device Src_Mac Source MAC address of the packet Dest_M
239. Time Protocol SNTP Commands 2005 375 DHCP Server Commands i lt c24 lt 20de000 edades sa 382 DNS Client Commands coronada lic dea da 395 Packet Capttire COMMAN S ao omar 400 Serviceability Packet Tracing Commands 00 02 ee 403 Cable Test COMMING ntoeg edad ands rd reee 425 SFlOW COMMANOS certera ceda tatoo 425 IP Address Conflict Commands 000s cece eee eee eee eens 431 RMON Stats and History Commands 0c cece eee eee 432 UniDirectional Link Detection Commands 0 0 cece cee eee eae 438 USB COMMI 1 n2nese daw eitersos AAA 440 Chapter 8 Management Commands Switch Management CPU Commands 0 c cece eee eee 444 Management Interface Commands cece e eee eee eens 446 Console Port Access Commands eee cece rr 449 Telnet Command serres secs deeecds te deradeadudiesetereatedea ceeds 452 Secure Shell SSH Commands sirere soc ctadndoraes ow resesdorseodenens 457 Management Security Commands 0 c cece ee eee eee eee 459 Hypertext Transfer Protocol HTTP Commands 0 e0 eee 460 ACCESS COMMANGS Serio ia 467 User AccoUnt ComMandOS essa iia 468 SNMP COMMANGS repetas crated rapida dadas 491 RADIUS COMMANGS i iicscorseeadens tala sea po 501 TACACS COMMANOS serada onsen chp e ade eeu se a 514 Configuration Scripting ComMands es cc onatwrnriconevaunesuauces sewed 518 Pre Login Banner and System Prom
240. Tx Shows whether the interface sends optional TLVs in the LLDPDUs The TLV codes can be 0 Capabilities 1 Network Policy 2 Location 3 Extended PSE 4 Extended Pa or 5 Inventory Command example NETGEAR Switch show lldp med interface all Interface Link configMED operMED ConfigNotify TLVsTx 0 1 Down Disabled Disabled Disabled 0 1 0 2 Up Disabled Disabled Disabled 0 1 Switching Commands 195 M4100 Series ProSAFE Managed Switches 0 3 Down Disabled Disabled Disabled 0 0 4 Down Disabled Disabled Disabled 0 0 5 Down Disabled Disabled Disabled 0 0 6 Down Disabled Disabled Disabled 0 0 7 Down Disabled Disabled Disabled 0 0 8 Down Disabled Disabled Disabled 0 0 9 Down Disabled Disabled Disabled 0 0 10 Down Disabled Disabled Disabled 0 0 11 Down Disabled Disabled Disabled 0 0 12 Down Disabled Disabled Disabled 0 0 13 Down Disabled Disabled Disabled 0 0 14 Down Disabled Disabled Disabled 0 TLV Codes 0 Capabilities 1 Network Policy 2 Location 3 Extended PSE 4 Extended Pd 5 Inventory Command example NETGEAR Switch show lldp med interface 0 2 Interface Link configMED operMED ConfigNotify TLVsTx 0 2 Up Disabled Disabled Disabled 0 1 TLV Codes 0 Capabilities 1 Network Policy 2 Location 3 Extended PSE 4 Extended Pd 5 Inventory show lldp med local device detail This command displays detailed information about the LLDP data a specific interface transmits
241. UE tic invaas sence rain ina daa A 112 lap actor admin State PASSIVE rre AA A 112 ap CLO DOME PROA eS 113 lacp actor systemi Priority sorna rr rear an e at 113 FAG ACMI KEY cin ma ads ral iden ae ci 110 lacp Collector Max delay socorrer is e 110 lacp partner admin KEY os acapara tica 114 lacp partner admin state ind iaa dildo 114 lacp partner admin state longtimeout 6 56 06 c5045 544 4 sadn eee db nurnrnaru wae aw ews FO oo eo aa ce 115 lacp partner admin state passive ai be EEEE NE EEEE E nee aoe oe 115 lacp partner potid mineria AA 116 lacp partner port PHONY smile ia 116 lac partner sy STEM A es dealer arandelas irse 117 lacp partner SYSTEM PHONY aiii ise a AR 117 Sas ad a idea 385 O errar E e A EEE 351 Mr e tesa tens ne as bees ace AAS AEE EAEE ET TE 449 A deere besa E A E A L Guewsereresedat 191 A simran eased oa eE a a a ee a E Hd tt bb Seder soe 193 Nap med contignotificati n verincan sti 192 lldp med confignotificatiOn all mucionsirccrnirrrrrr cr ive cea e 193 lldpmedhaststartrepeateot scenic ii ida 193 dp immed transmit 2 5 65 stcswnns soeaeGeGbeedcee6eesn8so554oaodecedsudiutGeRsse54055505ee 192 ldp med transmitstlyall c 2c secacsadeoage set i detent eseoteneecee beat etattsadedesededetes 194 AS MOTICAION error A AAA a 184 lldpnotification interval sica irc lie e as he dre 185 AD TEC ri 183 AAA eert r inniinn nnn E EPEA EREE E ERRETENA AEREE RHR 183 dpstransmit 2 0 2 4 4 2 20t 08 ot eperceonaeana ne raised
242. Use this command to restore the system default Format no set igmp report suppression Mode VLAN Config set igmp header validation If IGMP IP header validation is enabled then 3 fields TTL Time To Live ToS Type of Service and Router Alert options are checked The fields checked depend on the IGMP version The TTL field is validated in all the versions IGMPv1 IGMPv2 and IGMPv3 The Router Alert field is validated in IGMPv2 and IGMPv3 The ToS field is validated only in IGMP versions Default Enabled Format set igmp header validation Mode Global Config no set igmp header validation This command disabled the IGMP IP header validation Format no set igmp header validation Mode Global Config mac address table multicast forbidden unregistered vlan Use this command to forbid forwarding unregistered multicast addresses in other words unknown multicast traffic on a VLAN Default Disabled Format mac address table multicast forbidden unregistered vlan lt 1 4093 gt Mode Global Config no mac address table multicast forbidden unregistered vian Use this command to restore the default Format mac address table multicast forbidden unregistered vlan Mode Global Config Switching Commands 160 M4100 Series ProSAFE Managed Switches mac address table multicast forward unregistered vlan Use this command to enable forwarding unregistered multic
243. Utility Commands 434 M4100 Series ProSAFE Managed Switches rmon event This command sets the RMON event entry in the RMON event MIB group Format rmon event lt event number gt description lt string gt log lt string gt trap lt community gt Mode Global Config Parameter Description lt event number gt An index number that uniquely identifies an entry in the event table Each such entry defines one event that is to be generated when the appropriate conditions occur The range is 1 to 65535 description A comment describing the event entry The default is alarmEvent lt string gt log Creates a log entry owner lt string gt The owner string that is associated with the entry The default is monitorEvent trap The SNMP community which is specified by an octet string that is used to send an lt community gt SNMP trap The default is public no rmon event This command deletes the RMON event entry Format no rmon event lt event number gt Mode Global Config rmon collection history This command sets the history control parameters of the RMON historyControl MIB group Format rmon collection history lt index number gt buckets lt 1 65535 gt interval lt 1 3600 gt owner lt owner gt Interface Config no rmon collection history This command deletes the history control group entry with the specified index number Format no rmon collecti
244. VLAN Config Switching Commands 157 M4100 Series ProSAFE Managed Switches no set igmp maxresponse This command sets the max response time on the interface or VLAN to the default value Format no set igmp maxresponse Mode e Global Config e Interface Config Format no set igmp maxresponse lt vlan id gt Mode VLAN Config set igmp mcrtrexpiretime This command sets the Multicast Router Present Expiration time The time is set for the system on a particular interface or VLAN This is the amount of time in seconds that a switch waits for a query to be received on an interface before the interface is removed from the list of interfaces with multicast routers attached The range is 0 3600 seconds A value of O indicates an infinite time out that is no expiration Default 0 Format set igmp mcrtrexpiretime lt 0 3600 gt Mode e Global Config e Interface Config Format set igmp mcrtrexpiretime lt vlan id gt lt 0 3600 gt Mode VLAN Config no set igmp mcrtrexpiretime This command sets the Multicast Router Present Expiration time to 0 The time is set for the system on a particular interface or a VLAN Format no set igmp mcrtrexpiretime Mode e Global Config e Interface Config Format no set igmp mcrtrexpiretime lt vlan id gt Mode VLAN Config Switching Commands 158 M4100 Series ProSAFE Managed Switches set igmp mrouter This command co
245. Vertical bars Braces within choicel choice2 Indicates a choice within an optional element This square brackets choicel choice2 Separates the mutually exclusive choices format is used mainly for complicated commands Common Parameter Values Parameter values might be names strings or numbers To use spaces as part of a name parameter enclose the name value in double quotes For example the expression System Name with Spaces forces the system to accept the spaces Empty strings are not valid user defined strings The following table describes common parameter values and value formatting Table 2 Parameter Descriptions Parameter Description ipaddr This parameter is a valid IPv4 address You can enter the IP address in the following formats a 82 bits lt a b 8 24 bits a b c 8 8 16 bits a b c d 8 8 8 8 In addition to these formats the CLl accepts decimal hexadecimal and octal formats through the following input formats where nis any valid hexadecimal octal or decimal number e Oxn CLI assumes hexadecimal format e On CLI assumes octal format with leading zeros e n CLI assumes decimal format ipv6 address This parameter is a valid IPv6 address You can enter the IP address in the following formats e FE80 0000 0000 0000 020F 24FF FEBF DBCB e FE80 0 0 0 20F 24FF FEBF DBCB e FE80 20F24FF FEBF DBCB e FE80 0 0 0 20F 24FF 128 141 49 32
246. X XXX XXX Firmware Rev XXX XXX XXX Software Rev XXX XXX XXX Serial Num XXX XXX XXX Mfg Name XXX XXX XXX Model Name XXX XXX XXX Asset ID XXX XXX XXX Switching Commands 197 M4100 Series ProSAFE Managed Switches Location Subtype elin Info XXX XXX XXX Extended POE Device Type pseDevice Extended POE PSE Available 0 3 Watts Source primary Priority critical Extended POE PD Required 0 2 Watts Source local Priority low show lldp med remote device This command displays summary information about remote devices that transmit current LLDP MED data to the system You can show information about LLDP remote data received on all ports or on a specific port Format show lldp med remote device lt slot port gt all Mode Privileged EXEC Interface The interface in a slot port format Device Class The Remote device s MED Classification There are four different kinds of devices three of them represent the actual end points classified as Class Generic IP Communication Controller etc Class Il Media Conference Bridge etc Class III Communication IP Telephone etc The fourth device is Network Connectivity Device which is typically a LAN Switch Router IEEE 802 1 Bridge IEEE 802 11 Wireless Access Point etc Command example NETGEAR Switch show lldp med remote device all LLDP MED Remote Device Summary Local Interface Remote ID Device Class
247. a standard value assigned by IANA and is interpreted as an integer from 0 to 255 Note This command does not validate the protocol number value against the current list defined by IANA Default none Format match protocol lt protocol name gt lt 0 255 gt Mode e Class Map Config Ipv6 Class Map Config Quality of Service Commands 278 M4100 Series ProSAFE Managed Switches match source address mac This command adds to the specified class definition a match condition based on the source MAC address of a packet The lt address gt parameter is any layer 2 MAC address formatted as six two digit hexadecimal numbers separated by colons for example 00 11 22 dd ee ff The lt macmask gt parameter is a layer 2 MAC address bit mask which might not be contiguous and is formatted as six two digit hexadecimal numbers separated by colons for example ff 07 23 ff fe dc Default none Format match source address mac lt address gt lt macmask gt Mode e Class Map Config Ipv6 Class Map Config match srcip This command adds to the specified class definition a match condition based on the source IP address of a packet The lt ipaddr gt parameter specifies an IP address The lt ipmask gt parameter specifies an IP address bit mask and must consist of a contiguous set of leading 1 bits Default none Format match srcip lt ipaddr gt lt ipmask gt Class Map Config match srcip6 This
248. a 6 1500 BanGwi Ai wide eed yale a Ge ae Be A AR ee 100000 kbps Destination Unreachables 2 ee eee eens Enabled TEMP REGIS TES aa e Disabled show ip interface brief This command displays summary information about IP configuration settings for all ports in the router Format show ip interface brief Modes e Privileged EXEC User EXEC Routing Commands 243 M4100 Series ProSAFE Managed Switches Interface Valid slot and port number separated by forward slashes State Routing operational state of the interface IP Address The IP address of the routing interface in 32 bit dotted decimal format IP Mask The IP mask of the routing interface in 32 bit dotted decimal format Netdir Bcast Indicates if IP forwards net directed broadcasts on this interface Possible values are Enable or Disable MultiCast Fwd The multicast forwarding administrative mode on the interface Possible values are Enable or Disable Method Shows whether the IP address was configured manually or acquired from a DHCP server show ip protocols This command lists a summary of the configuration and status for each unicast routing protocol The command lists routing protocols that are configured and enabled If a protocol is selected on the command line the display is limited to that protocol Format show ip protocols ospf rip Mode Privileged EXEC OSPFv2 Router ID The router ID config
249. a convenience It can be up to 32 alphanumeric characters long including blanks The default is blank This field is optional Protected port Indicates whether the interface is protected or not It shows TRUE or FALSE If the group is a multiple groups then it shows TRUE in Group lt groupid gt Private VLAN Commands The Private VLANs feature separates a regular VLAN domain into two or more subdomains Each subdomain is defined represented by a primary VLAN and a secondary VLAN The primary VLAN ID is the same for all subdomains that belong to a private VLAN The secondary VLAN ID differentiates subdomains from each other and provides Layer 2 isolation between ports of the same private VLAN The types of VLANs within a private VLAN are as follows e Primary VLAN Forwards the traffic from the promiscuous ports to isolated ports community ports and other promiscuous ports in the same private VLAN Only one primary VLAN can be configured per private VLAN All ports within a private VLAN share primary VLAN e Isolated VLAN A secondary VLAN that carries traffic from isolated ports to promiscuous ports Only one isolated VLAN can be configured per private VLAN e Community VLAN A secondary VLAN that forwards traffic between ports that belong to the same community and the promiscuous ports There can be multiple community VLANs per private VLAN Switching Commands 70 M4100 Series ProSAFE Managed Switches Three types o
250. a gis wid erat an E oa ioe wee RADIUS Attribute 4 Modern aio ue atime alow aoe eae En eee ede ae RADIUS Attribute 4 Value M4100 Series ProSAFE Managed Switches 10 Disable Enable 192 168 37 60 show radius servers Use this command to display the summary and details of RADIUS authenticating servers configured for the RADIUS client Format show radius servers lt dnsname gt lt servername gt lt ipaddr gt nam Mode Privileged EXEC Field Description Current The symbol preceding the server host address specifies that the server is currently active Host Address The IP address of the host Server Name The name of the authenticating server Port Type Current Host Address The port used for communication with the authenticating server Specifies whether this server is a primary or secondary type The IP address of the currently active authenticating server Secret Configured Yes or No Boolean value that indicates whether this server is configured with a secret Number of Retransmits Message Authenticator Time Duration The configured value of the maximum number of times a request packet is retransmitted A global parameter to indicate whether the Message Authenticator attribute is enabled or disabled The configured timeout value in seconds for request retransmissions RADIUS Accounting Mode A global parameter to indicate whether the accounting
251. a name for the port channel LAG Use lt name gt to specify an alphanumeric string up to 15 characters The interface is a logical lt slot port gt for a configured port channel Instead of lt slot port gt you can use lag lt lag group id gt as an alternate way to specify the LAG interface in which lt 1ag group id gt is the LAG port number Format port channel name lt slot port gt lag lt lag group id gt lt name gt port channel system priority Use this command to configure port channel system priority The valid range of lt priority gt is 0 65535 Default 0x8000 Format port channel system priority lt priority gt Mode Global Config Switching Commands 122 M4100 Series ProSAFE Managed Switches no port channel system priority Use this command to configure the default port channel system priority value Format no port channel system priority Mode Global Config show lacp actor Use this command to display LACP actor attributes The interface is a logical lt slot port gt for a configured port channel The option a11 displays the configuration for all the configured port channels Instead of lt slot port gt you can use lag lt lag group id gt as an alternate way to specify the LAG interface in which lt lag group id gt is the LAG port number Format sho lacp actor lt slot port gt lag lt lag group id gt all Mode Global Config
252. abase descriptor LS REQ LS Request LS_UPD LS Update LS_ACK LS Acknowledge The remaining fields in the trace message are specific to the OSPF packets For HELLO packet field definitions the parameters that are shown in the following table are displayed in the trace message Netmask The netmask in the hello packet DesignRouter Designated Router IP address Backup Backup router IP address For DB_DSCR packet field definitions the parameters that are shown in the following table are displayed in the trace message Field etintion 2222222 Options in the OSPF packet Could be one or more of the following l Init M More MS Master Slave Seq Sequence Number of the DD packet Utility Commands 416 M4100 Series ProSAFE Managed Switches For LS_REQ packet field definitions the parameter that is shown in the following table is displayed in the trace message Field Definition Length Length of packet For LS_UPD packet field definitions the parameter that is shown in the following table is displayed in the trace message Field Definition Length Length of packet For LS_ACK packet field definitions the parameter that is shown in the following table is displayed in the trace message Field Definition Length Length of packet no debug ospf packet This command disables tracing of OSPF packets Format no debug ospf packet Mode Privileged EXE
253. able traps Use this command to disable the Authentication Flag Format no snmp server enable traps Mode Global Config Management Commands 494 M4100 Series ProSAFE Managed Switches snmp server enable traps linkmode Use this command to enable Link Up Down traps for the entire switch When enabled link traps are sent only if the Link Trap flag setting associated with the port is enabled For more information see snmp trap link status on page 498 Default enabled Format snmp server enable traps linkmode Mode Global Config no snmp server enable traps linkmode Use this command to disable Link Up Down traps for the entire switch Format no snmp server enable traps linkmode Mode Global Config snmp server enable traps multiusers Use this command to enable Multiple User traps When the traps are enabled a Multiple User Trap is sent when a user logs in to the terminal interface EIA 232 or Telnet and there is an existing terminal interface session Defaut Format snmp server enable traps multiusers Mode Global Config no snmp server enable traps multiusers Use this command to disable Multiple User traps Format no snmp server enable traps multiusers Mode Global Config snmp server enable traps stpmode Use this command to enable sending new root traps and topology change notification traps Default enabled Format snmp server enabl
254. ac Destination multicast MAC address of the packet Src_IP The source IP address in the IP header in the packet Dest_IP The destination multicast IP address in the packet Type The type of IGMP packet Type can be one of the following e Membership Query IGMP Membership Query V1_Membership_Report IGMP Version 1 Membership Report V2 Membership Report IGMP Version 2 Membership Report V3 Membership Report IGMP Version 3 Membership Report e V2 Leave Group IGMP Version 2 Leave Group Group Multicast group address in the IGMP header no debug igmpsnooping transmit This command disables tracing of transmitted IGMP snooping packets Format no debug igmpsnooping transmit Mode Privileged EXEC debug igmpsnooping packet receive This command enables tracing of IGMP Snooping packets received by the switch Snooping should be enabled on the device and the interface in order to monitor packets for a particular interface Default disabled Format debug igmpsnooping packet receive Mode Privileged EXEC Utility Commands 407 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch debug igmpsnooping packet receive lt 15 gt JAN 01 02 45 06 192 168 17 29 1 IGMPSNOOP 185429992 igmp_snooping_debug c 116 908 Pkt RX Intf 0 20 20 Vlan_Id 1 Src_Mac 00 03 0e 00 00 10 Dest_Mac 01 00 5e 00 00 05 Src_IP 11 1 1 1 Dest_IP 225 0 0 5 Type Membership_Query Group 22
255. ac address table multicast forward all vlan 0 0 cece cece ene e ene e eens 161 mac address table multicast forward unregistered vlan 0 cece eee eee rreren 161 MACHER ccccaciud road ooactemadamimenareaenienesede EAEE beara hedeeeNoadanaade 129 Machilteradddest ii aden EET aaca HEESE RE tee eerteadusee nda NESE 130 macfilter adddest alli 4 5 onnenrnewregagsereeedeasenegegeyemenminianreereveleeameagegananars 130 MMACHISRAUUSIC 2 252 51 5508 40k acatdahihe ne Lesedeeered as aoeeataeca sens beseeetei sted s4esanan 131 Mmachiltemaddsre alll errata cornisa 131 Malse VET misipiad adenda ini dido add ateos 363 MARCOS ae da 283 Mark COSH AS SECH COS serer rr in aaa 283 MARKS ASCP seso A sd PNERRRANSS HOGER RADARS 283 Imahklp precedenCe lt lt 5 ct cnccnndemeavGudwsesaeeseeeoessde4qdedoradsutuIuMiesearetnseeasaos 284 MACEN ANY patt seriadas vc aa idad 274 maten ClaSS MAD ista AA a 274 AA PI aEenEeEenG AeGgs THES EKER REE CORRE DEDEGEERG ERE a kes RoR 275 match destination address MaC a 275 match dieer riere ke ttr ArAnA As aaa 276 MoO O eieren EEE eee 276 aae eeen In e a ARRETE TEE A EA ATETEA E E AAEE TE 276 match ethertype 31d ai Ad 273 Match Pas e EEEE EE E A id 277 match Ip PrECEdENCE essa A aa 277 MAD IP TOS 3 5 tgerted sett or encarhehoasaadiguerguareargadraGaeG aint k ddd Phere diab ramGuerdw Geeta eden dee 217 Match IPOHOWID serrana ta ae a 275 matelprotocol isa i e E r e E a ateo 278 match secondary C S 66645 cs
256. acacs tftp time Mode Interface Config show ip helper address Use this command to display the configured helper addresses on the interface Format show ip helper address lt interface gt Mode e Privileged EXEC e User EXEC Command example NETGEAR Switch show ip helper address 0 1 Routing Commands 258 M4100 Series ProSAFE Managed Switches show ip helper statistics Use this command to display the number of DHCP and other UDP packets processed and relayed by the UDP relay agent Format show ip helper statistics Mode Privileged EXEC Term Definition DHCP client messages received The number of valid messages received from a DHCP client The count is incremented only if IP helper is enabled globally the ingress routing interface is up and the packet passes a number of validity checks such as having a TTL gt 1 and having valid source and destination IP addresses DHCP client messages relayed DHCP server messages received DHCP server messages relayed UDP clients messages received UDP clients messages relayed DHCP message hop count exceeded max DHCP message with secs field below min The number of DHCP client messages relayed to a server If a message is relayed to multiple servers the count is incremented once for each server The number of DHCP responses received from the DHCP server This count includes only messages that the DHCP server unicasts to
257. accounting server If an accounting server is currently configured use the no form of the command to remove it from the configuration The IP address or host name you specify must match that of a previously configured accounting server If you use the optional port parameter the command configures the UDP port to use when connecting to the RADIUS accounting server If a port is already configured for the accounting server the new port replaces the previously configured port For the port keyword the lt number gt argument must be a value in the range 0 65535 with 1813 being the default Note To reconfigure a RADIUS accounting server to use the default UDP port set the lt number gt argument to 1813 Format radius server host auth acct lt ipaddr gt lt dnsname gt name lt servername gt port lt number gt typ lt server type gt Global Config Parameter lt ipaddr gt The IP address of the server lt dnsname gt The DNS name of the server lt servername gt The alias name to identify the server lt number gt The port number in the range 0 65535 to use to connect to the specified RADIUS server lt server type gt Enter one of the following options e 0 Specifies a standard server e 1 Specifies a NETGEAR server Management Commands 503 M4100 Series ProSAFE Managed Switches no radius server host Use this command to delete the configured server
258. ace Config Note This command is only applicable to physical interfaces no lacp partner port priority Use this command to configure the default LACP partner port priority Format no lacp partner port priority Interface Config Switching Commands 116 M4100 Series ProSAFE Managed Switches lacp partner system id Use this command to configure the 6 octet MAC Address value representing the administrative value of the Aggregation Port s protocol Partner s System ID The valid range of lt system id gt is 00 00 00 00 00 00 FF FF FF FF FF Default 00 00 00 00 00 00 Format lacp partner system id lt system 1d gt Mode Interface Config Note This command is only applicable to physical interfaces no lacp partner system id Use this command to configure the default value representing the administrative value of the Aggregation Port s protocol Partner s System ID Format no lacp partner system id Mode Interface Config lacp partner system priority Use this command to configure the administrative value of the priority associated with the Partner s System ID The valid range for lt priority gt is 0 65535 Default 0x0 Format lacp partner system priority lt priority gt Mode Interface Config Note This command is applicable only to physical interfaces no lacp partner system priority Use this command to configure the default administrative value of priority a
259. ake will persist across a reboot This command is the same as the copy system running config nvram startup config command Format write memory Mode Privileged EXEC Utility Commands 374 M4100 Series ProSAFE Managed Switches Simple Network Time Protocol SNTP Commands This section describes the commands you use to automatically configure the system time and date by using SNTP sntp broadcast client poll interval This command sets the poll interval for SNTP broadcast clients in seconds as a power of two where lt pol1 interval gt can be a value from 6 to 10 Default 6 Format sntp broadcast client poll interval lt poll interval gt no sntp broadcast client poll interval This command resets the poll interval for SNTP broadcast client back to the default value Format no sntp broadcast client poll interval Mode Global Config sntp client mode This command enables Simple Network Time Protocol SNTP client mode and might set the mode to either broadcast or unicast Default disabled Format sntp client mode broadcast unicast Mode Global Config no sntp client mode This command disables Simple Network Time Protocol SNTP client mode Format no sntp client mode Mode Global Config Utility Commands 375 M4100 Series ProSAFE Managed Switches sntp client port This command sets the SNTP client port id to a value from 1 65 535 Defaul
260. al Root CST Internal Root Path Cost The derived value of the edge port status True if operating as an edge port false otherwise Derived value indicating if this port is part of a point to point link The regional root identifier in use for this port The internal root path cost to the LAN by the designated external port Loop Inconsistent State Transitions Into Loop Inconsistent State Transitions Out of Loop Inconsistent State The current loop inconsistent state of this port in this MST instance When in loop inconsistent state the port has failed to receive BPDUs while configured with loop guard enabled Loop inconsistent state maintains the port in a blocking state until a subsequent BPDU is received The number of times this interface has transitioned into loop inconsistent state The number of times this interface has transitioned out of loop inconsistent state show spanning tree mst port summary This command displays the settings of one or all ports within the specified multiple spanning tree instance The parameter lt mstid gt indicates a particular MST instance The parameter lt slot port gt all indicates the desired switch port or all ports If you specify O defined as the default CIST ID as the lt mstid gt the status summary displays for one or all ports within the Common and Internal Spanning Tree all Format show spanning tree mst port summary lt mstid gt lt slot port gt
261. al The current operational status of this DiffServ service interface Status Policy Name The name of the policy attached to the interface in the indicated direction Policy Details Attached policy details whose content is identical to that described for the show policy map lt policymapname gt command content not repeated here for brevity show diffserv service brief This command displays all interfaces in the system to which a DiffServ policy has been attached The inbound direction parameter is optional Format show diffserv service brief in out Mode Privileged EXEC Quality of Service Commands 291 M4100 Series ProSAFE Managed Switches DiffServ Admin The current setting of the DiffServ administrative mode An attached policy is only active Mode on an interface while DiffServ is in an enabled mode The information that is shown in the following table is repeated for each interface and direction only those interfaces configured with an attached policy are shown Term Definition Interface Valid slot and port number separated by forward slashes Direction The traffic direction of this interface service OperStatus The current operational status of this DiffServ service interface Policy Name The name of the policy attached to the interface in the indicated direction show policy map interface This command displays policy oriented statistics informati
262. all to remove the interface from the route table the attempt to get the ipv4 interface mask from the stack failed OSAPI osapiCleanuplf NetlpDel During the call to remove the interface from the route table the attempt to delete the primary ipv4 address from the stack failed OSAPI osapiSemaTake failed The requested semaphore cannot be taken because the call is made from an ISR or the semaphore ID is invalid Log Messages 557 Command List deny pennt OP ACI 0 s00cetaras0o9 00049 aed 634 5 T ETRE ER TE an HES 300 deny Permit PO 6s 0 ts OPA 306 deny permit MAC ACL sicccacariorrreresssoscsurnnn ron AO RARA 294 dd CCOO EErEE E T A ideo 483 asa authen caon dt siria rra rn a PER Ra 482 aaa authentication enable 352 0c2cseacpebspessdoaetesasadasasidacdiaihedabededatdesabssesasadee 481 Aaa AUTHENTCALOMMOGIN sa lt cr sinoinsirecaiecudereverseasasesasandabaienbateGeiaragewa sia Ea 480 AAA AUTNOTIZALION caia cd RRA LRRD PMITREATIE RES SHS eee 486 Ada laS USER USERNAME susan 489 BAASESSIONAG 6 6 5 6 c 2 6 6 0 AGA IIA PERERA AAA OT PNS S 4940 SoH OR eR ER RTS 489 AUSOWLE enredo deidades a 310 accessalitio o rcscsotercannenaagadsrerhteGGEGsosGssesssss9nsordenrcebetaienssoaseesss353534e 298 accounting console Telnet SSH 2 c 2cccarnseescasdsdndnsesadicacacadbewsoanededsdedededesacec 484 acl raphi Sian rd idas dada sae 303 ela ajoa a s 66 5 55646 04 0606 IRA AAA AAA AA a 109 OND riales e 228 ANP ACCES
263. ameter is valid only for a permit rule The time range parameter allows imposing time limitation on the IP ACL rule as defined by the parameter lt t ime range name gt If a time range with the specified name does not exist and the IP ACL containing this ACL rule is applied to an interface or bound to a VLAN then the ACL rule is applied immediately If a time range with specified name exists and the IP ACL containing this ACL rule is applied to an interface or bound to a VLAN then the ACL rule is applied when the time range with specified name becomes active The ACL rule is removed when the time range with specified name becomes inactive You can specify a simple rate limiter for packets matching an ACL permit rule You must specify the burst size in kbytes and allowed rate of traffic in kbps The conforming traffic is allowed to transmit and non conforming traffic is dropped This action is ignored for any deny rule since by definition matching packets are dropped Format deny permit every icmp igmp ip tcp udp lt number gt lt srcip gt lt srcmask gt eq lt portkey gt lt 0 65535 gt lt dstip gt lt dstmask gt eq lt portkey gt lt 0 65535 gt precedence lt precedence gt tos lt tos gt lt tosmask gt dscp lt dscp gt log rate limit lt 1 4294967295 gt lt 1 128 gt timerange lt time range name gt assign queue lt queue id gt mirror redirect lag lt lag group id gt lt s
264. an use the shutdown all command on physical and port channel LAG interfaces but not on VLAN routing interfaces Switching Commands 21 M4100 Series ProSAFE Managed Switches Format shutdown all Mode Global Config no shutdown all This command enables all ports Format no shutdown all speed This command sets the speed and duplex setting for the interface Format speea auto lt 100 10 10G gt lt half duplex full duplex gt Mode Interface Config Acceptable Definition Values 100h 100BASE T half duplex 100f 100BASE T full duplex 10h 10BASE T half duplex 10f 10BASE T full duplex 10Gh 10GBase T full duplex 10Gf 10Gbase T half duplex speed all This command sets the speed and duplex setting for all interfaces Format speed all auto lt 100 10 gt lt half duplex full duplex gt Mode Global Config Acceptable Definition Values 100h 100BASE T half duplex 100f 100BASE T full duplex 10h 10BASE T half duplex Switching Commands 22 M4100 Series ProSAFE Managed Switches Acceptable Definition Values 10f 10BASE T full duplex 10Gh 10GBase T full duplex 10Gf 10Gbase T half duplex show port advertise Use this command to display the local administrative link advertisement configuration local operational link advertisement and the link partner advertisement for an interfac
265. anaged Switches show aaa ias users Use this command to display configured IAS users and their attributes Passwords configured are not shown in the show command output Format show aaa ias users Mode Privileged EXEC SNMP Commands This section describes the commands you use to configure Simple Network Management Protocol SNMP on the switch You can configure the switch to act as an SNMP agent so that it can communicate with SNMP managers on your network snmp server Use this command to set the name and the physical location of the switch and the organization responsible for the network The range for lt name gt lt loc gt and lt con gt is from 1 to 31 alphanumeric characters Default none Format snmp server sysname lt name gt location lt loc gt contact lt con gt Mode Global Config snmp server community Use this command to add and name a new SNMP community A community lt name gt is a name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level The length of lt name gt can be up to 16 case sensitive characters Note Community names in the SNMP community table must be unique When making multiple entries using the same community name the first entry is kept and processed and all duplicate entries are ignored Default e Public and private which you can rename e Default values for the remaining four community names are blank
266. and does not change the current behavior of Autolnstall and saves the command to NVRAM Default Enabled Format boot host dhcp Mode Privileged EXEC no boot host dhcp This command is used to disable Autolnstall on the switch for the next reboot cycle The command does not change the current behavior of Autolnstall and saves the command to NVRAM Format no boot host dhcp Privileged EXEC erase startup config Use this command to erase the text based configuration file stored in non volatile memory If the switch boots and no startup config file is found the Autolnstall process automatically begins Format erase startup config Mode Privileged EXEC Dual Image Commands The software supports a dual image feature that allows the switch to have two software images in the permanent storage You can specify which image is the active image to be loaded in subsequent reboots This feature allows reduced down time when you upgrade or downgrade the software Utility Commands 331 M4100 Series ProSAFE Managed Switches delete This command deletes the supplied image file from the permanent storage The image to be deleted must be a backup image If this image is the active image or if this image is activated an error message displays The optional lt unit gt parameter is valid only on Stacks Error will be returned if this parameter is provided on Standalone systems Ina stack the lt unit gt paramet
267. ands 526 M4100 Series ProSAFE Managed Switches Field Definition Reason for Energy detect current operational status EEE Admin Mode Transmit Idle Time The energy detect mode might be administratively enabled but the operational status might be inactive The reasons for the same are Portis currently operating in the fiber mode Link is up Admin Mode Disabled Interface Not Attached If the energy detect operational status is active the reason field displays No energy Detected EEE Admin Mode is enabled or disabled It is the time for which condition to move to LPI state is satisfied at the end of which MAC TX transitions to LPI state The Range is 0 to Oxffffffff The default value is O Transmit Wake Time It is the time for which MAC switch has to wait to go back to ACTIVE state from LPI state when it receives packet for transmission The Range is 0 to Oxffff The default value is 0 Rx Low Power Idle Event Count This field is incremented each time MAC RX enters LP IDLE state Shows the total number of Rx LPI Events since EEE counters are last cleared Rx Low Power Idle Duration microsec This field indicates duration of Rx LPI state in 10 microsecond increments Shows the total duration of Rx LPI since the EEE counters are last cleared Tx Low Power Idle Event Count Tx Low Power Idle Duration microsec Tw_sys_tx microsec Tw_sys Echo microsec Tw_sys_rx micros
268. apture file e Remote capture e Capture line The command is not persistent across a reboot cycle Format capture start stop transmit receive all Privileged EXEC capture file remote line Use this command to configure file capture options The command is persistent across a reboot cycle Default Remote Format capture file remote line Mode Global Config Parameter Description file In capture file mode the captured packets are stored in a file on NVRAM The maximum file size defaults to 524 288 bytes The switch can transfer the file toa TFTP server via TFTP SFTP SCP via CLI web and SNMP The file is formatted in pcap format is named cpuPktCapture pcap and can be examined using network analyzer tools such as Wireshark by Ethereal Starting a file capture automatically terminates any remote capture sessions and line capturing After the packet capture is activated the capture proceeds until the capture file reaches its maximum size or until the capture is stopped manually using the CLI command capture stop Utility Commands 400 M4100 Series ProSAFE Managed Switches Parameter Description remote In remote capture mode the captured packets are redirected in real time to an external computer running the Wireshark tool for Microsoft Windows A packet capture server runs on the switch side and sends the captured packets via a TCP connection to the Wires
269. ar the running configuration an error was encountered in removing the current settings This might lead to an inconsistent state in the system and resetting is advised The DiffServ policy definition is not compatible with the capabilities of the interface specified Check the platform release notes for information about configuration limitations Routing IPv6 Routing Table 39 DHCP Relay Log Messages Component Message Cause DHCP relay REQUEST hops field more than config The DHCP relay agent has processed a value DHCP request whose HOPS field is larger than the maximum value allowed The relay agent will not forward a message with a hop count greater than 4 DHCP relay Request s seconds field less than the The DHCP relay agent has processed a config value DHCP request whose SECS field is larger than the configured minimum wait time allowed DHCP relay processDhcpPacket invalid DHCP packet The DHCP relay agent has processed an type u n invalid DHCP packet Such packets are discarded by the relay agent Table 40 OSPFv2 Log Messages Component Message Cause OSPFv2 OSPFv2 Best route client deregistration failed for OSPF Redist XX_Call failure in _checkTimers for thread 0x869bcc0 OSPF v2 registers with the IPv4 routing table manager RTO to be notified of best route changes There are cases where OSPF v2 deregisters more than once causing the second deregistrat
270. aracters lt method1 gt Specify at least one from the following lt method2 gt e deny Used to deny access e enable Uses the enable password for authentication line Uses the line password for authentication e none Uses no authentication e radius Uses the list of all RADIUS servers for authentication Uses the user name Senabx in which x is the requested privilege level e tacacs Uses the list of all TACACS servers for authentication Uses the user name Senabx in which x is the requested privilege level no aaa authentication enable Use this command to remove the authentication method Format no aaa authentication enable default lt list name gt lt method1 gt lt method2 gt Mode Global Config aaa authentication dot 1x Use this command to set authentication for dot1x users The method argument identifies the list of methods that the authentication algorithm tries in the sequence The additional methods of authentication are used only if the previous method returns an error not if there is an authentication failure To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line For example if none is specified as an authentication method after radius no authentication is used if the RADIUS server is down The possible methods are as follows e ias Uses the internal authentication server users database for
271. ariable and calculating the value to be compared against thresholds Possible types are Absolute or Delta rising threshold lt value gt The alarm rising threshold for the sample statistics falling threshold lt value gt The alarm falling threshold for the sample statistics startup rising falling The alarm that may be sent Possible values are Rising Alarm Falling rising falling Alarm or both owner lt string gt The alarm owner The owner string associated with the alarm entry no rmon alarm This command deletes the RMON alarm entry Format no rmon alarm lt alarm number gt Mode Global Config Utility Commands 433 M4100 Series ProSAFE Managed Switches rmon hcalarm This command sets the RMON hcalarm entry in the High Capacity RMON alarm MIN group Format rmon hcalarm lt alarm number gt lt variable gt lt sample interval gt lt sampling type gt rising threshold high lt value gt rising threshold low lt value gt falling threshold high lt value gt falling threshold low lt value gt startup rising falling rising falling owner lt string gt Mode Global Config Parameter Description lt alarm number gt lt variabl lt sample lt sampling type gt larm Sample Type rising t lt value gt rising t e gt interval gt hreshold high hreshold low The identifier of the hcalarm instance The object identifier
272. arp access list Use this command to display the configured ARP ACLs with the rules Giving an ARP ACL name as the argument will display only the rules in that ARP ACL Format show arp access list lt acl name gt Mode e Privileged EXEC e User EXEC Command example NETGEAR Switch show arp access list ARP access list H2 permit ip host 1 1 1 1 mac host 00 01 02 03 04 05 permit ip host 1 1 1 2 mac host 00 03 04 05 06 07 ARP access list H3 ARP access list H4 permit ip host 2 1 1 2 mac host 00 03 04 05 06 08 IGMP Snooping Configuration Commands This section describes the commands you use to configure IGMP snooping The software supports IGMP Versions 1 2 and 3 The IGMP snooping feature can help conserve bandwidth because it allows the switch to forward IP multicast traffic only to connected hosts that request multicast traffic GMPv3 adds source filtering capabilities to IGMP versions 1 and 2 Switching Commands 154 M4100 Series ProSAFE Managed Switches set igmp This command enables IGMP Snooping on the system Global Config Mode or an interface Interface Config Mode This command also enables IGMP snooping on a particular VLAN VLAN Config Mode and can enable IGMP snooping on all interfaces participating in a VLAN If an interface has IGMP Snooping enabled and you enable this interface for routing or enlist it as a member of a port channel LAG IGMP Snooping functionality is disabled on that inte
273. as ira aptos 21 shutaoWImalll cccrcewon enone da INEDI NEEE SAA ES ERO iS 21 SHMP tap Ink StalUS 0 0 seaseeneee ese seeeS F655 ein oa EREE EEEE Ree a 498 SMM Crap linksta Alles carre 498 SIMPSSEIVEF dnidaadcen ras deidaainaeoepepenes A RARA EA 6o 444 48 FR ORE ORE 491 SHMP SErVerCOMMUNILY sc cccvevercenes ns s4440004s6Fbo8 0g ed ERE des 491 SNMP SErVEr COMMUNITY Ipaddr sis sccceceradorws owas 9 4594 8eaqaa aed ErGEeeedeoeesorss 095504 492 snmp server community ipmask cece rr 492 SNMP Server COMMUN MOG sas ls is 493 snmp Server COMU O dance e ea aia 493 SHINP SErVEF COMMUNILY TW actas rra 494 samp server enable tops e erorreosreseres etena teia AAA 494 snmp server enable traps linkmode cece eee eee t eee e eee e een ennaee 495 snmp server enable traps multiusers eee eee eee eect eee e eee e eee eenaes 495 snmp server enable traps stpmode 0 cece cee eee eee e eben eee ennaes 495 snmp server enable traps violation Suri id 494 SIMPLAP 0000 nia a SAN A E wae la ea 496 SHMPthap iPad 00 naar iaa reo sides 497 SMHIMPMAPIMOdE s erres snara naar isis 497 SIMPLAD SAMPMEFSI N ista dor rr dra ea taa pao aros 496 sntp broadcast client poll interval uva 375 575 M4100 Series ProSAFE Managed Switches SHED cent ModE e 6 2 5 4 5 4 6 aqedanqedannws espe e Mew ocqm G a 4h9 ndetny eae w ow SSIS Sew SOwGr ogee eS 375 SMPC BORE ir dire 376 SNEP SCMVED eo serenua EREE RRA ii AAA AAA AAA Raa ERRE 37
274. ast address in other words unknown multicast traffic on a VLAN Format mac address table multicast forward unregistered vlan lt 1 4093 gt Mode Global Config mac address table multicast forward all vlan Use this command to enable forwarding of all multicast packets on a VLAN Format mac address table multicast forward all vlan lt 1 4093 gt no mac address table multicast forward all vlan Use this command to restore the system default Format no mac address table multicast forward all vlan Mode Global Config show igmpsnooping This command displays IGMP Snooping information Configured information is displayed whether or not IGMP Snooping is enabled Format show igmpsnooping lt slot port gt lt vlan id gt Privileged EXEC If you do not use the optional lt slot port gt or lt vlan id gt argument the command displays the information that is described in the following table Term Definition Admin Mode Indicates whether or not IGMP Snooping is active on the switch Multicast Control The number of multicast control frames that are processed by the CPU Frame Count Interface The list of interfaces on which IGMP Snooping is enabled Enabled for IGMP Snooping VLANS Enabled The list of VLANS on which IGMP Snooping is enabled for IGMP Snooping Switching Commands 161 M4100 Series ProSAFE Managed Switches If you specify the lt slot port g
275. ast table entry Interfaces The list of interfaces that are designated for forwarding Fwd and filtering FIt Switching Commands 132 M4100 Series ProSAFE Managed Switches DHCP L2 Relay Agent Commands You can enable the switch to operate as a DHCP Layer 2 relay agent to relay DHCP requests from clients to a Layer 3 relay agent or server The Circuit ID and Remote ID can be added to DHCP requests relayed from clients to a DHCP server This information is included in DHCP Option 82 as specified in sections 3 1 and 3 2 of RFC3046 dhcp I2relay Use this command to enable the DHCP Layer 2 Relay agent for an interface a range of interfaces or all interfaces The subsequent commands mentioned in this section can be used only when the DHCP L2 relay is enabled Format dhcp 12relay Modes Global Config Interface Config no dhcp I2relay Use this command to disable the DHCP Layer 2 relay agent for an interface or range of interfaces Format no dhcp 12relay Modes Global Config Interface Config dhcp 2relay circuit id vlan Use this parameter to set the DHCP Option 82 Circuit ID for a VLAN When enabled the interface number is added as the Circuit ID in DHCP option 82 Vlan list range is 1 4093 Separate non consecutive IDs with a comma and do not insert spaces or zeros in between the range Use a dash for the range Format dhcp 12relay circuit id vlan lt vlan list
276. at Tx Pause can never be enabled Only Rx Pause can be enabled Default Disabled Format flowcontrol symmetric asymmetric Mode e Global Config Interface Config Switching Commands 107 M4100 Series ProSAFE Managed Switches no flowcontrol Format no flowcontrol Mode e Global Config e Interface Config show flowcontrol Use this command to display the IEEE 802 3 Annex 31B flow control settings and status for a specific interface or all interfaces It also displays 802 3 Tx and Rx pause counts Priority Flow Control frames counts are not displayed If the port is enabled for priority flow control operational flow control status is displayed as Inactive Operational flow control status for stacking ports is always displayed as N A Format show flowcontrol slot port Privileged Exec Command example NETGEAR Switch show flowcontrol Admin Flow Control Symmetric Port Flow Control RxPause TxPause Oper 0 1 Active 310 611 0 2 Inactive 0 0 Command example NETGEAR Switch show flowcontrol interface 0 1 Admin Flow Control Symmetric Port Flow Control RxPause TxPause Oper 0 1 Active 310 611 Switching Commands 108 M4100 Series ProSAFE Managed Switches Port Channel LAG 802 3ad Commands This section describes the commands you use to configure port channels which are also known as link aggregation groups LAGs Link aggregation allows you to c
277. at will be transmitted when the product is enabled The range is 1 to 10 Default 3 Format lldp med faststartrepeatcount lt count gt Mode Global Config Switching Commands 193 M4100 Series ProSAFE Managed Switches no lldp med faststartrepeatcount Use this command to return to the factory default value no lldp med faststartrepeatcount Global Config lldp med transmit tlv all Use this command to specify which optional Type Length Values TLVs in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units LLDPDUs Default By default the capabilities and network policy TLVs are included Format lldp med transmit tlv all capabilities ex pd ex pse inventory location network policy Mode Global Config Parameter Definition capabilities Transmit the LLDP capabilities TLV ex pd Transmit the LLDP extended PD TLV ex pse Transmit the LLDP extended PSE TLV inventory Transmit the LLDP inventory TLV location Transmit the LLDP location TLV network policy Transmitthe LLDP network policy TLV no lldp med transmit tlv Use this command to remove a TLV Format no lldp med transmit tlv all capabilities network policy ex pse ex pd location inventory Mode Global Config show lldp med Use this command to display a summary of the current LLDP MED configuration Format show lldp med Privileged
278. ate of the authenticator PAE state machine Possible values are Initialize Disconnected Connecting Authenticating Authenticated Aborting Held ForceAuthorized and ForceUnauthorized Backend Authentication State Current state of the backend authentication state machine Possible values are Request Response Success Fail Timeout Idle and Initialize VLAN Assigned The VLAN assigned to the client by the radius server Logical Port The logical port number associated with the client If you use the optional parameter statistics lt slot port gt the following dot1x statistics for the specified port appear Port The interface whose statistics are displayed EAPOL Frames Received The number of valid EAPOL frames of any type that have been received by this authenticator EAPOL Frames Transmitted EAPOL Start Frames Received EAPOL Logoff Frames Received The number of EAPOL frames of any type that have been transmitted by this authenticator The number of EAPOL start frames that have been received by this authenticator The number of EAPOL logoff frames that have been received by this authenticator Last EAPOL The protocol version number carried in the most recently received EAPOL frame Frame Version Last EAPOL The source MAC address carried in the most recently received EAPOL frame Frame Source EAP Response ld Frames Received The number of EAP response identity frames that hav
279. ation setting Clear commands clear some or all of the settings to factory defaults 443 M4100 Series ProSAFE Managed Switches Switch Management CPU Commands To manage the switch via the web GUI or telnet an IP address needs to be assigned to the switch management CPU Whereas there are CLI commands that can be used to do this ezconfig simplifies the task The tool allows you to configure the following parameters 1 The administrator s user password and administrator enable password 2 Management CPU IP address and network mask 3 System name and location information The tool is interactive and uses questions to guide you through the steps required to perform its task At the end of the session it will ask you if you want to save the changed information To see exactly what has been changed by ezconfig at the end of the session use the show running config command To perform any switch configuration other than the items listed above use other CLI commands or the web GUI ezconfig This command sets the IP address subnet mask and gateway of the device The IP address and the gateway must be on the same subnet Format ezconfig Mode Privileged EXEC Management Commands 444 M4100 Series ProSAFE Managed Switches The following is an example of an ezconfig session NETGEAR EZ Configuration Utility Hello and Welcome This utility will walk you thru assigning the IP address for
280. ation to send untagged voice traffic untagged Configure the phone to send untagged voice traffic no voice vlan Interface Config Use this command to disable the Voice VLAN capability on the interface Format no voice vlan Mode Interface Config voice vlan data priority Use this command to either trust or untrust the data traffic arriving on the Voice VLAN port Default trust voice vlan data priority untrust trust Mode Interface Config Switching Commands 66 M4100 Series ProSAFE Managed Switches show voice vlan Format show voice vlan interface lt slot port gt all Mode Privileged EXEC When the interface parameter is not specified only the global mode of the Voice VLAN is displayed Term Definition Administrative The Global Voice VLAN mode Mode When the interface is specified Term Definition Voice VLAN Interface Mode The admin mode of the Voice VLAN on the interface Voice VLAN ID The Voice VLAN ID Voice VLAN Priority The do1p priority for the Voice VLAN on the port Voice VLAN Untagged The tagging option for the Voice VLAN traffic Voice VLAN CoS Override The Override option for the voice traffic arriving on the port Voice VLAN Status The operational status of Voice VLAN on the port Provisioning IEEE 802 1p Commands This section describes the commands you use to configure provisioning which allows you to prior
281. ave Use this command to enable MLD Snooping fast leave admin mode on a selected interface or VLAN Enabling fast leave allows the switch to immediately remove the Layer 2 LAN interface from its forwarding table entry upon receiving and MLD done message for that multicast group without first sending out MAC based general queries to the interface Note You should enable fast leave admin mode only on VLANs where only one host is connected to each Layer 2 LAN port This prevents the inadvertent dropping of the other hosts that were connected to the same layer 2 LAN port but were still interested in receiving multicast traffic directed to that group Note Fast leave processing is supported only with MLD version 1 hosts Default disabled Format set mld fast leave lt vlan id gt Mode e Interface Config VLAN Mode Switching Commands 169 M4100 Series ProSAFE Managed Switches no set mld fast leave Use this command to disable MLD Snooping fast leave admin mode on a selected interface Format no set mld fast leave lt vlan id gt Mode e Interface Config e VLAN Mode set mld groupmembership interval Use this command to set the MLD Group Membership Interval time on a VLAN one interface or all interfaces The Group Membership Interval time is the amount of time in seconds that a switch waits for a report from a particular group on a particular interface before deleting the interface from the entry This value mu
282. ays the current Dot1p 802 1p priority mapping to internal traffic classes for a specific interface The lt slot port gt parameter is optional and is only valid on platforms that support independent per port Class of Service mappings If specified the 802 1p mapping table of the interface is displayed If omitted the most recent global configuration settings are displayed For more information see Voice VLAN Commands on page 65 Quality of Service Commands 267 M4100 Series ProSAFE Managed Switches Format show classofservice dotlp mapping lt slot port gt Mode Privileged EXEC The following information is repeated for each user priority User Priority The 802 1p user priority value Traffic Class The traffic class internal queue identifier to which the user priority value is mapped show classofservice ip precedence mapping This command displays the current IP Precedence mapping to internal traffic classes for a specific interface The lt slot port gt parameter is optional and is only valid on platforms that support independent per port Class of Service mappings If specified the IP Precedence mapping table of the interface is displayed If omitted the most recent global configuration settings are displayed Format show classofservice ip precedence mapping lt slot port gt Mode Privileged EXEC The following information is repeated for each user priority Term Definition IP
283. be assigned by a level 15 user to another user to suspend that user s access Range 0 15 Enter access level 1 for Read Access or 15 for Read Write Access Management Commands 468 M4100 Series ProSAFE Managed Switches Term Definition encrypted override complexity Disables the validation of the password strength check no username Encrypted password you enter copied from another device configuration Use this command to remove a user account Format Mode no usernam lt username gt Global Config Note You cannot delete the admin user account username name nopassword Use this command to remove an existing user s password NULL password Format username name nopassword level level Mode Global Config Parameter Description name The name of the user Range 1 32 characters password The authentication password for the user Range 8 64 characters level The user level Level 0 can be assigned by a level 15 user to another user to suspend that user s access Range 0 15 username unlock Use this command to unlock a user s account Only a user with read write access can reactivate a locked user account username lt username gt unlock Format Mode Global Config Management Commands 469 M4100 Series ProSAFE Managed Switches username snmpv3 accessmode Use this command to specify the SNMPv3 access
284. be the full name of the corporation a commonly accepted abbreviation of the name of the corporation the SCSI com pany code for the corporation or the stock exchange code for the cor poration Length 50um OM2 This value specifies link length that is supported by the transceiver while operating in compliance with applicable standards using 50 micron multimode OM2 500MHz km at 850nm fiber A value of zero means that the transceiver does not support 50 micron multimode fiber or that the length information must be determined from the transceiver technology Length 62 5um OM1 This value specifies link length that is supported by the transceiver while operating in compliance with applicable standards using 62 5 micron multimode OM1 200 MHz km at 850nm 500 MHz km at 1310nm fiber A value of zero means that the transceiver does not support 62 5 micron multimode fiber or that the length information must determined from the transceiver technology Vendor SN The vendor serial number vendor SN is a 16 character field that con tains ASCII characters left aligned and padded on the right with ASCII spaces 20h defining the vendor s serial number for the transceiver A value of all zero in the 16 byte field indicates that the vendor SN is unspecified Vendor PN The vendor part number vendor PN is a 16 byte field that contains ASCII characters left aligned and added on the right with ASCII spaces 20h defining the vendo
285. bership of the receiving interface are admitted and forwarded to ports that are members of that VLAN Default disabled Format vlan port ingressfilter all Mode Global Config Switching Commands 50 M4100 Series ProSAFE Managed Switches no vian port ingressfilter all This command disables ingress filtering for all ports If ingress filtering is disabled frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN Format no vlan port ingressfilter all Mode Global Config vian port pvid all This command changes the VLAN ID for all interface Default 1 Format vlan port pvid all lt 1 4093 gt Mode Global Config no vian port pvid all This command sets the VLAN ID for all interfaces to 1 Format no vlan port pvid all Mode Global Config vian port tagging all This command configures the tagging behavior for all interfaces in a VLAN to enabled If tagging is enabled traffic is transmitted as tagged frames If tagging is disabled traffic is transmitted as untagged frames The ID is a valid VLAN identification number Format wlan port tagging all lt 1 4093 gt Mode Global Config no vian port tagging all This command configures the tagging behavior for all interfaces in a VLAN to disabled If tagging is disabled traffic is transmitted as untagged frames The I
286. best route to each destination Alternate Routes The number of alternate routes currently in the routing table An alternate route is one that was not selected as the best route to its destination Route Adds The number of routes added to the routing table Route Modifies The number of routes that changed after they were initially added to the routing table Route Deletes The number of routes that deleted from the routing table Unresolved The number of route adds that failed because none of the route s next hops were on a Route Adds local subnet Note that static routes can fail to be added to the routing table at startup because the routing interfaces are not up yet This counter gets incremented in this case The static routes are added to the routing table when the routing interfaces come up Invalid Route The number of routes that failed to be added to the routing table because the route was Adds invalid A log message is written for each of these failures Failed Route The number of routes that failed to be added to the routing table because of a resource Adds limitation in the routing table Reserved Locals The number of routing table entries reserved for a local subnet on a routing interface that is down Space for local routes is always reserved so that local routes can be installed when a routing interface bounces Routing Commands 248 M4100 Series ProSAFE Managed Switches Term Definit
287. can specify a port key or port number for the source and a port key or port number for the destination Specifies a destination IP address and netmask for match condition of the IP ACL rule Specifies the ToS for an IP ACL rule depending on a match of precedence or DSCP values using the parameters precedence lt dscp gt lt precedence gt tos lt tos gt Or dscp lt dscp gt lt tosmask gt is an optional parameter log Specifies that this rule is to be logged rate limit lt 1 4294967295 gt lt 1 128 gt assign queue lt queue id gt You can specify a simple rate limiter for packets matching an ACL permit rule You must specify the allowed rate of traffic in kops from 1 429496729 and burst size in kbytes from 1 128 The conforming traffic is allowed to transmit and nonconforming traffic is dropped This action is ignored for any deny rule because by definition matching packets are dropped Specifies the assign queue which is the queue identifier to which packets matching this rule are assigned mirror redirect lt slot port gt Specifies the mirror or redirect interface which is the lt slot port gt to which packets matching this rule are copied or forwarded respectively no access list This command deletes an IP ACL that is identified by the parameter lt accesslistnumber gt from the system The range for lt accesslistnumber gt 1 99 for standard access lists and 100 199 f
288. cast address including those that were discarded or not sent Transmitted Transmit Packet The number of outbound packets that could not be transmitted because of errors Errors Address Entries The total number of Forwarding Database Address table entries now active on the Currently In Use switch including learned and static entries VLAN Entries The number of VLAN entries presently occupying the VLAN table Currently In Use Time Since The elapsed time in days hours minutes and seconds since the statistics for this Counters Last switch were last cleared Cleared show interface counters This command reports key summary statistics for all ports physical CPU and port channel Format show interface counters Mode Privileged EXEC Utility Commands 336 Command example M4100 Series ProSAFE Managed Switches Routing show interface counters Port InOctets InUcastPkts InMcastPkts InBcastPkts 5098 o oO D O O O Q O O O O OG O SO OU O B Oo O O O O G GOG GWU G G D OG OG GOG 50 O OOOO show interface ethernet This command displays detailed statistics for a specific interface or for all CPU traffic based upon the argument Format show interface ethernet lt slot port gt switchport Mode Privileged EXEC When you specify a value for lt slot port gt the command output displays the information that is shown in the following table Term
289. cast streams to the MVR switch If the mode is set to dynamic the switch learns existing multicast groups by snooping the IGMP queries from router on source ports and forwarding the IGMP joins from the hosts to the IGMP router on the multicast VLAN with appropriate translation of the VLAN ID Default compatible Format mvr mode compatible dynamic Mode Global Config no mvr mode This command sets the mode type to the default value Format Mode Global Config mvr querytime This command sets the MVR query response time Default 5 Format mvr querytime lt 1 100 gt no mvr querytime This command sets the MVR query response time to the default value Format no mvr querytime Mode Global Config Multicast VLAN Registration Commands 221 M4100 Series ProSAFE Managed Switches mvr vian This command sets the MVR multicast VLAN Default 1 Format mvr vlan lt 1 4094 gt Mode Global Config no mvr vian This command sets the MVR multicast VLAN to the default value Format no mvr vlan Mode Global Config mvr immediate This command enables MVR immediate leave mode MVR has two modes of operating with the IGMP Leave messages normal leave and immediate leave e In normal leave mode when a leave is received the general IGMP query is sent from a Layer 2 switch to the receiver port where the leave was received Then reports are received fro
290. ccounting name Host Address Server Name Port Secret Configured 192 168 37 200 Network1_RADIUS_Server 1813 Yes 192716837201 Network2_RADIUS_Server 1813 No 192 168 37 202 Network3_RADIUS_Server 1813 Yes 192 168 357 203 Network4_RADIUS_Server 1813 No Command example NETGEAR Switch show radius accounting name Default_RADIUS_Server SETEVear Nader ea Default_RADIUS_Server Host Address iii e aa e a 192 766 374 200 RADIUS Accounting Mode Disable BOE usar ie do a aa 1813 Secret Configured i kee wee dia aa eee Yes Management Commands 510 M4100 Series ProSAFE Managed Switches show radius accounting statistics Use this command to display a summary of statistics for the configured RADIUS accounting servers Format show radius accounting statistics lt ipaddr gt lt dnsname gt name lt servername gt Mode Privileged EXEC Field Definition Server Name Round Trip Time Requests RADIUS Accounting Server Host Address The name of the accounting server The IP address of the host The time interval in hundredths of a second between the most recent Accounting Response and the Accounting Request that matched it from this RADIUS accounting server The number of RADIUS Accounting Request packets sent to this server This number does not include retransmissions Retransmission The number of RADIUS Accounting Request packets retransmitted to this RADIUS acc
291. ce color of TCP traffic The last precedence applies to all non TCP traffic For example in a 3 color system four of each parameter specified green TCP yellow TCP red TCP and non TCP respectively Quality of Service Commands 266 M4100 Series ProSAFE Managed Switches Format random detect queue parms lt queue id 1 gt lt queue id 2 gt lt queue id n gt minthresh lt thresh prec 1 gt lt thresh prec n gt max thresh lt thresh prec 1 gt lt threshprec n gt drop probability lt prob prec 1 gt lt prob prec n gt Modes e Global Config e Interface Config no random detect queue parms Use this command to set the WRED configuration back to the default Format no random detect queue parms lt queue id 1 gt lt queue 1d 2 gt lt queue 1d n gt Modes e Global Config e Interface Config traffic shape This command specifies the maximum transmission bandwidth limit for the interface as a whole Also known as rate shaping traffic shaping has the effect of smoothing temporary traffic bursts over time so that the transmitted traffic rate is bounded Format traffic shape lt bw gt Modes e Global Config Interface Config no traffic shape This command restores the interface shaping rate to the default value Format no traffic shape Modes e Global Config e Interface Config show classofservice dot1p mapping This command displ
292. ce last sample Percentage of time spent in LPI mode on this port when compared to sampling interval time spent in LPI mode since last reset Percentage of total time spent in LPI mode on this port when compared to time since reset Command example NETGEAR Switch show green mode eee lpi history interface 0 1 Sampling Interval SeC o ooooooooomoo moron 30 Total No of Samples to Keep 168 Percentage LPI time per stack 6 29 Percentage of Percentage of Sample Time Since Time spent in Time spent in No The Sample LPI mode since LPI mode since Was Recorded last sample last reset PNY WwW FP OT wD 1 00 OO PH a Q am o N A Ko wW 0 UU UU Y Y WwW Y WwW Ww PrP RP Dn NY NY NY NY V Green Ethernet Commands 531 Log Messages This chapter lists common log messages along with information regarding the cause of each message There is no specific action that can be taken per message If a problem is being diagnosed a set of these messages in the event log along with an understanding of the system configuration and details of the problem can assist NETGEAR technical support in determining the root cause of such a problem Note This chapter does not contain a complete list of all syslog messages The chapter contains the following sections Core Utilities Management Switching QoS Routing IPv6 Routing Multicast Stacking Technologies O S Support
293. cess to the system and to disable the Telnet Server Admin Mode This command closes the Telnet listening port and disconnects all open Telnet sessions Format fro ip telnet server enabl Mode Privileged EXEC telnet Use this command to establish a new outbound Telnet connection to a remote host The host must be a valid IP address or host name The value for lt port gt is a valid decimal integer in the range of 0 65 535 where the default value is 23 If the optional debug parameter is used the current Telnet options enabled is displayed The optional Line parameter sets the outbound Telnet operational mode as linemode by default the operational mode is character mode The optional noecho parameter disables local echo Format telnet lt ip address gt lt hostname gt lt port gt debug line noecho Modes e Privileged EXEC e User EXEC Management Commands 452 M4100 Series ProSAFE Managed Switches transport input telnet Use this command to regulate new Telnet sessions If enabled new Telnet sessions can be established until there are no more sessions available An established session remains active until the session is ended or an abnormal network error ends the session Note If the Telnet Server Admin Mode is disabled Telnet sessions cannot be established Use the ip telnet server enable command to enable Telnet Server Admin Mode Default enabled Format transport input telne
294. cfilter adddest all This command adds all interfaces to the destination filter set for the MAC filter with the lt macaddr gt and VLAN of lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Note Configuring a destination port list is only valid for multicast MAC addresses Format macfitter adddest all lt macaddr gt lt vlanid gt Mode Global Config no macfilter adddest all This command removes all ports from the destination filter set for the MAC filter with the lt macaddr gt and VLAN of lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Switching Commands 130 M4100 Series ProSAFE Managed Switches Format no macfilter adddest all lt macaddr gt lt vlanid gt Mode Global Config macfilter addsrc This command adds the interface to the source filter set for the MAC filter with the MAC address of lt macaddr gt and VLAN of lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Format macfilter addsrce lt macaddr gt lt vlanid gt Mode Interface Config no macfilter addsrc Th
295. channel static Mode Interface Config port lacpmode This command enables Link Aggregation Control Protocol LACP on a port Default enabled Format port lacpmode Mode Interface Config Switching Commands 118 M4100 Series ProSAFE Managed Switches no port lacpmode This command disables Link Aggregation Control Protocol LACP on a port Format no port lacpmode Mode Interface Config port lacpmode enable all This command enables Link Aggregation Control Protocol LACP on all ports Format port lacpmode enable all Mode Global Config no port lacpmode enable all This command disables Link Aggregation Control Protocol LACP on all ports Format no port lacpmode enable all port lacptimeout Interface Config This command sets the timeout on a physical interface of a particular device type actor or partner to either long or short time out Default long Format port lacptimeout actor partner long short Mode Interface Config no port lacptimeout This command sets the timeout back to its default value on a physical interface of a particular device type actor or partner Format no port lacptimeout actor partner Mode Interface Config Switching Commands 119 M4100 Series ProSAFE Managed Switches port lacptimeout Global Config This command sets the timeout for all interfaces of a particular d
296. ciation or mapping from the port Format no switchport mode private vlan Mode Interface Config private vlan This command is used to configure the private VLANs and to configure the association between the primary private VLAN and secondary VLANs Format private vlan association add remove lt secondary vlan list gt community isolated primary Mode VLAN Config Parameter Definition association Associates the primary and secondary VLAN lt secondary vlan list gt A list of secondary VLANs to be mapped to a primary VLAN community Designates a VLAN as a community VLAN isolated Designates a VLAN as the isolated VLAN primary Designates a VLAN as the primary VLAN Switching Commands 72 M4100 Series ProSAFE Managed Switches no private vlan This command is used to restore normal VLAN configuration Format no private vlan association Mode VLAN Config vian Private VLAN Use this command to enter the private vlan configuration The VLAN range is 1 4094 Format vlan lt vlan list gt Mode Global Config show vlan private vlan This command displays information about the configured private VLANs including primary and secondary VLAN IDs type community isolated or primary and the ports that belong to a private VLAN Format show vlan private vlan type Mode e Privileged EXEC User EXEC Term Defini
297. cols that created the routes IP Address Mask The IP Address and mask of the destination network corresponding to this route Preference The administrative distance associated with this route Routes with low values are preferred over routes with higher values Metric The cost associated with this route via Next Hop The outgoing router IP address to use when forwarding traffic to the next router if any in the path toward the destination Route Timestamp The last updated time for dynamic routes The format of Route Timestamp will be Days Hours Minutes if days gt 1 e Hours Minutes Seconds if days lt 1 Interface The outgoing router interface to use when forwarding traffic to the next destination For reject routes the next hop interface would be Nullo interface To administratively control the traffic destined to a particular network and prevent it from being forwarded through the router you can configure a static reject route on the router Such traffic would be discarded and the ICMP destination unreachable message is sent back to the source This is typically used for preventing routing loops The reject route added in the RTO is of the type OSPF Inter Area Reject routes routes of REJECT type installed by any protocol are not redistributed by OSPF RIP Reject routes are supported in both OSPFv2 and OSPFvs3 Routing Commands 246 M4100 Series ProSAFE Managed Switches Command example NETGEAR Swi
298. command adds to the specified class definition a match condition based on the source IP address of a packet Default none Format match srcip6 lt source 1pv6 prefix prefix length gt Mode Ipv6 Class Map Config match srcl4port This command adds to the specified class definition a match condition based on the source layer 4 port of a packet using a single keyword or numeric notation To specify the match condition as a single keyword notation the value for lt portkey gt is one of the supported port name keywords listed below The currently supported lt portkey gt values are domain echo ftp ftpdata http smtp snmp telnet tftp www Each of these translates into its equivalent port number which is used as both the start and end of a port range To specify the match condition as a numeric value one layer 4 port number is required The port number is an integer from 0 to 65535 Quality of Service Commands 279 M4100 Series ProSAFE Managed Switches Default none Format match srcl4port lt portkey gt lt 0 65535 gt Mode e Class Map Config Ipv6 Class Map Config match vlan This command adds to the specified class definition a match condition based on the value of the layer 2 VLAN Identifier field the 802 1Q tag of a VLAN tagged packet The VLAN is an integer from 0 to 4095 Default none Format match vlan lt 0 4095 gt Mode e Class Map Config Ipv6 Class Map Config
299. continued Packets Received Successfully Packets Received 512 1023 Octets The total number of packets including bad packets received that were from 512 through 1023 octets in length inclusive excluding framing bits but including FCS octets Packets Received 1024 1518 Octets The total number of packets including bad packets received that were from 1024 through 1518 octets in length inclusive excluding framing bits but including FCS octets Packets Received gt 1518 Octets The total number of packets received that were longer than 1522 octets excluding framing bits but including FCS octets and were otherwise well formed Packets RX and TX 64 Octets The total number of packets including bad packets received and transmitted that were 64 octets in length excluding framing bits but including FCS octets Packets RX and TX 65 127 Octets The total number of packets including bad packets received and transmitted that were from 65 through 127 octets in length inclusive excluding framing bits but including FCS octets Packets RX and TX 128 255 Octets The total number of packets including bad packets received and transmitted that were from 128 through 255 octets in length inclusive excluding framing bits but including FCS octets Packets RX and TX 256 511 Octets The total number of packets including bad packets received and transmitted that were from 256 through 511 octets in length inclusive excluding framing bi
300. correctly set the file s size in the file system after a write The file system is R W so this msg indicates that the file system may be corrupted ftruncate is called to correctly set the file s size in the file system after a write The file is opened for R W so this msg indicates that the file system may be corrupted OSAPI ftruncate failed File descriptor refers to a ftruncate is called to correctly set the file s file on which this operation is impossible size in the file system after a write This msg indicates that the file system may be corrupted OSAPI ftruncate failed Returned an unknown ftruncate is called to correctly set the file s code in errno size in the file system after a write This msg indicates that the file system may be corrupted OSAPI ping bad host The address requested to ping cannot be converted to an Internet address OSAPI osapiTaskDelete Failed for XX error YYY The requested task cannot be deleted because the requested deletion is called from an ISR the task is already deleted or the task ID is invalid Log Messages 556 M4100 Series ProSAFE Managed Switches Table 55 OSAPI Log Messages continued Component Message Cause OSAPI osapiCleanuplf NetIPGet During the call to remove the interface from the route table the attempt to get an ipv4 interface address from the stack failed OSAPI osapiCleanuplf NetMaskGet During the c
301. cripts to one or more switches with no or minor modifications Use the show running config command see show running config on page 349 to capture the running configuration into a script Use the copy command see copy on page 371 to transfer the configuration script to or from the switch You should use scripts on systems with default configuration however you are not prevented from applying scripts on systems with non default configurations Scripts must conform to the following rules e Script files are not distributed across the stack and only live in the unit that is the master unit at the time of the file download e The file extension must be scr A maximum of ten scripts are allowed on the switch e The combined size of all script files on the switch shall not exceed 2048 KB The maximum number of configuration file command lines is 2000 You can type single line annotations at the command prompt to use when you write test or configuration scripts to improve script readability The exclamation point character flags the beginning of a comment The comment flag character can begin a word anywhere on the command line and all input following this character is ignored Any command line that begins with the character is recognized as a comment line and ignored by the parser Management Commands 518 M4100 Series ProSAFE Managed Switches The following lines show an example of a script Script f
302. curity max dynamic This command sets the maximum number of dynamically locked MAC addresses allowed on a specific port Default 600 Format port security max dynamic lt maxvalue gt Mode Interface Config no port security max dynamic This command resets the maximum number of dynamically locked MAC addresses allowed on a specific port to its default value Format no port security max dynamic Mode Interface Config port security max static This command sets the maximum number of statically locked MAC addresses allowed on a port Defaut Format port security max static lt maxvalue gt Mode Interface Config no port security max static This command sets maximum number of statically locked MAC addresses to the default value Format no port security max static Mode Interface Config Switching Commands 179 M4100 Series ProSAFE Managed Switches port security mac address This command adds a MAC address to the list of statically locked MAC addresses The lt vid gt is the VLAN ID Format port security mac address lt mac address gt lt vid gt Mode Interface Config no port security mac address This command removes a MAC address from the list of statically locked MAC addresses Format no port security mac address lt mac address gt lt vid gt Mode Interface Config port security mac address move This command converts dynamically locked M
303. d the CLI mode changes to Time Range Config mode Mode Global Config no time range Use this command to delete a time range identified by lt name gt Format no time range lt name gt Mode Global Config Quality of Service Commands 309 M4100 Series ProSAFE Managed Switches absolute Use this command to add an absolute time entry to a time range Only one absolute time entry is allowed per time range The lt time gt parameters are based on the currently configured time zone The start lt time gt lt date gt parameters indicate the time and date at which the configuration that referenced the time range starts going into effect The time is expressed in a 24 hour clock in the form of hours minutes For example 8 00 is 8 00 am and 20 00 is 8 00 pm The date is expressed in the format day month year If no start time and date are specified the configuration statement is in effect immediately The end lt time gt lt date gt parameters indicate the time and date at which the configuration that referenced the time range is no longer in effect The end time and date must be after the start time and date If no end time and date are specified the configuration statement is in effect indefinitely absolute start lt time gt lt date gt end lt time gt lt date gt Time Range Config no absolute Use this command to delete the absolute time entry in the time range Fo
304. d Switches isdp timer This command sets the period of time between sending new ISDP packets You must enter the range in seconds Default 30 seconds Format isdp timer lt 5 254 gt Mode Global Config isdp advertise v2 This command enables the sending of ISDP version 2 packets from the device Default Enabled Format isdp advertise v2 Mode Global Config no isdp advertise v2 This command disables the sending of ISDP version 2 packets from the device no isdp advertise v2 Global Config isdp enable This command enables ISDP on the interface Default Enabled Format isdp enable Mode Interface Config no isdp enable This command disables ISDP on the interface no isdp enable Interface Config Switching Commands 214 M4100 Series ProSAFE Managed Switches clear isdp counters This command clears ISDP counters Format clear isdp counters Mode Privileged EXEC clear isdp table This command clears entries in the ISDP table Format clear isdp table Mode Privileged EXEC show isdp This command displays global ISDP settings Advertisements Format show isdp Mode Privileged EXEC Term Definition Timer The frequency with which this device sends ISDP packets This value is shown in seconds Hold Time The length of time the receiving device should save information sent by this device Thi
305. d displays ISDP entries If the device id is specified then only entries for that device are shown show isdp entry all deviceid Privileged EXEC Term Definition Device ID The device ID associated with the neighbor which advertised the information IP Addresses The IP address es associated with the neighbor Platform The hardware platform advertised by the neighbor Interface The interface slot port on which the neighbor s advertisement was received Port ID The port ID of the interface from which the neighbor sent the advertisement Hold Time The hold time advertised by the neighbor Version The software version that the neighbor is running Advertisement The version of the advertisement packet received from the neighbor Version Capability ISDP Functional Capabilities advertised by the neighbor show isdp neighbors This command displays the list of neighboring devices Format show isdp neighbors lt slot port gt detail Privileged EXEC Switching Commands 216 M4100 Series ProSAFE Managed Switches Term Definition Device ID The device ID associated with the neighbor which advertised the information IP Addresses The IP addresses associated with the neighbor Capability ISDP functional capabilities advertised by the neighbor Platform The hardware platform advertised by the neighbor Interface The interface slot port on which the ne
306. d is only applicable to physical interfaces no lacp partner admin state longtimeout Use this command to set the LACP partner admin state to short timeout Format no lacp partner admin state longtimeout Mode Interface Config Note This command is only applicable to physical interfaces lacp partner admin state passive Use this command to set the LACP partner admin state to passive Format lacp partner admin state passive Interface Config Note This command is only applicable to physical interfaces no lacp partner admin state passive Use this command to set the LACP partner admin state to active Format no lacp partner admin state passive Mode Interface Config Switching Commands 115 M4100 Series ProSAFE Managed Switches lacp partner port id Use this command to configure the LACP partner port id The valid range for lt port id gt is 0 65535 Default 0x80 Format lacp partner portid lt port id gt Mode Interface Config Note This command is only applicable to physical interfaces no lacp partner port id Use this command to set the LACP partner port id to the default Format no lacp partner portid Mode Interface Config lacp partner port priority Use this command to configure the LACP partner port priority The valid range for lt priority gt is 0 255 Default 0x0 Format lacp partner port priority lt priority gt Mode Interf
307. ddr 3099 2 no snmptrap Use this command to delete trap receivers for a community Format no snmptrap lt name gt ipaddr lt ipaddr gt lt hostname gt ip6addr lt ip6 addr gt lt hostname gt Mode Global Config snmptrap snmpversion Use this command to modify the SNMP version of a trap The maximum length of lt name gt is 16 case sensitive alphanumeric characters The lt snmpversion gt parameter options are snmpv1 or snmpv2 Management Commands 496 M4100 Series ProSAFE Managed Switches Note This command does not support a no form Default snmpv2 Format snmptrap snmpversion lt name gt lt ipaddr gt lt hostname gt lt ip6addr gt lt hostname gt snmpvl snmpv2 Mode Global Config snmptrap ipaddr Use this command to assign an IP address to a specified community name The name can use up to 16 case sensitive alohanumeric characters Note IP addresses in the SNMP trap receiver table must be unique If you make multiple entries using the same IP address the first entry is retained and processed All duplicate entries are ignored Format snmptrap ipaddr lt name gt lt ipaddrold gt lt ipaddrnew hostnamenew gt Mode Global Config snmptrap mode Use this command to activate or deactivate an SNMP trap Enabled trap receivers are active able to receive traps Disabled trap receivers are inactive not able to receive traps Format snmptrap
308. ddr gt lt vlanid gt Mode Global Config no macfilter This command removes all filtering restrictions and the static MAC filter entry for the MAC address lt macaddr gt onthe VLAN lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Format no macfilter lt macaddr gt lt vlanid gt Mode Global Config Switching Commands 129 M4100 Series ProSAFE Managed Switches macfilter adddest Use this command to add the interface to the destination filter set for the MAC filter with the lt macaddr gt and VLAN of lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Note Configuring a destination port list is only valid for multicast MAC addresses Format macfilter adddest lt macaddr gt lt vlanid gt Interface Config no macfilter adddest This command removes a port from the destination filter set for the MAC filter with the lt macaddr gt and VLAN of lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Format no macfilter adddest lt macaddr gt lt vlanid gt Interface Config ma
309. ddress If the result matches with IP address then the address is an authenticated IP address For example if the IP address 9 47 128 0 and the corresponding Subnet Mask 255 255 255 0 a range of incoming IP addresses would match i e the incoming IP address could equal 9 47 128 0 9 47 128 255 The default value is 0 0 0 0 Access Mode The access level for this community string Status The status of this community access entry show snmptrap Use this command to display SNMP trap receivers Trap messages are sent across a network to an SNMP network manager These messages alert the manager to events occurring within the switch or on the network Six trap receivers are simultaneously supported Format show snmptrap Mode Privileged EXEC Management Commands 499 M4100 Series ProSAFE Managed Switches Field Definition S O SNMP Trap Name The community string of the SNMP trap packet sent to the trap manager The string is case sensitive and can be up to 16 alphanumeric characters IP Address The IPv4 address to receive SNMP traps from this device IPv6 Address SNMP Version The IPv6 address to receive SNMP traps from this device SNMPv2 Status The receiver s status enabled or disabled Command example Netgear Switch show snmptrap Community Name IpAddress IPv6 Address Snmp Version Mode Mytrap 0 0 0 0 2001341 SNMPv2 Enable show trapflags show trapflags Use t
310. de Privileged EXEC Term Definition Output Format line lt number gt lt line contents gt script validate Use this command to validate a script file by parsing each line in the script file where lt scriptname gt is the name of the script to validate The validate option is intended to be used as a tool for script development Validation identifies potential problems It might not identify all problems with a script on a device Format script validate lt scriptname gt Mode Privileged EXEC Pre Login Banner and System Prompt Commands This section describes the commands you use to configure the pre login banner and the system prompt The pre login banner is the text that displays before you login at the User prompt copy pre login banner Use the copy command to upload or download the CLI banner from the switch You can specify local URLs by using TFTP Xmodem Ymodem or Zmodem Note lt ip address gt is also a valid parameter for routing packages that support IPv6 Management Commands 520 M4100 Series ProSAFE Managed Switches Format copy lt url gt nvram clibanner or copy nvram clibanner lt url gt Mode Privileged EXEC set prompt Use this command to change the name of the prompt The length of name might be up to 64 alphanumeric characters Format set prompt lt prompt_string gt Mode Privileged EXEC set clibanner Use this command
311. destination port number Source TCP Port Destination TCP Port Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress with Source TCP Port Destination TCP Port the packets will be dropped if the mode is enabled Default disabled Format dos control tcpport Mode Global Config no dos control tcpport This command disables TCP L4 source destination port number Source TCP Port Destination TCP Port Denial of Service protection Format no dos control smacdmac Mode Global Config dos control udpport This command enables UDP L4 source destination port number Source UDP Port Destination UDP Port Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress with Source UDP Port Destination UDP Port the packets will be dropped if the mode is enabled Default disabled Format dos control udppport Mode Global Config no dos control udpport This command disables UDP L4 source destination port number Source UDP Port Destination UDP Port Denial of Service protection Mode Global Config dos control tcpflagseq This command enables TCP Flag and Sequence Denial of Service protections If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having TCP Flag SYN set and a source
312. dia di dis e in a dica Es dls oe aes 180 port security Mm c address MOVE cuisine e e ee ei aba 180 port securitym csaddress Sticky sdimsincrgarmdecoe eee oogo ase rra reed cerradas 180 Port Security Max IN MANN usadas rss regia O a 179 port security MaX StatiC e cionado fuero Hoe POKES aa ene a en 179 priority IACAGS Contig ut esadecataanenete Lidateeetasasspecatadaisnhabsiueasesetataassatec 517 private Man 55 4 cise an naan cen ceases idas 72 process epu threshold e voii A A ee 347 Protocol aro PEE PEE A E AATAS AA EEE E TA T TATS TEET 53 protocol VaN OUP soe AIN AAA o 53 protocol Van group all eeirpriiasa andina debida ride ia 54 QUIE 56555 c Gach 555056 0504491444 aires eiii An 371 radius accounting MOLES ee corroe rare cas 501 FACIUS SEFVERSLIHDULE A 43 44 A 502 radius SEFVEF NOSE serian AAA ec 502 radius Server KEY sados dai ia Ada ia 504 radius sErVer MSGAULN acuosa ii ia AAA sence 505 radius Server primary escri rr aaa 505 radius servar toh ae eer Ea 506 radius server TIMEOUL reia Rad oe See EES GEERT a 506 568 M4100 Series ProSAFE Managed Switches random detect exponential weighting constant 0 cece eee eee eens 266 fANdOM dEteCt GUEU SPAHIMS vscadcainaemuwaGaler sGa eck trove kenaound rededUdainsvoGoeeverere sa 266 FECIFECE ccs uaa s aaah RA 282 release do 236 lO sug rar RR A aa 371 EMOTES DIN iniiai aaie aa a ded E oboe tase daa aa ir a 56 EEEE E e EREET ELEL AEEA TTE ET A AAAA LEE EEE E E E
313. ding a DHCP or BOOTP server a TFTP server and if necessary a DNS server There are three steps to Auto Install 1 Configuration or assignment of an IP address for the device 2 Assignment of a TFTP server 3 Obtain a configuration file for the device from the TFTP server show autoinstall This command displays the status of the Auto Config process Format show autoinstall Mode Privileged EXEC Term Definition Autolnstall Mode The administrator mode is enabled or disabled If this option is enabled the downloaded config file will be saved Otherwise you must explicitly issue a copy running config startup config command in order to save the configuration AutoSave Modet Autolnstall Retry the number of attempts to download a configuration Count Autolnstall State The status of the Autolnstall Command example Example NETGEAR Switch show autoinstall Autbolns Gadd Modena 2 is ts ake i aue RS 4 01 Stopped AutoSave Modan wd Goad gue das aa aa ond Disabled Autolnstall Persistant Mode Enabled Autolnstall Retry Counts sc A en s ee eae 3 Autolnstalil Statice sete ave ecw iaa Waiting for boot options Utility Commands 329 M4100 Series ProSAFE Managed Switches boot host auto save This command is used to enable automatically saving the downloaded configuration on the switch Default Disabled Format boot host auto save Mode Privileged EX
314. dress server State State of the DHCP v4 Client on this interface DHCP transaction The transaction ID of the DHCPv4 Client ID Lease The time in seconds that the IP address was leased by the server Renewal The time in seconds when the next DHCP renew Request is sent by DHCPv4 Client to renew the leased IP address Rebind The time in seconds when the DHCP Rebind process starts Retry count Number of times the DHCPv4 client sends a DHCP REQUEST message before the server responds ip route This command configures a static route The lt ipaddr gt parameter is a valid IP address and lt subnetmask gt is a valid subnet mask The lt nexthopip gt parameter is a valid IP address of the next hop router Specifying Nu110 as nexthop parameter adds a static reject route The optional lt preference gt parameter is an integer value from 1 to 255 that allows you to specify the preference value sometimes called administrative distance of an individual static route Among routes to the same destination the route with the lowest preference value is the route entered into the forwarding database By specifying the preference of a static route you control whether a static route is more or less preferred than routes from dynamic routing protocols The preference also controls whether a static route is more or less preferred than other static routes to the same destination A route with a preference of 255 cannot be used to forward traf
315. dress control packet type packet length and the interface on which the packet is received or transmitted is displayed on the console Default disabled Format debug ip pimdm packet receive transmit Mode Privileged EXEC Utility Commands 410 M4100 Series ProSAFE Managed Switches no debug ip pimdm packet Use this command to disable debug tracing of PIMDM packet reception and transmission Format no debug ip pimdm packet receive transmit Mode Privileged EXEC debug ip pimsm packet Use this command to trace PIMSM packet reception and transmission Use this command to trace PIMSM packet reception and transmission If you use the receive option only received PIMSM packets are traced If you use the transmit option only transmitted PIMDM packets are traced When neither keyword is used in the command then all PIMSM packet traces are dumped Vital information such as source address destination address control packet type packet length and the interface on which the packet is received or transmitted is displayed on the console Default disabled Format debug ip pimsm packet receive transmit Mode Privileged EXEC no debug ip pimsm packet Use this command to disable debug tracing of PIMSM packet reception and transmission Format no debug ip pimsm packet receive transmit Mode Privileged EXEC debug ip vrrp Use this command to enable VRRP debug protocol
316. dress of the server lt dnsname gt The DNS name of the server no radius server msgauth Use this command to disable the message authenticator attribute to be used for the specified RADIUS Authenticating server Format no radius server msgauth lt ipaddr gt lt dnsname gt Mode Global Config radius server primary Use this command to designate a configured server as the primary server in the group of servers that have the same server name Multiple primary servers can be configured for each number of servers that have the same name When the RADIUS client must perform transactions with an authenticating RADIUS server of specified name the client uses the primary server that has the specified server name by default If the RADIUS client fails to communicate with the primary server for any reason the client uses the backup servers configured with the same server name These backup servers are identified as the secondary type Format radius server primary lt ipaddr gt lt dnsname gt Mode Global Config Management Commands 505 M4100 Series ProSAFE Managed Switches lt ipaddr gt The IP address of the RADIUS Authenticating server lt dnsname gt The DNS name of the server radius server retransmit Use this command to configure the global parameter for the RADIUS client that specifies the number of transmissions of the messages to be made before attempting the fall back serv
317. dress or DNS name for the authenticating or accounting servers you can also configure the port number and server name If the authenticating and accounting servers are configured without a name the command uses the Default RADIUS Auth Server and Default RADIUS Acct Server as the Management Commands 502 M4100 Series ProSAFE Managed Switches default names respectively The same name can be configured for more than one authenticating servers and the name should be unique for accounting servers The RADIUS client allows the configuration of a maximum 32 authenticating and accounting servers If you use the auth parameter the command configures the IP address or host name to use to connect to a RADIUS authentication server You can configure up to three servers per RADIUS client If the maximum number of configured servers is reached the command fails until you remove one of the servers by issuing the no form of the command If you use the optional port parameter the command configures the UDP port number to use when connecting to the configured RADIUS server For the port keyword the lt number gt argument must be a value in the range 0 65535 with 1813 being the default Note To reconfigure a RADIUS authentication server to use the default UDP port set the lt number gt argument to 1812 If you use the acct token the command configures the IP address or host name to use for the RADIUS accounting server You can only configure one
318. e lt unit gt parameter identifies the node on which this command must be executed When this parameter is not supplied the command is executed on all nodes in a Stack Format filedescr lt unit gt imagel image2 lt text description gt Mode Privileged EXEC Utility Commands 332 M4100 Series ProSAFE Managed Switches update bootcode This command updates the bootcode boot loader on the switch The bootcode is read from the active image for subsequent reboots The optional lt unit gt parameter is valid only on Stacks Error will be returned if this parameter is provided on Standalone systems For Stacking the lt unit gt parameter identifies the node on which this command must be executed When this parameter is not supplied the command is executed on all nodes ina Stack Format update bootcode lt unit gt Mode Privileged EXEC System Information and Statistics Commands This section describes the commands you use to view information about system features components and configurations show arp switch system information and statistics commands This command displays the contents of the IP stack s Address Resolution Protocol ARP table The IP stack only learns ARP entries associated with the management interfaces network or service ports ARP entries associated with routing interfaces are not listed Format show arp switch Mode Privileged EXEC Term Definition
319. e It also displays priority Resolution for speed and duplex as per 802 3 Annex 28B 3 It displays the autonegotiation state Phy Master Slave Clock configuration and Link state of the port If the link is down the Clock is displayed as No Link and a dash is displayed against the Oper Peer advertisement and Priority Resolution If autonegotiation is disabled the admin Local Link advertisement operational local link advertisement operational peer advertisement and Priority resolution fields are not displayed If this command is executed without the optional slot port parameter it displays the autonegotiation state and operational Local link advertisement for all the ports Operational link advertisement will display speed only if it is supported by both local as well as link partner If autonegotiation is disabled operational local link advertisement is not displayed Format show port advertise slot port Mode Privileged EXEC Command example The following commands show the command output with and without the optional parameter NETGEAR Switch show port advertise 0 1 Port 0 1 Type Gigabit Level Link State Down Auto Negotiation Enabled Clock Auto 1000f 1000h 100f 100h 10f 10h Admin Local Link Advertisement no no yes no yes no Oper Local Link Advertisement no no yes no yes no Oper Peer Advertisement no no yes yes yes yes Priority Resolution e yes Switching Commands 23 M4100
320. e Use this command to reset the summertime offset Format no clock summer time Mode Global Config Command example NETGEAR Switch config no clock summer time show sntp This command is used to display SNTP settings and status Format show sntp Privileged EXEC Last Update Time of last clock update Time Last Unicast Time of last transmit query in unicast mode Attempt Time Last Attempt Status of the last SNTP request in unicast mode or unsolicited message in broadcast Status mode Broadcast Count Current number of unsolicited broadcast messages that have been received and processed by the SNTP client since last reboot Multicast Count Current number of unsolicited multicast messages that have been received and processed by the SNTP client since last reboot show sntp client This command is used to display SNTP client settings Format show sntp client Mode Privileged EXEC Client Supported Supported SNTP Modes Broadcast Unicast or Multicast Modes SNTP Version The highest SNTP version the client supports Utility Commands 380 M4100 Series ProSAFE Managed Switches Term Definition Port SNTP Client Port Client Mode Configured SNTP Client Mode show sntp server This command is used to display SNTP server settings and configured servers Format show sntp server Mode Privileged EXEC Term Definition S
321. e ei 6 ol Sc aon aie ses Aird ya eae elena eae nas LOCKOU daa ds dada tata Override Complexity CheCk o ooooooomomoo mo Password ot LENG bare dad ac show users long Use this command to display the user s full name Format show users long Mode Privileged EXEC Term Definition User Name The full name of the user show users login history Use this command to display the users who have logged in previously Format show users login history lt username gt Mode Privileged EXEC Term Definition Login Time The time at which the user logged in Username The user name used to login Protocol The protocol that the user used to login Location The location of the user passwords min length Use this command to enforce a minimum password length for local users The value also applies to the enable password The valid range is 0 64 Default 8 Format passwords min length lt 0 64 gt Mode Global Config Management Commands 473 M4100 Series ProSAFE Managed Switches no passwords min length Use this command to set the minimum password length to the default value Format no passwords min length Mode Global Config passwords history Use this command to set the number of previous passwords that shall be stored for each user account When a local user changes his or her password the user will not be able to reuse any password stored in password hist
322. e optional the following message appears in the output lt cr gt Press Enter to execute the command You can also enter a question mark after typing one or more characters of a word to list the available command or parameters that begin with the letters as shown in the following example NETGEAR Switch show m mac addr table mac address table monitor Accessing the CLI You can access the CLI by using a direct console connection or by using a telnet or SSH connection from a remote management host For the initial connection you must use a direct connection to the console port You cannot access the system remotely until the system has an IP address subnet mask and default gateway You can set the network configuration information manually or you can configure the system to accept these settings from a BOOTP or DHCP server on your network For more information see Management Interface Commands on page 446 Using the Command Line Interface 16 Switching Commands This chapter describes the switching commands available in the managed switch CLI The chapter contains the following sections e Port Configuration Commands e Loopback Interface Commands e Spanning Tree Protocol STP Commands e VLAN Commands e Switch Port Commands e Double VLAN Commands e Voice VLAN Commands e Provisioning IEEE 802 1p Commands e Protected Ports Commands e Private VLAN Commands e GARP Commands e GVRP Commands e G
323. e Commands 290 M4100 Series ProSAFE Managed Switches Term Definition Policing Style The style of policing if any used simple Redirect Forces a classified traffic stream to a specified egress port physical or LAG This can occur in addition to any marking or policing action It might also be specified along with a QoS queue assignment If the policy name is not specified this command displays a list of all defined DiffServ policies The fields that are shown in the following table are displayed Term Definition Policy Name The name of this policy The order in which the policies are displayed is not necessarily the same order in which they were created Policy Type The policy type Only inbound is supported Class Members List of all class names associated with this policy show diffserv service This command displays policy service information for the specified interface and direction The lt slot port gt parameter specifies a valid slot port number for the system Format show diffserv service lt slot port gt in out Mode Privileged EXEC Term Definition DiffServ Admin Mode The current setting of the DiffServ administrative mode An attached policy is only in effect on an interface while DiffServ is in an enabled mode Interface Valid slot and port number separated by forward slashes Direction The traffic direction of this interface service Operation
324. e Differentiated Services DiffServ Commands e DiffServ Class Commands DiffServ Policy Commands e DiffServ Service Commands e DiffServ Show Commands e MAC Access Control List ACL Commands e IP Access Control List ACL Commands e IPv6 Access Control List ACL Commands Time Range Commands for Time Based ACLs e AutoVolIP Commands The commands in this chapter are in two functional groups Show commands display switch settings statistics and other information e Configuration commands configure features and options of the switch Every switch command has a show command that displays the configuration setting 262 M4100 Series ProSAFE Managed Switches Class of Service CoS Commands This section describes the commands you use to configure and view Class of Service CoS settings for the switch The commands in this section allow you to control the priority and transmission rate of traffic Note Commands you issue in the Interface Config mode only affect a single interface Commands you issue in the Global Config mode affect all interfaces classofservice dot 1p mapping This command maps an 802 1p priority to an internal traffic class The lt userpriority gt values can range from 0 7 The lt trafficclass gt values range from 0 6 although the actual number of available traffic classes depends on the platform For more information about 802 1p priority see Voice VLAN Commands on page 65 Format ctassof
325. e IP Precedence value is an integer from 0 to 7 Note This command might not be used on IPv6 classes IPv6 does not have a precedence field Format mark ip precedence lt 0 7 gt Mode Policy Class Map Config Incompatibilities Drop Mark CoS Mark IP Precedence Police Policy Type In police simple This command is used to establish the traffic policing style for the specified class The simple form of the police command uses a single data rate and burst size resulting in two outcomes conform and violate The conforming data rate is specified in kilobits per second Kbps and is an integer from 1 to 4294967295 The conforming burst size is specified in kilobytes KB and is an integer from 1 to 128 For each outcome the only possible actions are drop set cos transmit set dscp transmit set prec transmit or transmit In this simple form of the police command the conform action defaults to transmit and the violate action defaults to drop For set cos transmit an 802 1p priority value is required and is specified as an integer from 0 7 For set dscp transmit a lt dscpval gt value is required and is specified as either an integer from 0 to 63 or symbolically through one of the following keywords af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 be cs0 csl1 cs2 cs3 cs4 cs5 cs6 cs7 Oref For set prec transmit an IP Precedence value is required and is specified as an intege
326. e Interface Config storm control broadcast Global Config This command enables broadcast storm recovery mode for all interfaces If the mode is enabled broadcast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore the rate of broadcast traffic will be limited to the configured threshold Default disabled Format storm control broadcast Mode Global Config no storm control broadcast This command disables broadcast storm recovery mode for all interfaces Format no storm control broadcast Mode Global Config storm control broadcast level Global Config This command configures the broadcast storm recovery threshold for all interfaces as a percentage of link speed and enables broadcast storm recovery If the mode is enabled broadcast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore Switching Commands 99 M4100 Series ProSAFE Managed Switches the rate of broadcast traffic will be limited to the configured threshold This command also enables broadcast storm recovery mode for all interfaces If the shutdown option is selected and the broadcast traffic increases beyond the threshold the interface shuts down instead of dropping packets T
327. e been received by this authenticator Switching Commands 92 M4100 Series ProSAFE Managed Switches Term Definition EAP Response The number of valid EAP response frames other than resp id frames that have been Frames received by this authenticator Received EAP Request ld The number of EAP request identity frames that have been transmitted by this Frames authenticator Transmitted EAP Request The number of EAP request frames other than request identity frames that have been Frames transmitted by this authenticator Transmitted Invalid EAPOL The number of EAPOL frames that have been received by this authenticator in which the Frames frame type is not recognized Received EAP Length The number of EAPOL frames that have been received by this authenticator in which the Error Frames frame type is not recognized Received show dot1x clients This command displays 802 1x client information This command also displays information about the number of clients that are authenticated using Monitor mode and using 802 1x Format show dot1x clients lt slot port gt all Mode Privileged EXEC Term Definition Clients Indicates the number of the Dot1x clients authenticated using Monitor mode Authenticated using Monitor Mode Clients Indicates the number of Dot1x clients authenticated using 802 1x authentication process Authenticated using Dot1x Logical Interface
328. e class match commands specifying Layer 3 Layer 2 and general match criteria The class match criteria are also known as Class rules with a class definition consisting of one or more rules to identify the traffic that belongs to the class Note Once you create a class match criterion for a class you cannot change or delete the criterion To change or delete a class match criterion you must delete and re create the entire class The CLI command root is class map class map This command defines a DiffServ class of type match all When used without any match condition this command enters the class map mode The lt c1ass map name gt is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying an existing DiffServ class Note The class map name default is reserved and you must not use it The class type of match a11 indicates all of the individual match conditions must be true for a packet to be considered a member of the class This command might be used without specifying a class type to enter the Class Map Config mode for an existing DiffServ class Quality of Service Commands 272 M4100 Series ProSAFE Managed Switches Note The optional keywords ipv4 ipv6 specify the Layer 3 protocol for this class If not specified this parameter defaults to ipv4 This maintains backward compatibility for configurations defined on systems before IPv6 match items were supported Note The CLI mode
329. e client hardware address Format no ip dhcp snooping verify mac address Mode Global Config ip dhcp snooping database Use this command to configure the persistent location of the DHCP Snooping database This can be local or a remote file on a specified computer Default local Format ip dhcp snooping database local lt tftp hostIP gt lt filename gt Mode Global Config ip dhcp snooping database write delay Use this command to configure the interval in seconds at which the DHCP Snooping database will be persisted The interval value ranges from 15 to 86 400 seconds Default 300 seconds Format ip dhcp snooping database write delay lt seconds gt Mode Global Config Switching Commands 139 M4100 Series ProSAFE Managed Switches no ip dhcp snooping database write delay Use this command to set the write delay value to the default value Format no ip dhcp snooping database write delay Mode Global Config ip dhcp snooping binding Use this command to configure static DHCP Snooping binding Format ip dhcp snooping binding lt mac address gt vlan lt vlan id gt lt ip address gt interface lt slot port gt Mode Global Config no ip dhcp snooping binding lt mac address gt Use this command to remove the DHCP static entry from the DHCP Snooping database Format fro ip dhcp snooping binding lt mac address gt Mode Global Config ip verify bi
330. e de aes 107 Port Channel LAG 802 3ad Commands 00 00 c eee eee ee 109 Port Mirroring Command ys siii dir as 125 Static MAC Filtering Commands ss ess arrima nerds rave 129 DHCP L2 Relay Agent Commands eee eee eee 133 DHCP Client ComiMandS 0 4 cio o 9 0506 04 enhnaianai eseeecereesetoeedaes 137 DHCP Snooping Configuration Commands 00 00 eee eee eee 138 Dynamic ARP Inspection Commands 0 cece eee eee eee 147 M4100 Series ProSAFE Managed Switches IGMP Snooping Configuration Commands ec ce eee IGMP Snooping Querer COMMANGS ios dccsde odia atone iv MLD Snooping COmMANdss cic 0soccccdavndaiaos er pererdoaecorea ers MLD Snooping Querier Commands 0 0 e cece eee eee Port Security COMMANGS 4 oe du reknr eanne a e eos ahs LLDP 802 1AB COMM ANS 5 ou cia aaa Bre br ARAS LLDP MED COMMANSiico s lt cvse evn rotas A Denial of Service Commands 00 cece eee eee eee eee MAC Database Command a2 3 0 asiss06 scssinsuslsainsmwevnece sess aeins oes ISD P COMMANAS ss vorrrrrcrr ciar rato ata Chapter 3 Multicast VLAN Registration Commands ABQUENIVR sicarios died MYR Commands cieienso nude raras Chapter 4 Routing Commands Address Resolution Protocol ARP Commands 0 0004 IP Routing Command Sissa ineeie acia tata Virtual LAN Routing Commands 0 0 00 e eee DHCP and BOOTP Relay Commands ccm rnareecswsereesoees o sens
331. e factory default is enabled Type The status designating whether a particular port channel LAG is statically or dynamically maintained e Static The port channel is statically maintained e Dynamic The port channel is dynamically maintained Mbr Ports A listing of the ports that are members of this port channel LAG in slot port notation There can be a maximum of eight ports assigned to a port channel LAG Device Timeout Port Speed Ports Active For each port lists the timeout Long or short for Device Type actor or partner Speed of the port channel port This field lists the ports that are actively participating in the port channel LAG Load Balance Option The load balance option associated with this LAG See port channel load balance on page 121 Local Preference Mode Indicates whether the local preference mode is enabled or disabled show port channel system priority Use this command to display the port channel system priority Format show port channel system priority Mode Privileged EXEC Port Mirroring Commands Port mirroring which is also known as port monitoring selects network traffic that you can analyze with a network analyzer such as a SwitchProbe device or other Remote Monitoring RMON probe monitor session This command configures a probe port and a monitored port for monitor session port monitoring Use the source interface lt slot port gt parameter to specify
332. e gt A name to associate with the time zone lt hours offset gt Number of hours difference with UTC lt minutes offset gt Number of minutes difference with UTC no clock timezone This command sets the switch to UTC time no clock timezone Global Config clock set This command sets the system time and date Format clock set lt hh mm ss gt clock set lt mm dd yyyy gt Mode Global Config clock summer time recurring Use this command to set the summertime offset to UTC recursively every year If the optional parameters are not specified they are read as either 0 or MO as appropriate Use the following parameters to configure the summer time e USA the US Daylight saving time setting is used Start March 2nd sunday 02 00 AM End Nov 1st sunday 2 00 AM e EU the European Union Daylight savings time is used Start March 5th Sunday 02 00 AM End October 5th Sunday 3 00 AM Utility Commands 378 M4100 Series ProSAFE Managed Switches e week Week of the month Range 1 5 first last e day Day of the week Range The first three letters by name sun for example e month Month Range The first three letters by name jan for example e hh mm Time in 24 hour format in hours and minutes Range hh 0 23 mm 0 59 e Ooffset Number of minutes to add during the summertime Range 1 1440 e acronym The acronym for the time zone to be d
333. e identifier to which packets matching this rule are assigned Mirror Interface The slot port to which packets matching this rule are copied Redirect The slot port to which packets matching this rule are forwarded Interface Time Range Displays the name of the time range if the IPv6 ACL rule has referenced a time range Name Rule Status Status Active Inactive of the IPv6 ACL rule Time Range Commands for Time Based ACLs Time based ACLs allow one or more rules within an ACL to be based on time Each ACL rule within an ACL except for the implicit deny all rule can be configured to be active and operational only during a specific time period The time range commands allow you to define specific times of the day and week to implement time based ACLs The time range is identified by a name and can then be referenced by an ACL rule defined with in an ACL time range Use this command to create a time range identified by lt name gt consisting of one absolute time entry and or one or more periodic time entries The lt name gt parameter is a case sensitive alphanumeric string from 1 to 31 characters that uniquely identifies the time range An alpha numeric string is defined as consisting of only alphabetic numeric dash underscore or space characters If a time range by this name exists this command enters Time Range config mode to allow updating the time range entries Note When you successfully execute this comman
334. e number of frames that have been transmitted by this port to its segment Unicast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to a subnetwork unicast address including those that were discarded or not sent Multicast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to a Multicast address including those that were discarded or not sent Broadcast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to the Broadcast address including those that were discarded or not sent Transmit Packets Discarded The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher layer protocol A possible reason for discarding a packet could be to free up buffer space Transmit Errors Total Transmit Errors The sum of Single Multiple and Excessive Collisions Tx FCS Errors The total number of packets transmitted that had a length excluding framing bits but including FCS octets of from 64 through 1518 octets inclusive but had a bad Frame Check Sequence FCS with an integral number of octets Oversized The total number of frames that exceeded the max permitted frame size This counter has a max increment rate of 815 counts per sec at 10 Mb s Underrun Errors The total number of frames d
335. e of the lt username gt enter the show users command Default no authentication Format username snmpv3 authentication lt username gt none md5 sha Mode Global Config no username snmpv3 authentication Use this command to set the authentication protocol to be used for the specified user to none The lt username gt is the user name for which the specified authentication protocol is used Format no username snmpv3 authentication lt username gt Mode Global Config Management Commands 470 M4100 Series ProSAFE Managed Switches username snmpv3 encryption Use this command to specify the encryption protocol used for the specified user The valid encryption protocols are des and none If you select des you can specify the required key on the command line The encryption key must be 8 64 characters long If you select the des protocol but do not provide a key the user is prompted for the key When you use the des protocol the login password is also used as the SNMPv3 encryption password so it must be a minimum of eight characters If you select none you do not need to provide a key The lt username gt value is the login user name associated with the specified encryption You must enter the lt username gt in the same case you used when you added the user To see the case of the lt username gt enter the show users command Defaut Format username snmpv3 encryption lt username gt non d
336. e other Querier s source address is better less than the Snooping Querier s address it stops sending periodic queries If the Snooping Querier wins the election then it will continue sending periodic queries Default disabled Format set mld querier election participate Mode VLAN Config Switching Commands 176 M4100 Series ProSAFE Managed Switches no set mld querier election participate Use this command to set the snooping querier not to participate in querier election but go into a non querier mode as soon as it discovers the presence of another querier in the same VLAN Format no set mld querier election participate Mode VLAN Config show mldsnooping querier Use this command to display MLD Snooping Querier information Configured information is displayed whether or not MLD Snooping Querier is enabled Format show mldsnooping querier detail vlan lt vlanid gt Privileged EXEC When the optional arguments vl andid are not used the command displays the following information Term Description Admin Mode Indicates whether or not MLD Snooping Querier is active on the switch Admin Version Indicates the version of MLD that will be used while sending out the queries This is defaulted to MLD v1 and it cannot be changed Querier Address Query Interval Querier Timeout Shows the IP address which will be used in the IPv6 header while sending out MLD
337. e out value for all TACACS servers Mode Global Config Management Commands 516 M4100 Series ProSAFE Managed Switches key TACACS Config Use the key command in TACACS Configuration mode to specify the authentication and encryption key for all TACACS communications between the device and the TACACS server This key must match the key used on the TACACS daemon The lt key string gt parameter specifies the key name For an empty string use The range is 0 128 characters Text based configuration supports TACACS server s secrets in encrypted and non encrypted format When you save the configuration these secret keys are stored in encrypted format only If you want to enter the key in encrypted format enter the key along with the encrypted keyword In the output of the show running config command these secret keys are displayed in encrypted format You cannot show these keys in plain text format Format key lt key string gt encrypted lt key string gt Mode TACACS Config port TACACS Config Use this command in TACACS Configuration mode to specify a server port number The server lt number gt range is 0 65535 Default 49 Format port lt number gt Mode TACACS Config priority TACACS Config Use this command in TACACS Configuration mode to specify the order in which servers are used where 0 zero is the highest priority The lt priority gt parameter specifies the p
338. e packet receive transmit Privileged EXEC debug ipv6 mld packet Use this command to trace MLDv6 packet reception and transmission If you use the receive option only received MLDv66 packets are traced If you use the transmit option only transmitted MLDv6 packets are traced When neither keyword is used in the command then all MLDv6 packet traces are dumped Vital information such as source address destination address control packet type packet length and the interface on which the packet is received or transmitted is displayed on the console Utility Commands 412 M4100 Series ProSAFE Managed Switches Default disabled Format debug ipv6 mld packet receive transmit Mode Privileged EXEC no debug ipv6 mid packet Use this command to disable debug tracing of MLDv6 packet reception and transmission Format no debug ipv6 mld packet receive transmit Mode Privileged EXEC debug ipv6 pimdm packet Use this command to trace PIMDMv6 packet reception and transmission If you use the receive option only received PIMDMv6 packets are traced If you use the transmit option only transmitted PIMDMv6 packets are traced When neither keyword is used in the command then all PIMDMv6 packet traces are dumped Vital information such as source address destination address control packet type packet length and the interface on which the packet is received or transmitted is displayed on the conso
339. e port would transition into this state when the port link physically goes down due to any reasons other than the port been put into D Disable mode by UDLD protocol on the switch USB Commands If there is an USB flash device in the USB slot the commands display the device status and content show usb device This command displays USB flash device details Format show USB device Mode Privileged EXEC Utility Commands 440 M4100 Series ProSAFE Managed Switches Parameter Description Device Status This field specifies the current status of device Following are possible device status states e Active Device is plugged in and the device is recognized if device is not mounted e Inactive Device is not mounted e Invalid Device is not present or invalid device is plugged in Manufacturer Manufacturer details Serial Number Serial number of the device USB Version Version of the USB device Compliance Class Code Device Class Subclass Code Device SubClass Protocol Device Protocol Vendor ID Vendor specifies details of device Vendor ID Product ID Vendor specifies details of device Product ID Command example The following is the output if the device is plugged into the USB slot NETGEAR Switch show USB device DEVICE Status Active MInUtacLUES exeeteereerrer tere teetrereeet tener pac XXXX serial Nue yyyyy USB Version Compliance 2 0 CLASS GODS smilies abc o A nn n acb P
340. e switch s network interface do not affect the configuration of the front panel ports through which traffic is switched or routed The network interface is always considered to be up whether any member ports are up therefore the show network command will always show Interface Status as up Format show network Modes e Privileged EXEC e User EXEC Interface Status The network interface status it is always considered to be up IP Address The IP address of the interface The factory default value is 0 0 0 0 Subnet Mask The IP subnet mask for this interface The factory default value is 0 0 0 0 Default Gateway The default gateway for this IP interface The factory default value is 0 0 0 0 IPv6 Whether enabled or disabled Administrative Mode IPv6 The IPv6 address and length Address Length IPv6 Default The IPv6 default router address Router Burned In MAC The burned in MAC address used for in band connectivity Address Locally If desired a locally administered MAC address can be configured for in band Administered connectivity To take effect MAC Address Type must be set to Locally Administered MAC Address Enter the address as twelve hexadecimal digits 6 bytes with a colon between each byte Bit 1 of byte O must be set to a 1 and bit 0 to a 0 that is byte O should have the following mask xxxx xx10 The MAC address used by this bridge when it must be referred to
341. e than 128 bytes is skipped and cannot be displayed in the CLI Capturing packets is stopped automatically when 128 packets are captured and have not yet been displayed during a capture session Captured packets are not retained after a reload cycle Utility Commands 402 M4100 Series ProSAFE Managed Switches Format show capture packets Mode Privileged EXEC Serviceability Packet Tracing Commands These commands improve the capability of network engineers to diagnose conditions affecting their managed switch product CAUTION The output of the debug commands can be long and might adversely affect system performance debug arp Use this command to enable ARP debug protocol messages Default disabled Format debug arp Mode Privileged EXEC no debug arp Use this command to disable ARP debug protocol messages Format no debug arp Mode Privileged EXEC debug auto voip Use this command to enable Auto VoIP debug messages Use the optional parameters to trace H323 SCCP or SIP packets respectively Default disabled Format debug auto voip H323 SCCP SIP Mode Privileged EXEC Utility Commands 403 M4100 Series ProSAFE Managed Switches no debug auto voip Use this command to disable Auto VoIP debug messages Format no debug auto voip Mode Privileged EXEC debug clear This command disables all previously enabled debug traces Default
342. e this command to enable additional validation checks like source mac validation destination mac validation and ip address validation on the received ARP packets Each command overrides the configuration of the previous command For example if a command enables src mac and dst mac validations and a second command enables IP validation only the src mac and dst mac validations are disabled as a result of the second command Default disabled Format ip arp inspection validate src mac dst mac ip Mode Global Config no ip arp inspection validate Use this command to disable the additional validation checks on the received ARP packets Format no ip arp inspection validate src mac dst mac ip ip arp inspection vlan logging Use this command to enable logging of invalid ARP packets on a list of comma separated VLAN ranges Default enabled Format ip arp inspection vlan lt vlan list gt logging Mode Global Config Switching Commands 148 M4100 Series ProSAFE Managed Switches no ip arp inspection vlan logging Use this command to disable logging of invalid ARP packets on a list of comma separated VLAN ranges Format fro ip arp inspection vlan lt vlan list gt logging Mode Global Config ip arp inspection trust Use this command to configure an interface as trusted for Dynamic ARP Inspection Default enabled Format ip arp inspection trust Interface
343. e total number of packets received that were directed to the broadcast address Note Packets that this does not include multicast packets Received Packets The total number of packets transmitted out of the interface Transmitted Without Error Transmit The number of outbound packets that could not be transmitted because of errors Packets Errors Utility Commands 335 M4100 Series ProSAFE Managed Switches Collisions The best estimate of the total number of collisions on this Ethernet segment Frames Time Since The elapsed time in days hours minutes and seconds since the statistics for this port Counters Last were last cleared Cleared If the argument is switchport the display parameters are as shown in the following table Term Definition Packets The total number of packets including broadcast packets and multicast packets Received received by the processor Without Error Broadcast The total number of packets received that were directed to the broadcast address Note Packets that this does not include multicast packets Received Packets The number of inbound packets that contained errors preventing them from being Received With deliverable to a higher layer protocol Error Packets The total number of packets transmitted out of the interface Transmitted Without Error Broadcast The total number of packets that higher level protocols requested to be transmitted to the Packets Broad
344. e traps stpmode Mode Global Config Management Commands 495 M4100 Series ProSAFE Managed Switches no snmp server enable traps stpmode Use this command to disable sending new root traps and topology change notification traps Format no snmp server enable traps stpmode Mode Global Config snmptrap Use this command to add an SNMP trap receiver The maximum length of lt name gt is 16 case sensitive alphanumeric characters The lt snmpversion gt is the version of SNMP The version parameter options are SNMPv1 or SNMPv2 The SNMP trap address can be set using both an IPv4 address format as well as an IPv6 global address format The lt name gt parameter does not need to be unique However the combination of the name and IP address or host name must be unique Multiple entries can exist with the same lt name gt parameter as long as they are associated with a different IP address or host name The reverse scenario is also acceptable The lt name gt parameter is the community name that is used when the trap is sent to the receiver but the lt name gt parameter is not directly associated with the SNMP Community Table see snmp server community on page 491 Default snmpv2 Format snmptrap lt name gt ipaddr lt ipaddr gt lt hostname gt ip6addr lt ip6addr gt lt hostname gt snmpversion lt snmpversion gt Mode Global Config Command example Netgear Switch snmptrap mytrap ipba
345. e when a new d interface is created and has no pre configuration Table 31 MFDB Log Message Component Message Cause MFDB mfdbTreeEntryUpdate entry does not exist Trying to update a non existing entry Log Messages 545 M4100 Series ProSAFE Managed Switches Table 32 802 1Q Log Messages Component Message Cause 802 1Q dot1qlssueCmd Unable to send message dotiqMsgQueue is full d to dotiqMsgQueue for vlan d d msgs in queue 802 1Q dot1qVlanCreateProcess Attempt to Accommodates for reserved vlan ids that create a vlan with an invalid vlan id d is 4094 x VLAN d not in range 802 1Q dot1 qMapiIntflsConfigurable Error A default configuration does not exist for accessing DOT1Q config data for this interface Typically a case when a new interface Yd in interface is created and has no dot1 qMapIntflsConfigurable pre configuration 802 1Q dotiqVlanDeleteProcess Deleting the Typically encountered during clear Vian default VLAN and clear config 802 1Q dot1qVlanMemberSetModify If this vlan is a learnt via GVRP then we dot1 qVlanTaggedMemberSetModify cannot modify its member set via Dynamic entry d can only be modified management after it is converted to static Table 33 802 1S Log Messages Component Message Cause 802 1S dot1slssueCmd Dotis Msg Queue is The message Queue is full full Event Yu on interface u for instance u dot1sStateMachi
346. ec Tw_sys_rx Echo microsec Fallback Tw_sys microsec Remote Tw_sys_tx microsec This field is incremented each time MAC TX enters LP IDLE state Shows the total number of Tx LPI Events since EEE counters are last cleared This field indicates duration of Tx LPI state in 10us increments Shows the total duration of Tx LPI since the EEE counters are last cleared Integer that indicates the value of Tw_sys that the local system can support This value is updated by the EEE DLL Transmitter state diagram This variable maps into the aLldpXdot3LocTxTwSys attribute Integer that indicates the remote system s Transmit Tw_sys that was used by the local system to compute the Tw_sys that it wants to request from the remote system This value maps into the aLldpXdot3LocTxTwSysEcho attribute Integer that indicates the value of Tw_sys that the local system requests from the remote system This value is updated by the EEE Receiver L2 state diagram This variable maps into the aLldpXdot3LocRxTwSys attribute Integer that indicates the remote systems Receive Tw_sys that was used by the local system to compute the Tw_sys that it can support This value maps into the aLldpXdot3LocRxTwSysEcho attribute Integer that indicates the value of fallback Tw_sys that the local system requests from the remote system This value is updated by the local system software Integer that indicates the value of Tw_sys that the remote system can support This
347. ecis atsncalereceus ro tanara a E EEE TEE 137 dhcp client vendor id option string 0 eee errereen 137 A A piacaddeadGa neni het te tebotas chaste nehemeias oetettatatetetadadis 133 dhepl2relayicineuitstd VAM co c onoraeieteniakidsseasndiee deded catia canonienG kuuen cageaeoeeneeee vas 133 dhcp 2relay remote id Val sicarios eds abton Saoirse timed ess aia 134 nc relay USE rd dao eb 134 A 64 025 a9 rdemciaiadehideminneei ent gt Re 28 thartulanawbins Mewsteesios oo RR Ret 134 A A 271 O A 256sue aaa AS I AE EE E ure uuce ANET EA EENT 441 CISCONMECE 222 dara Aso 467 ANS SORVED ui ia ico 384 domain name DHCP Pool Config ascos tee e e ae 387 domain name Global Config evi 488 domain name enable Global Config oooccccoccccccrnccccrr rr 488 dos comtrollall srricansnioniar aa ironico acia 202 dos controltirstitad sseis scr nie e e a aa 203 dos control ICMP vision EEE AA RR ER HEE 205 dos controlicmpPlrad asistan da ra dc 209 COS CONEOMICMPVA Vivir aa ca 209 dOs cEoONtrOlEMPVO 240 irritada ii ica sados 209 AOS CONMONMADORE visir rt dia 204 a NN 202 des contrOl MACANO dos 205 561 M4100 Series ProSAFE Managed Switches dos COMtrGl CEPHAUFGPSH s m iria aid 208 dos controlteEpilad esos rata deot donated aaa 204 dos Control tephlagsed 2acacincnncdewsmadsdd re rara aa 206 dOs cOMtrOlNiEPRag essere e n rai lidia rd dido deco 203 dos controltepo set ss screen 4555 554q8qayrgerGEIeEeseeQesssaagana das 207 dOs controlt
348. ective until the session is reaccessed Also any keystroke activates the new time out duration Format no telnetcon timeout Mode Privileged EXEC Management Commands 455 M4100 Series ProSAFE Managed Switches show telnet Use this command to display the current outbound Telnet settings In other words these settings apply to Telnet connections initiated from the switch to a remote system Format show telnet Modes e Privileged EXEC e User EXEC Outbound Telnet The number of minutes an outbound Telnet session is allowed to remain inactive before Login Timeout being logged off Maximum The number of simultaneous outbound Telnet connections allowed Number of Outbound Telnet Sessions Allow New Indicates whether outbound Telnet sessions will be allowed Outbound Telnet Sessions show telnetcon Use this command to display the current inbound Telnet settings In other words these settings apply to Telnet connections initiated from a remote system to the switch Format show telnetcon Modes e Privileged EXEC e User EXEC Remote This object indicates the number of minutes a remote connection session is allowed to Connection remain inactive before being logged off Might be specified as a number from 1 to 160 Login Timeout The factory default is 5 minutes Maximum This object indicates the number of simultaneous remote connection sessions allowed Number of The factory
349. ed Mark Command example NETGEAR Switch show routing heap summary Heap SiC eo eee a aedeagal 92594000 bytes Memory In US Sumito eee 149598 bytes 05 Memory on Free List 78721 bytes 0 Memory Available in Heap 92365249 bytes 99 In Use High Water Mark 210788 bytes 0 Virtual LAN Routing Commands This section describes the commands you use to view and configure VLAN routing and to view VLAN routing status information vian routing This command enables routing on a VLAN The vianid value has a range from 1 to 4093 The interface ID value has a range from 1 to 128 Typically you will not supply the interface ID argument and the system automatically selects the interface ID However if you specify an interface ID that is already in use the CLI displays an error message and does not create the VLAN interface Format wlan routing lt vlan id gt interface id Mode VLAN Config Routing Commands 251 M4100 Series ProSAFE Managed Switches no vian routing This command deletes routing on a VLAN The lt vlanid gt value has a range from 1 to 4093 Format no vlan routing lt vlan id gt Mode VLAN Config show ip vlan This command displays the VLAN routing information for all VLANs with routing enabled Format show ip vlan Modes e Privileged EXEC e User EXEC MAC Address The MAC Address associated with the internal bridge router interface
350. ed default route is reset to its default Format no ip route default lt nexthopip gt lt preference gt Mode Global Config ip route distance This command sets the default distance preference for static routes Lower route distance values are preferred when determining the best route The ip route and ip route default commands allow you to optionally set the distance preference of an individual static route The default distance is used when no distance is specified in these commands Changing the default distance does not update the distance of existing static routes even if they were assigned the original default distance The new default distance will only be applied to static routes created after invoking the ip route distance command Routing Commands 238 M4100 Series ProSAFE Managed Switches Default 1 Format ip route distance lt 1 255 gt Mode Global Config no ip route distance This command sets the default static route preference value in the router Lower route preference values are preferred when determining the best route Format no ip route distance ip netdirbcast This command enables the forwarding of network directed broadcasts When enabled network directed broadcasts are forwarded When disabled they are dropped Default disabled Format ip netdirbcast Mode Interface Config no ip netdirbcast This command disables the forwarding of networ
351. ed switches exchange VLAN configuration information which allows GVRP to provide dynamic VLAN creation on trunk ports and automatic VLAN pruning Note If GVRP is disabled the system does not forward GVRP messages set gvrp adminmode This command enables GVRP on the system Default disabled Format set gvrp adminmode Mode Privileged EXEC no set gvrp adminmode This command disables GVRP Format no set gvrp adminmode Mode Privileged EXEC Switching Commands 76 M4100 Series ProSAFE Managed Switches set gvrp interfacemode This command enables GVRP on a single port Interface Config mode or all ports Global Config mode Default disabled Format set gvrp interfacemode Mode Interface Config e Global Config no set gvrp interfacemode This command disables GVRP on a single port Interface Config mode or all ports Global Config mode If GVRP is disabled Join Time Leave Time and Leave All Time have no effect Format no set gvrp interfacemode Mode Interface Config e Global Config show gvrp configuration This command displays Generic Attributes Registration Protocol GARP information for one or all interfaces Format show gvrp configuration lt slot port gt all Mode e Privileged EXEC User EXEC Term Definition Interface Valid slot and port number separated by forward slashes Join Timer The interval between the transmi
352. edence mark value if the conform action is set prec transmit Precedence Value Drop Drop a packet upon arrival This is useful for emulating access control list operation using DiffServ especially when DiffServ and ACL cannot co exist on the same interface Mark CoS The Class of Service value that is set in the 802 1p header of inbound packets This is not displayed if the mark cos was not specified Mark IP DSCP _ The mark re mark value used as the DSCP for traffic matching this class This is not displayed if mark ip description is not specified Mark IP The mark re mark value used as the IP Precedence for traffic matching this class This is Precedence not displayed if mark ip precedence is not specified Mirror Copies a classified traffic stream to a specified egress port physical port or LAG This can occur in addition to any marking or policing action It might also be specified along with a QoS queue assignment Non Conform The current setting for the action taken on a packet considered to not conform to the Action policing parameters This is not displayed if policing not in use for the class under this policy Non Conform The CoS mark value if the non conform action is set cos transmit COS Non Conform The DSCP mark value if the non conform action is set dscp transmit DSCP Value Non Conform IP The IP Precedence mark value if the non conform action is set prec transmit Precedence Value Quality of Servic
353. edtewerduchnarnideeetedetodeaudeseen 44 SHOW spanning tree SUMMARY visa ter a ii A a e ai 45 SHOW Spanning tiee VAN sionercian asar raro rod 46 SNOW SONME COMO eses tara is 106 show switchport protected revararrrsrrrrnr daa es es keria 69 574 M4100 Series ProSAFE Managed Switches SHOWISVSINNOY Zectcdbsetatacanidacuenehtcasheeeteum o paolo 350 SNOW LACACS serrana dre raise iia 518 SHOW tech SUPpOrE asesorar AAA ea 350 SAO Wetpaint akc tae Nee 456 SHOW CEIMCLCOM on c 0 0 6 0 0 ca dai Aa 456 showsterminalllengtl iessiriacionis parisina 352 SHOW LIME TANGS 60 00 50 rra AA A a ses 311 SHOW thapllads txtcict alos ica ro aicat oasis dt datado 500 SNOW a ii dlrs IIS Sei 439 SHOW USD devie viaria iaa a a ee 440 SeA EEE E E EE E A A EEE TEE E G Naeem aa eee 471 SHOW USERS aE E TETE AA ASA 472 SHOW users accounts detail 6 3 2 24 0 2220 4 94 00000000ense dearoueg idee e pe hiaai 472 SNOW USERS IOGIN NISHORY seis adn o 473 SNOW USERSIONG eraran rannan e r a E AE eea RRR ade 473 SHOW Vero eater ear daca aA io 334 SHOWMAN secos III AAA E AAA A e 56 SHOW Wan association MAC suzaciia narra cda 58 SHOW Wanassociation SUBNEE aura adrsa rastro ira 58 ShioWWManibri n cosricisiraantccda ordinario ira aoa edeiedenedsipdeasdde 57 SHOW VIAMPOFE esa 57 SHOW vlan priVate VIEN eee ccna re rirrr e RRA ie 73 SHOW vlan TEMO LE SPAM sesso ror anra ETENEE ERR TE E 128 SHOW VOICE VI 33 9 5 5 05 55 osagcaad paiete EEan reei ia arae eaaa 67 SHUTHOWM redada ra od
354. ee 135 show dhcp l2relay Interface avisas Oda 135 show dhep I2relay Stats interface mociones e e eee ed oad 136 SHOW CHG lease io 5023s inaduddmnoegeee geen tiGiduds dhs ddcgauUged maaeaw eueeeueedehc TT 237 SHOW CIMSERY cocinar ri SE CRSA aE epee 289 SHOW CUINTSERVSERVICE sdeidsriia catador pidio ees 291 SHOWINTSERV Service DIED dins sna nn nieeieGeareceesees o565555q84 adc A TA 291 SHOW COMAIN MAME 53 05 05 oo acacacaeeondsGsedtsedocadgadaoteaeecadbnormnorsesddesusegesacart 489 SMOWCOS COMUMON visa or ls As 210 SHOW COLT GHCUNMEl evocar ai 64 SMOW COC sr roosts EE aha Gt ebraa oe ar br TEE E L T ne ao bee Bate 89 show Cot TX aUthentication NIStOLy museo iia 88 A NR 93 SMON GOTIO USES sadagaranio ada ries booed nae 9aedeweyaesbuiauwspenesegss9534aaers 94 ShowWdAVlan tUnel rercoorconiarai ar AAA A aa ROR 65 SNOWIVENtIOO avisas Iso A e 333 SHOW TIDEF PONtS OPCS ascii da de de e ee aia 343 SHOW tiber ports Opties lIMO voca oc 344 SHOW TIOWCONUNG a rurale terca 108 show forwardingdb agetime 0 cece rre 212 NN ER keane 76 SHOW gmrp CONFIGUTAtION coman reia e e e REESE EEEE ERRE eee 79 A s gass nnd aoa oeens circle at ona bet aid Bes deg Sana ar didn Scots MCR RG EES age 526 show green mode eee Ipi history interface 0 cece nee n teen eas 530 SHOW GVIP CONAIGUIAUION int ntccccacaccemematel tt tidocndsasateneicad baga basetadetatededied atuce 77 SHOW MANGWANE arias ia SEAS AO 334 SHOW NOSES 6 656 665 0 95 00 RIA
355. ee edgeport This command specifies that this port is not an Edge Port within the Common and Internal Spanning Tree Format no spanning tree edgeport Mode Interface Config spanning tree forceversion This command sets the Force Protocol Version parameter to a new value Default 802 1s Format spanning tree forceversion 802 1d 802 1s 802 1w e Use 802 1d to specify that the switch transmits ST BPDUs rather than MST BPDUs IEEE 802 1d functionality supported e Use 802 1s to specify that the switch transmits MST BPDUs IEEE 802 1s functionality supported e Use 802 1w to specify that the switch transmits RST BPDUs rather than MST BPDUs IEEE 802 1w functionality supported no spanning tree forceversion This command sets the Force Protocol Version parameter to the default value Format no spanning tree forceversion Mode Global Config spanning tree forward time This command sets the Bridge Forward Delay parameter to a new value for the Common and Internal Spanning Tree The forward time value is in seconds within a range of 4 30 with the value being greater than or equal to Bridge Max Age 2 1 Default 15 Format spanning tree forward time lt 4 30 gt Mode Global Config Switching Commands 31 M4100 Series ProSAFE Managed Switches no spanning tree forward time This command sets the Bridge Forward Delay parameter for the Common and Internal Spa
356. efinition Serial Port Login Timeout minutes The time in minutes of inactivity on a Serial port connection after which the Switch will close the connection Any numeric value from 0 through 160 is allowed the factory default is 5 A value of 0 disables the timeout Baud Rate bps The default baud rate at which the serial port will try to connect The available values are 1200 2400 4800 9600 19200 38400 57600 and 115 200 baud The factory default is 9600 baud Character Size The number of bits in a character The number of bits is always 8 bits Flow Control Whether Hardware Flow Control is enabled or disabled Hardware Flow Control is always disabled Management Commands 451 M4100 Series ProSAFE Managed Switches Stop Bits The number of Stop bits per character The number of Stop bits is always 1 Parity Type The parity method used on the serial port The parity method is always None Telnet Commands This section describes the commands you use to configure and view Telnet settings You can use Telnet to manage the device from a remote management host ip telnet server enable Use this command to enable Telnet connections to the system and to enable the Telnet Server Admin Mode This command opens the Telnet listening port Default enabled Format ip telnet server enabl Mode Privileged EXEC no ip telnet server enable Use this command to disable Telnet ac
357. em Name The system name of the remote device Command example NETGEAR Switch show lldp remote device all LLDP Remote Device Summary Local Interface RemID Chassis ID Port ID System Name 00 FC E3 90 00 FC E3 90 00 FC E3 90 00 FC E3 90 00 FC E3 90 00 FC E3 90 0F 00 F 0F 00 F 0F 00 F 0F 00 F 0F 00 F 0F 00 F E3 90 01 1 E3 90 01 1 ESG90TOL 1 E3490 70171 7E3490 T0331 E3 90 04 1 PoP OWS Wn eP o I Nn FO B w N SS OG O 0 0 O Switching Commands 188 M4100 Series ProSAFE Managed Switches show lldp remote device detail Use this command to display detailed information about remote devices that transmit current LLDP data to an interface on the system Format show lldp remote device detail lt slot port gt Mode Privileged EXEC Term Definition Local Interface The interface that received the LLDPDU from the remote device Remote Identifier An internal identifier to the switch to mark each remote device to the system Chassis ID The type of identification used in the Chassis ID field Subtype Chassis ID The chassis of the remote device Port ID Subtype The type of port on the remote device Port ID The port number that transmitted the LLDPDU System Name The system name of the remote device System Describes the remote system by identifying the system name and versions of hardware Descripti
358. ensitive alphanumeric string from 1 to 31 characters uniquely identifying the policy policy map rename lt policyname gt lt newpolicyname gt Global Config DiffServ Service Commands Use the DiffServ service commands to assign a DiffServ traffic conditioning policy which you specified by using the policy commands to an interface in the incoming direction The service commands attach a defined policy to a directional interface You can assign only one policy at any one time to an interface in the inbound direction DiffServ is not used in the outbound direction This set of commands consists of service addition removal The CLI command root is service policy service policy This command attaches a policy to an interface in the inbound direction The lt policyname gt parameter is the name of an existing DiffServ policy This command causes a service to create a reference to the policy Note This command effectively enables DiffServ on an interface in the inbound direction There is no separate interface administrative mode command for DiffServ Quality of Service Commands 286 M4100 Series ProSAFE Managed Switches Note This command fails if any attributes within the policy definition exceed the capabilities of the interface Once a policy is successfully attached to an interface any attempt to change the policy definition that would result in a violation of the interface capabilities causes the policy chan
359. ensures that inter VLAN traffic is under management control and that network attached clients cannot initiate a direct attack on voice components QoS based on IEEE 802 1P Class of Service CoS uses classification and scheduling to sent network traffic from the switch in a predictable manner The system uses the source MAC of the traffic traveling through the port to identify the IP phone data flow voice vlan Global Config Use this command to enable the Voice VLAN capability on the switch Default disabled Format voice vlan Mode Global Config Switching Commands 65 M4100 Series ProSAFE Managed Switches no voice vlan Global Config Use this command to disable the Voice VLAN capability on the switch Format no voice vlan Mode Global Config voice vlan Interface Config Use this command to enable the Voice VLAN capability on the interface Default disabled Format voice vlan lt id gt dotlp lt priority gt none untagged Mode Interface Config You can configure Voice VLAN in any of the following ways Configure the IP phone to forward all voice traffic through the specified VLAN Valid VLAN IDs are from 1 to 4093 the maximum supported by the platform Configure the IP phone to use 802 1p priority tagging for voice traffic and to use the default native VLAN VLAN 0 to carry all traffic Valid lt priority gt range is 0 7 Allow the IP phone to use its own configur
360. enter return to the Privileged EXEC mode enter Ctr1 z interface lt slot port gt or interface loopback lt id gt or interface tunnel lt id gt Line Config From the Global Config mode To exit to the Global Config mode enter exit To enter lineconfig return to the Privileged EXEC mode enter Ctr1 z Policy Map Config From the Global Config mode To exit to the Global Config mode enter exit To enter policy map lt name gt return to the Privileged EXEC mode enter Ctrl Z Policy Class Map From the Policy Map mode enter To exit to the Global Config mode enter exit To Config class return to the Privileged EXEC mode enter Ctr1 z Class Map Config From the Global Config mode To exit to the Global Config mode enter exit To enter class map and specify the return to the Privileged EXEC mode enter Ctrl Z optional keyword ipv4 to specify the Layer 3 protocol for this class See class map on page 272 for more information Ipv6 Class Map From the Global Config mode To exit to the Global Config mode enter exit To Config enter class map and specify the return to the Privileged EXEC mode enter Ctrl Z optional keyword ipv6 to specify the Layer 3 protocol for this class See class map on page 272 for more information MAC Access list From the Global Config mode To exit to the Global Config mode enter exit To Config enter mac access list return to the Privileged EXEC mode enter Ctrl Z extended lt name g
361. ents RFC 3021 Using the notation of the subnet mask this is an integer that indicates the length of the subnet mask Range is 5 32 bits no ip address This command deletes an IP address from an interface The value for lt ipaddr gt is the IP address of the interface in a b c d format where the range for a b c and d is 1 255 The value for lt subnetmask gt is a 4 digit dotted decimal number which represents the subnet mask of the interface To remove all of the IP addresses primary and secondary configured on the interface enter the command no ip address Format no ip address lt ipaddr gt lt subnetmask gt lt prefix length gt secondary Mode Interface Config ip address dhcp Use this command to enable the DHCPv4 client on an in band interface so that it can acquire network information such as the IP address subnet mask and default gateway from a network DHCP server When DHCP is enabled on the interface the system automatically deletes all manually configured IPv4 addresses on the interface Default disabled Format ip address dhcp Mode Interface Config Routing Commands 235 M4100 Series ProSAFE Managed Switches no ip address dhcp Use this command to release a leased address and disable DHCPv4 on an interface Format no ip address dhcp Mode Interface Config ip default gateway Use this command to manually configure a default gateway for the switch Onl
362. ents that can get authenticated on the port in the MAC based dot1x authentication mode This value is used only when the port control mode is not MAC based Indicates the unauthenticated VLAN configured for this port This value is valid for the port only when the port control mode is not MAC based Indicates the time for which the session is valid The time period in seconds is returned by the RADIUS server on authentication of the port This value is valid for the port only when the port control mode is not MAC based This value indicates the action to be taken once the session timeout expires Possible values are Default Radius Request If the value is Default the session is terminated the port goes into unauthorized state If the value is Radius Request a reauthentication of the client authenticated on the port is performed This value is valid for the port only when the port control mode is not MAC based Switching Commands 91 M4100 Series ProSAFE Managed Switches The show dot1x detail lt slot port gt command displays the following MAC based dot1x fields if the port control mode for that specific port is MAC based For each client authenticated on the port the show dot1x detail lt slot port gt command displays the following MAC based dot1x parameters if the port control mode for that specific port is MAC based Supplicant MAC Address The MAC address of the supplicant Authenticator PAE State Current st
363. eout Mode Global Config clear arp cache This command causes all ARP entries of type dynamic to be removed from the ARP cache If the gateway keyword is specified the dynamic entries of type gateway are purged as well Format Je ar arp cache gateway Mode Privileged EXEC clear arp switch Use this command to clear the contents of the switch s Address Resolution Protocol ARP table that contains entries learned through the Management port To observe whether this command is successful ping from the remote system to the DUT Issue the show arp switch command to see the ARP entries Then issue the clear arp switch command and check the show arp switch entries There will be no more arp entries clear arp switch Mode Privileged EXEC Routing Commands 231 M4100 Series ProSAFE Managed Switches show arp This command displays the Address Resolution Protocol ARP cache The displayed results are not the total ARP entries To view the total ARP entries the operator should view the show arp results with the show arp switch results Mode Privileged EXEC Age Time seconds The time it takes for an ARP entry to age out This is configurable Age time is measured in seconds Response Time The time it takes for an ARP request timeout This value is configurable Response seconds time is measured in seconds Retries The maximum number of times an ARP request is retried This value
364. eppore 04 04 04 02 46 c96 94 600600G5 4644 adscrita 206 AOS COMEFONTEDS YM asas nd trol a 207 dos CcONtrONtEPSYOT N eses corras pt A a a ne ac 208 OS CONMO WE POE arster ero EEEE EERO EAE E 206 dotlx dynamic Vlan enable 95 ci ccacsenedenaceesesee E EEE ae a 87 dot UX CapOlflOOd se maso ea area eE E E EE EEEE E E E a EEEE a aeS 81 COLT QUESEVIGIN amp 6 250 rra oes owas Hae Jars AA 81 Ot iMitialize seis RARA Sos SOLE SELEE ERE REM RRA BES 82 dotlx mac dutn byPass sasse iue e isis ill Glo at ade 82 e 6 0 6 9 0 4 0 55 5445 4544 OTEREE TIO R OO HE GARELAAORHHAEYIAO ETE SERS SOOO OER ARE AAI 82 dot MAX USEIS54 55 54 55 05 400 aeetiwbebnbe ais 83 OUI RN 94 Ot IM POrt CONMOl sesos siii sanded debate does d4etaioeeseoeone eee 83 dotixport controlall secar 83 dotlxre authenticate es erevirinitts ire 6664660 EEES Fo HRRATLEUETEDERS CESSES ER OR RESO REET 84 doticre authentic iaa a 84 dotix supplicantmaX StaEsssrssasaracie ecards resis ie resrcri cian 95 dotIxsupplcant port control 22 2304 40 04 50 663644445 0008 0909060R0ea0 Dnaeheoedssedcsedenedaoaek 94 dotIx supplicant timeout auth p riod co ccvakenscwensw onde a A 96 dot1x supplicant timeout held period 0 cece eeaeee 96 dot lx supplicant timeout start period weee eeweurewegd aSa KER e aE aaa es 96 Cot 1X supplicant USER eesreiserirerieriri e istent ORERE RERE TREENER E SERERE RRR EERE 97 ASL IXSY Stem aUtN COMUO sosgroricoei ny nee sien eoalsaacnain rd eee Rea ae no do oe deweag
365. er upon unsuccessful communication with the current RADIUS authenticating server When the maximum number of retries are exhausted for the RADIUS accounting server and no response is received the client does not communicate with any other server Defaut Format radius server retransmit lt retries gt Mode Global Config Parameter Description The maximum number of transmission attempts in the range of 1 15 no radius server retransmit Use this command to set the value of this global parameter to the default value Format no radius server retransmit Mode Global Config radius server timeout Use this command to configure the global parameter for the RADIUS client that specifies the time out value in seconds after which a request must be retransmitted to the RADIUS server if no response is received The time out value is an integer in the range of 1 30 seconds Defaut Format radius server timeout lt seconds gt Mode Global Config Management Commands 506 M4100 Series ProSAFE Managed Switches no radius server timeout Use this command to set the timeout global parameter to the default value Format Mode no radius server timeout Global Config show radius Use this command to display the values configured for the global parameters of the RADIUS client Format show radius Mode Privileged EXEC Field Definition Number of Configu
366. er EXEC Interface Interface address in slot port format Filter Type Is one of two values e ip mac User has configured MAC address filtering on this interface e ip Only IP address filtering on this interface IP Address IP address of the interface MAC Address If MAC address filtering is not configured on the interface the MAC Address field is empty If port security is disabled on the interface then the MAC Address field displays permit all VLAN The VLAN for the binding rule Command example NETGEAR Switch show ip verify source Interface Filter Type IP Address MAC Address Vlan 0 1 ip mac 210 Le Le 00 02 B3 06 60 80 10 0 1 ip mac 210 1 1 4 00 0F FE 00 13 04 10 Switching Commands 146 M4100 Series ProSAFE Managed Switches show ip source binding This command displays the IPSG bindings Format show ip source binding static dynamic interface lt slot port gt lt vlan id gt Mode e Privileged EXEC User EXEC Term Definition MAC Address The MAC address for the entry that is added IP Address The IP address of the entry that is added Type Entry type statically configured from CLI or dynamically learned from DHCP Snooping VLAN VLAN for the entry Interface IP address of the interface in slot port format Command example NETGEAR Switch show ip source binding AC Address IP Address Type Vlan Interface 00 00 00 00 00 08 1 2 3 4 der Ros
367. er identifies the node on which this command must be executed When this parameter is not supplied the command is executed on all nodes in a Stack Format delete lt unit gt imagel image2 Mode Privileged EXEC boot system This command activates the specified image It will be the active image for subsequent reboots and will be loaded by the boot loader The current active image is marked as the backup image for subsequent reboots The optional lt unit gt parameter is valid only in Stacking where the lt unit gt parameter identifies the node on which this command must be executed When this parameter is not supplied the command is executed on all nodes ina Stack Format boot system lt unit gt lt image file name gt Privileged EXEC show bootvar This command displays the version information and the activation status for the current active and backup images on the supplied unit node of the Stack If you do not specify a unit number the command displays image details for all nodes on the Stack The command also displays any text description associated with an image This command when used on a Standalone system displays the switch activation status For a standalone system the unit parameter is not valid Format show bootvar lt unit gt Mode Privileged EXEC filedescr This command associates a text description with an image Any existing description will be replaced For stacking th
368. eries ProSAFE Managed Switches vian This command creates a new VLAN and assigns it an ID The ID is a valid VLAN identification number ID 1 is reserved for the default VLAN The vlan list contains Vlanld s in range lt 1 4093 gt Separate non consecutive IDs with and no spaces and no zeros in between the range Use for range Format vlan lt vlan list gt no vlan This command deletes an existing VLAN The ID is a valid VLAN identification number ID 1 is reserved for the default VLAN The vian list contains Vlanld s in range lt 1 4093 gt Separate non consecutive IDs with and no spaces and no zeros in between the range Use for range Format no vlan lt vlan list gt vlan acceptframe This command sets the frame acceptance mode per interface For VLAN Only mode untagged frames or priority frames received on this interface are discarded For Admit All mode untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port With either option VLAN tagged frames are forwarded in accordance with the IEEE 802 1Q VLAN Specification Default all Format vlan acceptframe untaggedonly vlanonly all Mode Interface Config no vian acceptframe This command resets the frame acceptance mode for the interface to the default value Format no vlan acceptframe Mode Interface Config Switching Commands
369. erver Commands System Utility and Clear Commands Simple Network Time Protocol SNTP Commands DHCP Server Commands DNS Client Commands Packet Capture Commands Serviceability Packet Tracing Commands Cable Test Command sFlow Commands IP Address Conflict Commands RMON Stats and History Commands UniDirectional Link Detection Commands USB Commands The commands in this chapter are in four functional groups Show commands display switch settings statistics and other information Configuration commands configure features and options of the switch Every switch command has a show command that displays the configuration setting Copy commands transfer or save configuration and informational files to and from the switch Clear commands clear some or all of the settings to factory defaults 328 M4100 Series ProSAFE Managed Switches Auto Install Commands This section describes the Auto Install Commands Auto Install is a software feature which provides for the configuration of a switch automatically when the device is initialized and no configuration file is found on the switch The Auto Install process requires DHCP to be enabled by default in order for it to be completed The downloaded config file is not automatically saved to the startup config An administrator must explicitly issue a save request in order to save the configuration The Auto Install process depends upon the configuration of other devices in the network inclu
370. erver Host IP address or hostname of configured SNTP Server Address Server Type Address Type of Server Server Stratum Claimed stratum of the server for the last received valid packet Server Reference clock identifier of the server for the last received valid packet Reference ID Server Mode SNTP Server mode Server Maximum Total number of SNTP Servers allowed Entries Server Current Total number of SNTP configured Entries For each configured server the information that is shown in the following table is displayed Term Definition Host Address IP address or hostname of configured SNTP Server Address Type Address Type of configured SNTP server Priority IP priority type of the configured server Version SNTP Version number of the server The protocol version used to query the server in unicast mode Port Server Port Number Last Attempt Last server attempt time for the specified server Time Last Update Last server attempt status for the server Status Utility Commands 381 M4100 Series ProSAFE Managed Switches Total Unicast Number of requests to the server Requests Failed Unicast Number of failed requests from server Requests show clock Use the show clock command in Privileged EXEC or User EXEC mode to display the time and date from the system clock Use the show clock detail command to show the time zone and summertime configuration Fo
371. es lt key gt Mode Global Config no username snmpv3 encryption Use this command to set the encryption protocol to none The lt username gt is the login user name for which the specified encryption protocol will be used Format no username snmpv3 encryption lt username gt Mode Global Config show users Use this command to display the configured user names and their settings This command is available only for users with read write privileges The SNMPv3 fields is displayed only if SNMP is available on the system Format show users Mode Privileged EXEC Term Definition User Name The name the user enters to login using the serial port Telnet or web Access Mode Shows whether the user is able to change parameters on the switch Read Write or is only able to view them Read Only As a factory default the admin user has Read Write access and the guest has Read Only access There can only be one Read Write user and up to five Read Only users SNMPv3 Access Mode The SNMPv3 Access Mode If the value is set to ReadWrite the SNMPv3 user is able to set and retrieve parameters on the system If the value is set to ReadOnly the SNMPv3 user is only able to retrieve parameter information The SNMPv3 access mode might be different than the CLI and Web access mode Management Commands 471 M4100 Series ProSAFE Managed Switches SNMPv3 The authentication protocol
372. es from the host name to address cache This command clears the entries from the DNS cache maintained by the software This command clears both IPv4 and IPv6 entries Format clear host lt name gt all Mode Privileged EXEC Field Description name A particular host entry to remove lt name gt ranges from 1 255 characters all Removes all entries Utility Commands 398 M4100 Series ProSAFE Managed Switches show hosts Use this command to display the default domain name a list of name server hosts the static and the cached list of host names and addresses lt name gt ranges from 1 255 characters This command displays both IPv4 and IPv6 entries Format show hosts lt name gt Mode User EXEC Field Description Host Name Domain host name Default Domain Default domain name Default Domain List Domain Name Lookup Number of Retries Retry Timeout Default domain list DNS client enabled disabled Number of time to retry sending Domain Name System DNS queries Amount of time to wait for a response to a DNS query Period Name Servers Configured name servers Command example lt N ETGEAR Switching gt show hosts Host name Default domain gm com Default domain list yahoo com Stanford edu rediff com Domain Name lookup Enabled Number f TOLOSA dia aa 5 Retry timeout period
373. es the commands you use to help troubleshoot connectivity issues and to restore various configurations to their factory defaults traceroute Use the this command to discover the routes that packets actually take when traveling to their destination through the network on a hop by hop basis Traceroute continues to provide a synchronous response when initiated from the CLI Default count 3 probes interval 3 seconds e size O bytes e port 33434 e maxTtl 30 hops e maxFail 5 probes e initTtl 1 hop Format traceroute lt ip address gt lt hostname gt initTtl lt initTtl gt maxTtl lt maxTt1 gt maxFail lt maxFail gt interval lt interval gt count lt count gt port lt port gt size lt size gt source lt ip address gt lt slot port gt loopback lt 0 7 gt Mode Privileged EXEC Using the options described below you can specify the initial and maximum time to live TTL in probe packets the maximum number of failures before termination the number of probes sent for each TTL and the size of each probe Parameter Description lt ip address gt lt hostname gt The lt ip address gt value must be a valid IP address The lt hostname gt value must be a a valid host name initTtl lt initTtl gt As an option specify the initial time to live TTL the maximum number of router hops between the local and remote system Range is 0 255 maxTtl
374. eserver netbios dgm netbios ns ntp pim auto rip rip tacacs tftp time Mode Interface Config ip helper address discard Use this command to drop matching packets Matching packets are discarded rather than relayed even if a global ip helper address configuration matches the packet Format ip helper address discard lt dest udp port gt dhcp domain isakmp mobile ip nameserver netbios dgm netbios ns ntp pim auto rip rip tacacs tftp time Mode Interface Config Routing Commands 257 M4100 Series ProSAFE Managed Switches Parameter Description lt dest udp port gt A destination UDP port number from 0 to 65535 port name options The destination UDP port may be optionally specified by its name Whether a port is specified by its number or its name has no effect on behavior The names recognized are as follows e dhcp port 67 e domain port 53 e isakmp port 500 e mobile ip port 434 nameserver port 42 netbios dgm port 138 netbios ns port 137 ntp port 123 pim auto rp port 496 rip port 520 tacacs port 49 tftp port 69 e time port 37 Other ports must be specified by number no ip helper address discard Use this command to permit the matching packets Format no ip helper address discard lt dest udp port gt dhcp domain isakmp mobile ip nameserver netbios dgm netbios ns ntp pim auto rip rip t
375. ether multicast router is statically enabled on the interface Attached VLAN ID Displays the list of VLANs of which the interface is a member show mlidsnooping mrouter vlan Use this command to display information about statically configured multicast router attached interfaces Format show mldsnooping mrouter vlan lt slot port gt Privileged EXEC Interface Shows the interface on which multicast router information is being displayed VLAN ID Displays the list of VLANs of which the interface is a member show mac address table mldsnooping Use this command to display the MLD Snooping entries in the Multicast Forwarding Database MFDB table Format show mac address table mldsnooping Mode Privileged EXEC VLAN ID The VLAN in which the MAC address is learned MAC Address A multicast MAC address for which the switch has forwarding or filtering information The format is 6 two digit hexadecimal numbers that are separated by colons for example 01 23 45 67 89 AB The type of entry which is either static added by the user or dynamic added to the table as a result of a learning process or protocol Description The text description of this multicast table entry Interfaces The list of interfaces that are designated for forwarding Fwd and filtering Flt Switching Commands 174 M4100 Series ProSAFE Managed Switches MLD Snooping Querier Commands In an IPv6 envi
376. evice type actor or partner to either long or short time out Default long Format port lacptimeout actor partner long short Mode Global Config no port lacptimeout This command sets the timeout for all physical interfaces of a particular device type actor or partner back to their default values Format no port lacptimeout actor partner Mode Global Config port channel adminmode This command enables a port channel LAG This command sets every configured port channel with the same administrative mode setting Format port channel adminmode all Mode Global Config no port channel adminmode This command disables a port channel LAG This command clears every configured port channel with the same administrative mode setting Format fro port channel adminmode all Mode Global Config port channel linktrap This command enables link trap notifications for the port channel LAG The interface is a logical slot port for a configured port channel This command enables link trap notifications for the port channel LAG The interface is a logical lt slot port gt for a configured port channel The option a11 enables link trap notifications for all the configured port channels Instead of lt slot port gt you can use lag lt lag group id gt as an alternate way to specify the LAG interface in which lt 1ag group id gt is the LAG port number Switching Commands
377. f all ACLs applied to an y on intf i interface has resulted in requiring more rules than the platform supports ACL ACL name rule x This rule is not being The ACL configuration has resulted in a logged requirement for more logging rules than the platform supports The specified rule is functioning normally except for the logging action ACL aclLogTask error logging ACL rule trap for The system was unable to send an SNMP correlator number trap for this ACL rule which contains a logging attribute ACL IP ACL number Forced truncation of one While processing the saved configuration or more rules during config migration the system encountered an ACL with more rules than is supported by the current version This might happen when code is updated to a version supporting fewer rules per ACL than the previous version Table 37 CoS Log Message Component Message Cause COS cosCnfgrInitPhase3Process Unable to The COS component was unable to apply apply saved config using factory defaults the saved configuration and has initialized to the factory default settings Log Messages 547 M4100 Series ProSAFE Managed Switches Table 38 DiffServ Log Messages Component Message Cause DiffServ DiffServ diffserv c 165 diffServRestore Failed to reset DiffServ Recommend resetting device Policy invalid for service intf policy name intlfNum x direction y While attempting to cle
378. f port designations exist within a private VLAN e Promiscuous Ports An endpoint connected to a promiscuous port is allowed to communicate with any endpoint within the private VLAN Multiple promiscuous ports can be defined for a single private VLAN domain e Isolated Ports An endpoint connected to an isolated port is allowed to communicate with endpoints connected to promiscuous ports only Endpoints connected to adjacent isolated ports cannot communicate with each other e Community Ports An endpoint connected to a community port is allowed to communicate with the endpoints within a community and with any configured promiscuous port The endpoints that belong to one community cannot communicate with endpoints that belong to a different community or with endpoints connected to isolated ports The Private VLANs can be extended across multiple switches through inter switch stack links that transport primary community and isolated VLANs between devices switchport private vlan This command is used to define a private VLAN association for an isolated or community port or a mapping for a promiscuous port Format switchport private vlan host association lt primary vlan 1d gt lt secondary vlan id gt mapping lt primary vlan id gt add remove lt secondary vlan list gt Mode Interface Config host association Defines VLAN association for community or host ports lt primary vlan 1d gt Primary VLAN ID of a private
379. faces that are up in more than one area Whether the router is an autonomous system boundary router The router is an ASBR if it is redistributing any routes or originating a default route Split Horizon Mode Whether RIP advertises routes on the interface where they were received Default Metric Default Route The metric assigned to redistributed routes Whether this router is originating a default route Advertise Distance The administrative distance for RIP routes Redistribution A table showing information for each source protocol connected static BGP and OSPF For each of these sources the distribution list and metric are shown Fields which are not configured are left blank For ospf configured ospf match parameters are also shown Interface The interfaces where RIP is enabled and the version sent and accepted on each interface show ip route This command displays the routing table The lt ip address gt specifies the network for which the route is to be displayed and displays the best matching best route for the address The lt mask gt specifies the subnet mask for the lt ip address gt When you use the longer prefixes keyword the lt ip address gt and lt mask gt pair becomes the prefix and the command displays the routes to the addresses that match that prefix Use the lt protocol gt parameter to specify the protocol that installed the routes The value for lt protocol1 gt can be
380. fault Time to Live The computed TTL Time to Live of forwarding a packet from the local router to the final destination Routing Mode Shows whether the routing mode is enabled or disabled Maximum Next Hops The maximum number of next hops the packet can travel Maximum Routes The maximum number of routes the packet can travel ICMP Rate Limit Shows how often the token bucket is initialized with burst size tokens Interval Burst interval is from 0 to 2 147 483 647 milliseconds The default burst interval is 1000 msec ICMP Rate Limit Burst Shows the number of ICMP v4 error messages that can be sent during one Size burst interval The range is from 1 to 200 messages The default value is 100 messages ICMP Echo Replies Shows whether ICMP Echo Replies are enabled or disabled ICMP Redirects Shows whether ICMP Redirects are enabled or disabled Routing Commands 241 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show ip brief Default Time CO Hives see vs add sal o 64 Routing Moderate gaai Gist eis a licita Gud ms los papada Disabled Maximum Next HOP Sis c 6 te as is Siete weed aed S 4 Maximum ROUGE Stand aries seals tangle as eins ed a ay dl onto oe 6000 ICMP Rate Limit INGO PVA se seins sens eens es 1000 msec ICMP Rate Limit Burst SiZ i wea ele wee wee es 100 messages ICMP ECHO REP LVS See esi ace ierktiarec ie ia Enabled TCME REALCE S e negreto o Gouden ae w
381. fer Ctrl Y Prints last deleted character Ctrl Q Enables serial flow Ctrl S Disables serial flow Ctrl Z Return to root command prompt Tab lt SPACE gt Command line completion Exit Go to next lower command prompt 2 List available commands keywords or parameters Using CLI Help Enter a question mark at the command prompt to display the commands available in the current mode NETGEAR Switch gt enable Enter into user privilege mode help Display help for various special keys logout Exit this session Any unsaved changes are lost ping Send ICMP echo packets to a specified IP address quit Exit this session Any unsaved changes are lost show Display Switch Options and Settings telnet Telnet to a remote host Using the Command Line Interface 15 M4100 Series ProSAFE Managed Switches Enter a question mark after each word you enter to display available command keywords or parameters NETGEAR Switch network javamode Enable Disable mgmt_vlan Configure the Management VLAN ID of the switch parms Configure Network Parameters of the router protocol Select DHCP BootP or None as the network config protocol If the help output shows a parameter in angle brackets you must replace the parameter with a value NETGEAR Switch network parms lt ipaddr gt Enter the IP address If there are no additional command keywords or parameters or if more parameters ar
382. ference also contains the following information e Format shows the command keywords and the required and optional parameters e Mode identifies the command mode you must be in to access the command e Default shows the default value if any of a configurable setting on the device The show commands also contain a description of the information that the command shows Command Conventions In this document the command name is in bold font Parameters are in lt italic font gt between angle brackets You must replace the parameter name with an appropriate value which might be a name or number Parameters are order dependent Keyword choices are in bold font The parameters for a command might include mandatory values optional values or keyword choices The following table describes the conventions this document uses to distinguish between value types Table 1 Parameter Conventions Symbol Example Description italic font in lt value gt or lt value gt Indicates a variable value You must replace the angle brackets italicized text within angle brackets with a name or number square brackets Indicates an optional parameter Using the Command Line Interface 8 M4100 Series ProSAFE Managed Switches Table 1 Parameter Conventions continued Symbol Example Description curly braces choicel choice2 Indicates that you must select a parameter from the list of choices
383. ffic forwarding is possible between two protected ports Default unprotected Format switchport protected lt groupid gt Interface Config no switchport protected Interface Config Use this command to configure a port as unprotected The lt groupid gt parameter identifies the set of protected ports to which this interface is assigned Format no switchport protected lt groupid gt Mode Interface Config show switchport protected This command displays the status of all the interfaces including protected and unprotected interfaces Format show switchport protected lt groupid gt Mode e Privileged EXEC User EXEC Switching Commands 69 M4100 Series ProSAFE Managed Switches Group ID The number that identifies the protected port group Name An optional name of the protected port group The name can be up to 32 alphanumeric characters long including blanks The default is blank List of Physical List of ports which are configured as protected for the group identified with lt groupid gt If Ports no port is configured as protected for this group this field is blank show interfaces switchport for a group ID This command displays the status of the interface protected unprotected under the groupid Format show interfaces switchport lt slot port gt lt groupid gt Mode e Privileged EXEC e User EXEC Term Definition A string associated with this group as
384. fic For the static routes to be visible you must perform the following steps e Enable IP routing globally e Enable IP routing for the interface e Confirm that the associated link is also up Routing Commands 237 M4100 Series ProSAFE Managed Switches Default preference 1 Format ip route lt ipaddr gt lt subnetmask gt lt nexthopip gt Null0 lt preference gt no ip route This command deletes a single next hop to a destination static route If you use the lt nexthopip gt parameter the next hop is deleted If you use the lt preference gt value the preference value of the static route is reset to its default Format no ip route lt ipaddr gt lt subnetmask gt lt nexthopip gt Null0 lt preference gt Mode Global Config ip route default This command configures the default route The value for lt nexthopip gt is a valid IP address of the next hop router The lt preference gt is an integer value from 1 to 255 A route with a preference of 255 cannot be used to forward traffic Default preference 1 Format ip route default lt nexthopip gt lt preference gt Mode Global Config no ip route default This command deletes all configured default routes If the optional lt next hopip gt parameter is designated the specific next hop is deleted from the configured default route and if the optional preference value is designated the preference of the configur
385. fied IP Precedence IP TOS The value specified for IP TOS Quality of Service Commands 304 M4100 Series ProSAFE Managed Switches Term Definition Log Displays when you enable logging for the rule Assign Queue The queue identifier to which packets matching this rule are assigned Mirror Interface The slot port to which packets matching this rule are copied Redirect The slot port to which packets matching this rule are forwarded Interface Time Range Displays the name of the time range if the ACL rule has referenced a time range Name Rule Status Status Active Inactive of the ACL rule show access lists This command displays IP ACLs IPv6 ACLs and MAC access control lists information for a designated interface and direction Format show access lists interface lt slot port gt in out Mode Privileged EXEC Term Definition ACL Type Type of access list IP IPv6 or MAC ACL ID Access List name for a MAC or IPv6 access list or the numeric identifier for an IP access list Sequence An optional sequence number might be specified to indicate the order of this access list Number relative to other access lists already assigned to this interface and direction A lower number indicates higher precedence order If a sequence number is already in use for this interface and direction the specified access list replaces the currently attached access list using that se
386. figured threshold Default disabled Format storm control unicast Mode Global Config no storm control unicast This command disables unicast storm recovery mode for all interfaces Format no storm control unicast Mode Global Config storm control unicast level Global Config This command configures the unicast storm recovery threshold for all interfaces as a percentage of link speed and enables unicast storm recovery If the mode is enabled unicast storm recovery is active and if the rate of unknown L2 unicast destination lookup failure traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore the rate of unknown unicast traffic will be limited to the configured threshold Defaut Format storm control unicast level lt 0 100 gt Mode Global Config Switching Commands 105 M4100 Series ProSAFE Managed Switches no storm control unicast level This command sets the unicast storm recovery threshold to the default value and disables unicast storm recovery for all interfaces Format no storm control unicast level Mode Global Config storm control unicast rate Global Config Use this command to configure the unicast storm recovery threshold for all interfaces in packets per second If the mode is enabled unicast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases
387. finition Bcast Mode Shows whether the broadcast storm control mode is enabled or disabled The factory default is disabled Beast Level The broadcast storm control level Mcast Mode Shows whether the multicast storm control mode is enabled or disabled Mcast Level The multicast storm control level Ucast Mode Shows whether the Unknown Unicast or DLF Destination Lookup Failure storm control mode is enabled or disabled Ucast Level The Unknown Unicast or DLF Destination Lookup Failure storm control level Flow Control Commands In 802 3x flow control the MAC control PAUSE operation is specified in IEEE 802 3 Annex 31 B It allows traffic from one device to be throttled for a specified period of time and is defined for devices that are directly connected A device that needs to inhibit transmission of data frames from another device on the LAN transmits a PAUSE frame as defined in the IEEE specification This feature allows the user to configure the switch to use symmetric asymmetric or no flow control Asymmetric flow control allows the switch to respond to received PAUSE frames but the port cannot generate PAUSE frames Symmetric flow control allows the switch to both respond to and generate MAC control PAUSE frames flowcontrol Use this command to enable or disable the symmetric or asymmetric flow control on the switch Use the no form of command to disable the symmetric or asymmetric flow control Asymmetric here means th
388. for interfaces on a non stacking device SRC_IP The source IP address in the IP header in the packet DEST_IP The destination IP address in the IP header in the packet Type determines whether or not the ICMP message is a REQUEST or a RESPONSE no debug ping packet This command disables tracing of ICMP echo requests and responses Format no debug ping packet Mode Privileged EXEC Utility Commands 418 M4100 Series ProSAFE Managed Switches debug rip packet This command turns on tracing of RIP requests and responses This command takes no options The output is directed to the log file Default disabled Format debug rip packet Mode Privileged EXEC Command example NETGEAR Switch debug rip packet lt 15 gt JAN 01 00 35 15 192 168 17 29 1 RIP 181783160 rip_map_debug c 96 775 Pkt RX on Intf 0 1 1 Src_IP 43 1 1 1 Dest_IP 43 1 1 2 Rip_Version RIPv2 Packet_Type RIP_RESPONSE ROUTE 1 Network 10 1 1 0 Mask 255 255 255 0 Metric 1 ROUTE 2 Network 40 1 0 0 Mask 255 255 0 0 Metric 1 ROUTE 3 Network 10 50 50 0 Mask 255 255 255 0 Metric 1 4 5 ROUTE Network 41 1 0 0 Mask 255 255 0 0 Metric 1 ROUTE Network 42 0 0 0 Mask 255 0 0 0 Metric 1 Another 6 routes present in packet not displayed The parameters that are shown in the following table are displayed in the trace message Parameter Definition TX RX TX refers to a packet transmi
389. from which SNMP clients might use that community to access the device A value of 255 255 255 255 allows access from only one station and uses that machine s IP address for the client IP address A value of 0 0 0 0 allows access from any IP address The name is the applicable community name Default 0 0 0 0 Format snmp server community ipmask lt ipmask gt lt name gt Mode Global Config Management Commands 492 M4100 Series ProSAFE Managed Switches no snmp server community ipmask Use this command to set a client IP mask for an SNMP community to 0 0 0 0 The name is the applicable community name The community name might be up to 16 alphanumeric characters Format no snmp server community ipmask lt name gt Mode Global Config snmp server community mode Use this command to activate an SNMP community If a community is enabled an SNMP manager associated with this community manages the switch according to its access right If the community is disabled no SNMP requests using this community are accepted In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable Default e private and public communities enabled e other four disabled Format snmp server community mode lt name gt Mode Global Config no snmp server community mode Use this command to deactivate an SNMP community If the community is disabled
390. ge attempt to fail Format service policy in out lt policymapname gt Modes Global Config Interface Config Note Each interface can have one policy attached no service policy This command detaches a policy from an interface in the inbound direction The lt policyname gt parameter is the name of an existing DiffServ policy Note This command causes a service to remove its reference to the policy This command effectively disables DiffServ on an interface in the inbound direction There is no separate interface administrative mode command for DiffServ Format no service policy in lt policymapname gt Modes Global Config Interface Config DiffServ Show Commands Use the DiffServ show commands to display configuration and status information for classes policies and services You can display DiffServ information in summary or detailed formats The status information is only shown when the DiffServ administrative mode is enabled Quality of Service Commands 287 M4100 Series ProSAFE Managed Switches show class map This command displays all configuration information for the specified class The lt class name gt is the name of an existing DiffServ class Format show class map lt class name gt Modes e Privileged EXEC e User EXEC If the class name is specified the fields that are shown in the following table are displayed Class Name The name of this class
391. gging traps This command sets the severity at which SNMP traps are logged and sent in an email You can specify the lt severitylevel gt value as either an integer from 0 to 7 or symbolically through one of the following keywords emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 or debug 7 Default Info 6 messages and higher are logged Format logging traps lt severitylevel gt Mode Global Config no logging traps This command resets the SNMP trap logging severity level to the default value Mode Global Config logging email test message type This command sends an email to the SMTP server to test the email alerting function Format logging email test message type urgent non urgent both message body lt message body gt Mode Global Config Utility Commands 361 M4100 Series ProSAFE Managed Switches show logging email config This command displays information about the email alert configuration Format show logging email config Privileged EXEC Email Alert Logging Definition The administrative status of the feature enabled or disabled Email Alert From Address Email Alert Urgent Severity Level Email Alert Non Urgent Severity Level Email Alert Trap Severity Level Email Alert Notification Period The email address of the sender the switch The lowest severity level that is considered urgent Messages of this
392. group ID of a configured port channel Format deleteport lt logical slot port gt lag lt lag group 1d gt Mode Interface Config Switching Commands 109 M4100 Series ProSAFE Managed Switches deleteport Global Config This command deletes all configured ports from the port channel LAG The interface is a logical slot port number of a configured port channel To clear the port channels see clear port channel on page 368 Format deleteport lt logical slot port gt Mode Global Config lacp admin key Use this command to configure the administrative value of the key for the port channel The value range of lt key gt is 0 65535 Default 0x8000 Format lacp admin key lt key gt Mode Interface Config Note This command is only applicable to port channel interfaces no lacp admin key Use this command to configure the default administrative value of the key for the port channel no lacp admin key Interface Config lacp collector max delay Use this command to configure the port channel collector max delay The valid range of lt delay gt is 0 65535 Default 0x8000 Format lacp collector max delay lt delay gt Mode Interface Config Note This command is only applicable to port channel interfaces Switching Commands 110 M4100 Series ProSAFE Managed Switches no lacp collector max delay Use this command to configure the defa
393. gt Quality of Service Commands 277 M4100 Series ProSAFE Managed Switches denotes the bit positions in lt tosbits gt that are used for comparison against the IP TOS field in a packet For example to check for an IP TOS value having bits 7 and 5 set and bit 1 clear where bit 7 is most significant use a lt tosbits gt value of a0 hex and a lt tosmask gt of a2 hex Note The match ip dscp match ip precedence andmatch ip tos commands provide alternative ways to specify a match criterion for the same Service Type field in the IP header but each command requires a slightly different user notation Note This free form version of the IP DSCP IP precedence and IP ToS match specification gives you complete control when specifying which bits of the IP Service Type field must be checked Defaut Format match ip tos lt tosbits gt lt tosmask gt Mode Class Map Config match protocol This command adds to the specified class definition a match condition based on the value of the IP Protocol field in a packet using a single keyword notation or a numeric value notation To specify the match condition using a single keyword notation the value for lt protocol name gt is one of the supported protocol name keywords The currently supported values are icmp igmp ip tcp udp A value of ip matches all protocol number values To specify the match condition using a numeric value notation the protocol number is
394. gure local as the first method in the list the switch tries no other methods Default e defaultList Used by the console and only contains the method none e networkList Used by telnet and SSH and only contains the method local aaa authentication login default lt list name gt lt method1 gt lt method2 gt Mode Global Config Parameter Definition default Uses the listed authentication methods that follow this argument as the default list of methods when a user logs in lt list name gt Character string of up to 12 characters used to name the list of authentication methods activated when a user logs in Management Commands 480 M4100 Series ProSAFE Managed Switches Parameter Definition lt method1 gt At least one from the following lt method2 gt e enable Uses the enable password for authentication e line Uses the line password for authentication e local Uses the local username database for authentication e none Uses no authentication e radius Uses the list of all RADIUS servers for authentication e tacacs Uses the list of all TACACS servers for authentication Command example NETGEAR Switch config aaa authentication login default radius local enable none no aaa authentication login Use this command to remove authentication at login Format no aaa authentication login default lt list name gt Mode Global Config aaa authen
395. gured The guest vlan timer is only relevant when guest vian has been configured on that specific port reauth period The value in seconds of the timer used by the authenticator state machine on this port to determine when re authentication of the supplicant takes place The reauth period must be a value in the range 1 65535 Switching Commands 85 M4100 Series ProSAFE Managed Switches quiet period The value in seconds of the timer used by the authenticator state machine on this port to define periods of time in which it will not attempt to acquire a supplicant The quiet period must be a value in the range 0 65535 tx period The value in seconds of the timer used by the authenticator state machine on this port to determine when to send an EAPOL EAP Request Identity frame to the supplicant The quiet period must be a value in the range 1 65535 supp timeout The value in seconds of the timer used by the authenticator state machine on this port to timeout the supplicant The supp timeout must be a value in the range 1 65535 server timeout The value in seconds of the timer used by the authenticator state machine on this port to timeout the authentication server The supp timeout must be a value in the range 1 65535 no dot1x timeout This command sets the value in seconds of the timer used by the authenticator state machine on this port to the default values Depending on the token used the cor
396. h a range of 1 65535 Default disabled Format logging syslog port lt portid gt Mode Global Config no logging syslog This command disables syslog logging Format no logging syslog Mode Global Config logging syslog source interface This command configures the syslog source interface source IP address for the syslog server configuration The IP address of the selected source interface is used for filling the IP header of management protocol packets This allows security devices firewalls to identify the source packets coming from the specific switch If a source interface is not specified the primary IP address of the originating outbound interface is used as the source address Utility Commands 355 M4100 Series ProSAFE Managed Switches Format logging syslog source interface lt slot port gt loopback lt loopback 1d gt vlan lt vlan id gt Mode Global Config Parameter Description lt slot port gt VLAN or port based routing interface loopback Configures the loopback interface to use as the source IP address The range of lt loopback id gt the loopback ID is 0 to 7 vlan lt vlan id gt Configures the VLAN interface to use as the source IP address The range of the VLAN ID is 1 to 4093 show logging This command displays logging configuration information show logging Privileged EXEC Term Definition Logging Client The por
397. hark tool The remote capture can be enabled or disabled using the CLI There should be a Windows computer with the Wireshark tool to display the captured file When using the remote capture mode the switch does not store any captured data locally on its file system You can configure the IP port number for connecting Wireshark to the switch The default port number is 2002 If a firewall is installed between the Wireshark PC and the switch these ports must be allowed to pass through the firewall You must configure the firewall to allow the Wireshark computer to initiate TCP connections to the switch If the socket connection to Wireshark has been established the captured CPU packets are written to the data socket Wireshark receives the packets and processes it to display This continues until the session is terminated by either end Starting a remote capture session automatically terminates the file capture and line capturing line In capture line mode the captured packets are saved in real time mode into the RAM and can be displayed on the CLI Starting a line capture automatically terminates any remote capture session and capturing into a file no capture Use this command to reset the capture mode to remote mode Format no capture Mode Global Config capture remote port Use this command to configure file capture options The command is persistent across a reboot cycle Default 2002 Format capture re
398. hat are listed as the static filtering interfaces show mac address table stats This command displays the Multicast Forwarding Database MFDB statistics show mac address table stats Mode Privileged EXEC Switching Commands 212 M4100 Series ProSAFE Managed Switches Term Definition Max MFDB The total number of entries that can possibly be in the Multicast Forwarding Database Table Entries table Most MFDB The largest number of entries that have been present in the Multicast Forwarding Entries Since Database table This value is also known as the MFDB high water mark Last Reset Current Entries The current number of entries in the MFDB ISDP Commands This section describes the commands you use to configure the industry standard Discovery Protocol ISDP isdp run This command enables ISDP on the switch Default Enabled Format isdp run Mode Global Config no isdp run This command disables ISDP on the switch Format no isdp run Mode Global Config isdp holdtime This command configures the hold time for ISDP packets that the switch transmits The hold time specifies how long a receiving device should store information sent in the ISDP packet before discarding it You must enter the range in seconds Default 180 seconds Format isdp holdtime lt 10 255 gt Mode Global Config Switching Commands 213 M4100 Series ProSAFE Manage
399. he lt policyname gt is the name of an existing DiffServ policy Format show policy map lt policyname gt Mode Privileged EXEC If the policy name is specified the fields that are shown in the following table are displayed Term Definition Policy Name The name of this policy Policy Type The policy type Only inbound policy definitions are supported for this platform Quality of Service Commands 289 M4100 Series ProSAFE Managed Switches The information that is shown in the following table is repeated for each class that is associated with this policy only the policy attributes that are configured are displayed Term Definition Assign Queue Directs traffic stream to the specified QoS queue This allows a traffic classifier to specify which one of the supported hardware queues are used for handling packets belonging to the class The name of this class Committed Burst The committed burst size used in simple policing Size KB Committed Rate The committed rate used in simple policing Kbps Conform Action The current setting for the action taken on a packet considered to conform to the policing parameters This is not displayed if policing is not in use for the class under this policy Conform COS The CoS mark value if the conform action is set cos transmit Conform DSCP The DSCP mark value if the conform action is set dscp transmit Value Conform IP The IP Prec
400. he command displays the settings for the entire system Use the optional parameters to display the settings on a specific interface or on all interfaces Format show port security lt slot port gt all Mode Privileged EXEC Term Definition Admin Mode Port Locking mode for the entire system This field displays if you do not supply any parameters For each interface or for the interface you specify the following information appears Term Definition Admin Mode Port Locking mode for the Interface Dynamic Limit Maximum dynamically allocated MAC Addresses Static Limit Maximum statically allocated MAC Addresses Violation Trap Whether violation traps are enabled Mode show port security dynamic This command displays the dynamically locked MAC addresses for the port Format show port security dynamic lag lt lag intf num gt lt slot port gt Mode Privileged EXEC Term Definition MAC Address MAC Address of dynamically locked MAC Switching Commands 181 M4100 Series ProSAFE Managed Switches show port security static This command displays the statically locked MAC addresses for port Format show port security static lag lt lag intf num gt lt slot port gt Privileged EXEC MAC Address MAC Address of statically locked MAC show port security violation This command displays the source MAC address of the last packet discarded
401. he RADIUS authentication or RADIUS accounting server The IP address or host name provided must match a previously configured server When this command is executed the secret is prompted Text based configuration supports RADIUS server s secrets in encrypted and non encrypted format When you save the configuration these secret keys are stored in encrypted format only If you want to enter the key in encrypted format enter the key along with the encrypted keyword In the output of the show running config command these secret keys are displayed in encrypted format You cannot show these keys in plain text format Note The secret must be an alphanumeric value not exceeding 16 characters Format radius server key auth acct lt ipaddr gt lt dnsname gt encrypted lt password gt Mode Global Config Management Commands 504 M4100 Series ProSAFE Managed Switches Parameter Description lt ipaddr gt The IP address of the server lt dnsname gt The DNS name of the server lt password gt The password in encrypted format Command example radius server key acct 10 240 4 10 encrypted lt encrypt string gt radius server msgauth Use this command to enable the message authenticator attribute to be used for the specified RADIUS Authenticating server Format radius server msgauth lt ipaddr gt lt dnsname gt Mode Global Config Parameter Description lt ipaddr gt The IP ad
402. he RMON statistics for the interface Format show rmon statistics interface lt slot port gt Mode Privileged Exec Command example NETGEAR Switch show rmon statistics interface 0 1 Interface 0 1 Dropped 0 Octets 0 Packets 0 Broadcast 0 Multicast 0 CRC Align Errors 0 Collisions 0 Undersize Pkts 0 Oversize Pkts 0 Fragments 0 Jabbers 0 64 Octets 0 65 127 Octets 0 128 255 Octets 0 256 511 Octets 0 512 1023 Octets 0 1024 1518 Octets 0 show rmon hcalarms This command displays the entries in the RMON hcAlarmTable Format show rmon hcalarms lt alarm index gt Mode Privileged Exec Utility Commands 437 M4100 Series ProSAFE Managed Switches UniDirectional Link Detection Commands The UDLD feature detects unidirectional links physical ports A unidirectional link is a forwarding anomaly in a Layer 2 communication channel in which a bidirectional link stops passing traffic in one direction UDLD must be enabled on both sides of the link in order to detect a unidirectional link The UDLD protocol operates by exchanging packets containing information about neighboring devices udld enable Global Config This command enables UDLD globally on the switch Default disabled Format udld enable Mode Global Config no udld enable Global Config This command disables UDLD globally on the switch Format no udld enable Mode Global Config
403. he optional parameter address to reset the querier address Format no set mld querier vlan id address Mode e Global Config VLAN Mode Switching Commands 175 M4100 Series ProSAFE Managed Switches set mid querier query_interval Use this command to set the MLD Querier Query Interval time This is the amount of time in seconds that the switch waits before sending another general query Default disabled Format set mld querier query_interval lt 1 18000 gt Mode Global Config no set mld querier query_interval Use this command to set the MLD Querier Query Interval time to its default value Format no set mld querier query_interval set mld querier timer expiry Use this command to set the MLD Querier timer expiration period This is the time period that the switch remains in Non Querier mode once it discovers that there is a Multicast Querier in the network Default 60 seconds Format set mld querier timer expiry lt 60 300 gt no set mld querier timer expiry Use this command to set the MLD Querier timer expiration period to its default value Format no set mld querier timer expiry Mode Global Config set mld querier election participate Use this command to enable the Snooping Querier to participate in the Querier Election process when it discovers the presence of another Querier in the VLAN When this mode is enabled if the Snooping Querier finds that th
404. he smallest allowed number when sending packets Setting the number of packets to 0 disables this command Default 2 Format ip dhcp ping packets lt range gt Mode Global Config no ip dhcp ping packets This command prevents the server from pinging pool addresses and sets the number of packets to 0 Default 0 Format no ip dhcp ping packets Mode Global Config service dhcp This command enables the DHCP server Default disabled Format service dhcp Mode Global Config no service dhcp This command disables the DHCP server Format no service dhcp ip dhcp bootp automatic This command enables the allocation of the addresses to the bootp client The addresses are from the automatic address pool Default disabled Format ip dhcp bootp automatic Mode Global Config Utility Commands 390 M4100 Series ProSAFE Managed Switches no ip dhcp bootp automatic This command disables the allocation of the addresses to the bootp client The address are from the automatic address pool Format fro ip dhcp bootp automatic Mode Global Config ip dhcp conflict logging This command enables conflict logging on DHCP server Default enabled Format ip dhcp conflict logging no ip dhcp conflict logging This command disables conflict logging on DHCP server Format no ip dhcp conflict logging Mode Globa
405. he status of the specific MVR group It can be active or inactive Members The list of ports that participates in the specified MVR group Command example NETGEAR Switch show mvr members MVR Group IP Status Members 224 1 1 1 INACTIVE 0 1 0 2 0 3 Multicast VLAN Registration Commands 224 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show mvr members 224 1 1 1 MVR Group IP Status Members 224 1 1 1 INACTIVE 0 1 0 2 0 3 show mvr interface This command displays the MVR enabled interfaces configuration Format show mvr interfac lt interface id gt members vlan lt vid gt Privileged EXEC The following table explains the output fields Field Description Port Interface number Type The MVR port type It can be none receiver or source type Status The interface status It consists of two characteristics e active or inactive indicates whether the port is forwarding e inVLAN or notInVLAN indicates whether the port is part of any VLAN Immediate Leave The state of immediate mode It can be enabled or disabled Command example NETGEAR Switch show mvr interface Port Type Status Immediate Leave 0 9 RECEIVER ACTIVE inVLAN DISABLED Command example NETGEAR Switch show mvr interface 0 9 Type RECEIVER Status ACTIVE Immediate Leave DISABLED Command example NETGEAR Switch show
406. he vlan virtual interface mode which allows certain port configurations for example the IP address to be applied to the VLAN interface Type a question mark after entering the interface configuration mode to see the available options Format interface vlan lt vlan id gt Mode Global Config interface lag This command gives you access to the LAG link aggregation or port channel virtual interface which allows certain port configurations to be applied to the LAG interface Type a question mark after entering the interface configuration mode to see the available options Note The IP address cannot be assigned to a LAG virtual interface The interface must be put under a VLAN group and an IP address assigned to the VLAN group Format interface lag lt lag id gt Mode Global Config auto negotiate This command enables automatic negotiation on a port Default enabled Format auto negotiate Mode Interface Config Switching Commands 19 M4100 Series ProSAFE Managed Switches no auto negotiate This command disables automatic negotiation on a port Note Automatic sensing is disabled when automatic negotiation is disabled auto negotiate all This command enables automatic negotiation on all ports Default enabled Format auto negotiate all Mode Global Config no auto negotiate all This command disables automatic negotiation on all ports
407. held period Use this command to configure the held period timer interval in seconds to wait for the next authentication on previous authentication fail Default 30 seconds Format dot1x supplicant timeout held period lt 1 65535 gt Mode Interface Config no dot 1x supplicant timeout held period Use this command to set the held period value to the default value Format no dotlx supplicant timeout held period Mode Interface Config dot1x supplicant timeout auth period Use this command to configure the authentication period timer interval in seconds to wait for the next EAP request challenge from the authenticator Default 30 seconds Format dot1x supplicant timeout auth period lt 1 65535 gt Mode Interface Config Switching Commands 96 M4100 Series ProSAFE Managed Switches no dot1x supplicant timeout auth period Use this command to set the auth period value to the default value Format no dotlx supplicant timeout auth period Mode Interface Config dot1x supplicant user Use this command to map the user to the port Format dot1x supplicant user Mode Interface Config Storm Control Commands This section describes commands you use to configure storm control and view storm control configuration information A traffic storm is a condition that occurs when incoming packets flood the LAN which creates performance degradation in the network The
408. hen enabled Format logging console lt severitylevel gt Mode Global Config no logging console This command disables logging to the console Format no logging console Mode Global Config logging host This command enables logging to a host You can configure up to eight hosts Default e port 514 e level critical 2 logging host lt ipaddress gt lt hostname gt lt addresstype gt lt port number gt lt severitylevel gt Mode Global Config Utility Commands 354 M4100 Series ProSAFE Managed Switches Parameter Description lt ipaddress gt The IP address or name of the logging host lt hostname gt lt addresstype gt Indicates the type of address IPv4 IPv6 or DNS You can configure either an IPv4 or IPv6 address or a host name for a syslog collector among the list of servers lt port number gt A port number from 1 to 65535 lt severitylevel gt Specify this value as either an integer from 0 to 7 or symbolically through one of the following keywords emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 or debug 7 logging host remove This command disables logging to host See show logging hosts on page 357 for a list of host indexes logging host remove lt hostindex gt Mode Global Config logging syslog This command enables syslog logging The lt portid gt parameter is an integer wit
409. his command to display trap conditions The command s display shows all the enabled OSPF v2 and OSPF v3 trap flags Configure which traps the switch should generate by enabling or disabling the trap condition If a trap condition is enabled and the condition is detected the SNMP agent on the switch sends the trap to all enabled trap receivers You do not have to reset the switch to implement the changes Cold and warm start traps are always generated and cannot be disabled Format show trapflags Mode Privileged EXEC Field Definition Authentication Flag Link Up Down Flag Multiple Users Flag Spanning Tree Flag Can be enabled or disabled The factory default is enabled Indicates whether authentication failure traps will be sent Can be enabled or disabled The factory default is enabled Indicates whether link status traps will be sent Can be enabled or disabled The factory default is enabled Indicates whether a trap will be sent when the same user ID is logged into the switch more than once at the same time either through Telnet or the serial port Can be enabled or disabled The factory default is enabled Indicates whether spanning tree traps are sent ACL Traps Might be enabled or disabled The factory default is disabled Indicates whether ACL traps are sent DVMRP Traps Can be enabled or disabled The factory default is disabled Indicates whether DVMRP traps are sent
410. his port within a multiple spanning tree instance or the Common and Internal Spanning Tree instance depending on the lt mst id gt parameter to the default value that is a path cost value based on the Link Speed If you specify external cost this command sets the external path cost for this port for mst 0 instance to the default value that is a path cost value based on the Link Speed If you specify port priority this command sets the priority for this port within a specific multiple spanning tree instance or the Common and Internal Spanning Tree instance depending on the lt mst id gt parameter to the default value Format no spanning tree mst lt mstid gt cost external cost port priority Mode Interface Config Switching Commands 34 M4100 Series ProSAFE Managed Switches spanning tree mst instance This command adds a multiple spanning tree instance to the switch The parameter lt mstid gt is a number within a range of 1 4094 that corresponds to the new instance ID to be added The maximum number of multiple instances supported by the switch is 4 Default none Format spanning tree mst instance lt mstid gt Mode Global Config no spanning tree mst instance This command removes a multiple spanning tree instance from the switch and reallocates all VLANs allocated to the deleted instance to the Common and Internal Spanning Tree The parameter lt mst d gt is a number that corres
411. hite space for example a3 4f 22 Oc Default none Format option lt code gt lt ascii string gt hex lt stringl gt lt string2 gt lt string8 gt ip lt address1 gt lt address2 gt lt address8 gt Mode DHCP Pool Config no option This command removes the DHCP Server options The lt code gt parameter specifies the DHCP option code Format Mode DHCP Pool Config ip dhcp excluded address This command specifies the IP addresses that a DHCP server should not assign to DHCP clients Low address and high address are valid IP addresses each made up of four decimal bytes ranging from 0 to 255 IP address 0 0 0 0 is invalid Default none Format ip dhcp excluded address lt lowaddress gt lt highaddress gt Mode Global Config no ip dhcp excluded address This command removes the excluded IP addresses for a DHCP client Low address and high address are valid IP addresses each made up of four decimal bytes ranging from 0 to 255 IP address 0 0 0 0 is invalid Format no ip dhcp excluded address lt lowaddress gt lt highaddress gt Mode Global Config Utility Commands 389 M4100 Series ProSAFE Managed Switches ip dhcp ping packets Use this command to specify the number of packets in a range from 2 10 that a DHCP server sends to a pool address as part of a ping operation By default the number of packets sent to a pool address is 2 which is t
412. how mac address table igmpsnooping This command displays the IGMP Snooping entries in the MFDB table Format sho mac address table igmpsnooping Mode Privileged EXEC show mac address table multicast filtering Use this command to display the multicast filtering details for a VLAN Format show mac address table multicast filtering lt vlan id gt Mode Privileged EXEC Field Description lt vlan id gt A valid VLAN ID mode The filtering mode Command example NETGEAR Switch show mac address table multicast filtering 1 VLAN ID 1 Mode Forward Forbidden Unregistered Switching Commands 163 M4100 Series ProSAFE Managed Switches IGMP Snooping Querier Commands IGMP Snooping requires that one central switch or router periodically query all end devices on the network to announce their multicast memberships This central device is the IGMP Querier The IGMP query responses known as IGMP reports keep the switch updated with the current multicast group membership on a port by port basis If the switch does not receive updated membership information in a timely fashion it will stop forwarding multicast to the port where the end device is located This section describes commands used to configure and display information about IGMP Snooping Queriers on the network and separately on VLANs set igmp querier Use this command to enable IGMP Snooping Querier on the system u
413. ieamee ov oaenesationaunniananudepemspedesones eeee 411 GEDUGIPVGIGHED d 04 cnreraddcie1aoe EIS LIE LE I E EEE arnes 412 debug PVG TEACHES packet sai 412 debugipvG mld packet 2 5 cccacdaicecerrtiprmoiwigiwmetarrorniepeiades e ea a 412 560 M4100 Series ProSAFE Managed Switches debugipvG Osprve packet conan iS cba 417 AEDUGIPVS PIMAMPACKEL sscrscrersresereT er ertt cada ds dea 413 CEbUGIPVE PIMSM packet jas ingimncreawse ies oie d AAA ee 413 debug isdp packed as 218 debugilacp packet seo Ra 414 debug mldsnGOPING PaCker suiicaiiio prisas 414 debug ospi Packets asociaron rieien res ciaradads arca A A a 415 debug Pina A ceaegs site ts totes siesteneicndmiospntatdidtadetedadaces 418 debug MIP packet corsa lr dang awed fois b s raha Aaah ao 419 deb gsflow Packet 505ssenaransiereredereae edad artenvanmnemiyee dae Rae aca aca de ad 420 debug spanning tree BPU iio di cin be 420 debuig spanning tree DpduitecelVe visera iria 421 debug spanning tres Dpdu transit msm a a iaiia i 422 debugt cacs Packet ss sarria nia 514 Aebugtidld Packets 2 criadores aa 423 debug Wdld packetTreceNe occ scan da in ds A iii 423 debug tdld packet transmit caro ratico e e gee a de ie engage ges any 423 detaultsrouter sra naaa doce 384 CR RN 332 deleteport Global Config vecscrorinis rra dd bie ots 110 deleteport interface Config escurrir EE REED 109 CESCHPUOMN econ des ca A ERRATUM ME DEPSSECECS ER OR ER OR REE 20 dhep client VENAOF 1d 6 PHOM csisi
414. ies ProSAFE Managed Switches Term Definition Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units BPDUs Bridge Max Hops Bridge max hops count for the device CST Regional Bridge Identifier of the CST Regional Root It is made up using the bridge priority and the Root base MAC address of the bridge Regional Root Path Cost to the CST Regional Root Path Cost Associated FIDs List of forwarding database identifiers currently associated with this instance Associated List of VLAN IDs currently associated with this instance VLANs show spanning tree brief This command displays spanning tree settings for the bridge The following information appears Format show spanning tree brief Mode e Privileged EXEC User EXEC Term Definition Bridge Priority Configured value Bridge Identifier The bridge identifier for the selected MST instance It is made up using the bridge priority and the base MAC address of the bridge Bridge Max Age Configured value Bridge Max Hops Bridge max hops count for the device Bridge Hello Time Configured value Bridge Forward Delay Configured value Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units BPDUs Switching Commands 39 M4100 Series ProSAFE Managed Switches show spanning tree interface This command displays the settings and parameters for
415. ighbor s advertisement was received Port ID The port ID of the interface from which the neighbor sent the advertisement Hold Time The hold time advertised by the neighbor Advertisement The version of the advertisement packet received from the neighbor Version Entry Last Displays when the entry was last modified Changed Time Version The software version that the neighbor is running Command example NETGEAR Switch show isdp neighbors detail Device ID 0001f45f1bc0 Address es IP Address O Te heal Capability Router Trans Bridge Switch IGMP Platform SecureStack C2 Interface 0 48 Port ID ge 3 14 Holdtime 131 Advertisement Version 2 Entry last changed time O days 00 01 59 Version 05 00 56 show isdp traffic This command displays ISDP statistics Format show isdp traffic Mode Privileged EXEC Term Definition ISDP Packets Received Total number of ISDP packets received ISDP Packets Transmitted Total number of ISDP packets transmitted Switching Commands 217 M4100 Series ProSAFE Managed Switches ISDPv1 Packets Received Total number of ISDPv1 packets received ISDPv1 Packets Transmitted Total number of ISDPv1 packets transmitted ISDPv2 Packets Received Total number of ISDPv2 packets received ISDPv2 Packets Transmitted Total number of ISDPv2 packets transmitted ISDP Bad Header Number of packets received with a bad header ISDP Checksum Error
416. ile for displaying management access show telnet Displays the information about remote connections Display information about direct connections show serial End of the script file To specify a blank password for a user in the configuration script you must specify it as a space within quotes For example to change the password for user jane from a blank password to hello the script entry is as follows users passwd jane on hello hello script apply Use this command to apply the commands in the script to the switch The lt scriptname gt parameter is the name of the script to apply Format script apply lt scriptname gt Mode Privileged EXEC script delete Use this command to delete a specified script where the lt scriptname gt parameter is the name of the script to delete The a11 option deletes all the scripts present on the switch Format script delete lt scriptname gt all Mode Privileged EXEC script list Use this command to list all scripts present on the switch as well as the remaining available space Format script list Mode Global Config Management Commands 519 M4100 Series ProSAFE Managed Switches Definition Configuration Script Name of the script Size Privileged EXEC script show Use this command to display the contents of a script file which is named lt scriptname gt Format script show lt scriptname gt Mo
417. in half duplex mode Unacceptable Frame Type The number of frames discarded from this port due to being an unacceptable frame type Multicast Tree Viable Discards The number of frames discarded when a lookup in the multicast tree for a VLAN occurs while that tree is being modified Reserved Address Discards The number of frames discarded that are destined to an IEEE 802 1 reserved address and are not supported by the system Broadcast Storm Recovery The number of frames discarded that are destined for FF FF FF FF FF FF when Broadcast Storm Recovery is enabled CFI Discards The number of frames discarded that have CFI bit set and the addresses in RIF are in non canonical format Upstream Threshold The number of frames discarded due to lack of cell descriptors available for that packet s priority level Utility Commands 339 Term M4100 Series ProSAFE Managed Switches Definition Packets Transmitted Octets Packets Transmitted Successfully Total Packets Transmitted Octets The total number of octets of data including those in bad packets received on the network excluding framing bits but including FCS octets This object can be used as a reasonable estimate of Ethernet utilization If greater precision is desired the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval Packets Transmitted 64 Octets The total number of packets including bad packets
418. in this manual visit the support website at support netgear com Note Firmware updates with new features and bug fixes are made available from time to time at downloadcenter netgear com Some products can regularly check the site and download new firmware or you can check for and download new firmware manually If the features or behavior of your product does not match what is described in this guide you might need to update your firmware M4100 Series ProSAFE Managed Switches Command Syntax A command is one or more words that might be followed by one or more parameters Parameters can be required or optional values Some commands such as show network and clear vlan do not require parameters Other commands such as network parms require that you supply a value after the command You must type the parameter values in a specific order and optional parameters follow required parameters The following example describes the network parms command syntax Format network parms lt ipaddr gt lt netmask gt gateway network parms is the command name e lt ipaddr gt and lt netmask gt are parameters and represent required values that you must enter after you type the command keywords e gateway is an optional keyword so you are not required to enter a value in place of the keyword This command line reference manual lists each command by the command name and provides a brief description of the command Each command re
419. ion Unique Next The number of distinct next hops used among all routes currently in the routing table Hops These include local interfaces for local routes and neighbors for indirect routes Unique Next The highest count of unique next hops since the counters were last cleared Hops High Water Next Hop The current number of next hop groups in use by one or more routes Each next hop Groups group includes one or more next hops Next Hop The highest count of next hop groups since the counters were last cleared Groups High Water ECMP Groups The number of next hop groups with multiple next hops ECMP Routes Truncated ECMP Routes The number of routes with multiple next hops currently in the routing table The number of ECMP routes that are currently installed in the forwarding table with just one next hop The forwarding table might limit the number of ECMP routes or the number of ECMP groups When an ECMP route cannot be installed because the limit is reached the route is installed with a single next hop ECMP Retries Routes with n The number of ECMP routes that have been installed in the forwarding table after initially being installed with a single next hop The current number of routes with each number of next hops Next Hops Command example NETGEAR Switch show ip route summary Connected ROUCSS shane ahs iia ia id 7 Stat ROUBSS ais a a aaa 1 RIP ROU CESS Vitamin e is as aaa aa 20 OSPE R
420. ion identified with lt session id gt If no source port is configured for the session then this field is blank Type Direction in which source port configured for port mirroring Types are tx for transmitted packets and rx for receiving packets Src VLAN All member ports of this VLAN are mirrored If the source VLAN is not configured this field is blank Ref Port This port carries all the mirrored traffic at the source switch Src Remote VLAN Dst Remote VLAN The source VLAN is configured at the destination switch If the remote VLAN is not configured this field is blank The destination VLAN is configured at the source switch If the remote VLAN is not configured this field is blank IP ACL The IP access list id or name attached to the port mirroring session MAC ACL The MAC access list name attached to the port mirroring session show vlan remote span This command displays the configured RSPAN VLAN Format show vlan remote span Privileged Exec Mode Command example NETGEAR Switch show vlan remote span Remote SPAN VLAN Switching Commands 128 M4100 Series ProSAFE Managed Switches Static MAC Filtering Commands The commands in this section describe how to configure static MAC filtering Static MAC filtering allows you to configure destination ports for a static multicast MAC filter irrespective of the platform macfilter This command adds a static MAC filter e
421. ion to fail The failure is harmless An OSPF v2 timer has fired but the message queue that holds the event has filled up This is normally a fatal error Log Messages 548 M4100 Series ProSAFE Managed Switches Table 40 OSPFv2 Log Messages continued Table 41 OSPFv3 Log Messages Component Cause OSPFv2 Warning OSPF LSDB is 90 full 22648 OSPFv2 limits the number of Link State LSAs Advertisements LSAs that can be stored in the link state database LSDB When the database becomes 90 or 95 percent full OSPFv2 logs this warning The warning includes the current size of the database OSPFv2 The number of LSAs 25165 in the OSPF When the OSPFv2 LSDB becomes full LSDB has exceeded the LSDB memory OSPF v2 logs this message OSPFv2 allocation reoriginates its router LSAs with the metric of all nonstub links set to the maximum value to encourage other routers to not compute routes through the overloaded router OSPFv2 Dropping the DD packet because of MTU__ OSPF v2 ignored a Database Description mismatch packet whose MTU is greater than the IP MTU on the interface where the DD was received OSPFv2 LSA Checksum error in LsUpdate OSPFv2 ignored a received link state dropping LSID 1 2 3 4 checksum 0x1234 advertisement LSA whose checksum was incorrect Component Message Cause OSPFv3 Best route client deregistration failed for OSPFv3 registers with the IPv6 routing OSP
422. ironico rss 425 capture le remote Me oscisia ia acaricia dd coud il 400 capture Start StoP kosse errorae eaa ee E A il ss RHA 400 capture fil Size sorei caes errn an iae e a e es eee 402 SAPO A A EEEE E E T N EEE TEE E T ENTE 402 Capture MEMOS POPE seseo iii a A AAA 401 RR 282 A A buwsnenesesss943a00 272 ClASS MAP TENAME cecrornrr IA ie ea RERE RERI 273 classotservice Ol 1 P IMAPPING sesos alcaide so ia iia 263 classofservice ip dscp mapping cooocccccn cc 263 ClaSSOnSerVIGCE ts aia Asi 264 A E A T A EE nee Aver E E T E E Guowsmeasereavesa 490 clear onp CATE sos creian na e a a edema eee 231 clear aP Ni E esas 231 clear CONTIG ericarscira sccnmticanmeremewene Di PEEPAR RRR ee ot 367 clear COUNTES sacaran Corran A AAA da 368 clear dot 1 xauithentication NIStOLly ssmersaercisaco rr es Gia 87 clear COE IM StAUISUICS 54 54 ecqcadacaedsonds Gel sdtdddocndadartcneucad bebeontahtsddetatadgasooaes 80 clear EVENTOG cc ccsos onion stioicationanwedenakeeteadeee decd dudiinuaoiiemekewsneaeea tose deeew as 367 clear GheCN MOdEStAatiSUCS orador di dic obs akon Haaren rye ee TG SER E le ia 525 ESOS ts ie 398 clear IGMPSNOOPING aae variada incre ANA oe beans paws 368 clear ip address conflict detect uuu cece ccc rr 431 clear ip arp INSPECUOMSLAUSUICS J 4snccecerudoces do025 4545 0s dde Ein as 153 clear ip dhcp DINGING 24 35 3404 addacaehwbebeks AA aia 391 Clear PaM CONCE win dclcuai sincere edaasEsea A a a a 392 clear ip dhep server Sta
423. is applicable only for the GSM5212P Indicates the power source being used main AC RPS or PD If PD is used as a source PD lt portNo gt is displayed System can power up one port if consumed power is less than this power That is the consumed power can be between the total power and threshold power values The threshold power value is effected by changing the system usage threshold Total Power Indicates the total amount of power being delivered to all the devices plugged into the Consumed switch Usage Threshold Indicates the usage threshold level Power Indicates the management mode used by the PoE controller Management Mode Auto Reset Mode Traps Indicates whether the PoE ports will be automatically reset in case of an error ona port Configures the traps Power over Ethernet Commands 324 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show poe PL PMW Are Versioita gaai aane laca iia 100 2 PSE Main Operational Status ON Total Power Main AC s s6eskd esd we ee ree ees awe 380 Total Power RPS snsccae bee k8 susan 300 Total Power BD sw sew ida sos Ole Rae ar Sow 25 POWER SOUPCES cipal a a eyesore Main AC Threshold ROWSE seis tie a cw ple ea uel du a gow E 342 Total Power CONSUME seva de aimee E Bee 7 Usage Threshold macia ae as 90 Power Management MOde oo ooooooomooooooo noo Dynamic Configure port Auto Reset
424. is command removes a port from the source filter set for the MAC filter with the MAC address of lt macaddr gt and VLAN of lt vlanid gt The lt macaddr gt parameter must be specified as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Format no macfilter addsrc lt macaddr gt lt vlanid gt Mode Interface Config macfilter addsrc all This command adds all interfaces to the source filter set for the MAC filter with the MAC address of lt macaddr gt and lt vlanid gt You must specify the lt macaddr gt parameter as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Format macfilter addsrce all lt macaddr gt lt vlanid gt Mode Global Config no macfilter addsrc all This command removes all interfaces to the source filter set for the MAC filter with the MAC address of lt macaddr gt and VLAN of lt vlanid gt You must specify the lt macaddr gt parameter as a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The lt vlanid gt parameter must identify a valid VLAN Format no macfilter addsrc all lt macaddr gt lt vlanid gt Mode Global Config Switching Commands 131 M4100 Series ProSAFE Managed Switches show mac address table static This command displays the static MAC filtering information for all static MAC filters If you
425. iscarded because the transmit FIFO buffer became empty during frame transmission Utility Commands 340 M4100 Series ProSAFE Managed Switches Term Definition Transmit Discards Protocol Statistics Dot1x Statistics Time Since Counters Last Cleared Total Transmit Packets Discards The sum of single collision frames discarded multiple collision frames discarded and excessive frames discarded Single Collision Frames A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by exactly one collision Multiple Collision Frames A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision Excessive Collisions A count of frames for which transmission on a particular interface fails due to excessive collisions Port Membership Discards The number of frames discarded on egress for this port due to egress filtering being enabled 802 3x Pause Frames Transmitted A count of MAC Control frames transmitted on this interface with an opcode indicating the PAUSE operation This counter does not increment when the interface is operating in half duplex mode GVRP PDUs Received The count of GVRP PDUs received in the GARP layer GVRP PDUs Transmitted The count of GVRP PDUs transmitted from the GARP layer GVRP Failed Registrations The number of times attempted GVR
426. isplayed Field Definition Network The network number and the mask for the DHCP address pool For the manual pool type the fields that are shown in the following table are displayed Field Definition Client Name The name of a DHCP client Client Identifier The unique identifier of a DHCP client Hardware The hardware address of a DHCP client Address Hardware The protocol of the hardware platform Address Type Host The IP address and the mask for a manual binding to a DHCP client show ip dhcp server statistics This command displays DHCP server statistics Format show ip dhcp server statistics Modes e Privileged EXEC User EXEC Utility Commands 393 M4100 Series ProSAFE Managed Switches AA Automatic The number of IP addresses that have been automatically mapped to the MAC Bindings addresses of hosts that are found in the DHCP database Expired Bindings The number of expired leases Malformed The number of truncated or corrupted messages that were received by the DHCP server Bindings For Message Received the fields that are shown in the following table are displayed DHCP The number of DHCPDISCOVER messages the server has received DISCOVER DHCP The number of DHCPREQUEST messages the server has received REQUEST DHCP DECLINE The number of DHCPDECLINE messages the server has received DHCP The number of DHCPRELEASE me
427. isplayed when summertime is in effect Range Up to four characters Format clock summer time recurring USA EU lt week gt lt day gt lt month gt lt hh mm gt lt week gt lt day gt lt month gt lt hh mm gt offset lt offset gt zone lt acronym gt Mode Global Config Command example NETGEAR Switch Config clock summer time recurring 1 sun jan 00 10 2 mon mar 10 00 offset 1 zone ABC clock summer time date Use this command to set the summertime offset to UTC If the optional parameters are not specified they are read as either 0 or MO as appropriate e date Day of the month Range 1 31 e month Month Range The first three letters by name jan for example e year Year Range 2000 2097 e hh mm Time in 24 hour format in hours and minutes Range hh 0 23 mm 0 59 e offset Number of minutes to add during the summertime Range 1 1440 e acronym The acronym for the time zone to be displayed when summertime is in effect Range Up to four characters Format clock summer time date lt day gt lt month gt lt year gt lt hh mm gt lt day gt lt month gt lt year gt lt hh mm gt offset lt offset gt zone lt acronym gt Mode Global Config Command example NETGEAR Switch config clock summer time date 1 Apr 2007 02 00 28 Oct 2007 offset 90 zone EST Utility Commands 379 M4100 Series ProSAFE Managed Switches no clock summer tim
428. it 7 Off b 0 Format network mac address lt macaddr gt Mode Privileged EXEC network mac type Use this command to specify whether the switch uses the burned in MAC address or the locally administered MAC address Default burnedin Format network mac type local burnedin Mode Privileged EXEC no network mac type Use this command to reset the value of MAC address to its default Format no network mac type Mode Privileged EXEC network javamode Use this command to specify whether the switch should allow access to the Java applet in the header frame of the Web interface When access is enabled the Java applet can be viewed from the Web interface When access is disabled the user cannot view the Java applet Default enabled Format network javamode Mode Privileged EXEC no network javamode Use this command to disallow access to the Java applet in the header frame of the Web interface When access is disabled the user cannot view the Java applet Format no network javamode Mode Privileged EXEC Management Commands 447 M4100 Series ProSAFE Managed Switches show network Use this command to display configuration settings associated with the switch s network interface The network interface is the logical interface used for in band connectivity with the switch via any of the switch s front panel ports The configuration parameters associated with th
429. itches Table 16 WEB Log Messages Component Message Cause WEB Max clients exceeded This message is shown when the maximum allowed java client connections to the switch is exceeded WEB Error on send to sockfd XXXX closing Failed to send data to the java clients connection through the socket WEB XXXX Form Submission Failed No The form submission failed and no action is Action Taken taken XXXX indicates the file under consideration WEB ewaFormServe_file_download WEB Unknown error returned while downloading Unknown return code from tftp download file using TFTP from web interface result WEB ewaFormServe_file_upload Unknown Unknown error returned while uploading file return code from tftp upload result using TFTP from web interface WEB Web UI Screen with unspecified access Failed to get application specific attempted to be brought up authorization handle provided to EmWeb Server by the application in ewsAuthRegister The specified web page will be served in read only mode Table 17 CLI_WEB_MGR Log Messages Component Message Cause CLI_WEB_MGR CLI_WEB_MGR File size is greater than 2K Table 18 SSHD Log Messages Message The banner file size is greater than 2K bytes o of rows greater than allowed maximum When the number of rows exceeds the No i of XXXX maximum allowed rows Component Cause SSHD SSHD Unable to create the global data Failed
430. itize ports vian port priority all This command configures the port priority assigned for untagged packets for all ports presently plugged into the device The range for the priority is 0 7 Any subsequent per port configuration will override this configuration setting Format vlan port priority all lt priority gt Switching Commands 67 M4100 Series ProSAFE Managed Switches vian priority This command configures the default 802 1p port priority assigned for untagged packets for a specific interface The range for the priority is 0 7 Default 0 Format vlan priority lt priority gt Mode Interface Config Protected Ports Commands This section describes commands you use to configure and view protected ports on a switch Protected ports do not forward traffic to each other even if they are on the same VLAN However protected ports can forward traffic to all unprotected ports in their group Unprotected ports can forward traffic to both protected and unprotected ports Ports are unprotected by default If an interface is configured as a protected port and you add that interface to a Port Channel or link aggregation group LAG the protected port status becomes operationally disabled on the interface and the interface follows the configuration of the LAG port However the protected port configuration for the interface remains unchanged Once the interface is no longer a member of a LAG the current configu
431. ity is re enabled if you disable routing or remove port channel LAG membership from an interface that has MLD Snooping enabled MLD Snooping supports the following activities e Validation of address version payload length consistencies and discarding of the frame upon error e Maintenance of the forwarding table entries based on the MAC address versus the IPv6 address e Flooding of unregistered multicast data packets to all ports in the VLAN Default disabled Format set mld lt vlan id gt Mode e Global Config Interface Config VLAN Mode no set mld Use this command to disable MLD Snooping on the system Format no set mld lt vlan id gt Mode e Global Config Interface Config VLAN Mode Switching Commands 168 M4100 Series ProSAFE Managed Switches set mld interfacemode Use this command to enable MLD Snooping on all interfaces If an interface has MLD Snooping enabled and you enable this interface for routing or enlist it as a member of a port channel LAG MLD Snooping functionality is disabled on that interface MLD Snooping functionality is re enabled if you disable routing or remove port channel LAG membership from an interface that has MLD Snooping enabled Default disabled Format set mld interfacemode Mode Global Config no set mid interfacemode Use this command to disable MLD Snooping on all interfaces Format no set mld interfacemode set mid fast le
432. ivileged EXEC Utility Commands 409 M4100 Series ProSAFE Managed Switches no debug ip igmp packet Use this command to disable debug tracing of IGMP packet reception and transmission Format no debug ip igmp packet receive transmit Mode Privileged EXEC debug ip mcache packet Use this command for tracing MDATA packet reception and transmission If you use the receive option only received MDATA packets are traced If you use the transmit option only transmitted MDATA packets are traced When neither keyword is used in the command then all data packet traces are dumped Vital information such as source address destination address packet length and the interface on which the packet is received or transmitted is displayed on the console Default disabled Format debug ip mcache packet receiv transmit Mode Privileged EXEC no debug ip mcache packet Use this command to disable debug tracing of MDATA packet reception and transmission Format no debug ip mcache packet receive transmit Mode Privileged EXEC debug ip pimdm packet Use this command to trace PIMDM packet reception and transmission If you use the receive option only received PIMDM packets are traced If you use the transmit option only transmitted PIMDM packets are traced When neither keyword is used in the command then all PIMDM packet traces are dumped Vital information such as source address destination ad
433. k Default Network_Default SSH Network Default Network _Default http Local https Local dot1x show dot1x This command is used to show a summary of the global dot1x configuration summary information of the dot1x configuration for a specified port or all ports the detailed dot1x configuration for a specified port and the dot1x statistics for a specified port depending on the tokens used Format show dot1x summary lt slot port gt all detail lt slot port gt statistics lt slot port gt Mode Privileged EXEC If you do not use the optional lt slot port gt parameters the command displays the global dot1x mode the VLAN Assignment mode and the Dynamic VLAN Creation mode Term Definition Administrative Indicates whether authentication control on the switch is enabled or disabled Mode VLAN Indicates whether assignment of an authorized port to a RADIUS assigned VLAN is Assignment allowed enabled or not disabled Mode Switching Commands 89 M4100 Series ProSAFE Managed Switches Dynamic VLAN Indicates whether the switch can dynamically create a RADIUS assigned VLAN if it does Creation Mode not currently exist on the switch Monitor Mode Indicates whether the Dot1x Monitor mode on the switch is enabled or disabled If you use the optional parameter summary lt slot port gt al1 the dot1x configuration for the specified port or all ports are displayed
434. k directed broadcasts When disabled network directed broadcasts are dropped Format no ip netdirbcast Mode Interface Config ip mtu This command sets the IP maximum transmission unit MTU on a routing interface The IP MTU is the size of the largest IP packet that can be transmitted on the interface without fragmentation The software currently does not fragment IP packets e Packets forwarded in hardware ignore the IP MTU e Packets forwarded in software are dropped if they exceed the IP MTU of the outgoing interface Packets originated on the router such as OSPF packets might be fragmented by the IP stack The IP stack uses its default IP MTU and ignores the value set using the ip mtu command Routing Commands 239 M4100 Series ProSAFE Managed Switches OSPF advertises the IP MTU in the Database Description packets it sends to its neighbors during database exchange If two OSPF neighbors advertise different IP MTUs they will not form an adjacency unless OSPF has been instructed to ignore differences in IP MTU with the ip ospf mtu ignore command Note The IP MTU size refers to the maximum size of the IP packet IP Header IP payload lt does not include any extra bytes that might be required for Layer 2 headers To receive and process packets the Ethernet MTU must take into account the size of the Ethernet header Default 1500 bytes Format ip mtu lt 68 9198 gt Mode Interface Config
435. l lt groupid gt Mode Global Config vian pvid This command changes the VLAN ID per interface Default 1 Format vlan pvid lt 1 4093 gt Mode Interface Config no vian pvid This command sets the VLAN ID per interface to 1 Format no vlan pvid Interface Config Switching Commands 54 M4100 Series ProSAFE Managed Switches vian tagging This command configures the tagging behavior for a specific interface in a VLAN to enabled If tagging is enabled traffic is transmitted as tagged frames If tagging is disabled traffic is transmitted as untagged frames The vlan list contains Vlanld s in range lt 1 4093 gt Separate non consecutive IDs with and no spaces and no zeros in between the range Use for range Format vlan tagging lt vlan list gt Mode Interface Config no vlan tagging This command configures the tagging behavior for a specific interface in a VLAN to disabled If tagging is disabled traffic is transmitted as untagged frames The vlan list contains Vlanld s in range lt 1 4093 gt Separate non consecutive IDs with and no spaces and no zeros in between the range Use for range Format no vlan tagging lt vlan list gt Mode Interface Config vlan association subnet This command associates a VLAN to a specific IP subnet Format vlan association subnet lt ipaddr gt lt netmask gt lt 1 4093 gt Mode VLAN Config
436. l Config acl trapflags This command enables the ACL trap mode Default disabled Format acl trapflags Mode Global Config Quality of Service Commands 303 M4100 Series ProSAFE Managed Switches no acl trapflags This command disables the ACL trap mode no acl trapflags Global Config show ip access lists This command displays an IP ACL lt accesslistnumber gt is the number used to identify the IP ACL Format show ip access lists lt accesslistnumber gt Mode Privileged EXEC Note Only the access list fields that you configure are displayed Term Definition Rule Number Action The number identifier for each rule that is defined for the IP ACL The action associated with each rule The possible values are Permit or Deny Match All Indicates whether this access list applies to every packet Possible values are True or False Protocol Source IP Address The protocol to filter for this rule The source IP address for this rule Source IP Mask The source IP Mask for this rule Source L4 Port Keyword The source port for this rule Destination IP Address The destination IP address for this rule Destination IP Mask Destination L4 Port Keyword IP DSCP The destination IP Mask for this rule The destination port for this rule The value specified for IP DSCP IP Precedence The value speci
437. l Config clear ip dhcp binding This command deletes an automatic address binding from the DHCP server database If you specify the bindings corresponding to all the addresses are deleted lt address gt is a valid IP address made up of four decimal bytes ranging from 0 to 255 IP address 0 0 0 0 is invalid Format clear ip dhcp binding lt address gt Mode Privileged EXEC clear ip dhcp server statistics This command clears DHCP server statistics counters Format clear ip dhcp server statistics Mode Privileged EXEC Utility Commands 391 M4100 Series ProSAFE Managed Switches clear ip dhcp conflict The command is used to clear an address conflict from the DHCP Server database The server detects conflicts using a ping DHCP server clears all conflicts If the asterisk character is used as the address parameter Defaut Format clear ip dhcp conflict lt address gt Mode Privileged EXEC show ip dhcp binding This command displays address bindings for the specific IP address on the DHCP server If no IP address is specified the bindings corresponding to all the addresses are displayed Format show ip dhcp binding lt address gt Modes e Privileged EXEC e User EXEC IP address The IP address of the client Hardware The MAC Address or the client identifier Address Lease expiration The lease expiration time of the IP address assigned to the client Type
438. l hosts on the target subnet e lt dest udp port gt is the broadcast packet destination UDP port number to forward If not specified packets for the default services are forwarded to the helper address The valid range is 0 65535 Default No helper addresses are configured Format ip helper address lt ip address gt lt dest udp port gt dhcp domain isakmp mobile ip nameserver netbios dgm netbios ns ntp pim auto rip rip tacacs tftp time Mode Global Config Parameter Description The IPv4 unicast or directed broadcast address to which relayed UDP broadcast packets are sent The IP address cannot be an IP address configured on any interface of the local router lt ip address gt lt dest udp port gt A destination UDP port number from 0 to 65535 port name options The destination UDP port may be optionally specified by its name Whether a port is specified by its number or its name has no effect on behavior The names recognized are as follows e dhcp port 67 e domain port 53 e isakmp port 500 e mobile ip port 434 e nameserver port 42 e netbios dgm port 138 e netbios ns port 137 ntp port 123 e pim auto rp port 496 e rip port 520 tacacs port 49 tftp port 69 time port 37 Other ports must be specified by number Routing Commands 255 M4100 Series ProSAFE Managed Switches no ip helper address Global Config
439. lan lt vlan list gt static Mode Global Config no ip arp inspection filter Use this command to unconfigure the ARP ACL used to filter invalid ARP packets on a list of comma separated VLAN ranges Format no ip arp inspection filter lt acl name gt vlan lt vlan list gt static Mode Global Config arp access list Use this command to create an ARP ACL Format arp access list lt acl name gt Mode Global Config no arp access list Use this command to delete a configured ARP ACL Format no arp access list lt acl name gt Mode Global Config Switching Commands 150 M4100 Series ProSAFE Managed Switches permit ip host mac host Use this command to configure a rule for a valid IP address and MAC address combination used in ARP packet validation Format permit ip host lt sender ip gt mac host lt sender mac gt Mode ARP Access list Config no permit ip host mac host Use this command to delete a rule for a valid IP and MAC combination Format no permit ip host lt sender ip gt mac host lt sender mac gt Mode ARP Access list Config show ip arp inspection Use this command to display the Dynamic ARP Inspection global configuration and configuration on all the VLANs With the lt vlan list gt argument that is comma separated VLAN ranges the command displays the global configuration and configuration on all the VLANs in the VLAN list The global
440. le Default disabled Format debug ipv6 pimdm packet receive transmit Mode Privileged EXEC no debug ipv6 pimdm packet Use this command to disable debug tracing of PIMDMv6 packet reception and transmission Format no debug ipv pimdm packet receive transmit Mode Privileged EXEC debug ipv6 pimsm packet Use this command to trace PIMSMV6 packet reception and transmission If you use the receive option only received PIMSMV6 packets are traced If you use the transmit option only transmitted PIMSMv6 packets are traced When neither keyword is used in the command then all PIMSMv6 packet traces are dumped Vital information such as source address destination address control packet type packet length and the interface on which the packet is received or transmitted is displayed on the console Utility Commands 413 M4100 Series ProSAFE Managed Switches Default disabled Format debug ipv6 pimsm packet receive transmit Privileged EXEC no debug ipv6 pimsm packet Use this command to disable debug tracing of PIMSMv6 packet reception and transmission Format fro debug ipv6 pimsm packet receive transmit Mode Privileged EXEC debug lacp packet This command enables tracing of LACP packets received and transmitted by the switch Default disabled Format debug lacp packet Mode Privileged EXEC Command example NETGEAR Switch debug lacp packet lt 15
441. le BPDU Filter on all the edge port interfaces Format no spanning tree bpdufilter default Mode Global Config Switching Commands 28 M4100 Series ProSAFE Managed Switches spanning tree bpduflood Use this command to enable BPDU Flood on the interface Default disabled Format spanning tree bpduflood Mode Interface Config no spanning tree bpduflood Use this command to disable BPDU Flood on the interface Format no spanning tree bpduflood Mode Interface Config spanning tree bpduguard Use this command to enable BPDU Guard on the switch Default disabled Format spanning tree bpduguard no spanning tree bpduguard Use this command to disable BPDU Guard on the switch Format no spanning tree bpduguard Mode Global Config spanning tree bpdumigrationcheck Use this command to force a transmission of rapid spanning tree RSTP and multiple spanning tree MSTP BPDUs Use the lt slot port gt parameter to transmit a BPDU from a specified interface or use the a11 keyword to transmit BPDUs from all interfaces This command forces the BPDU transmission when you execute it so the command does not change the system configuration or have a no version Format spanning tree bpdumigrationcheck lt slot port gt all Mode Global Config Switching Commands 29 M4100 Series ProSAFE Managed Switches spanning tree configuration name This co
442. ler Format sflow receiver lt rcvr_idx gt owner lt owner string gt timeout lt rcvr_timeout gt notimeout maxdatagram lt size gt ip lt ip gt port lt port gt Global Config Field Description Receiver Index The sFlow Receiver for this sFlow sampler to which flow samples are to be sent A value of zero 0 means that no receiver is configured no packets will be sampled Only active receivers can be set If a receiver expires then all samplers associated with the receiver will also expire Possible values are 1 8 The default is 0 Receiver Owner The identity string for the receiver the entity making use of this sFlowRcvrTable entry The range is 127 characters The default is a null string The empty string indicates that the entry is currently unclaimed and the receiver configuration is reset to the default values An entity wishing to claim an sFlowRcvrTable entry must ensure that the entry is unclaimed before trying to claim it The entry is claimed by setting the owner string to a non null value The entry must be claimed before assigning a receiver to a sampler or poller Receiver The time in seconds remaining before the sampler or poller is released and stops Timeout sending samples to receiver A management entity wanting to maintain control of the sampler is responsible for setting a new value before the old one expires The allowed range is 0 4294967295 seconds The default is zero 0
443. les multicast storm recovery mode If the mode is enabled multicast storm recovery is active and if the rate of L2 multicast traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore the rate of multicast traffic will be limited to the configured threshold Default 5 Format storm control multicast level lt 0 100 gt Mode Global Config Switching Commands 102 M4100 Series ProSAFE Managed Switches no storm control multicast level This command sets the multicast storm recovery threshold to the default value for all interfaces and disables multicast storm recovery Format no storm control multicast level Mode Global Config storm control multicast rate Global Config Use this command to configure the multicast storm recovery threshold for all interfaces in packets per second If the mode is enabled multicast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic is dropped Therefore the rate of multicast traffic is limited to the configured threshold peut fo Format storm control multicast rate lt 0 14880000 gt Mode Global Config no storm control broadcast rate This command sets the broadcast storm recovery threshold to the default value for all interfaces and disables broadcast storm recovery Format no storm control broadcast rate
444. lid and invalid packets that were received from this server Management Commands 512 M4100 Series ProSAFE Managed Switches Field Definition Access Rejects The number of RADIUS Access Reject packets including both valid and invalid packets that were received from this server Access Challenges The number of RADIUS Access Challenge packets including both valid and invalid packets that were received from this server Malformed Access The number of malformed RADIUS Access Response packets received from this Responses server Malformed packets include packets with an invalid length Bad authenticators or signature attributes or unknown types are not included as malformed access responses Bad Authenticators The number of RADIUS Access Response packets containing invalid authenticators or signature attributes received from this server Pending Requests The number of RADIUS Access Request packets destined for this server that have not yet timed out or received a response Timeouts The number of authentication time outs to this server Unknown Types The number of packets of unknown type that were received from this server on the authentication port Packets Dropped The number of RADIUS packets received from this server on the authentication port and dropped for some other reason Command example NETGEAR Switch show radius statistics 192 168 37 200 RADIUS Server NAM ari iets eaten aS Defa
445. limit type is user defined the command also allows you to configure a maximum power limit There are three options e class based Allows the port to draw up to the maximum power based on the classification of the device connected none Allows the port to draw up to Class 0 maximum power if it is in low power mode and up to Class 4 maximum power if it is in high power mode e user defined Allows you to define the maximum power to the port This can be a value from 3 through 32 watts Default User defined with a maximum of 30 watts Format poe power limit class based non user defined lt 3000 32000 gt Mode e Global Config Interface Config no poe power limit Use this command to set the power limit type to the default It also sets the maximum power limit to the default if the power limit type is user defined Format no poe power limit user defined Mode e Global Config Interface Config poe power management Use this command to configure the power management mode based on each individual PoE unit or on all PoE units Both the power management modes mentioned here will power up a device based on first come first served When the available power is less than the power limit defined on a port no more power will be delivered Power over Ethernet Commands 320 M4100 Series ProSAFE Managed Switches Static and dynamic modes differ in how the available power is calculated as follows
446. list extended This command deletes a MAC ACL identified by lt name gt from the system Format no mac access list extended lt name gt mac access list extended rename This command changes the name of a MAC access control list ACL The lt name gt parameter is the name of an existing MAC ACL The lt newname gt parameter is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access list This command fails if a MAC ACL by the name lt newname gt exists Format mac access list extended rename lt name gt lt newname gt Mode Global Config deny permit MAC ACL This command creates a new rule for the current MAC access list Each rule is appended to the list of configured rules for the list Note The no form of this command is not supported since the rules within a MAC ACL cannot be deleted individually Rather the entire MAC ACL must be deleted and respecified Note An implicit deny a11 MAC rule always terminates the access list A rule might either deny or permit traffic according to the specified classification fields Ata minimum the source and destination MAC value must be specified each of which might be substituted using the keyword any to indicate a match on any value in that field The remaining command parameters are all optional but the most frequently used parameters appear in the same relative order as shown in the command format The
447. lls below this level for the configured interval triggers a notification The range is 1 100 The default is O disabled A notification is triggered when the total CPU utilization falls below this level for a configured period of time The falling utilization threshold notification is made only if a rising threshold notification was previously done The falling utilization threshold must always be equal or less than the rising threshold value The CLI does not allow setting the falling threshold to be greater than the rising threshold falling interval The duration of the CPU falling threshold in seconds that must be met to trigger a notification The range is 5 86 400 The default is O disabled show process cpu This command provides the percentage utilization of the CPU by different tasks Utility Commands 347 M4100 Series ProSAFE Managed Switches Note It is not necessarily the traffic to the CPU but different tasks that keep the CPU busy Format show process cpu Privileged EXEC Command example NETGEAR Switch show process cpu Memory Utilization Report status bytes free 192980480 alloc 53409968 Task Utilization Report Task Utilization bcmL2X 0 0 75 bemCNTR 0 0 20 bemLINK 0 0 35 DHCP snoop 0 10 Dynamic ARP Inspection 0 10 dotls_timer_task 0 10 dhcpsPingTask 0 20 show mbuf total This command shows the total system buffer pools status Format show mbuf total
448. log that keeps up to 128 logs Default disabled critical when enabled Format logging buffered no logging buffered This command disables logging to in memory log Format fro logging buffered Mode Global Config logging buffered wrap This command enables wrapping of in memory logging when the log file reaches full capacity Otherwise when the log file reaches full capacity logging stops Default enabled Format logging buffered wrap Mode Privileged EXEC no logging buffered wrap This command disables wrapping of in memory logging and configures logging to stop when the log file capacity is full Format no logging buffered wrap Mode Privileged EXEC Utility Commands 353 M4100 Series ProSAFE Managed Switches logging cli command This command enables the CLI command logging feature which enables logging of all CLI commands issued on the system Default enabled Format logging cli command Mode Global Config no logging cli command This command disables the CLI command Logging feature Format no logging cli command logging console This command enables logging to the console You can specify the lt severitylevel gt value as either an integer from 0 to 7 or symbolically through one of the following keywords emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 or debug 7 Default disabled critical w
449. lot port gt Mode Ipv4 Access List Config Quality of Service Commands 301 M4100 Series ProSAFE Managed Switches Parameter deny permit Description Specifies whether the IP ACL rule permits or denies the matching traffic every Match every packet icmp igmp ip tcp udp lt number gt lt srcip gt lt srcmask gt Specifies the protocol to match for the IP ACL rule lt number gt can be a value from 0 255 Specifies a source IP address and source netmask to match for the IP ACL rule eq lt portkey gt lt 0 65535 gt Note This option is available only if the protocol is tcp or udp When eq is specified an IP ACL rule matches only if the Layer 4 port number is equal to the specified port number or port key You can enter the port number which ranges from 0 65535 or the port key which can be one of the following keywords For tcp protocol bgp domain echo ftp ftp data http smtp telnet www pop2 Or pop3 For udp protocol domain echo ntp rip snmp tftp time Of who Each of these keywords translates into its equivalent port number Note Port number matches only apply to unfragmented or first fragments Note You can specify a port key or port number for the source and a port key or port number for the destination lt dstip gt lt dstmask gt Specifies a destination IP address and netmask for match condition of the IP ACL
450. lt 1ist name gt lf tacaes is specified as the authorization method authorization commands are notified to a TACACS server If radius is the specified authorization method authorization commands are notified to a RADIUS server If none is specified command authorization is not applicable You can create up to five authorization method lists for the commands type Note The local method is not supported for command authorization Command authorization with RADIUS works only if the applied authentication method is also RADIUS Format aaa authorization exec commands default lt list name gt lt method1 gt lt method2 gt exec Provides authorization for user EXEC terminal sessions commands Provides authorization for all user executed commands lt list name gt Character string used to name the list of authorization methods lt method1 gt Use either tacacs Or radius for authorization purpose lt method2 gt Management Commands 486 M4100 Series ProSAFE Managed Switches no aaa authorization This command deletes the authorization method list Format no aaa authorization exec commands default lt list name gt lt method1 gt lt method2 gt authorization console Telnet SSH To apply the command authorization method list to an access method console Telnet SSH Apply this command in the line configuration mode Format authorization commands exec default
451. m number of bytes that should be copied from a sampled packet to form a flow sample Utility Commands 430 M4100 Series ProSAFE Managed Switches IP Address Conflict Commands ip address conflict detect run This command triggers the switch to run active address conflict detection by sending gratuitous ARP packets for IPv4 addresses on the switch Note This command takes effect only once after it is executed and cannot be saved across power cycles Format ip address conflict detect run Mode Global Config show ip address conflict This command displays the status information corresponding to the last detected address conflict Format show ip address conflict Modes Privileged EXEC Term Definition Address Conflict Identifies whether the switch has detected an address conflict on any IP address Detection Status Last Conflicting The IP Address that was last detected as conflicting on any interface IP Address Last Conflicting The MAC Address of the conflicting host that was last detected on any interface MAC Address Time Since The time in days hours minutes and seconds since the last address conflict was Conflict Detected detected clear ip address conflict detect This command clears the detected address conflict status information Format clear ip address conflict detect Privileged EXEC Utility Commands 431 M4100 Series ProSAFE Managed Switches
452. m other interested hosts that are also connected to that port for example using hub e Inimmediate leave mode when a leave is received the switch is immediately reconfigured not to forward a specific multicast stream to the port where a message is received This mode is used only for ports where only one client might be connected Default Disabled Format mvr immediate Mode Interface Config no mvr immediate This command sets the MVR multicast VLAN to the default value Format no mvr immediate Mode Interface Config Multicast VLAN Registration Commands 222 M4100 Series ProSAFE Managed Switches mvr type This command sets the MVR port type When a port is set as source it is the port to which the multicast traffic flows using the multicast VLAN When a port is set to receiver it is the port where a listening host is connected to the switch Default none Format mvr type receiver source Mode Interface Config no mvr type Use this command to set the MVR port type to none Format no mvr type Mode Interface Config mvr vlan group Use this command to include the port in the specific MVR group lt mVLAN gt is the multicast VLAN and lt A B C D gt is the IP multicast group Format mvr vlan lt mVLAN gt group lt A B C D gt Mode Interface Config no mvr vlan Use this command to exclude the port from the specific MVR group Format no mvr vlan lt
453. mVLAN gt group lt A B C D gt Mode Interface Config show mvr This command displays global MVR settings Format show mvr Privileged EXEC Multicast VLAN Registration Commands 223 M4100 Series ProSAFE Managed Switches The following table explains the output parameters Term Definition MVR Running MVR running state It can be enabled or disabled MVR multicast VLAN Current MVR multicast VLAN It can be in the range from 1 to 4094 MVR Max Multicast Groups The maximum number of multicast groups supported by MVR MVR Current multicast groups The current number of MVR groups allocated MVR Query response time The current MVR query response time MVR Mode The current MVR mode It can be compatible or dynamic Command example NETGEAR Switch show mvr VR RUNDING ee paei a a ee ane s TRUE VR m lticast VLAN ventoso ar ee ese edie osa 1200 VR Max Multicast Groups 6 256 VR Current multicast groups 1 VR Global query response time 10 tenths of sec VR MOD Gee fei ates iii compatible show mvr members This command displays the MVR membership groups allocated lt A B C D gt is a valid multicast address in IPv4 dotted notation Format show mvr members lt A B C D gt Mode Privileged EXEC The following table describes the output parameters Term Definition MVR Group IP MVR group multicast IP address Status T
454. mand to disable the DHCP L2 Relay agent for a set of VLANs Format no dhcp 12relay vlan lt vlan list gt Mode Global Config dhcp 2relay trust Use this command to configure an interface or range of interfaces as trusted for Option 82 reception Defaut dhcp 12relay trust Interface Config Switching Commands 134 M4100 Series ProSAFE Managed Switches no dhcp I 2relay trust Use this command to configure an interface to the default untrusted for Option 82 reception Format no dhcp 12relay trust Mode Interface Config show dhcp 2relay all Use this command to display the summary of DHCP L2 Relay configuration Format show dhcp 12relay all Mode Privileged EXEC Command example NETGEAR Switch show dhcp 12relay all DHCP L2 Relay is Enabled Interface L2RelayMode TrustMode 0 2 Enabled untrusted 0 4 Disabled trusted VLAN Id L2 Relay Circuitld Remoteld 3 Disabled Enabled NULL 5 Enabled Enabled NULL 6 Enabled Enabled netgear 7 Enabled Disabled NULL 8 Enabled Disabled NULL 9 Enabled Disabled NULL 10 Enabled Disabled NULL show dhcp l2relay interface Use this command to display DHCP L2 relay configuration specific to interfaces Format show dhcp 12relay interface all lt slot port gt Mode Privileged EXEC Command example NETGEAR Switch show dhcp 12relay interface all DHCP L2 Relay
455. mands 36 M4100 Series ProSAFE Managed Switches spanning tree port mode all This command sets the Administrative Switch Port State for all ports to enabled Default enabled Format spanning tree port mode all Mode Global Config no spanning tree port mode all This command sets the Administrative Switch Port State for all ports to disabled Format no spanning tree port mode all Mode Global Config spanning tree edgeport all This command specifies that every port is an Edge Port within the Common and Internal Spanning Tree This allows all ports to transition to Forwarding State without delay Format spanning tree edgeport all Mode Global Config no spanning tree edgeport all This command disables Edge Port mode for all ports within the Common and Internal Spanning Tree Format no spanning tree edgeport all Mode Global Config spanning tree bpduforwarding Normally a switch will not forward Spanning Tree Protocol STP BPDU packets if STP is disabled However if in some network setup the user wishes to forward BDPU packets received from other network devices this command can be used to enable the forwarding Default disabled Format spanning tree bpduforwarding Mode Global Config Switching Commands 37 M4100 Series ProSAFE Managed Switches no spanning tree bpduforwarding This command will cause the STP BPDU packets received from the
456. mation about creating a timer schedule see Time Range Commands for Time Based ACLs on page 309 Format poe timer schedule lt name gt Mode Interface Config Power over Ethernet Commands 322 M4100 Series ProSAFE Managed Switches no poe timer schedule name Use this command to detach the schedule from the port Format no poe timer schedul Mode Interface Config poe usagethreshold Use this command to set a threshold as a percentage for the total amount of power that can be delivered by the switch For example if the switch can deliver up to a maximum of 300 watts a usage threshold of 90 percent ensures that only 270 watts are used for delivering power to devices This ensures that more power is not drawn than the switch can provide When the usage threshold is set all the PDs are brought down and then brought back up If the consumed power is less than the threshold power in the preceding case 270 watts then the devices continue to power up If the consumed power is 269 watts or less the next device is powered up The moment consumed power exceeds the threshold power 270 watts no other devices can power up This command allows you to set the usage threshold based on each individual PoE unit or all PoE units Default 90 Format poe usagethreshold lt unit gt all lt 1 99 gt Mode Global Config no poe usagethreshold Use this command to set the usage threshold
457. mbership for a VLAN or multicast group This command has an effect only when GVRP is enabled The time is from 10 to 100 centiseconds The value 20 centiseconds is 0 2 seconds Default 20 Format set garp timer join lt 10 100 gt Mode e Interface Config Global Config no set garp timer join This command sets the GVRP join time for one or all ports and per GARP to the default and only has an effect when GVRP is enabled Format no set garp timer join Mode e Interface Config Global Config set garp timer leave This command sets the GVRP leave time for one port Interface Config mode or all ports Global Config mode and only has an effect when GVRP is enabled Leave time is the time to wait after receiving a unregister request for a VLAN or a multicast group before deleting the VLAN entry This can be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service The leave time is 20 600 centiseconds The value 60 centiseconds is 0 6 seconds Switching Commands 74 M4100 Series ProSAFE Managed Switches Default 60 Format set garp timer leave lt 20 600 gt Mode e Interface Config e Global Config no set garp timer leave This command sets the GVRP leave time on all ports or a single port to the default and only has an effect when GVRP is enabled Format no set garp timer leave Mode Interface Config e
458. me gt Mode Line Config exec Configures accounting for an EXEC session commands Configures accounting for each command execution attempt Note If a user is enabling accounting for exec mode for the current type of line configuration they are logged out The default list of methods for authorization services lt list name gt Alphanumeric character string used to name the list of authorization methods no accounting console Telnet SSH This command is used to remove accounting from a line configuration mode Format no accounting exec commands Mode Line Config ip accounting exec This command applies user exec accounting list to the line methods HTTP and HTTPs methods Format is http https accounting exec default lt list name gt Mode Global Config Line method for which the list needs to be applied Management Commands 484 M4100 Series ProSAFE Managed Switches Term Definition default The default list of methods for authorization services lt list name gt Alphanumeric character string used to name the list of authorization methods no ip http https accounting exec This command deletes the authorization method list Format fro ip http https accounting exec default lt list name gt Mode Global Config show accounting Use this command to display ordered methods for accounting lists Format show accounti
459. mine how to forward a received frame Enter a11 or no parameter to display the entire table Enter a MAC Address and VLAN ID to display the table entry for the requested MAC address on the specified VLAN Enter the count parameter to view summary information about the forwarding database table Use the interface lt slot port gt parameter to view MAC addresses on a specific interface Use the vlan lt vlan id gt parameter to display information about MAC addresses on a specified VLAN Format show mac addr table lt macaddr gt lt vlan id gt all count interface lt slot port gt vlan lt vlan id gt Privileged EXEC Utility Commands 345 M4100 Series ProSAFE Managed Switches The information that is shown in the following table displays if you do not enter a parameter the keyword a11 or the MAC address and VLAN ID If you enter vlan lt vlan id gt only the Mac Address Interface and Status fields display Term Definition Mac Address A unicast MAC address for which the switch has forwarding and or filtering information The format is 6 or 8 two digit hexadecimal numbers that are separated by colons for example 01 23 45 67 89 AB In an IVL system the MAC address will be displayed as 8 bytes Interface The port through which this address was learned Interface Index This object indicates the iflndex of the interface table entry associated with this port Status The status of this entry The
460. mmand sets the Configuration Identifier Name for use in identifying the configuration that this switch is currently using The lt name gt is a string of up to 32 characters Default base MAC address in hexadecimal notation Format spanning tree configuration name lt name gt Mode Global Config no spanning tree configuration name This command resets the Configuration Identifier Name to its default Format no spanning tree configuration name spanning tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using The Configuration Identifier Revision Level is a number in the range of 0 65535 Default 0 Format spanning tree configuration revision lt 0 65535 gt no spanning tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using to the default value Format no spanning tree configuration revision Mode Global Config spanning tree edgeport This command specifies that this port is an Edge Port within the Common and Internal Spanning Tree This allows this port to transition to Forwarding State without delay Default Enabled Format spanning tree edgeport Mode Interface Config Switching Commands 30 M4100 Series ProSAFE Managed Switches no spanning tr
461. mode for all the servers is enabled or not RADIUS Attribute 4 Mode A global parameter to indicate whether the NAS IP Address attribute has been enabled to use in RADIUS requests RADIUS Attribute 4 Value A global parameter that specifies the IP address to be used in NAS IP Address attribute used in RADIUS requests Management Commands 508 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show radius servers Cur Host Address Server Name Port Type rent k 192 168 37 200 Network1_RADIUS_Server 1813 Primary 192 168 37 2U1 Network2_RADIUS_Server 1813 Secondary 192 168 37 202 Network3_RADIUS_Server 1813 Primary 192 168 37 203 Network4_RADIUS_Server 1813 Secondary Command example NETGEAR Switch show radius servers name Current Host Address Server Name Type SSSR ea eae SS SS ea ee ee 192 1 68 372 00 Network1_RADIUS_Server Secondary 192 168 37 201 Network2_RADIUS_Server Primary 192 168 37 202 Network3_RADIUS_Server Secondary 192 168 37 203 Network4_RADIUS_Server Primary Command example NETGEAR Switch show radius servers name Default_RADIUS_Server Server Nam 6 cbcvsadeessade aves aad dad Default_RADIUS_Server Host Addres Ssi aena id 192 168 37 58 Secret Configured ere daras adas No essage Authenticator Enable umber of Retransmits 4 Time DUES LO Miri da 10 RADIUS Accounting Mode Disable RA
462. mote port lt port id gt Mode Global Config no capture remote port Use this command to reset the remote port to the default 2002 Format no capture report port Utility Commands 401 M4100 Series ProSAFE Managed Switches capture file size Use this command to configure file capture options The command is persistent across a reboot cycle The range is from 2 to 512 Kbytes Default 512 Kbytes Format capture file size lt file size gt Mode Global Config no capture file size Use this command to reset the file size to the default 512 Kbytes Format no capture file size capture line wrap This command enables wrapping of captured packets in line mode when the captured packets reaches full capacity Default Disabled Format capture line wrap Mode Global Config no capture line wrap This command disables wrapping of captured packets and configures capture packet to stop when the captured packet capacity is full Format no capture line wrap Mode Global Config show capture packets Use this command to display packets captured and saved to RAM It is possible to capture and save into RAM packets that are received or transmitted through the CPU A maximum 128 packets can be saved into RAM per capturing session A maximum 128 bytes per packet can be saved into the RAM If a packet holds more than 128 bytes only the first 128 bytes are saved data mor
463. n A generated Key used in the exchange of the BPDUs Digest Key Configuration Specifies the version of the configuration format being used in the exchange of BPDUs The default value is zero List of all multiple spanning tree instances configured on the switch Switching Commands 45 M4100 Series ProSAFE Managed Switches show spanning tree vlan This command displays the association between a VLAN and a multiple spanning tree instance The lt vlanid gt corresponds to an existing VLAN ID Format show spanning tree vlan lt vlanid gt Mode e Privileged EXEC e User EXEC Term VLAN Identifier The VLANs associated with the selected MST instance Associated Identifier for the associated multiple spanning tree instance or CST if associated with Instance the Common and Internal Spanning Tree VLAN Commands This section describes the commands you use to configure VLAN settings vlan database This command gives you access to the VLAN Config mode which allows you to configure VLAN characteristics Format vlan database Mode Privileged EXEC network mgmt_vlan This command configures the Management VLAN ID Default 1 Format network mgmt_vlan lt 1 4093 gt Mode Privileged EXEC no network mgmt_vlan This command sets the Management VLAN ID to the default Format no network mgmt_vlan Mode Privileged EXEC Switching Commands 46 M4100 S
464. n Unicast traffic and unicast traffic is hashed using a common hash algorithm e Excellent load balancing performance The interface is a logical lt slot port gt for a configured port channel The option a11 enables the configuration for all the configured port channels Instead of lt slot port gt you can use lag lt lag group id gt as an alternate way to specify the LAG interface in which lt lag group id gt is the LAG port number Default 3 Format port channel load balance 1 2 3 4 5 6 7 lt slot port gt lag lt lag group id gt all Mode Interface Config Global Config Switching Commands 121 M4100 Series ProSAFE Managed Switches Source MAC VLAN EtherType and incoming port associated with the packet Destination MAC VLAN EtherType and incoming port associated with the packet Source Destination MAC VLAN EtherType and incoming port associated with the packet Source IP and Source TCP UDP fields of the packet Destination IP and Destination TCP UDP Port fields of the packet Source Destination IP and source destination TCP UDP Port fields of the packet 7 Enhanced Hashing Mode no port channel load balance This command reverts to the default load balancing configuration pue le port channel load balance lt slot port gt lag lt lag group id gt all Mode Interface Config Global Config port channel name This command defines
465. n as 802 3at IEEE 802 3at 2009 This is the newer standard also known as PoE This is also known as the high power standard which mandates delivery of up to 34 2 watts by the PSE Because of power dissipation PoE provides only a maximum of 25 5 watts at the powered device Some PSEs can provide up to 51 watts Before this standard became available in 2009 the industry started using different implementations to allow for more power All these needed to be brought under the purview of the newer 802 3at standard PoE Commands poe Use this command to enable the Power over Ethernet PoE functionality on a global basis or per interface Default enabled Format poe Mode e Global Config Interface Config no poe Use this command to disable the Power over Ethernet PoE functionality on a global basis or per interface Format no poe Mode e Global Config Interface Config Power over Ethernet Commands 318 M4100 Series ProSAFE Managed Switches poe detection Use this command to configure the detection type on a global basis or per interface It is used to configure which types of PDs will be detected and powered by the switch There are three options e ieee Detect resistive type devices IEEE standard e pre ieee Legacy capacitive detection only nonstandard e auto Perform resistive detection first IEEE standard and capacitive detection pre IEEE standard Default auto
466. n for an interface event NIM NIM Timeout event x intlfNum x A component did not respond before the remainingMask xxxx NIM timeout occurred Log Messages 533 M4100 Series ProSAFE Managed Switches Table 5 System Log Messages Component Message Cause SYSTEM SYSTEM Configuration file Switch CLl cfg size is O zero bytes could not separate SYSAPI_CONFIG_FILENAME The configuration file could not be read This message might occur on a system for which no configuration has ever been saved or for which configuration has been erased The configuration file could not be read This message might occur on a system for which no configuration has ever been saved or for which configuration has been erased SYSTEM Building defaults for file lt file name gt version lt version num gt Configuration did not exist or could not be read for the specified feature or file Default configuration values will be used The file name and version are indicated SYSTEM File lt filename gt same version version num but the sizes lt version size gt gt lt expected version size differ The configuration file which was loaded was of a different size than expected for the version number This message indicates the configuration file needed to be migrated to the version number appropriate for the code image This message might appear after upgrading the code image to a more current release SYST
467. n hapiBroadQosCosQueueConfig Failed Attempting to configure the bandwidth to configure minimum bandwidth Available beyond its capabilities bandwidth x USL failed to put sync response on queue A response to a sync request was not enqueued This could indicate that a previous sync request was received after it was timed out USL failed to sync ipmc table on unit x Either the transport failed or the message was dropped usl_task_ipmc_msg_send failed to send Either the transport failed or the message with x was dropped USL No available entries in the STG table The Spanning Tree Group table is full in USL USL failed to sync stg table on unit x Could not synchronize unit x due to a transport failure or API issue on remote unit A synchronization retry will be issued USL A Trunk doesn t exist in USL Attempting to modify a Trunk that doesn t exist Log Messages 554 M4100 Series ProSAFE Managed Switches Table 54 System General Error Messages Message Cause Component OS USL A Trunk being created by bcmx Possible synchronization issue between already existed in USL the application hardware and sync layer OS USL A Trunk being destroyed doesn t exist Possible synchronization issue between in USL the application hardware and sync layer OS USL A Trunk being set doesn t exist in Possible synchronization issue between USL the application hardware and sync layer O
468. n reread ae Enabled show ip interface This command displays all pertinent information about the IP interface Format show ip interface lt slot port gt vlan lt 1 4093 gt loopback lt 0 7 gt Modes e Privileged EXEC e User EXEC Routing Interface Determine the operational status of IPv4 routing Interface The possible values are Up or Status Down Primary IP The primary IP address and subnet masks for the interface This value appears only if Address you configure it Secondary IP One or more secondary IP addresses and subnet masks for the interface This value Address appears only if you configure it Method Shows whether the IP address was configured manually or acquired from a DHCP server Routing Mode The administrative mode of router interface participation The possible values are enable or disable This value is configurable Administrative The administrative mode of the specified interface The possible values of this field are Mode enable or disable This value is configurable Forward Net Displays whether forwarding of network directed broadcasts is enabled or disabled This Directed value is configurable Broadcasts Proxy ARP Displays whether Proxy ARP is enabled or disabled on the system Local Proxy ARP Displays whether Local Proxy ARP is enabled or disabled on the interface Active State Displays whether the interface is active or inactive An interface is considered active if it
469. nabled Format spanning tree Mode Global Config no spanning tree This command sets the spanning tree operational mode to disabled While disabled the spanning tree configuration is retained and can be changed but is not activated Format no spanning tree spanning tree auto edge This command enables auto edge on the interface or range of interfaces When enabled the interface becomes an edge port if it does not see BPDUs for edge delay time Default enabled Format spanning tree auto edg Mode Interface Config Switching Commands 27 M4100 Series ProSAFE Managed Switches no spanning tree auto edge This command disables auto edge on the interface or range of interfaces Format no spanning tr auto edg Mode Interface Config spanning tree bpdufilter Use this command to enable BPDU Filter on an interface or range of interfaces Default disabled Format spanning tree bpdufilter Mode Interface Config no spanning tree bpdufilter Use this command to disable BPDU Filter on the interface or range of interfaces Default disabled Format no spanning tree bpdufilter Mode Interface Config spanning tree bpdufilter default Use this command to enable BPDU Filter on all the edge port interfaces Default disabled Format spanning tree bpdufilter Mode Global Config no spanning tree bpdufilter default Use this command to disab
470. name to IPv6 address mapping in the host cache The lt name gt parameter is the host name The lt ipv6 address gt parameter is the IPv6 address of the host Defaut Format ipv6 host lt name gt lt ipv6 address gt Mode Global Config no ipv6 host Use this command to remove the static host name to IPv6 address mapping in the host cache Format no ipv6 host lt name gt Mode Global Config ip domain retry Use this command to specify the number of times to retry sending Domain Name System DNS queries The parameter lt number gt indicates the number of times to retry sending a DNS query to the DNS server This number ranges from 0 to 100 Default 2 Format ip domain retry lt number gt Mode Global Config Utility Commands 397 M4100 Series ProSAFE Managed Switches no ip domain retry Use this command to return to the default Format no ip domain retry lt number gt Mode Global Config ip domain timeout Use this command to specify the amount of time to wait for a response to a DNS query The lt seconds gt parameter specifies the time in seconds to wait for a response to a DNS query and ranges from 0 to 3600 Defaut Format ip domain timeout lt seconds gt Mode Global Config no ip domain timeout Use this command to return to the default setting Format no ip domain timeout Mode Global Config clear host Use this command to delete entri
471. nd the interval between Echo Requests Parameter Description count lt count gt As an option specify the number of ping packets ICMP Echo requests that are sent to the destination address The range is 1 15 requests Utility Commands 369 M4100 Series ProSAFE Managed Switches Parameter Description interval lt interval gt As an option specify the time between Echo Requests in seconds The range is 1 60 seconds size lt size gt As an option specify the size in bytes of the payload of the Echo Requests sent The range is 0 65507 bytes Command example The ping succeeds NETGEAR Switch ping 10 254 2 160 count 3 interval 1 size 255 Pinging 10 254 2 160 with 255 bytes of data Received response for icmp_seq 0 time 275268 usec Received response for icmp_seq 1 time 274009 usec time 279459 usec I N Received response for icmp_seq 10 254 2 160 PING statistics 3 packets transmitted 3 packets received 0 packet loss round trip msec min avg max 274 279 276 Command example The ping fails because the destination is unreachable NETGEAR Switch ping 192 168 254 222 count 3 interval 1 size 255 Pinging 192 168 254 222 with 255 bytes of data Received Response Unreachable Destination Received Response Unreachable Destination Received Response Unreachable Destination 192 168 254 222 PING statistics 3 packets transmitted 3 packe
472. nding Use this command to configure static IP source guard IPSG entries Format ip verify binding lt mac address gt vlan lt vlan id gt lt ip address gt interface lt slot port gt Mode Global Config no ip verify binding Use this command to remove the IPSG static entry from the IPSG database Format no ip verify binding lt mac address gt vlan lt vlan id gt lt ip address gt interface lt slot port gt Mode Global Config Switching Commands 140 M4100 Series ProSAFE Managed Switches ip dhcp snooping limit Use this command to control the rate at which the DHCP Snooping messages come The default rate is 15 pps with a range from 0 to 30 pps The default burst level is 1 second witha range of 1 15 seconds Default 15 pps for rate limiting and 1 sec for burst interval Format ip dhcp snooping limit rate lt pps gt burst interval lt seconds gt Mode Interface Config no ip dhcp snooping limit Use this command to set the rate at which the DHCP Snooping messages come and the burst level to the defaults Format no ip dhcp snooping limit Mode Interface Config ip dhcp snooping log invalid Use this command to control the logging DHCP messages filtration by the DHCP Snooping application Default disabled Format ip dhcp snooping log invalid Mode Interface Config no ip dhcp snooping log invalid Use this command to disable the logging
473. ne Config no session timeout Use this command to set the Telnet session timeout value to the default The timeout value unit of time is minutes Format no session timeout Mode Line Config telnetcon maxsessions Use this command to specify the maximum number of Telnet connection sessions that can be established A value of 0 indicates that no Telnet connection can be established The range is 0 5 Defaut Format telnetcon maxsessions lt 0 4 gt Mode Privileged EXEC Management Commands 454 M4100 Series ProSAFE Managed Switches no telnetcon maxsessions Use this command to set the maximum number of Telnet connection sessions that can be established to the default value Mode Privileged EXEC telnetcon timeout Use this command to set the Telnet connection session time out value in minutes A session is active as long as the session has not been idle for the value set The time is a decimal value from 1 to 160 Note When you change the time out value the new value is applied to all active and inactive sessions immediately Any sessions that have been idle longer than the new time out value are disconnected immediately Default 5 Format telnetcon timeout lt 1 160 gt Mode Privileged EXEC no telnetcon timeout Use this command to set the Telnet connection session timeout value to the default Note Changing the time out value for active sessions does not become eff
474. neRxBpdu Revd BPDU The current conditions like port is not Discarded enabled or we are currently not finished processing another BPDU on the same interface does not allow us to process this BPDU 802 1S dot1sBpduTransmit could not get a buffer Out of system buffers Table 34 Port Mac Locking Log Message Component Message Cause Port Mac pmiMapintfIsConfigurable Error accessing A default configuration does not exist for Locking PML config data for interface d in this interface Typically a case when a new pm MapIntflsConfigurable interface is created and has no pre configuration Log Messages 546 M4100 Series ProSAFE Managed Switches Table 35 Protocol based VLANs Log Messages Component Message Cause Protocol Based pbVlanCnfgrinitPhase2Process Unable to Appears when nimRegisterInt Change fails VLANs register NIM callback to register pbVlan for link state changes Protocol Based pbVlanCnfgrinitPhase2Process Unable to Appears when vlanRegisterForChange VLANs register pbVlan callback with vlans fails to register pbVlan for vlan changes Protocol Based pbVlanCnfgrInitPhase2Process Unable to Appears when nvStoreRegister fails to VLANs register pbVlan callback with nvStore register save and restore functions for configuration save QoS Table 36 ACL Log Messages Component Message Cause ACL Total number of ACL rules x exceeds max The combination o
475. nel command on an interface it becomes a service provider port Ports that do not have double VLAN tunneling enabled are customer ports Default disabled Format mode dvlan tunnel Interface Config no mode dvlan tunnel This command is used to disable Double VLAN Tunneling on the specified interface By default Double VLAN Tunneling is disabled Format no mode dvlan tunnel Mode Interface Config show dot1q tunnel Use this command without the optional parameters to display all interfaces enabled for Double VLAN Tunneling Use the optional parameters to display detailed information about Double VLAN Tunneling for the specified interface or all interfaces Format show dotlg tunnel interface lt slot port gt all Mode e Privileged EXEC e User EXEC Term Definition Valid slot and port number separated by forward slashes The administrative mode through which Double VLAN Tunneling can be enabled or disabled The default value for this field is disabled EtherType A 2 byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel There are three different EtherType tags The first is 802 1Q which represents the commonly used value of 0x8100 The second is vMAN which represents the commonly used value of 0x88A8 If EtherType is not one of these two values it is a custom tunnel value representing any value in the range of 0 65535 Switching Commands 64 M4100 Series ProSAFE
476. nfig no aaa ias user username Use this command to remove an ias user Format no aaa ias usernam lt user gt aaa session id This global aaa command specifies whether the same session ID is used for authentication authorization and accounting service type within a session s Default common Format aaa session id common unique Mode Global Config Management Commands 489 M4100 Series ProSAFE Managed Switches common Use the same session ID for all AAA Service types unique Use a unique session ID for AAA Service types no aaa session id This command resets the AAA session ID behavior to default Format no aaa session id unique Mode Global Config password AAA IAS User Configuration Use this command to specify a password for a user in the IAS database Format password lt password gt encrypted Mode AAA IAS User Config Parameter Definition lt password gt Password for this level Range 8 64 characters encrypted Encrypted password to be entered copied from another switch configuration no password AAA IAS User Configuration Use this command to remove a password for a user in the IAS database Mode AAA IAS User Config clear aaa ias users Use this command to remove all users from the IAS database Format clear aaa las users Mode Privileged EXEC Management Commands 490 M4100 Series ProSAFE M
477. nfiguration Config commands for IPv6 MAC Access list Switch Config mac access list Allows you to create a MAC Access List and Contig to enter the mode containing MAC Access List configuration commands TACACS Config Contains commands to configure properties for the TACACS servers DHCP Pool Switch Config dhcp pool Contains the DHCP server IP address pool Contig configuration commands ARP Access List Switch Config arp access list Contains commands to add ARP ACL rules Config Mode in an ARP Access List The following table explains how to enter or exit each mode Table 6 CLI Mode Access and Exit Command Mode Access Method Exit or Access Previous Mode User EXEC This is the first level of access To exit enter logout Privileged EXEC From the User EXEC mode enter To exit to the User EXEC mode enter exit or press enable Ctrl Z Using the Command Line Interface 12 M4100 Series ProSAFE Managed Switches Table 6 CLI Mode Access and Exit continued Command Mode _ Access Method Exit or Access Previous Mode Global Config From the Privileged EXEC mode __ To exit to the Privileged EXEC mode enter exit or enter configure press Ctrl Z VLAN Config From the Privileged EXEC mode __ To exit to the Privileged EXEC mode enter exit or enter vlan database press Ctrl Z Interface Config From the Global Config mode To exit to the Global Config mode enter exit To
478. nfigures the VLAN ID lt vlan id gt for which the multicast router mode enabled Format set igmp mrouter lt vlan id gt Mode Interface Config no set igmp mrouter This command disables multicast router mode for a particular VLAN ID lt vlan id gt Format no set igmp mrouter lt vlan id gt Mode Interface Config set igmp mrouter interface This command configures the interface as a multicast router interface When configured as a multicast router interface the interface is treated as a multicast router interface in all VLANs Default disabled Format set igmp mrouter interface Interface Config no set igmp mrouter interface This command disables the status of the interface as a statically configured multicast router interface Format no set igmp mrouter interface Mode Interface Config set igmp report suppression Use this command to suppress the IGMP reports on a VLAN In order to optimize the number of reports traversing the network with no added benefits a Report Suppression mechanism is implemented When more than one client responds to an MGMD query for the same Multicast Group address within the max response time only the first response is forwarded to the query and others are suppressed at the switch Default Disabled Format set igmp report suppression lt 1 4093 gt Switching Commands 159 M4100 Series ProSAFE Managed Switches no set igmp report suppression
479. nfo 6 or debug 7 Default Disable Format logging persistent lt severitylevel gt Mode Global Config no logging persistent Use this command to disable the persistent logging in the switch Format no logging persistent Mode Global Config Email Alerting and Mail Server Commands logging email This command enables email alerting and sets the lowest severity level for which log messages are emailed If you specify a severity level log messages at or above this severity level but below the urgent severity level are emailed in a non urgent manner by collecting them together until the log time expires You can specify the lt severitylevel gt value as either an integer from 0 to 7 or symbolically through one of the following keywords emergency 0 alert 1 critical 2 error 3 warning 4 notice 5 info 6 or debug 7 Utility Commands 358 M4100 Series ProSAFE Managed Switches Default Disabled when enabled log messages at or above severity warning 4 are emailed Format logging email lt severitylevel gt Mode Global Config no logging email This command disables email alerting Format no logging email Mode Global Config logging email urgent This command sets the lowest severity level at which log messages are emailed immediately in a single email message You can specify the lt severitylevel gt value as either an integer from
480. ng Mode Privileged EXEC Command example NETGEAR Switch show accounting umber of Accounting Notifications sent at beginning of an EXEC session Errors when sending Accounting Notifications beginning of an EXEC session umber of Accounting Notifications at end of an EXEC session Errors when sending Accounting Notifications at end of an EXEC session Errors when sending Accounting Notifications at beginning of a command execution umber of Accounting Notifications sent at end of a command execution w o w umber of Accounting Notifications sent at beginning of a command execution w o w Errors when sending Accounting Notifications at end of a command execution show accounting methods This command displays the configured accounting method lists Format show accounting methods Mode Privileged EXEC Command example NETGEAR Switch show accounting methods Acct Type Method Name Record Type Method Type Exec dfltExecList start stop TACACS Commands dfltCmdsList stop only TACACS Management Commands 485 M4100 Series ProSAFE Managed Switches Commands UserCmdAudit start stop TACACS Line EXEC Method List Command Method List Console none none Telnet none none SSH none none HTTPS none none HTTP none none aaa authorization The command creates an authorization method list This list is identified by the default keyword or by a user specified
481. nge name gt assign queue lt queue 1d gt mirror redirect lt slot port gt Mode IPv6 Access List Config ipv6 traffic filter This command either attaches a specific IPv6 ACL identified by lt name gt to an interface or associates with a VLAN ID in a specific direction The lt name gt parameter must be the name of an existing IPv6 ACL An optional sequence number might be specified to indicate the order of this mac access list relative to other IPv6 access lists already assigned to this interface and direction A lower number indicates higher precedence order If a sequence number is already in use for this interface and direction the specifiedIPv6 access list replaces the currently attached IPv6 access list using that sequence number If the sequence number is not specified for this command a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used This command specified in Interface Config mode only affects a single interface whereas the Global Config mode setting is applied to all interfaces The vlan keyword is valid only in the Quality of Service Commands 307 M4100 Series ProSAFE Managed Switches Global Config mode The Interface Config mode command is only available on platforms that support independent per port Class of Service queue configuration Format ipv6 traffic filter lt name gt in vlan lt vlan id gt in sequence
482. nicdiacaernnarertebeeade done sd dads 150 Papine pec Lonii at ai 149 ipanp inspection tr US cesar ae e A ea 149 iporp inspection validate coi Aci 148 Parp INSPECTION VaN sereioia nasal rastro a D EER aea 148 ip anpinspectionvlamlogginNg wissa as ricardo iris 148 ip default gateWway lt 3 cca csmagscdosensueweeth 6 eer cabh dah Mucudusceremeweeesadedebaedducage 236 ip dhep bootp automati acidic rip RR ii OR RR OR RHE 390 ipdhep conflict logging wa iscadedawmareebustin a a sadaacer anaes aoe 391 p dhep excluded address a s 5 4 5 6 06 5 08 ETEGEECITSSS5S 55 95 5555 iiad QSL EREEERTETAGT 5545595008 389 IPGNEP PING PaCketSics 04 052 2qcacacaeds ondsGolsdtdddodcndadartcneacad bebsontadtsddetatagadasuc 390 IDONEP POO dera SAA 382 PANEP SNOOPING 44 4 6 005 2444 HeHEHTTESGSH TOSSES a EEE ROSES ed ae 138 IPANEP SMOG PING Dinding sesos dde 140 ipdhep snooping database i ccccccesvessearecswicdwrene RRA dese eee AA 139 ip dhcp snooping database write delay cece eee rr 139 IPAHEP SHOOPING IMEssszasorsrsnacanle isso is TI dr die ETS 141 ip dhcp snooping log inValid 4 23 46 a4 porra dia 141 IPONEP SHOOPING FUSE iaa dd 141 ip dhcp snooping Verify mac address 0 cece cnc 139 iP dhep SNOSPING Vlani s 5c dss cagugaae rias 138 IPCOMAINMISE ecc ae 396 IPAOMAMlOGRUP sesosoosoridtcdi pierdo aa ae 395 IP GOMAMIMAME se scssrsinssarics parias 955490 A EROS REREEETEATSS Se 545508 395 IPGOMAINTEUY icc cs ce ar dnan ENAERE
483. ning Tree to the default value Format no spanning tree mst priority lt mstid gt spanning tree mst vlan This command adds an association between a multiple spanning tree instance and one or more VLANs so that the VLAN s are no longer associated with the Common and Internal Spanning Tree The parameter lt mstid gt is a number that corresponds to the desired existing multiple spanning tree instance The vlan range can be specified as a list or as a range of values To specify a list of VLANs enter a list of VLAN IDs each separated by a comma with no spaces in between To specify a range of VLANs separate the beginning and ending VLAN ID with a dash Format spanning tree mst vlan lt mstid gt lt vlanid gt Mode Global Config no spanning tree mst vlan This command removes an association between a multiple spanning tree instance and one or more VLANs so that the VLAN s are again associated with the Common and Internal Spanning Tree Format no spanning tree mst vlan lt mstid gt lt vlanid gt Mode Global Config spanning tree port mode This command sets the Administrative Switch Port State for this port to enabled Default enabled Format spanning tree port mode Mode Interface Config no spanning tree port mode This command sets the Administrative Switch Port State for this port to disabled Format no spanning tree port mode Mode Interface Config Switching Com
484. nmadamdae Ad he pens Sedeeen ed oad Scie 449 CONTO MECO daria A anda Mader da iii 282 COPY eri ea ii e es eee E a E A a eel a 371 copy pre logini Daniel scada AA Ad 520 COSS QUEUEMMIN DANGWIGEM essa rare pra 264 cos queue random detect cee cece nee teen ete reenen erranera 265 COS QUCUSSINICE criar arrabal 265 crypto certificate Generate s cccicccacvsniwnwesacerecorecses si tie sica ea 459 cry pto key generate dass dro EE seca eo doo 460 crypto Key Generate SS secos A a as 460 debuGgidaa accountings ss carcasas ven patettiatetesedadatie 424 debug aaaauthorizatiO isss canicas ai a 424 debug ANP ovrsarardaos lares ia eE E da tr ie 403 debug aULO VOIP cesen socia aptas ab 403 deba dE coros sarria a 404 debug Console 222 25 a0 acaact antaras EIA ad 404 debug rashlOQ ess risa de os se 404 debug dhep packet scsi daros sie 405 debug COE ISU PICKE ox iia et lis 406 ACeEbUGIGMPSNOOPING PACKEE sion nee elle eee ea 406 debug igmpsnooping packet receive 0 eee eee eee ene eee nes 407 debugigmpsnooping Packet transmit wicccuciscrrcrcuceoervesosoracdroveeseueeou snag swede cese ont 406 debugip aci 22 04 04 c 04 00 dace eedh ads diria eos 408 debug ip dIVMFP Packetsssscrirasisara iia rascarse 409 debug ip IGMP packet srrrrerirsrinti ETE ENEE RR ie e ad 409 debug IP MEACNE packets dadas id 410 deb giippimdm packet accionista 410 debuglippimsm packet session viseert a edad casado 411 A o cc ccrosenen uasavanaehakeeGwee
485. nning Tree to the default value Format no spanning tree forward time Mode Global Config spanning tree guard This command selects whether loop guard or root guard is enabled on an interface If neither is enabled the port operates in accordance with the multiple spanning tree protocol Defaut Format spanning tree guard none root loop Mode Interface Config no spanning tree guard This command disables loop guard or root guard on the interface Format no spanning tree guard Mode Interface Config spanning tree tcnguard This command enables the propagation of received topology change notifications and topology changes to other ports Default disable Format spanning tree tcnguard Interface Config no spanning tree tcnguard This command disables the propagation of received topology change notifications and topology changes to other ports no spanning tree tcnguard Interface Config Switching Commands 32 M4100 Series ProSAFE Managed Switches spanning tree max age This command sets the Bridge Max Age parameter to a new value for the Common and Internal Spanning Tree The max age value is in seconds within a range of 6 40 with the value being less than or equal to 2 x Bridge Forward Delay 1 Default 20 Format spanning tree max age lt 6 40 gt Mode Global Config no spanning tree max age This command sets the Bridge Max Age
486. no debug sflow packet Mode Privileged EXEC debug spanning tree bpdu This command enables tracing of spanning tree BPDUs received and transmitted by the switch Default disabled Format debug spanning tree bpdu Mode Privileged EXEC no debug spanning tree bpdu This command disables tracing of spanning tree BPDUs Format no debug spanning tree bpdu Mode Privileged EXEC Utility Commands 420 M4100 Series ProSAFE Managed Switches debug spanning tree bpdu receive This command enables tracing of spanning tree BPDUs received by the switch Spanning tree should be enabled on the device and on the interface in order to monitor packets for a particular interface Default disabled Format debug spanning tree bpdu receive Mode Privileged EXEC Command example NETGEAR Switch debug spanning tree bpdu receive lt 15 gt JAN 01 01 02 04 192 168 17 29 1 DOT1S 191096896 dotls_debug c 1249 101 Pkt RX Intf 0 9 9 Source_Mac 00 11 88 4e c2 10 Version 3 Root Mac 00 11 88 4e c2 00 Root Priority 0x8000 Path Cost 0 The parameters that are shown in the following table are displayed in the trace message Parameter Definition RX A packet received by the device Intf The interface that the packet came in on Format used is slot port internal interface number Unit is always shown as 1 for interfaces on a non stacking device Source_Mac Source MAC address
487. no tacacs server host lt ip address gt lt hostname gt Mode Global Config tacacs server key Use this command to set the authentication and encryption key for all TACACS communications between the switch and the TACACS daemon The lt key string gt parameter has a range of 0 128 characters and specifies the authentication and encryption key for all TACACS communications between the switch and the TACACS server This key must match the key used on the TACACS daemon Text based configuration supports TACACS server s secrets in encrypted and non encrypted format When you save the configuration these secret keys are stored in encrypted format only If you want to enter the key in encrypted format enter the key along with the encrypted keyword In the output of the Show running config command these secret keys are displayed in encrypted format You cannot show these keys in plain text format Format tacacs server key lt key string gt encrypted lt key string gt Mode Global Config no tacacs server key Use this command to disable the authentication and encryption key for all TACACS communications between the switch and the TACACS daemon The lt key string gt parameter has a range of 0 128 characters This key must match the key used on the TACACS daemon Format no tacacs server key lt key string gt Mode Global Config tacacs server keystring Use this command to set the global authe
488. nsmitting local data LLDPDUs The range is 1 32768 seconds The lt hold value gt is the multiplier on the transmit interval that sets the TTL in local data LLDPDUs The multiplier range is 2 10 The lt reinit seconds gt is the delay before re initialization and the range is 1 0 seconds Default e interval 30 seconds hold 4 reinit 2 seconds Format lldp timers interval lt interval seconds gt hold lt hold value gt reinit lt reinit seconds gt Mode Global Config no lldp timers Use this command to return any or all timing parameters for local data transmission on ports enabled for LLDP to the default values Format no lldp timers interval hold reinit Mode Global Config lldp transmit tlv Use this command to specify which optional type length values TLVs in the 802 1AB basic management set are transmitted in the LLDPDUs Use sys name to transmit the system name TLV To configure the system name see snmp server on page 491 Use sys desc to transmit the system description TLV Use sys cap to transmit the system capabilities TLV Switching Commands 183 M4100 Series ProSAFE Managed Switches Use port desc to transmit the port description TLV To configure the port description see description on page 20 Default all optional TLVs are included lldp transmit tlv sys desc sys name sys cap port desc Mode Interface Config no lldp transmit tlv Use this command
489. nter the optional lt vlanid gt parameter the command output also displays detailed information including interface information for a specific VLAN The ID is a valid VLAN identification number Term Definition Valid slot and port number separated by forward slashes It is possible to set the parameters for all ports by using the selectors on the top line Interface The degree of participation of this port in this VLAN The permissible values are e Include This port is always a member of this VLAN This is equivalent to registration fixed in the IEEE 802 1Q standard e Exclude This port is never a member of this VLAN This is equivalent to registration forbidden in the IEEE 802 1Q standard e Autodetect To allow the port to be dynamically registered in this VLAN via GVRP The port will not participate in this VLAN unless a join request is received on this port This is equivalent to registration normal in the IEEE 802 1Q standard Current The configured degree of participation of this port in this VLAN The permissible values are e Include This port is always a member of this VLAN This is equivalent to registration fixed in the IEEE 802 1Q standard e Exclude This port is never a member of this VLAN This is equivalent to registration forbidden in the IEEE 802 1Q standard e Autodetect To allow the port to be dynamically registered in this VLAN via GVRP The port will not participate in this VLAN unless a j
490. ntication encryption key used for all TACACS communications between the TACACS server and the client Format tacacs server keystring Mode Global Config Management Commands 515 M4100 Series ProSAFE Managed Switches tacacs server source interface Use this command in Global Configuration mode to configure the global source interface source IP selection for all TACACS communications between the TACACS client and the server Format tacacs server source interface lt slot port gt loopback lt loopback id gt vlan lt vlan 1d gt Mode Global Config Parameter Description lt slot port The unit identifier assigned to the switch lt loopback id The loopback interface The range is 0 7 lt vlan id gt The VLAN ID The range is 1 4 093 no tacacs server source interface Use this command in Global Configuration mode to remove the global source interface source IP selection for all TACACS communications between the TACACS client and the server Format no tacacs server source interface Privileged Exec tacacs server timeout Use this command to set the timeout value for communication with the TACACS servers The lt timeout gt parameter has a range of 1 30 and is the time out value in seconds Default 5 Format tacacs server timeout lt timeout gt Mode Global Config no tacacs server timeout Use this command to restore the default tim
491. ntry for the MAC address lt macaddr gt on the VLAN lt vlanid gt A packet with a specific destination MAC address in a specific VLAN is admitted only if the ingress port is defined in the set of source ports otherwise the packet is dropped On the egress side a packet that was admitted is sent through all ports that are defined in the set of destination ports The value of the lt macaddr gt parameter is a 6 byte hexadecimal number in the format of b1 b2 b3 b4 b5 b6 The following MAC addresses are restricted 00 00 00 00 00 00 01 80 C2 00 00 00 to 01 80 C2 00 00 0F 01 80 C2 00 00 20 to 01 80 C2 00 00 21 and FF FF FF FF FF FF The lt vlanid gt parameter must identify a valid VLAN The number of static mac filters supported on the system is different for MAC filters where source ports are configured and MAC filters where destination ports are configured e For unicast MAC address filters and multicast MAC address filters with source port lists the maximum number of static MAC filters supported is 20 e For multicast MAC address filters with destination ports configured the maximum number of static filters supported is 256 For example for current platforms you can configure the following combinations e Unicast MAC and source port max 20 e Multicast MAC and source port max 20 e Multicast MAC and destination port only max 256 e Multicast MAC and source ports and destination ports max 20 Format macfilter lt maca
492. o cos queue strict This command restores the default weighted scheduler mode for each specified queue Format no cos queue strict lt queue id 1 gt lt queue id 2 gt lt queue id n gt Modes Global Config Interface Config cos queue random detect This command activates weighted random early discard WRED for each specified queue on the interface Specific WRED parameters are configured using the random detect queue parms and the random detect exponential weighting constant commands When specified in Interface Config mode this command affects a single interface only whereas in Global Config mode it applies to all interfaces At least one but no more than n queue id values are specified with this command Duplicate queue id values are ignored Each queue id value ranges from 0 to n 1 where n is the total number of queues supported per interface The number n is platform dependant and corresponds to the number of supported queues traffic classes Format cos queue random detect lt queue id 1 gt lt queue id 2 gt lt queue id n gt Modes e Global Config Interface Config Quality of Service Commands 265 M4100 Series ProSAFE Managed Switches no cos queue random detect Use this command to disable WRED and restore the default tail drop operation for the specified queues on all interfaces or one interface Format no cos queue random detect lt queue id 1 gt lt queue id 2 gt
493. o recover the port issue no shutdown under the port manually Default 5 Format storm control broadcast level lt 0 100 gt Mode Global Config no storm control broadcast level This command sets the broadcast storm recovery threshold to the default value for all interfaces and disables broadcast storm recovery Format no storm control broadcast level Mode Global Config storm control broadcast rate Global Config Use this command to configure the broadcast storm recovery threshold for all interfaces in packets per second If the mode is enabled broadcast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic is dropped Therefore the rate of broadcast traffic is limited to the configured threshold Default 0 Format storm control broadcast rate lt 0 14880000 gt no storm control broadcast rate This command sets the broadcast storm recovery threshold to the default value for all interfaces and disables broadcast storm recovery Format no storm control broadcast rate Mode Global Config Switching Commands 100 M4100 Series ProSAFE Managed Switches storm control multicast Interface Config This command enables multicast storm recovery mode for an interface If the mode is enabled multicast storm recovery is active and if the rate of L2 multicast traffic ingressing on an interface inc
494. o the switch through the Web interface When access is disabled the user cannot login to the switch s Web server Format no ip http server Privileged EXEC ip http secure server Use this command to enable the secure socket layer for secure HTTP Default disabled Format ip http secure server Mode Privileged EXEC no ip http secure server Use this command to disable the secure socket layer for secure HTTP Format no ip http secure server Mode Privileged EXEC ip http java Use this command to enable the Web Java mode The Java mode applies to both secure and unsecure web connections Default Enabled Format ip http java Privileged EXEC Management Commands 461 M4100 Series ProSAFE Managed Switches no ip http java Use this command to disable the Web Java mode The Java mode applies to both secure and unsecure web connections Format no ip http java Mode Privileged EXEC ip http session hard timeout Use this command to configure the hard time out for unsecure HTTP sessions in hours Configuring this value to zero sets an infinite hard time out When this time out expires the user must reauthenticate This timer begins on initiation of the web session and is unaffected by the activity level of the connection Default 24 Format ip http session hard timeout lt 0 168 gt Privileged EXEC no ip http session hard timeout Use this command to restore
495. ode Group Shows the amount of time in seconds that a switch will wait for a report from a particular Membership group on a particular interface which is participating in the VLAN before deleting the Interval interface from the entry This value may be configured Max Response ___ Displays the amount of time the switch waits after it sends a query on an interface Time participating in the VLAN because it did not receive a report for a particular group on that interface This value may be configured Multicast Router Displays the amount of time to wait before removing an interface that is participating in Present the VLAN from the list of interfaces with multicast routers attached The interface is Expiration Time removed if a query is not received This value may be configured When you specify a value for lt vlan id gt the command output displays the information that is shown in the following table Term Definition VLAN Admin Indicates whether MLD Snooping is active on the VLAN Mode show mldsnooping mrouter interface Use this command to display information about statically configured multicast router attached interfaces Format show mldsnooping mrouter interface lt slot port gt Mode Privileged EXEC Switching Commands 173 M4100 Series ProSAFE Managed Switches Interface Shows the interface on which multicast router information is being displayed Multicast Router Indicates wh
496. og kernel lt crashlog number gt upload lt url gt proc verbos deleteall Mode Privileged EXEC Default Disabled Parameter Definition kernel View the crash log file for the kernel lt crashlog number gt Specifies the file number to view The system maintains up to four copies and the valid range is 1 4 upload lt url gt To upload the crash log to a TFTP server use the upload keyword and specify the required TFTP server information proc View the application process crashlog verbose Enable the verbose crashlog deleteall Delete all crash log files on the system debug dhcp packet Use this command to display debug information about DHCPva4 client activities and trace DHCPv4 packets to and from the local DHCPva4 client Default disabled Format debug dhcp packet transmit receive Mode Privileged EXEC no debug dhcp Use this command to disable the display of debug trace output for DHCPv4 client activity Format no debug dhcp packet transmit receive Mode Privileged EXEC Utility Commands 405 M4100 Series ProSAFE Managed Switches debug dot1x packet Use this command to enable dot1x packet debug trace Default disabled Format debug dot1x Mode Privileged EXEC no debug dot 1x packet Use this command to disable dot1x packet debug trace Format no debug dotlx Mode Privileged EXEC debug igmpsnooping packet
497. oin request is received on this port This is equivalent to registration normal in the IEEE 802 1Q standard Configured Tagging The tagging behavior for this port in this VLAN e Tagged Transmit traffic for this VLAN as tagged frames e Untagged Transmit traffic for this VLAN as untagged frames show vlan brief This command displays a list of all configured VLANs Format show vlan brief Mode e Privileged EXEC e User EXEC show vlan port This command displays VLAN port information Format show vlan port lt slot port gt all Mode Privileged EXEC User EXEC Switching Commands 57 M4100 Series ProSAFE Managed Switches Interface Valid slot and port number separated by forward slashes It is possible to set the parameters for all ports by using the selectors on the top line Port VLAN ID The VLAN ID that this port will assign to untagged frames or priority tagged frames received on this port The value must be for an existing VLAN The factory default is 1 Acceptable The types of frames that may be received on this port The options are VLAN only and Frame Types Admit All When set to VLAN only untagged frames or priority tagged frames received on this port are discarded When set to Admit All untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this port With either option VLAN tagged f
498. om the entry This value may be configured Maximum The amount of time the switch waits after it sends a query on an interface participating in Response Time the VLAN because it did not receive a report for a particular group on that interface This value may be configured Multicast Router The amount of time to wait before removing an interface that is participating in the VLAN Expiry Time from the list of interfaces with multicast routers attached The interface is removed if a query is not received This value may be configured show igmpsnooping mrouter interface This command displays information about statically configured ports Format show igmpsnooping mrouter interface lt slot port gt Mode Privileged EXEC Switching Commands 162 M4100 Series ProSAFE Managed Switches Term Definition Interface The port on which multicast router information is being displayed Multicast Router Indicates whether multicast router is statically enabled on the interface Attached VLAN ID The list of VLANs of which the interface is a member show igmpsnooping mrouter vlan This command displays information about statically configured ports Format show igmpsnooping mrouter vlan lt slot port gt Mode Privileged EXEC Term Definition Interface The port on which multicast router information is being displayed VLAN ID The list of VLANs of which the interface is a member s
499. omain name list is empty A maximum of 32 names can be entered in to this list Default none Format ip domain list lt name gt Mode Global Config no ip domain list Use this command to delete a name from a list Format no ip domain list lt name gt Mode Global Config ip name server Use this command to configure the available name servers Up to eight servers can be defined in one command or by using multiple commands The parameter lt server address gt is a valid IPv4 or IPv6 address of the server The preference of the servers is determined by the order they were entered ip name server lt server address1 gt lt server address2 gt lt server address8 gt Mode Global Config no ip name server Use this command to remove a name server Format no ip name server lt server addressl gt lt server address8 gt Mode Global Config Utility Commands 396 M4100 Series ProSAFE Managed Switches ip host Use this command to define static host name to address mapping in the host cache The lt name gt parameter is the host name The lt ip address gt parameter is the IP address of the host Default none Format ip host lt name gt lt ipaddress gt Mode Global Config no ip host Use this command to remove the name to address mapping Format no ip host lt name gt Mode Global Config ipv6 host Use this command to define static host
500. ombine multiple full duplex Ethernet links into a single logical link Network devices treat the aggregation as if it were a single link which increases fault tolerance and provides load sharing The LAG feature initially load shares traffic based upon the source and destination MAC address Assign the port channel LAG VLAN membership after you create a port channel If you do not assign VLAN membership the port channel might become a member of the management VLAN which can result in learning and switching issues A port channel LAG interface can be either static or dynamic but not both All members of a port channel must participate in the same protocols A static port channel interface does not require a partner system to be able to aggregate its member ports Note If you configure the maximum number of dynamic port channels LAGs that your platform supports additional port channels that you configure are automatically static addport This command adds one port to the port channel LAG The interface is a logical slot port number or a group ID of a configured port channel Note Before adding a port to a port channel set the physical mode of the port For more information see speed on page 22 Format addport lt logical slot port gt lag lt lag group 1d gt Interface Config deleteport Interface Config This command deletes the port from the port channel LAG The interface is a logical slot port number or a
501. ommand Default Highest available priority Format auto voip oui based priority lt priority value gt Mode Global Config Quality of Service Commands 313 M4100 Series ProSAFE Managed Switches no auto voip oui based priority This command is used to set the priority to the default value Format no auto voip oui based priority lt priority value gt Mode Global Config auto voip protocol based This command is used to configure the global protocol based auto VoIP remarking priority traffic class If the remark priority is configured the voice data of the session is remarked with the priority configured through this command Note You must enable tagging on auto VolP enabled ports to remark the voice data when it is egressed Default Traffic class 7 Format auto voip protocol based remark lt remark priority gt traffic class lt tc gt Mode e Global Config Interface Config no auto voip protocol based remark traffic class This command is used to set the traffic class to the default value Format no auto voip protocol based remark lt remark priority gt traffic class lt tc gt Mode e Global Config e Interface Config show auto voip Use this command to display the auto VoIP settings on the interface or interfaces of the switch Format show auto voip protocol based oui based interface lt slot port gt all Mode Privileged EXEC
502. on a locked port Format show port security violation lag lt lag intf num gt lt slot port gt Mode Privileged EXEC Term Definition MAC Address MAC Address of discarded packet on locked port LLDP 802 1AB Commands This section describes the command you use to configure Link Layer Discovery Protocol LLDP which is defined in the IEEE 802 1AB specification LLDP allows stations on an 802 LAN to advertise major capabilities and physical descriptions The advertisements allow a network management system NMS to access and display this information lldp transmit Use this command to enable the LLDP advertise capability Default enabled Format lldp transmit Mode Interface Config no Ildp transmit Use this command to return the local data transmission capability to the default Format no lldp transmit Interface Config Switching Commands 182 M4100 Series ProSAFE Managed Switches lldp receive Use this command to enable the LLDP receive capability Default enabled Format lldp receive Mode Interface Config no Ildp receive Use this command to return the reception of LLDPDUs to the default value Format fro lldp receive Mode Interface Config lldp timers Use this command to set the timing parameters for local data transmission on ports enabled for LLDP The lt interval seconds gt determines the number of seconds to wait between tra
503. on for the specified interface and direction The lt slot port gt parameter specifies a valid interface for the system Note This command is only allowed while the DiffServ administrative mode is enabled Format show policy map interface lt slot port gt in out Mode Privileged EXEC Interface Valid slot and port number separated by forward slashes Direction The traffic direction of this interface service Operational The current operational status of this DiffServ service interface Status Policy Name The name of the policy attached to the interface in the indicated direction The information that is shown in the following table is repeated for each class instance within this policy Term Definition Class Name The name of this class instance In Discarded A count of the packets discarded for this class instance for any reason due to DiffServ Packets treatment of the traffic class Quality of Service Commands 292 M4100 Series ProSAFE Managed Switches show service policy This command displays a summary of policy oriented statistics information for all interfaces in the specified direction Format show service policy in out Mode Privileged EXEC The information that is shown in the following table is repeated for each interface and direction only those interfaces configured with an attached policy are shown Term Definition Interface Valid
504. on history lt index number gt Mode Interface Config Utility Commands 435 M4100 Series ProSAFE Managed Switches show rmon This command displays the entries in the RMON alarm table Format show rmon alarms alarm lt alarm index gt Mode Privileged Exec show rmon collection history This command displays the entries in the RMON history control table Format show rmon collection history Mode Privileged Exec show rmon events This command displays the entries in the RMON event table Format show rmon events Mode Privileged Exec Command example NETGEAR Switch show rmon events Index Description Type Community Owner Last time sent 1 test log public MIB 0 days 0 h 0 m 0 s show rmon history This command displays the specified entry in the RMON history table show rmon history lt index gt errors other throughput Privileged Exec Command example NETGEAR Switch show rmon history 1 throughput Sample set 1 Maximum table size 270 Time Octets Packets Broadcast Multicast Util Utility Commands 436 M4100 Series ProSAFE Managed Switches show rmon log This command displays the entries in the RMON log table Format show rmon log Mode Privileged Exec Command example NETGEAR Switch show rmon log Maximum table size 100 Event Description Time show rmon statistics interface This command displays t
505. on history table captured during successful and unsuccessful authentication on all interface or the specified interface Format clear dotlx authentication history slot port Mode Global Config dot1x dynamic vlan enable Use this command to enable the switch to create VLANs dynamically when a RADIUS assigned VLAN does not exist in the switch Format dot 1x dynamic vlan enable Mode Global Config Default Disabled no dot1x dynamic vlan enable Use this command to disable the switch from creating VLANs dynamically when a RADIUS assigned VLAN does not exist in the switch Format fro dotlx dynamic vlan enable Mode Global Config Switching Commands 87 M4100 Series ProSAFE Managed Switches dot1x system auth control monitor Use this command to enable the 802 1X monitor mode on the switch The purpose of Monitor mode is to help troubleshoot port based authentication configuration issues without disrupting network access for hosts connected to the switch In Monitor mode a host is granted network access to an 802 1 X enabled port even if it fails the authentication process The results of the process are logged for diagnostic purposes Format dot1x system auth control monitor Mode Global Config Default Disabled no dot1x system auth control monitor Use this command to disable the 802 1X monitor on the switch Format no dotlx system auth control monitor Mode Global Config
506. on operating system and networking software supported in the device Port Description Describes the port in an alpha numeric format The port description is configurable System Indicates the primary function s of the device Capabilities Supported System Shows which of the supported system capabilities are enabled Capabilities Enabled Management For each interface on the remote device with an LLDP agent lists the type of address the Address remote LLDP agent uses and specifies the address used to obtain information related to the device Time To Live The amount of time in seconds the remote device s information received in the LLDPDU should be treated as valid information Command example NETGEAR Switch show lldp remote device detail 0 7 LLDP Remote Device Detail Local Interface 0 7 Remote Identifier 2 Chassis ID Subtype MAC Address Switching Commands 189 M4100 Series ProSAFE Managed Switches Chassis ID 00 FC E3 90 01 0F Port ID Subtype MAC Address Port ID 00 FC E3 90 01 11 System Name System Description Port Description System Capabilities Supported System Capabilities Enabled Time to Live 24 seconds show Ildp local device Use this command to display summary information about the advertised LLDP local data This command can display summary information or detail for each interface show lldp local device lt slot port gt all
507. on the destination IPv6 address of a packet Defaut Format match dstip6 lt destination ipv6 prefix prefix length gt Mode Ipv6 Class Map Config match dstl4port This command adds to the specified class definition a match condition based on the destination layer 4 port of a packet using a single keyword or numeric notation To specify the match condition as a single keyword the value for lt portkey gt is one of the supported port name keywords The currently supported lt portkey gt values are domain echo ftp ftpdata http smtp snmp telnet tftp or www Each of these translates into its equivalent port number To specify the match condition using a numeric notation one layer 4 port number is required The port number is an integer from O to 65535 Default none Format match dstl4port lt portkey gt lt 0 65535 gt Mode e Class Map Config e Ipv6 Class Map Config Quality of Service Commands 276 M4100 Series ProSAFE Managed Switches match ip dscp This command adds to the specified class definition a match condition based on the value of the IP DiffServ Code Point DSCP field in a packet which is defined as the high order six bits of the Service Type octet in the IP header the low order two bits are not checked The lt dscpva1 gt value is specified as either an integer from 0 to 63 or symbolically through one of the following keywords af11 af12 af13 af21 af22 af23 af31 af3
508. onal but the most frequently used parameters appear in the same relative order as shown in the command format The assign queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule The allowed lt queue id gt value is 0 n 1 where n is the number of user configurable queues available for the hardware platform The assign queue parameter is valid only for a permit rule The mirror parameter allows the traffic matching this rule to be copied to the specified lt slot port gt while the redirect parameter allows the traffic matching this rule to be forwarded to the specified lt slot port gt The assign queue and redirect parameters are only valid for a permit rule The time range parameter allows imposing time limitation on the IPv6 ACL rule as defined by the parameter lt t ime range name gt f a time range with the specified name does not exist and the IPv6 ACL containing this ACL rule is applied to an interface or bound to a VLAN then the ACL rule is applied immediately If a time range with specified name exists and the IPv6 ACL containing this ACL rule is applied to an interface or bound to a VLAN then the ACL rule is applied when the time range with specified name becomes active The ACL rule is removed when the time range with specified name becomes inactive Format deny permit every icmp igmp ipv6 tcp udp lt number gt log timerange lt time ra
509. onfig Parameter Description all Specifies all VLANs from 1 to 4093 This keyword is not allowed for commands that do not permit all VLANs in the list to be set at the same time add Adds the defined list of VLANs to those currently set instead of replacing the list remove Removes the defined list of VLANs from those currently set instead of replacing the list Valid IDs are from 1 to 4093 Extended range VLAN IDs of the form XY or X Y Z are valid in this command except Lists the VLANs that must be calculated by inverting the defined list of VLANs VLANs are added except the ones specified lt vlan list gt Either a single VLAN number from 1 to 4093 or a continuous range of VLANs described by two VLAN numbers the lesser one first separated by a hyphen no switchport trunk allowed vlan This command resets the list of allowed VLANs on the trunk port to its default value Format no switchport trunk allowed vlan Mode Interface Config switchport trunk native vlan Use this command to configure the trunk port native VLAN PVID parameter of the switch port Any ingress untagged packets on the port are tagged with the value of the native VLAN Switching Commands 60 M4100 Series ProSAFE Managed Switches The native VLAN must be in the allowed VLAN list for tagging of received untagged packets Otherwise untagged packets are discarded Packets marked with the native VLAN are transmitted
510. onnections such as Telnet is suspended while the output is being generated and displayed If you use a text based configuration file the show running config command displays only configured physical interfaces that is if any interface only contains the default configuration that interface will be skipped from the show running config command output This is true for any configuration mode that contains nothing but default configuration That is the command to enter a particular config mode followed immediately by its exit command are both omitted from the output of the show running config command and hence from the startup config file when the system configuration is saved This command captures the current settings of the trapflag status e If all the flags are enabled then the comma nd displays trapflags all e If all the flags in a particular group are enabled then the command displays trapflags group name all Utility Commands 349 M4100 Series ProSAFE Managed Switches If some but not all of the flags in that group are enabled the command displays trapflags groupname flag name Format show running config all lt scriptname gt Privileged EXEC show running config interface This command shows the current configuration on a particular interface The interface could be a physical port or a virtual port like a LAG or VLAN The output captures how the configuration differs from the factory default val
511. or VLAN This is the amount of time in seconds that a switch waits for a query to be received on an interface before the interface is removed from the list of interfaces with multicast routers attached The range is 0 3600 seconds A value of 0 indicates an infinite timeout that is no expiration Default 0 Format set mld mcrtexpiretime lt vlan id gt lt 0 3600 gt Mode e Global Config Interface Config no set mid mcrtexpiretime Use this command to set the Multicast Router Present Expiration time to 0 The time is set for the system on a particular interface or a VLAN Format no set mld mcrtexpiretime lt vlan id gt Mode Global Config Interface Config set mid mrouter Use this command to configure the VLAN ID for the VLAN that has the multicast router attached mode enabled Format set mld mrouter lt vlan id gt Mode Interface Config Switching Commands 171 M4100 Series ProSAFE Managed Switches no set mld mrouter Use this command to disable multicast router attached mode for a VLAN with a particular VLAN ID Format no set mld mrouter lt vlan id gt Mode Interface Config set mid mrouter interface Use this command to configure the interface as a multicast router attached interface When configured as a multicast router interface the interface is treated as a multicast router attached interface in all VLANs Default disabled Format
512. or extended access lists Format no access list lt accesslistnumber gt Mode Global Config Quality of Service Commands 299 M4100 Series ProSAFE Managed Switches ip access list This command creates an extended IP access control list ACL identified by lt name gt consisting of classification fields defined for the IP header of an IPv4 frame The lt name gt parameter is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IP access list If an IP ACL by this name exists this command enters IPv4 Access List config mode to allow updating the existing IP ACL Note The CLI mode changes to IPv4 Access List Config mode when you successfully execute this command Format ip access list lt name gt Mode Global Config no ip access list This command deletes the IP ACL identified by lt name gt from the system Format no ip access list lt name gt ip access list rename This command changes the name of an IP access control list ACL The lt name gt parameter is the names of an existing IP ACL The lt newname gt parameter is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IP access list This command fails is an IP ACL by the name lt newname gt exists Format ip access list rename lt name gt lt newname gt deny permit IP ACL This command creates a new rule for the current IP access list Each
513. or to enable a feature that is disabled by default Only the configuration commands are available in the no form Managed Switch Modules Managed switch software consists of flexible modules that can be applied in various combinations to develop advanced Layer 2 3 4 products The commands and command modes available on your switch depend on the installed modules Additionally for some show commands the output fields might change based on the modules included in the software The software suite includes the following modules e Switching Layer 2 e Routing Layer 3 e Quality of Service e Management CLI web UI and SNMP Command Modes The CLI groups commands into modes according to the command function Each of the command modes supports specific software commands The commands in one mode are not available until you switch to that particular mode except for the User EXEC mode commands You can execute the User EXEC mode commands in the Privileged EXEC mode The command prompt changes in each command mode to help you identify the current mode The following table describes the command modes and the prompts visible in that mode Note The command modes available on your switch depend on the software modules that are installed For example a switch that does not support BGPv4 does not provide the Router BGPv4 Command Mode Table 5 CLI Command Modes Command Mode Prompt Mode Description User EXEC Switch gt Contains a limi
514. ords strength maximum repeated characters Use this command to reset the maximum number of repeated characters to the default value Format no passwords strength maximum repeated characters Mode Global Config passwords strength minimum character classes Use this command to enforce a minimum number of characters classes that a password should contain Character classes are uppercase letters lowercase letters numeric characters and special characters The valid range is 0 4 The default is 4 Default 4 Format passwords strength minimum character classes lt number gt Mode Global Config no passwords strength minimum character classes Use this command to reset the minimum number of character classes to the default value Format no passwords strength minimum character classes Mode Global Config passwords strength exclude keyword Use this command to exclude the specified keyword while configuring the password The password does not accept the keyword in any form in between the string case insensitive and reverse as a substring User can configure up to a maximum of three keywords Format passwords strength exclude keyword lt keyword gt Mode Global Config Management Commands 478 M4100 Series ProSAFE Managed Switches no passwords strength exclude keyword Use this command to reset the restriction for the specified keyword or all the keywords configured Format
515. ority Use this command to configure the priority value associated with the Actor s SystemID Format no lacp actor system priority Mode Interface Config Switching Commands 113 M4100 Series ProSAFE Managed Switches lacp partner admin key Use this command to configure the administrative value of the key for the protocol partner The valid range for lt key gt is 0 65535 Default 0x0 Format lacp partner admin key lt key gt Mode Interface Config Note This command is only applicable to physical interfaces no lacp partner admin key Use this command to set the administrative value of the key for the protocol partner to the default Format no lacp partner admin key Interface Config lacp partner admin state individual Use this command to set LACP partner admin state to individual Format lacp partner admin state individual Mode Interface Config Note This command is only applicable to physical interfaces no lacp partner admin state individual Use this command to set the LACP partner admin state to aggregation Format no lacp partner admin state individual Mode Interface Config Switching Commands 114 M4100 Series ProSAFE Managed Switches lacp partner admin state longtimeout Use this command to set LACP partner admin state to longtimeout Format lacp partner admin state longtimeout Mode Interface Config Note This comman
516. ority acarreo odas 35 SPANNING SMCSMSEVIAM airada acero rr EEE oR cra re 36 spanning tree port Ode voii eat 36 spanning tree portmodedll 5 sis asraKivcerudoces so005 459595 dlrs 37 Spanining tree tengQuald icvwlideeatswhabobe a tad sssdasede 32 SPOCO E EEEE ETE PETET E E EAE EEE ET da ed deanna ananndues abies Ge aad Seeds 22 speed al cccccasdcagagagaKapmnnnmierGITRGHOSSOSOGE OOeHOo eM MEDEp AS ate 22 SSNEOMIMAXSESSIONS lt 458 SSNCONUMEOUE ccccovereyohaacanincieeEEGEdeneRioeaseyessnoreUNnnvuUGEaNGeamswowawere veda 458 storm control broadcast Global Config ccc cece ccc ete ene eee eennees 99 storm control broadcast Interface Config 2 0 c cece cece rre 98 storm control broadcast level Global Config 0 c cece eee rr 99 storm control broadcast level Interface Config cece cnet e eee nnees 98 storm control broadcast rate Global Config 0ooooccococccccccncccco rr 100 storm control broadcast rate Interface Config eee rr 99 storm control multicast Global Config ovoccoocrorconoroarasasanrca aerea 102 storm control multicast Interface Config ccc cece cece ete teen ee teen eee eens 101 storm control multicast level Global Config 0 c cece ence eee rr 102 storm control multicast level Interface Config 0 ccc ccc eet eee ee teen eens 101 576 M4100 Series ProSAFE Managed Switches storm control multicast rate Global
517. orm color class map Used with the police command where the fields for the conform level are specified The lt class map name gt parameter is the name of an existing DiffServ class map Note This command might only be used after specifying a police command for the policy class instance Format conform color lt class map name gt Mode Policy Class Map Config class This command creates an instance of a class definition within the specified policy for defining treatment of the traffic class through subsequent policy attribute statements The lt classname gt is the name of an existing DiffServ class Note This command causes the specified policy to create a reference to the class definition Note The CLI mode is changed to Policy Class Map Config when this command is successfully executed Format class lt classname gt Mode Policy Map Config Quality of Service Commands 282 M4100 Series ProSAFE Managed Switches no class This command deletes the instance of a particular class and its defined treatment from the specified policy lt classname gt is the names of an existing DiffServ class Note This command removes the reference to the class definition for the specified policy Format no class lt classname gt Mode Policy Map Config mark cos This command marks all packets for the associated traffic stream with the specified Class of Service value in the priority field of
518. orm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic is dropped Therefore the rate of multicast traffic is limited to the configured threshold Switching Commands 101 M4100 Series ProSAFE Managed Switches Default 0 Format storm control multicast rate lt 0 14880000 gt Interface Config no storm control multicast rate This command sets the multicast storm recovery threshold to the default value for an interface and disables multicast storm recovery Format no storm control multicast rate Mode Interface Config storm control multicast Global Config This command enables multicast storm recovery mode for all interfaces If the mode is enabled multicast storm recovery is active and if the rate of L2 multicast traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore the rate of multicast traffic will be limited to the configured threshold Default disabled Format storm control multicast Mode Global Config no storm control multicast This command disables multicast storm recovery mode for all interfaces Format no storm control multicast Mode Global Config storm control multicast level Global Config This command configures the multicast storm recovery threshold for all interfaces as a percentage of link speed and enab
519. ormat ip domain lookup Mode Global Config no ip domain lookup Use this command to disable the DNS client Format fro ip domain lookup Mode Global Config ip domain name Use this command to define a default domain name that the software uses to complete unqualified host names names with a domain name By default no default domain name is configured in the system lt name gt may not be longer than 255 characters and should not include an initial period This lt name gt should be used only when the default domain name list configured using the ip domain list command is empty Defaut Format ip domain name lt name gt Mode Global Config Command example The CLI command ip domain name yahoo com configures yahoo com as a default domain name For an unqualified hostname xxx a DNS query is made to find the IP address corresponding to xxx yahoo com Utility Commands 395 M4100 Series ProSAFE Managed Switches no ip domain name Use this command to remove the default domain name configured using the ip domain name command Format no ip domain name Mode Global Config ip domain list Use this command to define a list of default domain names to complete unqualified names By default the list is empty Each name must be no more than 256 characters and should not include an initial period The default domain name configured using the ip domain name Command is used only when the default d
520. ory This ensures that users do not reuse their passwords often The valid range is 0 10 Default 0 Format passwords history lt 0 10 gt Mode Global Config no passwords history Use this command to set the password history to the default value Format fro passwords history Mode Global Config passwords aging Use this command to implement aging on passwords for local users When a user s password expires the user will be prompted to change it before logging in again The valid range is 1 365 The default is 0 or no aging Default 0 Format passwords aging lt 1 365 gt Mode Global Config no passwords aging Use this command to set the password aging to the default value Format no passwords aging Mode Global Config Management Commands 474 M4100 Series ProSAFE Managed Switches passwords lock out Use this command to strengthen the security of the switch by locking user accounts that have failed login due to wrong passwords When a lockout count is configured a user that is logged in must enter the correct password within that count Otherwise the user will be locked out from further switch access Only a user with read write access can reactivate a locked user account Password lockout does not apply to logins from the serial console The valid range is 1 5 The default is 0 or no lockout count enforced peut fo Format passwords lock out lt 1 5 gt
521. os as sec cos set cos transmit lt 0 7 gt set sec cos transmit lt 0 7 gt set prec transmit lt 0 7 gt set dscp transmit lt 0 63 gt transmit violate action drop set cos as sec cos set cos transmit lt 0 7 gt set sec cos transmit lt 0 7 gt set prec transmit lt 0 7 gt set dscp transmit lt 0 63 gt transmit Mode Policy Class Map Config policy map This command establishes a new DiffServ policy The lt policyname gt parameter is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying the policy The type of policy is specific to the inbound traffic direction as indicated by the parameter Note The CLI mode is changed to Policy Map Config when this command is successfully executed Format policy map lt policyname gt in out Mode Global Config Quality of Service Commands 285 M4100 Series ProSAFE Managed Switches no policy map This command eliminates an existing DiffServ policy The lt policyname gt parameter is the name of an existing DiffServ policy This command might be issued at any time If the policy is referenced by one or more interface service attachments this delete attempt fails Format no policy map lt policyname gt policy map rename This command changes the name of a DiffServ policy The lt policyname gt is the name of an existing DiffServ class The lt newpolicyname gt parameter is a case s
522. ot The Identifier of the designated root for this port Root Path Cost The path cost to get to the root bridge for this instance The root path cost is zero if the bridge is the root bridge for that instance Designated Bridge Identifier of the bridge with the Designated Port Bridge Designated Port Port on the Designated Bridge that offers the lowest cost to the LAN Identifier Loop The current loop inconsistent state of this port in this MST instance When in loop Inconsistent inconsistent state the port has failed to receive BPDUs while configured with loop guard State enabled Loop inconsistent state maintains the port in a blocking state until a subsequent BPDU is received Switching Commands 41 M4100 Series ProSAFE Managed Switches Transitions Into The number of times this interface has transitioned into loop inconsistent state Loop Inconsistent State Transitions Out The number of times this interface has transitioned out of loop inconsistent state of Loop Inconsistent State If you specify 0 defined as the default CIST ID as the lt mstid gt this command displays the settings and parameters for a specific switch port within the Common and Internal Spanning Tree The lt slot port gt is the desired switch port In this case the following are displayed Term Definition Port Identifier The port identifier for this port within the CST Port Priority The priority of the po
523. ot image file bootfile lt filename gt Mode DHCP Pool Config Utility Commands 386 M4100 Series ProSAFE Managed Switches no bootfile This command deletes the boot image name Format no bootfile Mode DHCP Pool Config domain name DHCP Pool Config This command specifies the domain name for a DHCP client The lt domain gt argument specifies the domain name string of the client Default none Format domain name lt domain gt DHCP Pool Config no domain name This command removes the domain name Format no domain name Mode DHCP Pool Config netbios name server This command configures NetBIOS Windows Internet Naming Service WINS name servers that are available to DHCP clients One IP address is required although one can specify up to eight addresses in one command line Servers are listed in order of preference address1 is the most preferred server address2 is the next most preferred server and so on Default none Format netbios name server lt address gt lt address2 gt lt address8 gt DHCP Pool Config no netbios name server This command removes the NetBIOS name server list Format no netbios name server Mode DHCP Pool Config Utility Commands 387 M4100 Series ProSAFE Managed Switches netbios node type The command configures the NetBIOS node type for Microsoft Dynamic Host Configuration Pro
524. ounting server Responses Malformed Responses The number of RADIUS packets received on the accounting port from this server The number of malformed RADIUS Accounting Response packets received from this server Malformed packets include packets with an invalid length Bad authenticators or signature attributes or unknown types are not included as malformed accounting responses Bad Authenticators Pending Requests Timeouts The number of RADIUS Accounting Response packets containing invalid authenticators received from this accounting server The number of RADIUS Accounting Request packets sent to this server that have not yet timed out or received a response The number of accounting time outs to this server Unknown Types The number of RADIUS packets of unknown types which were received from this server on the accounting port Packets Dropped The number of RADIUS packets received from this server on the accounting port and dropped for some other reason Command example NETGEAR Switch RADIUS Accounting Server Name Host Address Round Trip Time REQUCSES 2546 nae Ks Retransmissions show radius accounting statistics 192 168 37 200 Default_RADIUS_Server 192 168 37 200 Management Commands 511 M4100 Series ProSAFE Managed Switches RESPONSES oaae a da a te foe vw Sela ey aver av arms oan 0 Malformed RESPONSES ee eee ee ee ee eee eee 0 Bad
525. out the periodic general query The amount of time to wait in the Non Querier operational state before moving to a Querier state If you specify a value for the lt vlan id gt argument the command displays the information that is shown in the following table Operational Max Response Time Term Description VLAN Admin Indicates whether iGMP Snooping Querier is active on the VLAN Mode VLAN Indicates whether IGMP Snooping Querier is in Querier or Non Querier state When Operational the switch is in Querier state it will send out periodic general queries When in State Non Querier state it will wait for moving to Querier state and does not send out any queries VLAN Indicates the time to wait before removing a Leave from a host upon receiving a Leave request This value is calculated dynamically from the Queries received from the network If the Snooping Switch is in Querier state then it is equal to the configured value Querier Election Participation Querier VLAN Address Operational Version Last Querier Address Indicates whether the IGMP Snooping Querier participates in querier election if it discovers the presence of a querier in the VLAN The IP address will be used in the IPv4 header while sending out IGMP queries on this VLAN It can be configured using the appropriate command The version of IPv4 will be used while sending out IGMP queries on this VLAN Indicates the IP address of the
526. p nameserver netbios dgm netbios ns ntp pim auto rip rip tacacs tftp time Mode Interface Config Routing Commands 256 M4100 Series ProSAFE Managed Switches Parameter Description The IPv4 unicast or directed broadcast address to which relayed UDP broadcast packets are sent The IP address cannot be in a subnet on the interface where the relay entry is configured and cannot be an IP address configured on any interface of the local router lt ip address gt lt dest udp port gt A destination UDP port number from 0 to 65535 The destination UDP port may be optionally specified by its name Whether a port is specified by its number or its name has no effect on behavior The names recognized are as follows e dhcp port 67 e domain port 53 e isakmp port 500 e mobile ip port 434 nameserver port 42 e netbios dgm port 138 e netbios ns port 137 ntp port 123 e pim auto rp port 496 e rip port 520 e tacacs port 49 e tftp port 69 e time port 37 Other ports must be specified by number port name options no ip helper address Use this command to remove the IP address from the previously configured list The no command without an lt ip address gt argument removes the entire list of helper addresses on that interface Format no ip helper address lt ip address gt lt dest udp port gt dhcp domain isakmp mobile ip nam
527. played Trusted If it is enabled DHCP snooping considers the port as trusted The factory default is disabled Log Invalid Pkts If it is enabled DHCP snooping application logs invalid packets on the specified interface Switching Commands 142 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show ip dhcp snooping DHCP snooping is Disabled DHCP snooping source MAC verification is enabled DHCP snooping is enabled on the following VLANs 11 30 40 Interface Trusted Log Invalid Pkts 0 1 Yes No 0 2 No Yes 0 3 No Yes 0 4 No No 0 6 No No show ip dhcp snooping binding Use this command to display the DHCP Snooping binding entries To restrict the output use the following options e Dynamic Restrict the output based on DCHP snooping e Interface Restrict the output based on a specific interface e Static Restrict the output based on static entries e VLAN Restrict the output based on VLAN Format show ip dhcp snooping binding static dynamic interface lt slot port gt lt vlan id gt Mode e Privileged EXEC User EXEC Term Definition MAC Address Displays the MAC address for the binding that was added The MAC address is the key to the binding database IP Address Displays the valid IP address for the binding rule VLAN The VLAN for the binding rule Interface The interface to add a binding into the DHCP snooping interface Type Binding
528. ponds to the desired existing multiple spanning tree instance to be removed Format no spanning tree mst instance lt mstid gt Mode Global Config spanning tree mst priority This command sets the bridge priority for a specific multiple spanning tree instance The parameter lt mst id gt is a number that corresponds to the desired existing multiple spanning tree instance The priority value is a number within a range of 0 61440 in increments of 4096 If you specify O defined as the default CIST ID as the lt mstid gt this command sets the Bridge Priority parameter to a new value for the Common and Internal Spanning Tree The bridge priority value is a number within a range of 0 61440 The twelve least significant bits are masked according to the 802 1s specification This causes the priority to be rounded down to the next lower valid priority Default 32768 Format spanning tree mst priority lt mstid gt lt 0 61440 gt Mode Global Config no spanning tree mst priority This command sets the bridge priority for a specific multiple spanning tree instance to the default value The parameter lt mst id gt is a number that corresponds to the desired existing multiple spanning tree instance Switching Commands 35 M4100 Series ProSAFE Managed Switches If O defined as the default CIST ID is passed as the lt mstid gt this command sets the Bridge Priority parameter for the Common and Internal Span
529. portid gt Mode Mail Server Config username Mail Server Config Use this command to configure the login ID that the switch uses to authenticate with the SMTP server Format username lt name gt Mode Mail Server Config password Mail Server Config Use this command to configure the password that the switch uses to authenticate with the SMTP server Format password lt password gt Mode Mail Server Config show mail server config Use this command to display information about the email alert configuration Format show mail server lt ip address gt lt hostname gt all config Mode Privileged EXEC Term Definition No of mail The number of SMTP servers configured on the switch servers configured Email Alert Mail The IPv4 IPv6 address or DNS host name of the configured SMTP server Server Address Email Alert Mail The TCP port the switch uses to send email to the SMTP server Server Port Utility Commands 364 M4100 Series ProSAFE Managed Switches Term Definition Email Alert Email Alert Username Email Alert Password Security Protocol server The security protocol TLS or none the switch uses to authenticate with the SMTP The username the switch uses to authenticate with the SMTP server The password the switch uses to authenticate with the SMTP server System Utility and Clear Commands This section describ
530. precated Backend Current state of the backend authentication state machine Possible values are Authentication Request Response Success Fail Timeout Idle and Initialize When MAC based State authentication is enabled on the port this parameter is deprecated Quiet Period The timer used by the authenticator state machine on this port to define periods of time in which it will not attempt to acquire a supplicant The value is expressed in seconds and will be in the range 0 and 65535 Switching Commands 90 M4100 Series ProSAFE Managed Switches Term Definition Transmit Period The timer used by the authenticator state machine on the specified port to determine when to send an EAPOL EAP Request Identity frame to the supplicant The value is expressed in seconds and will be in the range of 1 and 65535 Guest VLAN ID The guest VLAN identifier configured on the interface Guest VLAN The time in seconds for which the authenticator waits before authorizing and placing the Period port in the Guest VLAN if no EAPOL packets are detected on that port Supplicant The timer used by the authenticator state machine on this port to timeout the supplicant Timeout The value is expressed in seconds and will be in the range of 1 and 65535 Server Timeout The timer used by the authenticator on this port to timeout the authentication server The value is expressed in seconds and will be in the range of 1 and 65535
531. preferences Modes e Privileged EXEC e User EXEC Term Definition Local The local route preference value Static The static route preference value OSPF Intra The OSPF Intra route preference value OSPF Inter The OSPF Inter route preference value OSPF External The OSPF External route preference value RIP The RIP route preference value show ip stats This command displays IP statistical information Refer to RFC 1213 for more information about the fields that are displayed Format show ip stats Modes e Privileged EXEC e User EXEC Routing Commands 250 M4100 Series ProSAFE Managed Switches show routing heap summary This command displays a summary of the memory allocation from the routing heap The routing heap is a chunk of memory set aside when the system boots for use by the routing applications Format show routing heap summary Mode Privileged EXEC Term Description Heap Size The amount of memory in bytes allocated at startup for the routing heap Memory In Use The number of bytes currently allocated Memory on Free List The number of bytes currently on the free list When a chunk of memory from the routing heap is freed it is placed on a free list for future reuse Memory Available in The number of bytes in the original heap that have never been allocated Heap In Use High Water The maximum memory in use since the system last reboot
532. ps linkmode on page 495 Management Commands 498 M4100 Series ProSAFE Managed Switches Format Mode no snmp trap link status all Global Config show snmpcommunity Use this com You can add mand to display SNMP community information Six communities are supported change or delete communities The switch does not need to be reset for changes to take effect The SNMP agent of the switch complies with SNMP versions 1 2 or 3 For more information about the SNMP specification see the SNMP RFCs The SNMP agent sends traps through TCP IP to an external SNMP manager based on the SNMP configuration the trap receiver and other SNMP community parameters Format show snmpcommunity Mode Privileged EXEC Field Definition SNMP The community string to which this entry grants access A valid entry is a case sensitive Community alphanumeric string of up to 16 characters Each row of this table must contain a unique Name community name Client IP An IP address or portion thereof from which this device will accept SNMP packets with Address the associated community The requesting entity s IP address is ANDed with the Subnet Mask before being compared to the IP address Note If the Subnet Mask is set to 0 0 0 0 an IP address of 0 0 0 0 matches all IP addresses The default value is 0 0 0 0 Client IP Mask A mask to be ANDed with the requesting entity s IP address before comparison with IP a
533. pt Commands 5 520 Chapter 9 Green Ethernet Commands Green Feature SUPPOl Ess i245 chni iii acacia 523 Energy Detect Mode users rre 523 Energy Efficient Ethernet EEE 4 46 ic0ananancesereduetecacaa eager 524 Green Ethernet ComManGs s ccxcccccce sade padinae eben no aa eRe ge aads 524 Chapter 10 Log Messages GCOFE ced maitaneteuereGeuaucieeh dadaceeusureauneaesagusadt sales 533 WHITES sagire tenerent ae dorso roce 535 Manage MENE erario das 537 SWITCHING sidecar ide 541 OOS arrasa rra radar dps 547 Rotiting IPVO ROUND versos ca 548 MUNCIE 2 vctacemihitehese tates idssadidacaeeest cansa 551 StACKING ancora rr loa 553 M4100 Series ProSAFE Managed Switches Technologies O S Support Command List Using the Command Line Interface The command line interface CLI is a text based way to manage and monitor the system You can access the CLI by using a direct serial connection or by using a remote logical connection with telnet or SSH This chapter describes the CLI syntax conventions and modes It contains the following sections e Command Syntax e Command Conventions e Common Parameter Values e Slot Port Naming Convention e Using a Command s No Form e Managed Switch Modules e Command Modes e Command Completion and Abbreviation e CLI Error Messages e CLI Line Editing Conventions e Using CLI Help e Accessing the CLI Note For more information about the topics covered
534. quence number If the sequence number is not specified by the user a Sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used Valid range is 1 4 294 967 295 IPv6 Access Control List ACL Commands This section describes the commands you use to configure IPv6 ACL settings IPv6 ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources The following rules apply to IPv6 ACLs e The maximum number of ACLs you create is 100 regardless of type e The system supports only Ethernet II frame types The maximum number of rules per IPv6 ACL is hardware dependent Quality of Service Commands 305 M4100 Series ProSAFE Managed Switches ipv6 access list This command creates an IPv6 access control list ACL identified by lt name gt consisting of classification fields defined for the IP header of an IPv6 frame The lt name gt parameter is a case sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IPv6 access list If an IPv6 ACL by this name exists this command enters IPv6 Access List config mode to allow updating the existing IPv6 ACL Note The CLI mode changes to IPv6 Access List Config mode when you successfully execute this command Format ipv6 access list lt name gt Mode Global Config no ipv6 access list This command deletes the
535. r admin state longtimeout Mode Interface Config Note This command is only applicable to physical interfaces lacp actor admin state passive Use this command to set the LACP actor admin state to passive lacp actor admin state passive Mode Interface Config Note This command is only applicable to physical interfaces no lacp actor admin state passive Use this command to set the LACP actor admin state to active Format no lacp actor admin state passive Mode Interface Config Switching Commands 112 M4100 Series ProSAFE Managed Switches lacp actor port priority Use this command to configure the priority value assigned to the Aggregation Port The valid range for lt priority gt is 0 255 Default 0x80 Format lacp actor port priority lt priority gt Interface Config Note This command is only applicable to physical interfaces no lacp actor port priority Use this command to configure the default priority value assigned to the Aggregation Port Format no lacp actor port priority Mode Interface Config lacp actor system priority Use this command to configure the priority value associated with the LACP Actor s SystemID The range for lt priority gt is 0 65535 Default 32768 Format lacp actor system priority lt priority gt Mode Interface Config Note This command is only applicable to physical interfaces no lacp actor system pri
536. r enters the domain name and user name the managed switch sends the domain name and user name that the user enters in the format domainnamelusername to the RADIUS server Domain disabled In this case the domain name is not included when the user name is sent to the RADIUS server Mode Global Config no domain name This command is used to disable the domain name in the managed switch Format no domain name Mode Global Config domain name enable Global Config This command enables the domain name functionality Format domain name enable Mode Global Config Management Commands 488 M4100 Series ProSAFE Managed Switches no domain name enable This command disables the domain name functionality Format no domain name enable Mode Global Config show domain name This command displays the configured domain name Format show domain name Mode Privileged EXEC Command example NETGEAR Switch show domain name Domain Enable Domain name sabe aaa ias user username The Internal Authentication Server IAS database is a dedicated internal database used for local authentication of users for network access through the IEEE 802 1X feature Use this command to add the specified user to the internal user database This command also changes the mode to AAA User Config mode Format aaa las usernam lt user gt Mode Global Co
537. r from 0 7 For set cos transmit an 802 1p priority value is required and is specified as an integer from 0 7 Quality of Service Commands 284 M4100 Series ProSAFE Managed Switches Format police simple lt 1 4294967295 gt lt 1 128 gt conform action drop set prec transmit lt 0 7 gt set dscp transmit lt 0 63 gt set cos transmit lt 0 7 gt transmit violate action drop set prec transmit lt 0 7 gt set dscp transmit lt 0 63 gt set cos transmit lt 0 7 gt transmit Mode Policy Class Map Config Incompatibilities Drop Mark all forms police two rate This command is the two rate form of the police command and is used to establish the traffic policing style for the specified class For each outcome the only possible actions are drop set cos as sec cos set cos transmit set sec cos transmit set dscp transmit set prec transmit or transmit In this two rate form of the police command the conform action defaults to send the exceed action defaults to drop and the violate action defaults to drop These actions can be set with this command after the style is configured Format police two rate lt 1 4294967295 gt lt 1 128 gt lt 1 4294967295 gt lt 1 128 gt conform action drop set cos as sec cos set cos transmit lt 0 7 gt set sec cos transmit lt 0 7 gt set prec transmit lt 0 7 gt set dscp transmit lt 0 63 gt transmit exceed action drop set c
538. r part number or product name A value of all zero in the 16 byte field indicates that the vendor PN is unspecified Utility Commands 344 M4100 Series ProSAFE Managed Switches Field Description BR nominal Vendor Rev Command example data as defined by the encoding value NETGEAR Switch show fiber ports optics info all The nominal bit signaling rate BR nominal is specified in units of 100 MBd rounded off to the nearest 100 MBd The bit rate includes those bits necessary to encode and delimit the signal as well as those bits carrying data information A value of O indicates that the bit rate is not specified and must be determined from the transceiver technology The actual information transfer rate will depend on the encoding of the The vendor revision number vendor rev contains ASCII characters left aligned and padded on the right with ASCII spaces 20h defining the vendor s product revision number A value of all zero in this field indicates that the vendor revision is unspecified Link Link Nominal Length Length Bit 50um 62 5um Rate Port Vendor Name m m Serial Number Part Number Mbps Rev 0 49 NETGEAR 8 3 A7N2018414 AXM761 10300 10 0 51 NETGEAR 8 3 A7N2018472 AXM761 10300 10 0 52 NETGEAR 8 3 A7N2018501 AXM761 10300 10 show mac addr table This command displays the forwarding database entries These entries are used by the transparent bridging function to deter
539. rames are forwarded in accordance to the 802 1Q VLAN specification Ingress Filtering May be enabled or disabled When enabled the frame is discarded if this port is not a member of the VLAN with which this frame is associated In a tagged frame the VLAN is identified by the VLAN ID in the tag In an untagged frame the VLAN is the Port VLAN ID specified for the port that received this frame When disabled all frames are forwarded in accordance with the 802 1Q VLAN bridge specification The factory default is disabled May be enabled or disabled Default Priority The 802 1p priority assigned to tagged packets arriving on the port show vlan association subnet This command displays the VLAN associated with a specific configured IP Address and net mask If no IP address and net mask are specified the VLAN associations of all the configured IP subnets are displayed show vlan association subnet lt ipaddr gt lt netmask gt Mode Privileged EXEC Term Definition IP Subnet The IP address assigned to each interface IP Mask The subnet mask VLAN ID A VLAN Identifier VID is associated with each VLAN show vlan association mac This command displays the VLAN associated with a specific configured MAC address If no MAC address is specified the VLAN associations of all the configured MAC addresses are displayed Format show vlan association mac lt macaddr gt Mode Privileged EXEC
540. ration for that interface automatically becomes effective switchport protected Global Config Use this command to create a protected port group The lt groupid gt parameter identifies the set of protected ports Use the name lt name gt pair to assign a name to the protected port group The name can be up to 32 alphanumeric characters long including blanks The default is blank Note Port protection occurs within a single switch Protected port configuration does not affect traffic between ports on two different switches No traffic forwarding is possible between two protected ports Format switchport protected lt groupid gt name lt name gt Switching Commands 68 M4100 Series ProSAFE Managed Switches no switchport protected Global Config Use this command to remove a protected port group The lt groupid gt parameter identifies the set of protected ports Use the name keyword to remove the name from the group Format NO switchport protected lt groupid gt name Mode Global Config switchport protected Interface Config Use this command to add an interface to a protected port group The lt groupid gt parameter identifies the set of protected ports to which this interface is assigned You can only configure an interface as protected in one group Note Port protection occurs within a single switch Protected port configuration does not affect traffic between ports on two different switches No tra
541. re clients controlled access to the network using the devices MAC address as an identifier This requires that the known and allowable MAC address and corresponding access rights be pre populated in the authentication server MAB works only when the port control mode of the port is MAC based dot1x mac auth bypass Mode Interface Config no dot1x mac auth bypass This command disables MAB for 802 1x unaware clients no dotlx mac auth bypass Interface Config dot1x max req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request Identity frame before timing out the supplicant The lt count gt value must be in the range 1 10 Default 2 Format dotlx max req lt count gt Mode Interface Config no dot1x max req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request Identity frame before timing out the supplicant Format no dotlx max req Mode Interface Config Switching Commands 82 M4100 Series ProSAFE Managed Switches dot1x max users Use this command to set the maximum number of clients supported on the port when MAC based dot1x authentication is enabled on the port The maximum users supported per port is dependent on the product The lt count gt value is in the range 1 48 Default 48 Format dotlx max users
542. re is only one user allowed with read write privileges You can configure up to five read only users on the system username Global Config Use this command to add a new user to the local user database The default privilege level is 1 Using the encrypted keyword allows the administrator to transfer local user passwords between devices without having to know the passwords When the password parameter is used along with encrypted parameter the password must be exactly 128 hexadecimal characters in length If the password strength feature is enabled this command checks for password strength and returns an appropriate error if it fails to meet the password strength criteria The optional override complexity check parameter disables the validation of the password strength username lt name gt password lt password gt encrypted override complexity check level lt level gt encrypted override complexity check override complexity check level lt level gt override complexity check password Global Config Term Definition Name The name of the user up to 32 characters Password The password for the users 8 64 characters This value can be zero if the no passwords min length command has been executed The special characters allowed in the password include amp lt gt _ level Specifies the user level If not specified the privilege level is 1 Level 0 can
543. re the soft time out for secure HTTP sessions in minutes When this time out expires you must reauthenticate This timer begins on initiation of the web session and is restarted with each access to the switch The secure session soft time out cannot be set to zero infinite Default 5 Format ip http secure session soft timeout lt 1 60 gt Mode Privileged EXEC no ip http secure session soft timeout Use this command to restore the soft time out for secure HTTP sessions to the default value Format no ip http secure session soft timeout Mode Privileged EXEC Management Commands 464 M4100 Series ProSAFE Managed Switches ip http secure session hard timeout Use this command to configure the hard time out for secure HTTP sessions in hours When the time out expires the user must reauthenticate This timer begins on initiation of the web session and is unaffected by the activity level of the connection The secure session hard time out cannot be set to zero infinite Default 24 Format ip http secure session hard timeout lt 1 168 gt Mode Privileged EXEC no ip http secure session hard timeout Use this command to reset the hard time out for secure HTTP sessions to the default value Format no ip http secure session hard timeout Mode Privileged EXEC ip https authentication Use this command to specify the authentication methods for http server users The addi
544. reases beyond the configured threshold the traffic will be dropped Therefore the rate of multicast traffic will be limited to the configured threshold Default disabled Format storm control multicast Mode Interface Config no storm control multicast This command disables multicast storm recovery mode for an interface Format no storm control multicast Mode Interface Config storm control multicast level Interface Config This command configures the multicast storm recovery threshold for an interface as a percentage of link speed and enables multicast storm recovery mode If the mode is enabled multicast storm recovery is active and if the rate of L2 multicast traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore the rate of multicast traffic will be limited to the configured threshold Default 5 Format storm control multicast level lt 0 100 gt Mode Interface Config no storm control multicast level This command sets the multicast storm recovery threshold to the default value for an interface and disables multicast storm recovery Format no storm control multicast level lt 0 100 gt Mode Interface Config storm control multicast rate Interface Config Use this command to configure the multicast storm recovery threshold for an interface in packets per second If the mode is enabled multicast st
545. red The number of RADIUS Authentication servers that have been configured Authentication Servers Number of Configured The number of RADIUS Accounting servers that have been configured Accounting Servers Number of Named The number of configured named RADIUS server groups Authentication Server Groups Number of Named The number of configured named RADIUS server groups Accounting Server Groups Number of Retransmits The configured value of the maximum number of times a request packet is retransmitted Time Duration The configured timeout value in seconds for request retransmissions RADIUS Accounting Mode A global parameter to indicate whether the accounting mode for all the servers is enabled or not RADIUS Attribute 4 Mode A global parameter to indicate whether the NAS IP Address attribute has been enabled to use in RADIUS requests RADIUS Attribute 4 Value A global parameter that specifies the IP address to be used in the NAS IP Address attribute to be used in RADIUS requests Command example NETGEAR Switch show radius Number Number Number Number Number of of of of of Configured Authentication Servers 32 Configured Accounting Servers 6 32 Named Authentication Server Groups 15 Named Accounting Server Groups 3 RETCEANSMEES ad a AN tas 4 Management Commands 507 Time Duration RADIUS AGCOUMEINO Modesa ia as m
546. relay agent hops for BootP DHCP Relay on the system Format no bootpdhcprelay maxhopcount Mode Global Config bootpdhcprelay minwaittime This command configures the minimum wait time in seconds for BootP DHCP Relay on the system When the BOOTP relay agent receives a BOOTREQUEST message it MAY use the seconds since client began booting field of the request as a factor in deciding whether to relay the request or not The parameter has a range of 0 100 seconds Default 0 Format bootpdhcprelay minwaittime lt 0 100 gt Mode Global Config no bootpdhcprelay minwaittime This command configures the default minimum wait time in seconds for BootP DHCP Relay on the system Format no bootpdhcprelay minwaittime Mode Global Config Routing Commands 253 M4100 Series ProSAFE Managed Switches show bootpdhcprelay This command displays the BootP DHCP Relay information Format show bootpdhcprelay Modes e Privileged EXEC e User EXEC Term Definition The maximum allowable relay agent hops Count Minimum Wait The minimum wait time Time Seconds Admin Mode Indicates whether relaying of requests is enabled or disabled Server IP The IP address for the BootP DHCP Relay server Address Circuit ld Option The DHCP circuit ld option which might be enabled or disabled Mode Requests The number or requests received Received Requests The number of requests relayed
547. responding default values are set Format no dotlx timeout guest vlan period reauth period quiet period tx period supp timeout server timeout Mode Interface Config dot1x unauthenticated vlan Use this command to configure the unauthenticated VLAN associated with that port The unauthenticated VLAN ID can be a valid VLAN ID from 0 Maximum supported VLAN ID The unauthenticated VLAN must be statically configured in the VLAN database to be operational By default the unauthenticated VLAN is 0 that is invalid and not operational peut fo Format dot1x unauthenticated vlan lt vlan id gt Mode Interface Config no dot1x unauthenticated vlan This command resets the unauthenticated vlan associated with the port to its default value Format no dotlx unauthenticated vlan Mode Interface Config Switching Commands 86 M4100 Series ProSAFE Managed Switches dot1x user This command adds the specified user to the list of users with access to the specified port or all ports The lt user gt parameter must be a configured user Format dotlx user lt user gt lt slot port gt all Mode Global Config no dot1x user This command removes the user from the list of users with access to the specified port or all ports Format fro dot1x user lt user gt lt slot port gt all Mode Global Config clear dot1x authentication history This command clears the authenticati
548. rface IGMP Snooping functionality is re enabled if you disable routing or remove port channel LAG membership from an interface that has IGMP Snooping enabled The IGMP application supports the following activities e Validation of the IP header checksum as well as the IGMP header checksum and discarding of the frame upon checksum error e Maintenance of the forwarding table entries based on the MAC address versus the IP address e Flooding of unregistered multicast data packets to all ports in the VLAN Default disabled Format set igmp Mode Global Config Interface Config Format set igmp lt vlanid gt Mode VLAN Config no set igmp This command disables IGMP Snooping on the system an interface or a VLAN Format no set igmp Mode e Global Config Interface Config Format no set igmp lt vlanid gt Mode VLAN Config set igmp interfacemode This command enables IGMP Snooping on all interfaces If an interface has IGMP Snooping enabled and you enable this interface for routing or enlist it as a member of a port channel LAG IGMP Snooping functionality is disabled on that interface IGMP Snooping functionality is re enabled if you disable routing or remove port channel LAG membership from an interface that has IGMP Snooping enabled Switching Commands 155 M4100 Series ProSAFE Managed Switches Default disabled Format set igmp interfacemode no set igmp interfacemode
549. riority 5 DSCP 1 Unknown False Tagged True Media Policy Application Type streamingvideo Vlan ID 20 Priority 1 DSCP 2 Unknown False Tagged True Switching Commands 200 M4100 Series ProSAFE Managed Switches Inventory Hardware Rev XXX XXX XXX Firmware Rev XXX XXX XXX Software Rev XXX XXX XXX Serial Num XXX XXX XXX Mfg Name XXX XXX XXX Model Name XXX XXX XXX Asset ID XXX XXX XXX Location Subtype elin Info XXX XXX XXX Extended POE Device Type pseDevice Extended POE PSE Available 0 3 Watts Source primary Priority critical Extended POE PD Required 0 2 Watts Source local Priority low Denial of Service Commands This section describes the commands you use to configure Denial of Service DoS Control The software provides support for classifying and blocking specific types of Denial of Service attacks You can configure your system to monitor and block these types of attacks e SIP DIP Source IP address Destination IP address First Fragment TCP Header size smaller then configured value e TCP Fragment IP Fragment Offset 1 e TCP Flag TCP Flag SYN set and Source Port lt 1024 or TCP Control Flags 0 and TCP Sequence Number 0 or TCP Flags FIN URG and PSH set and TCP Sequence Number 0 or TCP Flags SYN and FIN set e L4 Port Source TCP UDP Port Destination TCP UDP Port e ICMP Limiting the size of ICMP Ping packets SMAC DMAC Source M
550. riority for servers The highest priority is 0 zero and the range is 0 65535 Default 0 Format priority lt priority gt Mode TACACS Config timeout TACACS Config Use this command in TACACS Configuration mode to specify the time out value in seconds If no time out value is specified the global value is used The lt t imeout gt parameter has a range of 1 30 seconds Format timeout lt timeout gt Mode TACACS Config Management Commands 517 M4100 Series ProSAFE Managed Switches show tacacs Use this command to display the configuration and statistics of a TACACS server Format show tacacs lt ip address gt lt hostname gt Privileged EXEC Field Definition Host Address The IP address or hostname of the configured TACACS server Port The configured TACACS server port number TimeOut The timeout in seconds for establishing a TCP connection Priority The preference order in which TACACS servers are contacted If a server connection fails the next highest priority server is contacted Configuration Scripting Commands Configuration Scripting allows you to generate text formatted script files representing the current configuration of a system You can upload these configuration script files to a computer or UNIX system and edit them Then you can download the edited files to the system and apply the new configuration You can apply configuration s
551. rmat no absolute Mode Time Range Config periodic Use this command to add a periodic time entry to a time range The lt t ime gt parameters are based off the currently configured time zone The first occurrence of the lt days of the week gt argument is the starting day s from which the configuration that referenced the time range starts going into effect The second occurrence is the ending day or days from which the configuration that referenced the time range is no longer in effect If the end days of the week are the same as the start they can be omitted This argument can be any single day or combinations of days Monday Tuesday Wednesday Thursday Friday Saturday Sunday Other possible values are e daily Monday through Sunday e weekdays Monday through Friday e weekend Saturday and Sunday If the ending days of the week are the same as the starting days of the week they can be omitted The first occurrence of the lt time gt argument is the starting hours minutes which the configuration that referenced the time range starts going into effect The second occurrence is the ending hours minutes at which the configuration that referenced the time range is no longer in effect The hours minutes are expressed in a 24 hour clock For example 8 00 is 8 00 am and 20 00 is 8 00 pm The frequency is how often this periodic entry will become active If the value is set to 0 the timer schedule will be treated as absolute Quality of
552. rmat show clock detail Mode e User EXEC e Privileged EXEC Term Definition The time provided by the time source Time Source The time source type If you specify the detail keyword the following information is also displayed Time Zone The time zone configured Summer Time Indicate if the summer time is enabled DHCP Server Commands This section describes the commands you to configure the DHCP server settings for the switch DHCP uses UDP as its transport protocol and supports a number of features that facilitate in administration address allocations ip dhcp pool This command configures a DHCP address pool name on a DHCP server and enters DHCP pool configuration mode Default none Format ip dhcp pool lt name gt Mode Global Config Utility Commands 382 M4100 Series ProSAFE Managed Switches no ip dhcp pool This command removes the DHCP address pool The name should be previously configured pool name Format fro ip dhcp pool lt name gt Mode Global Config client identifier This command specifies the unique identifier for a DHCP client Unique identifier is a valid notation in hexadecimal format In some systems such as Microsoft DHCP clients the client identifier is required instead of hardware addresses The unique identifier is a concatenation of the media type and the MAC address For example the Microsoft client identifier for Ethernet address c
553. rmat show udld lt slot port gt all Mode e Privileged EXEC User EXEC Utility Commands 439 M4100 Series ProSAFE Managed Switches If you do not enter a value for the lt slot port gt parameter the command output displays the fields that are shown in the following table Term Definition Admin Mode The global administrative mode of UDLD Message Interval The time period in seconds between the transmission of UDLD probe packets Timeout Interval The time period in seconds before making decision that link is unidirectional If you enter a value for the lt slot port gt parameter or you use the a11 keyword the command output displays the fields that are shown in the following table Term Definition Slot Port The identifying slot and port of the interface Admin Mode The administrative mode of UDLD configured on this interface This is either Enabled or Disabled UDLD Mode The UDLD mode configured on this interface This is either Normal or Aggressive UDLD Status The status of the link as determined by UDLD The options are Undetermined UDLD has not collected enough information to determine the state of the port Not applicable UDLD is disabled either globally or on the port Shutdown UDLD has detected a unidirectional link and shutdown the port That is the port is in an errDisabled state Bidirectional UDLD has detected a bidirectional link Undetermined Link Down Th
554. rol sipdip This command disables Source IP address Destination IP address SIP DIP Denial of Service prevention Format fro dos control sipdip Mode Global Config dos control firstfrag This command enables Minimum TCP Header Size Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having a TCP Header Size smaller then the configured value the packets will be dropped if the mode is enabled The default is disabled If you enable dos control firstfrag but do not provide a Minimum TCP Header Size the system sets that value to 20 Default disabled lt 20 gt Format dos control firstfrag lt 0 255 gt Mode Global Config no dos control firstfrag This command sets Minimum TCP Header Size Denial of Service protection to the default value of disabled Format fro dos control firstfrag Mode Global Config dos control tcpfrag This command enables TCP Fragment Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress having IP Fragment Offset equal to one 1 the packets will be dropped if the mode is enabled Default disabled Format dos control tcpfrag Mode Global Config no dos control tcpfrag This command disabled TCP Fragment Denial of Service protection Format no dos control tcpfrag Mode Global Config
555. ronment MLD Snooping requires that one central switch or router periodically query all end devices on the network to announce their multicast memberships This central device is the MLD Querier The MLD query responses known as MLD reports keep the switch updated with the current multicast group membership on a port by port basis If the switch does not receive updated membership information in a timely fashion it will stop forwarding multicast frames to the port where the end device is located This section describes the commands you use to configure and display information on MLD Snooping queries on the network and separately on VLANs set mld querier Use this command to enable MLD Snooping Querier on the system Global Config Mode or on a VLAN Using this command you can specify the IP address that the snooping querier switch should use as a source address while generating periodic queries If a VLAN has MLD Snooping Querier enabled and MLD Snooping is operationally disabled on it MLD Snooping Querier functionality is disabled on that VLAN MLD Snooping functionality is re enabled if MLD Snooping is operational on the VLAN The MLD Snooping Querier sends periodic general queries on the VLAN to solicit membership reports Default disabled Format set mld querier vlan id address ipv6_ address Mode Global Config VLAN Mode no set mid querier Use this command to disable MLD Snooping Querier on the system Use t
556. rotocol Partner Admin State The administrative values of the actor state for the protocol Partner show port channel brief This command displays the static capability of all port channel LAG interfaces on the device as well as a summary of individual port channel interfaces Format show port channel brief Mode e Privileged EXEC e User EXEC For each port channel the following information is displayed Term Definition Logical Interface The slot port of the logical interface Port channel The name of port channel LAG interface Name Link State Shows whether the link is up or down Trap Flag Shows whether trap flags are enabled or disabled Type Shows whether the port channel is statically or dynamically maintained Mbr Ports The members of this port channel Active Ports The ports that are actively participating in the port channel show port channel This command displays an overview of all port channels LAGs on the switch show port channel Mode e Privileged EXEC e User EXEC Switching Commands 124 M4100 Series ProSAFE Managed Switches Term Definition Logical Interface Valid slot and port number separated by forward slashes Port Channel The name of this port channel LAG You may enter any string of up to 15 alphanumeric Name characters Link State Indicates whether the Link is up or down Admin Mode May be enabled or disabled Th
557. rp inspection statistics vlan lt vlan list gt VLAN DHCP ACL DHCP ACL Bad Src Bad Dest Invalid Drops Drops Permits Permits MAC MAC IP 10 11 1 65 25 ai 1 0 20 1 0 8 2 0 1 1 clear ip arp inspection statistics Use this command to reset the statistics for Dynamic ARP Inspection on all VLANs Default none Format clear ip arp inspection statistics Mode Privileged EXEC show ip arp inspection interfaces Use this command to display the Dynamic ARP Inspection configuration on all the DAI enabled interfaces An interface is said to be enabled for DAI if at least one VLAN that the interface is a member of is enabled for DAI If you enter the lt slot port gt interface argument the command displays the values for that interface whether the interface is enabled for DAI or not Format show ip arp inspection interfaces lt slot port gt Mode e Privileged EXEC User EXEC Term Definition Interface The interface ID for each displayed row Trust State Whether the interface is trusted or untrusted for DAI Switching Commands 153 M4100 Series ProSAFE Managed Switches Rate Limit The configured rate limit value in packets per second Burst Interval The configured burst interval value in seconds Command example NETGEAR Switch show ip arp inspection interfaces Interface Trust State Rate Limit Burst Interval pps seconds 0 1 Untrusted 15 1 0 2 Untrusted 10 10 show
558. rs Similar to RADIUS this protocol simplifies authentication by making use of a single database that can be shared by many clients on a large network TACACS is based on the TACACS protocol described in RFC1492 but additionally provides for separate authentication authorization and accounting services The original protocol was UDP based with messages passed in clear text over the network TACACS uses TCP to ensure reliable delivery and a shared key configured on the client and daemon server to encrypt all messages debug tacacs packet Use this command to enable TACACS packet debugging Default Disabled Format debug tacacs packet receive transmit no debug tacacs packet Use this command to disable TACACS packet debugging no debug tacacs packet Mode Global Config tacacs server host Use this command to configure a TACACS server This command enters into the TACACS configuration mode The lt ip address gt or lt hostname gt parameter is the IP address or host name of the TACACS server To specify multiple hosts repeat this command Format tacacs server host lt ip address gt lt hostname gt Mode Global Config Management Commands 514 M4100 Series ProSAFE Managed Switches no tacacs server host Use this command to delete the specified TACACS server The lt ip address gt or lt hostname gt parameter is the IP address or host name of the TACACS server Format
559. rt per GARP participant basis Permissible values are 10 100 centiseconds 0 1 to 1 0 seconds The factory default is 20 centiseconds 0 2 seconds The finest granularity of specification is 1 centisecond 0 01 seconds Leave Timer The period of time to wait after receiving an unregister request for an attribute before deleting the attribute Current attributes are a VLAN or multicast group This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service There is an instance of this timer on a per Port per GARP participant basis Permissible values are 20 600 centiseconds 0 2 to 6 0 seconds The factory default is 60 centiseconds 0 6 seconds Switching Commands 79 M4100 Series ProSAFE Managed Switches LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are generated A LeaveAll PDU indicates that all registrations will shortly be deregistered Participants will need to rejoin in order to maintain registration There is an instance of this timer on a per Port per GARP participant basis The Leave All Period Timer is set to a random value in the range of LeaveAllTime to 1 5 LeaveAllTime Permissible values are 200 6000 centiseconds 2 60 seconds The factory default is 1000 centiseconds 10 seconds Port GMRP The GMRP administrative mode for the port It may be enabled or disabled If this Mode parameter i
560. rt within the CST Port Forwarding The forwarding state of the port within the CST State Port Role The role of the specified interface within the CST Auto Calculate Indicates whether auto calculation for port path cost is enabled or not disabled Port Path Cost Port Path Cost The configured path cost for the specified interface Auto Calculate Indicates whether auto calculation for external port path cost is enabled External Port Path Cost External Port The cost to get to the root bridge of the CIST across the boundary of the region This Path Cost means that if the port is a boundary port for an MSTP region the external path cost is used Designated Root Identifier of the designated root for this port within the CST Root Path Cost The root path cost to the LAN by the port Designated The bridge containing the designated port Bridge Designated Port Port on the Designated Bridge that offers the lowest cost to the LAN Identifier Topology Value of flag in next Configuration Bridge Protocol Data Unit BPDU transmission Change indicating if a topology change is in progress for this port Acknowledgeme nt Hello Time The hello time in use for this port Edge Port The configured value indicating if this port is an edge port Switching Commands 42 M4100 Series ProSAFE Managed Switches Term Definition Edge Port Status Point To Point MAC Status CST Region
561. rule precedence lt precedence gt tos lt tos gt lt tosmask gt dscp lt dscp gt Specifies the ToS for an IP ACL rule depending on a match of precedence or DSCP values using the parameters precedence lt precedence gt tos lt tos gt Or dscp lt dscp gt lt tosmask gt is an optional parameter rate limit lt 1 4294967295 gt lt 1 128 gt time range lt time range name gt Specifies that this rule is to be logged Specifies the allowed rate of traffic as per the configured rate in kbps from 1 4294967295 and burst size in kbytes from 1 128 Allows imposing a time limitation on the ACL rule as defined by the parameter lt time range name gt If a time range with the specified name does not exist and the ACL containing this ACL rule is applied to an interface or bound to a VLAN the ACL rule is applied immediately If a time range with specified name exists and the ACL containing this ACL rule is applied to an interface or bound to a VLAN the ACL rule is applied when the time range with specified name becomes active The ACL rule is removed when the time range with specified name becomes inactive Quality of Service Commands 302 M4100 Series ProSAFE Managed Switches Parameter Description assign queue lt queue id gt Specifies the assign queue which is the queue identifier to which packets matching this rule are assigned mirror redirect lag Specifies the mirror
562. s link is up and it is in forwarding state Routing Commands 242 M4100 Series ProSAFE Managed Switches Term Definition Link Speed Data An integer representing the physical link data rate of the specified interface This is Rate measured in Megabits per second Mbps MAC Address The burned in physical address of the specified interface The format is 6 two digit hexadecimal numbers that are separated by colons Encapsulation The encapsulation type for the specified interface The types are Ethernet or SNAP Type IP MTU The maximum transmission unit MTU size of a frame in bytes Bandwidth Shows the bandwidth of the interface Destination Displays whether ICMP Destination Unreachables might be sent enabled or disabled Unreachables ICMP Redirects Displays whether ICMP Redirects might be sent enabled or disabled Command example NETGEAR Switch gt show ip interface 0 2 Routing Interface StatusS ec eee eee eee Down MSC HOG mita a Er RI ai A aE None Routing Modes sessa o dete eee as Disable Administrative MOOS sur stare tai Enable Forward Net Directed BroadcasStS o o ooooo o Disable PROXY ARP a ds aos alada tt Enable Local PEORY ARP yo wise o a o Disable AGUS SPA at a aaa Inactive Link Speed Data Rate eee eee eee eee eee eee Inactive MAC IPCs Seu is 02 14 6C FF 00 DE Encapsulation TYPE is eee ae eee a ee ws Ethernet TP MIU ie iii ir dino er ae RN Ce wel we
563. s value is shown in seconds Version 2 The setting for sending ISDPv2 packets If disabled version 1 packets are transmitted Device ID The Device ID advertised by this device The format of this Device ID is characterized by the value of the Device ID Format object Device ID Indicates the Device ID format capability of the device Format e serialNumber indicates that the device uses a serial number as the format for its Capability Device ID e macAddress indicates that the device uses a Layer 2 MAC address as the format for its Device ID e other indicates that the device uses its platform specific format as the format for its Device ID Device ID Indicates the Device ID format of the device Format serialNumber indicates that the value is in the form of an ASCII string containing the device serial number macAddress indicates that the value is in the form of a Layer 2 MAC address other indicates that the value is in the form of a platform specific ASCII string containing info that identifies the device For example ASCII string contains serialNumber appended prepended with system name Switching Commands 215 M4100 Series ProSAFE Managed Switches show isdp interface This command displays ISDP settings for the specified interface Format show isdp interface all lt slot port gt Privileged EXEC Mode ISDP mode enabled disabled status for the interface s show isdp entry This comman
564. s Keng ee aa a ans 155 set iomp MaxTESPONSO oo2cacucincserevewerds AA EEREN 157 SEE OMP MENCKEN PIRGEMME acotada a e es A E 158 Soe Ao ge e E A As AAA EE 159 Set IGMPAMFOULEKINCEKfACS isnicin cena tadids iii ddr 159 SCLIQMP QUEEN cas adomedodavauianoenedeuiadd EA os a ada 164 set igmp querier election participate 0 cere eee eerren 166 set igmp guerier query interval ir rt btnad nS EENE E 165 569 M4100 Series ProSAFE Managed Switches s t iomp QUENIErTIMEM EXPIRY iras ada ear eee 165 SePIGMPGUENIEE VERSION score ltda aos 165 set IGMP report SUppressiON avaro rra aer ai 159 SOEN erame eae soria ea dedoes ade net eerersedaaseceeedihiesaGesdeettemtedaossea eee 168 setmiditast ledWe session 4565 ido ei saa sans des 169 set mld groupmembership interval 0 eect eee eeaeee 170 Set midinterfacemode Jesica rai 169 set MIG MaXresponse sessronurnini indrat dtre rroba a EATONIN E e 170 set Mild MERtEXPINEHIME siii 171 Setmld MOULET acaricia A SEA 171 set mid mrouter Interface cocscinn os rr repeat 172 A Ee En E ETEA A A E A E A E ET EEEE 175 set mld querier election participate uuusuesusu eeen eee eect e eee nee e nn naes 176 set mld querier query iMterval ic aida 176 set mld querier timer expli sc snganrcieierein ss dons reata nen r a aaa 176 Set prompt sj oe 521 SHOW poller ssosecasyars oa te risa aa 428 SHOW WECEIVER sis ni cocinada dotada ratonera irrita 426 SHOW Sampler rra 427 SHOW Ada IASSUSEL
565. s disabled Join Time Leave Time and Leave All Time have no effect show mac address table gmrp This command displays the GMRP entries in the Multicast Forwarding Database MFDB table Format show mac address table gmrp Mode Privileged EXEC Term Definition Mac Address A unicast MAC address for which the switch has forwarding and or filtering information The format is 6 or 8 two digit hexadecimal numbers that are separated by colons for example 01 23 45 67 89 AB In an IVL system the MAC address is displayed as 8 bytes Type The type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as a result of a learning process or protocol Description The text description of this multicast table entry Interfaces The list of interfaces that are designated for forwarding Fwd and filtering FIt Port Based Network Access Control Commands This section describes the commands you use to configure port based network access control 802 1x Port based network access control allows you to permit access to network services only to and devices that are authorized and authenticated clear dot1x statistics This command resets the 802 1x statistics for the specified port or for all ports Format clear dot1lx statistics lt slot port gt all Mode Privileged EXEC Switching Commands 80 M4100 Series ProSAFE Managed Switches
566. s of the interface in slot port format MAC Verify Represents the number of DHCP messages that were filtered on an untrusted interface Failures because of source MAC address and client HW address mismatch Client Ifc Represents the number of DHCP release and Deny messages received on the different Mismatch ports than learned previously DHCP Server Represents the number of DHCP server messages received on Untrusted ports Msgs Rec d Command example NETGEAR Switch show ip dhcp snooping statistics Interface MAC Verify Client Ifc DHCP Server Failures Mismatch Msgs Rec d 0 2 0 0 0 0 3 0 0 0 0 4 0 0 0 0 5 0 0 0 0 6 0 0 0 0 7 0 0 0 0 8 0 0 0 0 9 0 0 0 0 10 0 0 0 0 11 0 0 0 0 12 0 0 0 0 13 0 0 0 0 14 0 0 0 0 15 0 0 0 0 16 0 0 0 0 17 0 0 0 0 18 0 0 0 0 19 0 0 0 0 20 0 0 0 Switching Commands 145 M4100 Series ProSAFE Managed Switches clear ip dhcp snooping binding Use this command to clear all DHCP Snooping bindings on all interfaces or on a specific interface Format clear ip dhcp snooping binding interface lt slot port gt Mode e Privileged EXEC e User EXEC clear ip dhcp snooping statistics Use this command to clear all DHCP Snooping statistics Format clear ip dhcp snooping statistics Mode e Privileged EXEC e User EXEC show ip verify source Use this command to display the IPSG configurations on all ports Format show ip verify source Mode e Privileged EXEC e Us
567. s shown as 1 for interfaces on a non stacking device Source_Mac Source MAC address of the packet Version Spanning tree protocol version 0 3 O refers to STP 2 RSTP and 3 MSTP Root_Mac MAC address of the CIST root bridge Root_Priority Priority of the CIST root bridge The value is from 0 through 61 440 It is displayed in hex in multiples of 4096 Path_Cost External root path cost component of the BPDU no debug spanning tree bpdu transmit This command disables tracing of transmitted spanning tree BPDUs Format no debug spanning tree bpdu transmit Mode Privileged EXEC Utility Commands 422 M4100 Series ProSAFE Managed Switches debug udld packet This command enables debugging on the received and transmitted UDLD PDUs Default Disabled Format default udld packet receive Mode Privileged EXEC no debug udld packet This command disables debugging on the received and transmitted UDLD PDUs debug udld packet receive Mode Privileged EXEC debug udld packet receive This command enables debugging on the received UDLD PDUs Default Disabled Format default udld packet receive Privileged EXEC no debug udld packet receive This command disables debugging on the received UDLD PDUs Format debug udld packet receive Mode Privileged EXEC debug udld packet transmit This command enables debugging on the transmitted UDLD PDUs
568. s the currently attached mac access list using that sequence number If the sequence number is not specified for this command a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used This command specified in Interface Config mode only affects a single interface whereas the Global Config mode setting is applied to all interfaces The VLAN keyword is only valid in the Global Config mode The Interface Config mode command is available only on platforms that support independent per port Class of Service queue configuration Format mac access group lt name gt in vlan lt vlan 1d gt in sequence lt 1 4294967295 gt Modes e Global Config e Interface Config no mac access group This command removes a MAC ACL identified by lt name gt from the interface in a specific direction no mac access group lt name gt in vlan lt vlan 1d gt in e Global Config e Interface Config Quality of Service Commands 296 M4100 Series ProSAFE Managed Switches show mac access lists This command displays a MAC access list and all of the rules that are defined for the MAC ACL Use the lt name gt parameter to identify a specific MAC ACL to display Format show mac access lists lt name gt Mode Privileged EXEC Term Definition Rule Number The ordered rule number identifier defined within the MAC ACL Action The action associa
569. s untagged traffic The port can also receive tagged traffic Ingress filtering is enabled on the port This means that when the VLAN ID of a received packet is not identical to the access VLAN ID the packet is discarded General mode In general mode you can perform custom configuration of the VLAN membership PVID tagging ingress filtering and so on The general mode is legacy behavior of the switch port configuration and you use legacy CLI commands to configure the port in general mode Default General mode Format switchport mode access trunk general Interface Config Switching Commands 59 M4100 Series ProSAFE Managed Switches no switchport mode This command resets the switch port mode to its default value Format no switchport mode Mode Interface Config switchport trunk allowed vlan Use this command to configure the list of allowed VLANs that can receive and send traffic on this interface in tagged format when in trunking mode The default is a11 You can modify the VLAN list by using the add and remove options and replace the VLAN list with another list by using the a11 or except options If you use the a11 option all VLANs are added to the list of allowed VLANs The except option provides an exclusion list Default all Format switchport trunk allowed vlan lt vlan list gt all add lt vlan list gt remove lt vlan list gt except lt vlan list gt Mode Interface C
570. sed VLAN identified by lt groupid gt You can associate multiple interfaces with a group but you can only associate each interface and protocol combination with one group If adding an interface to a group causes any conflicts with protocols currently associated with the group this command fails and the interface s are not added to the group Default none Format protocol vlan group lt groupid gt Mode Interface Config Switching Commands 53 M4100 Series ProSAFE Managed Switches no protocol vlan group This command removes the interface from this protocol based VLAN group that is identified by this lt groupid gt Format no protocol vlan group lt groupid gt Mode Interface Config protocol vlan group all This command adds all physical interfaces to the protocol based VLAN identified by lt groupid gt You can associate multiple interfaces with a group but you can only associate each interface and protocol combination with one group If adding an interface to a group causes any conflicts with protocols currently associated with the group this command will fail and the interface s will not be added to the group Default none Format protocol vlan group all lt groupid gt Mode Global Config no protocol vian group all This command removes all interfaces from this protocol based VLAN group that is identified by this lt groupid gt Format no protocol vlan group al
571. select a11 all the static MAC filters in the system are displayed If you supply a value for lt macaddr gt you must also enter a value for lt vlanid gt and the system displays static MAC filter information only for that MAC address and VLAN show mac address table static lt macaddr gt lt vlanid gt all Mode Privileged EXEC Term Definition MAC Address The MAC Address of the static MAC filter entry VLAN ID The VLAN ID of the static MAC filter entry Source Port s The source port filter set s slot and port s Note Only multicast address filters will have destination port lists show mac address table staticfiltering This command displays the static filtering entries in the Multicast Forwarding Database MFDB table Format show mac address table staticfiltering Mode Privileged EXEC Term Definition Mac Address A unicast MAC address for which the switch has forwarding and or filtering information As the data is gleaned from the MFDB the address will be a multicast address The format is 6 or 8 two digit hexadecimal numbers that are separated by colons for example 01 23 45 67 89 AB In an IVL system the MAC address will be displayed as 8 bytes Type The type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as a result of a learning process or protocol Description The text description of this multic
572. service dotlp mapping lt userpriority gt lt trafficclass gt Modes e Global Config Interface Config no classofservice dot1p mapping This command maps each 802 1p priority to its default internal traffic class value Format no classofservice dotlp mapping Modes e Global Config Interface Config classofservice ip dscp mapping This command maps an IP DSCP value to an internal traffic class The lt ipdscp gt value is specified as either an integer from 0 to 63 or symbolically through one of the following keywords af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 be csO cs1 cs2 cs3 cS4 cs5 cs6 cs7 ef The lt trafficclass gt values can range from 0 6 although the actual number of available traffic classes depends on the platform Format classofservice ip dscp mapping lt ipdscp gt lt trafficclass gt Modes Global Config Quality of Service Commands 263 M4100 Series ProSAFE Managed Switches no classofservice ip dscp mapping This command maps each IP DSCP value to its default internal traffic class value Format no classofservice ip dscp mapping Modes Global Config classofservice trust This command sets the Class of Service trust mode of an interface You can set the mode to trust one of the Dot1p 802 1p IP DSCP or IP Precedence packet markings You can also set the interface mode to untrusted If you configure an interface to
573. sessions exceeded EMWEB SSH Max number of SSH login sessions exceeded Handle table overflow ConnectionType EmWeb socket accept failed errno A user attempted to connect via telnet when the maximum number of telnet sessions were already active A user attempted to connect via SSH when the maximum number of SSH sessions were already active All the available EmWeb connection handles are being used and the connection could not be made Socket accept failure for the specified connection type ewsNetHTTPReceive failure in NetReceiveLoop closing connection Socket receive failure EmWeb connection allocation failed Memory allocation failure for the new connection EMWEB TransmitPending EWOULDBLOCK error sending data ewaNetHTTPEnd internal error handle not in Handle table Socket error on send EmWeb handle index not valid EmWeb ewsNetHTTPReceive recvBufCnt exceeds The receive buffer limit has been reached MAX_QUEUED_RECV_BUFS Bad request or DoS attack EmWeb EmWeb accept XXXX Accept function for new SSH connection failed XXXX indicates the error info Table 15 CLI_UTIL Log Messages Component Message Cause CLI_UTIL Telnet Send Failed errno 0x x Failed to send text string to the telnet client CLI_UTIL osapiFsDir failed Failed to obtain the directory information from a volume s directory Log Messages 538 M4100 Series ProSAFE Managed Sw
574. set mld mrouter interface Mode Interface Config no set mld mrouter interface Use this command to disable the status of the interface as a statically configured multicast router attached interface Format no set mld mrouter interface Mode Interface Config show mlidsnooping Use this command to display MLD Snooping information Configured information is displayed whether or not MLD Snooping is enabled Format show mldsnooping lt slot port gt lt vlan id gt Privileged EXEC When the optional arguments lt slot port gt or lt vlan id gt are not used the command output displays the information that is shown in the following table Admin Mode Indicates whether or not MLD Snooping is active on the switch Interfaces Interfaces on which MLD Snooping is enabled Enabled for MLD Snooping Switching Commands 172 M4100 Series ProSAFE Managed Switches Term Definition MLD Control Frame Count Displays the number of MLD Control frames that are processed by the CPU VLANs Enabled VLANs on which MLD Snooping is enabled for MLD Snooping When you specify the lt slot port gt values the command output displays the information that is shown in the following table Term Definition MLD Snooping Indicates whether MLD Snooping is active on the interface Admin Mode Fast Leave Indicates whether MLD Snooping Fast Leave is active on the VLAN M
575. sing Global Config mode or on a VLAN Using this command you can specify the IP Address that the Snooping Querier switch should use as the source address while generating periodic queries Ifa VLAN has IGMP Snooping Querier enabled and IGMP Snooping is operationally disabled on it IGMP Snooping Querier functionality is disabled on that VLAN IGMP Snooping functionality is re enabled if IGMP Snooping is operational on the VLAN Note The Querier IP Address assigned for a VLAN takes preference over global configuration The IGMP Snooping Querier application supports sending periodic general queries on the VLAN to solicit membership reports Default disabled Format set igmp querier lt vlan id gt address lt ipv4 address gt Mode Global Config VLAN Mode no set igmp querier Use this command to disable IGMP Snooping Querier on the system Use the optional address parameter to reset the querier address to 0 0 0 0 Format no set igmp querier lt vlan id gt address Mode e Global Config VLAN Mode Switching Commands 164 M4100 Series ProSAFE Managed Switches set igmp querier query interval Use this command to set the IGMP Querier Query Interval time It is the amount of time in seconds that the switch waits before sending another general query Default disabled Format set igmp querier query interval lt 1 18000 gt no set igmp querier query interval Use this command to set
576. slot and port number separated by forward slashes Operational The current operational status of this DiffServ service interface Status Policy Name The name of the policy attached to the interface MAC Access Control List ACL Commands This section describes the commands you use to configure MAC ACL settings MAC ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources The following rules apply to MAC ACLs e The maximum number of ACLs you can create is hardware dependent The limit applies to all ACLs regardless of type e The system supports only Ethernet II frame types The maximum number of rules per MAC ACL is hardware dependent mac access list extended This command creates a MAC access control list ACL identified by lt name gt consisting of classification fields defined for the Layer 2 header of an Ethernet frame The lt name gt parameter is a case sensitive alohanumeric string from 1 to 31 characters uniquely identifying the MAC access list If a MAC ACL by this name exists this command enters Mac Access List config mode to allow updating the existing MAC ACL Note The CLI mode changes to Mac Access List Config mode when you successfully execute this command Quality of Service Commands 293 M4100 Series ProSAFE Managed Switches Format mac access list extended lt name gt Mode Global Config no mac access
577. specified class definition Quality of Service Commands 288 M4100 Series ProSAFE Managed Switches show diffserv This command displays the DiffServ General Status Group information which includes the current administrative mode setting as well as the current and maximum number of rows in each of the main DiffServ private MIB tables This command provides no options Format show diffserv Mode Privileged EXEC Term Definition DiffServ Admin mode The current value of the DiffServ administrative mode Class Table Size The current number of entries rows and the maximum allowed entries rows in Current Max the Class Table Class Rule Table Size The current number of entries rows and the maximum allowed entries rows in Current Max the Class Rule Table Policy Table Size The current number of entries rows and the maximum allowed entries rows in Current Max the Policy Table Policy Instance Table Current number of entries rows and the maximum allowed entries rows in the Size Current Max Policy Instance Table Policy Attribute Table Current number of entries rows and the maximum allowed entries rows in the Size Current Max Policy Attribute Table Service Table Size The current number of entries rows i and the maximum allowed entries rows in Current Max the Service Table show policy map This command displays all configuration information for the specified policy T
578. ss Commands Use the commands in this section to close remote connections or to view information about connections to the system disconnect Use the disconnect command to close HTTP HTTPS Telnet or SSH sessions Use a11 to close all active sessions or use lt session id gt to specify the session ID to close To view the possible values for lt session id gt use the show loginsession command Format disconnect lt session_id gt all Mode Privileged EXEC show loginsession Use this command to display current Telnet and serial port connections to the switch Format show loginsession Mode Privileged EXEC Field Definition ID Login Session ID User Name The name the user entered to log on to the system Connection From IP address of the remote client machine or ElA 232 for the serial port connection Idle Time Time this session has been idle Management Commands 467 M4100 Series ProSAFE Managed Switches ied Definition o O Session Time Total time this session has been connected Session Type Shows the type of session which can be HTTP HTTPS telnet serial or SSH User Account Commands This section describes the commands you use to add manage and delete system users The software has two default users admin and guest The admin user can view and configure system settings and the guest user can view settings Note You cannot delete the admin user The
579. ssages the server has received RELEASE DHCP INFORM The number of DHCPINFORM messages the server has received For Message Sent the fields that are shown in the following table are displayed DHCP OFFER The number of DHCPOFFER messages the server sent DHCP ACK The number of DHCPACK messages the server sent DHCP NACK The number of DHCPNACK messages the server sent show ip dhcp conflict This command displays address conflicts logged by the DHCP Server If no IP address is specified all the conflicting addresses are displayed Format show ip dhcp conflict lt ip address gt Modes Privileged EXEC User EXEC Term Definition IP address The IP address of the host as recorded on the DHCP server Reporting Host The hardware address of the host that reported the conflict Hardware Address Utility Commands 394 M4100 Series ProSAFE Managed Switches Term Definition Detection The manner in which the IP address of the hosts were found on the DHCP Server Method Detection time The time when the conflict was found DNS Client Commands These commands are used in the Domain Name System DNS an Internet directory service DNS is how domain names are translated into IP addresses When enabled the DNS client provides a hostname lookup service to other components ip domain lookup Use this command to enable the DNS client Default enabled F
580. ssccdns Mase ReaSeGtOed sen 275 matehsecondarY U AM scared rara ee PRWREE SSO SERRE cda 280 match SOURCE AGAKESSIMAS 2s sccclsnocsiarslanard naga 45 44 4G DORADA OAS READ HEE EREDAR ROS 279 Mato SID 44 44 44 4 a4s c0 s sbearnanrnedergeinds E ae 279 maten tapo ette lets cette eee soem seme b aenonee tt bate hod od 279 maten Sil PORE caricia 279 maten cree ace astrales EOE 280 memory free low watermark processor 1 0 eee cee enn n nnn tenet ene eas 352 A pote Rundinicdthenens ned eRe eenerininiotivereaemie seed ene a eab pane 281 566 M4100 Series ProSAFE Managed Switches MODEdOtTG tunel soria Hesaoewidabistewatsamessss obec aces i ohonbiGeratedetes ssasasece 63 mode dvlanstunnel o ox ex 0 os nndendumuatawdsiee eee eeeeaovesenatonntnedeadGededenewoweveses eda 64 MONITO SESSION lt ici5nna5 coe a sees Saeed a a aged hayahiewseeemeiewemsasegagegans 125 MP sit acuta ted soads See eRGuoucemmeeeenGueads tekeb teens 20 MVE rio re ARANA AN BRERA EMIS PETERS SE TEESE RHE ARA 220 MOOD masia idad ye ie beens dae ade 220 Mv immediate asesorias rara EATE EEE E E E A T AE card 222 A O O 221 ATL GIT ENS wa us a dio oa 221 MVE WDC picasso tes dela A A das Len AAA a aaa 223 MIMI Mr O 222 VE IMOFO UP da iii A Aa 223 METHIOSAMAIME SCIV EM near panacea 387 MEtDIOS NOdE tY DE scraps lr 388 network DACP Pool CONTIG dcdcucacnaremendeceeads aera ade E u EAA EEEE 4o4eeeR oa one date 386 NETWOREJavamode mision dodstoem ine eeu sate A a aid
581. ssion of GARP PDUs registering or re registering membership for an attribute Current attributes are a VLAN or multicast group There is an instance of this timer on a per Port per GARP participant basis Permissible values are 10 100 centiseconds 0 1 to 1 0 seconds The factory default is 20 centiseconds 0 2 seconds The finest granularity of specification is one centisecond 0 01 seconds Leave Timer The period of time to wait after receiving an unregister request for an attribute before deleting the attribute Current attributes are a VLAN or multicast group This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service There is an instance of this timer on a per Port per GARP participant basis Permissible values are 20 600 centiseconds 0 2 to 6 0 seconds The factory default is 60 centiseconds 0 6 seconds Switching Commands 77 M4100 Series ProSAFE Managed Switches LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are generated A LeaveAll PDU indicates that all registrations will shortly be deregistered Participants will need to rejoin in order to maintain registration There is an instance of this timer on a per Port per GARP participant basis The Leave All Period Timer is set to a random value in the range of LeaveAllTime to 1 5 LeaveAllTime Permissible values are 200 6000 centiseconds 2 60 seconds
582. ssociated with the Partner s System ID Format no lacp partner system priority Interface Config Switching Commands 117 M4100 Series ProSAFE Managed Switches port channel local preference This command enables the local preference mode on a port channel LAG interface or range of interfaces By default the local preference mode for a port channel is disabled This command can be used only on port channel interfaces Default disabled Format port channel local preference Mode Interface Config no port channel local preference This command disables the local preference mode on a port channel Format no port channel local preference Mode Interface Config port channel static This command enables the static mode on a port channel LAG interface By default the static mode for a new port channel is disabled which means the port channel is dynamic However if the maximum number of allowable dynamic port channels are already present in the system the static mode for a new port channel enabled which means the port channel is static You can only use this command on port channel interfaces Default disabled Format port channel static Mode Interface Config no port channel static This command sets the static mode on a particular port channel LAG interface to the default value This command will be executed only for interfaces of type port channel LAG Format no port
583. st be greater than the MLDv2 Maximum Response time value The range is 2 to 3600 seconds Default 260 seconds Format set mld groupmembership interval lt vlan id gt lt 2 3600 gt Mode e Interface Config e Global Config VLAN Mode no set groupmembership interval Use this command to set the MLDv2 Group Membership Interval time to the default value Format no set mld groupmembership interval Mode Interface Config e Global Config VLAN Mode set mld maxresponse Use this command to set the MLD Maximum Response time for the system on a particular interface or VLAN The Maximum Response time is the amount of time in seconds that a switch will wait after sending a query on an interface because it did not receive a report for a particular group in that interface This value must be less than the MLD Query Interval time value The range is 1 65 seconds Default 10 seconds Format set mld maxresponse lt 1 65 gt Mode e Global Config e Interface Config VLAN Mode Switching Commands 170 M4100 Series ProSAFE Managed Switches no set mid maxresponse Use this command to set the max response time on the interface or VLAN to the default value Format no set mld maxresponse Global Config Interface Config VLAN Mode set mld mcrtexpiretime Use this command to set the Multicast Router Present Expiration time The time is set for the system on a particular interface
584. sted be transmitted to a Multicast address including those that were discarded or not sent The total number of packets that higher level protocols requested be transmitted to the Broadcast address including those that were discarded or not sent Most Address Entries Ever Used The highest number of Forwarding Database Address Table entries that have been learned by this switch since the most recent reboot Address Entries in Use The number of Learned and static entries in the Forwarding Database Address Table for this switch Maximum VLAN Entries Most VLAN Entries Ever Used Static VLAN Entries Dynamic VLAN Entries The maximum number of Virtual LANs VLANs allowed on this switch The largest number of VLANs that have been active on this switch since the last reboot The number of presently active VLAN entries on this switch that have been created statically The number of presently active VLAN entries on this switch that have been created by GVRP registration Utility Commands 342 M4100 Series ProSAFE Managed Switches Term Definition VLAN Deletes The number of VLANs on this switch that have been created and then deleted since the last reboot Time Since The elapsed time in days hours minutes and seconds since the statistics for this switch were Counters Last last cleared Cleared show fiber ports optics This command displays the diagnostics information of the SF
585. storm control feature protects against this condition The switch provides broadcast multicast and unicast story recovery for individual interfaces Unicast storm control protects against traffic wnose MAC addresses are not known by the system For broadcast multicast and unicast storm control if the rate of traffic ingressing on an interface increases beyond the configured threshold for that type the traffic is dropped To configure storm control you can enable the feature for all interfaces or for individual interfaces and you can set the threshold storm control level beyond which the broadcast multicast or unicast traffic is dropped The storm control feature allows you to limit the rate of specific types of packets through the switch on a per port per type basis Configuring a storm control level also enables that form of storm control Disabling a storm control level using the no version of the command sets the storm control level back to the default value and disables that form of storm control Using the no version of the storm control command without stating a level disables that form of storm control but maintains the configured level to be active the next time that form of storm control is enabled Note The actual rate of ingress traffic required to activate storm control is based on the size of incoming packets and the hard coded average packet size of 512 bytes used to calculate a packet per second pps rate as
586. successor classes must not exceed a platform specific maximum In some cases each removal of a refclass rule reduces the maximum number of available rules in the class definition by one Quality of Service Commands 274 M4100 Series ProSAFE Managed Switches no match class map This command removes from the specified class definition the set of match conditions defined for another class The lt refclassname gt is the name of an existing DiffServ class whose match conditions are being referenced by the specified class definition Format no match class map lt refclassname gt Mode e Class Map Config e Ipv6 Class Map Config match cos This command adds to the specified class definition a match condition for the Class of Service value the only tag in a single tagged packet or the first or outer 802 1Q tag of a double VLAN tagged packet The value might be from 0 to 7 Defaut Format match cos lt 0 7 gt Mode e Class Map Config e Ipv6 Class Map Config match secondary cos This command adds to the specified class definition a match condition for the secondary Class of Service value the only tag in a single tagged packet or the first or outer 802 1Q tag of a double VLAN tagged packet The value might be from 0 to 7 Default none Format match secondary cos lt 0 7 gt Mode Class Map Config match ip6flowlbl This command adds to the specified class definition a match condition based on the I
587. t TACACS Config From the Global Config mode To exit to the Global Config mode enter exit To enter tacacs server host return to the Privileged EXEC mode enter Ctr1 z lt ip addr gt in which lt ip addr gt is the IP address of the TACACS server on your network DHCP Pool Config From the Global Config mode To exit to the Global Config mode enter exit To enter ip dhcp pool return to the Privileged EXEC mode enter Ctrl Z lt pool name gt ARP Access List From the Global Config mode To exit to the Global Config mode enter exit To Config Mode enterarp access list return to the Privileged EXEC mode enter Ctrl Z Using the Command Line Interface 13 M4100 Series ProSAFE Managed Switches Command Completion and Abbreviation Command completion finishes spelling the command when you type enough letters of a command to uniquely identify the command keyword Once you have entered enough letters press the SPACEBAR or TAB key to complete the word Command abbreviation allows you to execute a command when you have entered there are enough letters to uniquely identify the command You must enter all of the required keywords and parameters before you enter the command CLI Error Messages If you enter a command and the system is unable to execute it an error message appears The following table describes the most common CLI error messages Table 7 CLI Error Messages Message Text Description
588. t destination interface mode Mode Global Config no monitor This command removes all the source ports and a destination port for the and restores the default value for mirroring session mode for all the configured sessions Note This is a stand alone no command This command does not have a normal form Default enabled Format no monitor Mode Global Config show monitor session This command displays the Port monitoring information for a particular mirroring session Note The lt session id gt parameter is an integer value used to identify the session In the current version of the software the lt session id gt parameter is always 1 Switching Commands 127 M4100 Series ProSAFE Managed Switches Format show monitor session lt session id gt Mode Privileged EXEC Term Definition Session ID An integer value used to identify the session Its value can be anything between 1 and Monitor Session Mode Probe Port the maximum number of mirroring sessions allowed on the platform Indicates whether the Port Mirroring feature is enabled or disabled for the session identified with lt session id gt The possible values are Enabled and Disabled Probe port destination port for the session identified with lt session id gt lf probe port is not set then this field is blank Source Port The port which is configured as mirrored port source port for the sess
589. t Give the single vlan argument and the command displays the statistics on that VLAN If no argument is included the command lists a summary of the forwarded and dropped ARP packets Format show ip arp inspection statistics vlan lt vlan list gt Mode Privileged EXEC User EXEC VLAN The VLAN ID for each displayed row Forwarded Dropped The total number of valid ARP packets forwarded in this VLAN The total number of not valid ARP packets dropped in this VLAN DHCP Drops The number of packets dropped due to DHCP snooping binding database match failure ACL Drops DHCP Permits The number of packets dropped due to ARP ACL rule match failure The number of packets permitted due to DHCP snooping binding database match ACL Permits The number of packets permitted due to ARP ACL rule match Bad Src MAC Bad Dest MAC The number of packets dropped due to Source MAC validation failure The number of packets dropped due to Destination MAC validation failure Invalid IP The number of packets dropped due to invalid IP checks Switching Commands 152 M4100 Series ProSAFE Managed Switches Command example The following example shows CLI output for the show ip arp inspection statistics command which lists the summary of forwarded and dropped ARP packets on all DAl enabled VLANs VLAN Forwarded Dropped Command example NETGEAR Switch show ip a
590. t Mode Line Config no transport input telnet Use this command to prevent new Telnet sessions from being established Format no transport input telnet Mode Line Config transport output telnet Use this command to regulate new outbound Telnet connections If enabled new outbound Telnet sessions can be established until the system reaches the maximum number of simultaneous outbound Telnet sessions allowed An established session remains active until the session is ended or an abnormal network error ends it Default enabled Format transport output telnet Mode Line Config no transport output telnet Use this command to prevent new outbound Telnet connection from being established Format no transport output telnet Management Commands 453 M4100 Series ProSAFE Managed Switches session limit Use this command to specify the maximum number of simultaneous outbound Telnet sessions A value of 0 indicates that no outbound Telnet session can be established Default 5 Format session limit lt 0 5 gt Mode Line Config no session limit Use this command to set the maximum number of simultaneous outbound Telnet sessions to the default value Format no session limit Mode Line Config session timeout Use this command to set the Telnet session timeout value The timeout value unit of time is minutes Default 5 Format session timeout lt 1 160 gt Li
591. t values the command displays the information that is described in the following table Term Definition IGMP Snooping Indicates whether IGMP Snooping is active on the interface Admin Mode Indicates whether IGMP Snooping Fast leave is active on the interface Mode Group The amount of time in seconds that a switch will wait for a report from a particular group Membership on a particular interface before deleting the interface from the entry This value may be Interval configured Maximum The amount of time the switch waits after it sends a query on an interface because it did Response Time not receive a report for a particular group on that interface This value may be configured Multicast Router The amount of time to wait before removing an interface from the list of interfaces with Expiry Time multicast routers attached The interface is removed if a query is not received This value may be configured If you specify the lt vlan id gt value the command displays the information that is described in the following table VLAN ID The VLAN ID IGMP Snooping Indicates whether IGMP Snooping is active on the VLAN Admin Mode Indicates whether IGMP Snooping Fast leave is active on the VLAN Mode Group The amount of time in seconds that a switch will wait for a report from a particular group Membership on a particular interface which is participating in the VLAN before deleting the interface Interval fr
592. t 123 Format sntp client port lt portid gt Mode Global Config no sntp client port This command resets the SNTP client port back to its default value Format no sntp client port Mode Global Config sntp unicast client poll interval This command sets the poll interval for SNTP unicast clients in seconds as a power of two where lt poll interval gt can be a value from 6 to 10 peut 6 sntp unicast client poll interval lt poll interval gt Global Config no sntp unicast client poll interval This command resets the poll interval for SNTP unicast clients to its default value Format no sntp unicast client poll interval Mode Global Config sntp unicast client poll timeout This command will set the poll timeout for SNTP unicast clients in seconds to a value from 1 30 Default 5 Format sntp unicast client poll timeout lt poll timeout gt Utility Commands 376 M4100 Series ProSAFE Managed Switches no sntp unicast client poll timeout This command will reset the poll timeout for SNTP unicast clients to its default value Format no sntp unicast client poll timeout Mode Global Config sntp unicast client poll retry This command will set the poll retry for SNTP unicast clients to a value from 0 to 10 Default 1 Format sntp unicast client poll retry lt poll retry gt Mode Global Config no sntp unicast client poll retry This
593. t a console can be connected indefinitely The time range is 0 160 Defaut serial timeout lt 0 160 gt Line Config no serial timeout Use this command to set the maximum connect time in minutes without console activity Format no serial timeout Mode Line Config login authentication Use this command in line configuration mode to specify a login authentication method list for remote telnet or console Format login authentication default lt list name gt Mode Line Config Management Commands 450 M4100 Series ProSAFE Managed Switches no login authentication Use this command to return to the default specified by the login authentication command Format no login authentication default lt list name gt Mode Line Config enable authentication Use this command in line configuration mode to specify an authentication method list when the user accesses a higher privilege level in remote telnet or console Format enable authentication default lt list name gt Mode Line Config no enable authentication Use this command to return to the default specified by the enable authentication command Format no enable authentication default lt list name gt Mode Line Config show serial Use this command to display serial communication settings for the switch Format show serial Modes e Privileged EXEC User EXEC Term D
594. t acl number gt Mode Privileged EXEC debug ip dvmrp packet Use this command to trace DVMRP packet reception and transmission If you use the receive option only received DVMRP packets are traced If you use the transmit option only transmitted DVMRP packets are traced When neither keyword is used in the command then all DVMRP packet traces are dumped Vital information such as source address destination address control packet type packet length and the interface on which the packet is received or transmitted is displayed on the console Default disabled Format debug ip dvmrp packet receive transmit Mode Privileged EXEC no debug ip dvmrp packet Use this command to disable debug tracing of DVMRP packet reception and transmission Format no debug ip dvmrp packet receive transmit Mode Privileged EXEC debug ip igmp packet Use this command to trace IGMP packet reception and transmission If you use the receive option only received IGMP packets are traced If you use the transmit option only transmitted IGMP packets are traced When neither keyword is used in the command then all IGMP packet traces are dumped Vital information such as source address destination address control packet type packet length and the interface on which the packet is received or transmitted is displayed on the console Default disabled Format debug ip igmp packet receive transmit Mode Pr
595. t is the switch Default switch netgear com Format logging email from addr lt from email addr gt Mode Global Config no logging email from addr This command removes the configured email source address Format no logging email from addr lt from email addr gt Mode Global Config logging email message type subject This command configures the subject line of the email for the specified type Default e For urgent messages Urgent Log Messages e For non urgent messages Non Urgent Log Messages Format logging email message type urgent non urgent both subject lt subject gt Mode Global Config no logging email message type subject This command removes the configured email subject for the specified message type and restores it to the default email subject Format no logging email message type urgent non urgent both subject Utility Commands 360 M4100 Series ProSAFE Managed Switches logging email logtime This command configures how frequently non urgent email messages are sent Non urgent messages are collected and sent in a batch email at the specified interval The valid range is every 30 440 minutes Default 30 minutes Format logging email logtime lt minutes gt Mode Global Config no logging email logtime This command resets the non urgent log time to the default value Format no logging email logtime Mode Global Config lo
596. t on the collector relay to which syslog messages are sent Local Port CLI Command Shows whether CLI Command logging is enabled Logging Console Logging Shows whether console logging is enabled Console Logging The minimum severity to log to the console log Messages with an equal or lower Severity Filter numerical severity are logged Buffered Logging Shows whether buffered logging is enabled Syslog Logging Shows whether syslog logging is enabled Log Messages Number of messages received by the log process This includes messages that are Received dropped or ignored Log Messages Number of messages that could not be processed due to error or lack of resources Dropped Log Messages Number of messages sent to the collector relay Relayed Utility Commands 356 M4100 Series ProSAFE Managed Switches show logging buffered This command displays buffered logging system startup and system operation logs Format show logging buffered Mode Privileged EXEC Term Definition Buffered Shows whether the In Memory log is enabled or disabled In Memory Logging Buffered Logging The behavior of the In Memory log when faced with a log full situation Wrapping Behavior Buffered Log The count of valid entries in the buffered log Count show logging hosts This command displays all configured logging hosts Format show logging hosts Mode Privileged
597. tance and re add it to the policy The values associated with an existing policy attribute can be changed without removing the class instance The CLI command root is policy map assign queue This command modifies the queue id to which the associated traffic stream is assigned The lt queueid gt is an integer from 0 to n 1 where n is the number of egress queues supported by the device Format assign queue lt queueid gt Mode Policy Class Map Config Incompatibilities Drop drop This command specifies that all packets for the associated traffic stream are to be dropped at ingress Format drop Mode Policy Class Map Config Incompatibilities Assign Queue Mark all forms Mirror Police Redirect mirror This command specifies that all incoming packets for the associated traffic stream are copied to a specific egress interface physical port or LAG mirror lt slot port gt Policy Class Map Config Incompatibilities Drop Redirect Quality of Service Commands 281 M4100 Series ProSAFE Managed Switches redirect This command specifies that all incoming packets for the associated traffic stream are redirected to a specific egress interface physical port or port channel Format redirect lt slot port gt Mode Policy Class Map Config Incompatibilities Drop Mirror conform color Use this command to enable color aware traffic policing and define the conf
598. tch show ip route Route Codes R RIP Derived O OSPF Derived C Connected S Static B BGP Derived IA OSPF Inter Area El OSPF External Type 1 E2 OSPF External Type 2 1 OSPF NSSA External Type 1 N2 OSPF NSSA External Type 2 C 1 1 1 0 24 0 1 directly connected 0 11 C 2 2 2 0 24 0 1 directly connected 0 1 C 5 5 5 0 24 0 1 directly connected 0 5 S 7 0 0 0 8 1 0 directly connected Null0 OIA 10 10 10 0 24 110 6 via 5 5 5 2 00h 00m 01s 0 5 C 11 11 11 0 24 0 1 directly connected 0 11 s 12 0 0 0 8 5 0 directly connected Null0 S 23 0 0 0 8 3 0 directly connected Null0 show ip route ecmp groups This command reports all current ECMP groups in the IPv4 routing table An ECMP group is a set of two or more next hops used in one or more routes The groups are numbered arbitrarily from 1 to n The output indicates the number of next hops in the group and the number of routes that use the set of next hops The output lists the IPv4 address and outgoing interface of each next hop in each group show ip route ecmp groups Mode Privileged EXEC Command example NETGEAR Switch show ip route ecmp groups ECMP Group 1 with 2 next hops used by 1 route 172 20 33 100 on interface 2 33 172 20 34 100 on interface 2 34 ECMP Group 2 with 3 next hops used by 1 route 172 20 32 100 on interface 2 32 172 20 33 100 on interface 2 33 172 20 34 100 on interface 2 34 ECMP Group 3
599. te receive LLDPDU containing EEE TLV This variable is updated by the local system software Cumulative Energy Estimated Cumulative energy saved on this port in Watts hours due to all green Saving modes enabled Time Since Counters Time Since Counters Last Cleared since the time of power up or after clear eee Last Cleared counters is executed Note Executing the clear green mode statistics command clears only the EEE Transmit Receive LPI event count LPI duration and Cumulative Energy Savings Estimates of the port Other status parameters listed in the previous table remain unaffected after you executed the clear green mode statistics command Command example NETGEAR Switch show green mode Current Power Consumption mW XX Power Saving Blesa eee EEEE XX Cumulative Energy Saving Stack W H XX Unit Green Ethernet Features Supported 1 Energy Detect EEE LPI History LLDP Cap Exchg Pwr Usg Est Green Ethernet Commands 528 Interface 0 0 0 0 0 0 0 0 JO oO s WB N H O 19 20 21 22 23 24 25 Config Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Command example NI ETGEAR Switch M4100 Series ProSAFE Managed Switches Energy
600. ted set of commands to view basic system information Privileged EXEC Switch Allows you to issue any EXEC command enter the VLAN mode or enter the Global Configuration mode Using the Command Line Interface 11 M4100 Series ProSAFE Managed Switches Table 5 CLI Command Modes continued Command Mode Prompt Mode Description Global Config Switch Config Groups general setup commands and permits you to make modifications to the running configuration VLAN Config Groups all the VLAN commands Interface Config face lt slot port gt Manages the operation of an interface and provides access to the router interface 4 configuration commands Use this mode to set up a physical port for a specific logical connection operation face Loopback lt id gt face Tunnel lt id gt Line Config line Contains commands to configure outbound telnet settings and console interface settings Policy Map h Config policy map Contains the QoS Policy Map configuration Config commands Policy Class Switch Consists of class creation deletion and Config Config policy class map matching commands The class match commands specify Layer 2 Layer 3 and general match criteria Class Map Config Switch Config class map Contains the QoS class map configuration commands for IPv4 Ipv6_Class Map Switch Config class map Contains the QoS class map co
601. ted to the configured threshold If the shutdown option is selected and the broadcast traffic increases beyond the threshold the interface shuts down instead of dropping packets To recover the port issue the no shutdown command under the port manually Default 5 storm control broadcast level lt 0 100 gt action ratelimit shutdown Mode Interface Config no storm control broadcast level This command sets the broadcast storm recovery threshold to the default value for an interface and disables broadcast storm recovery Format no storm control broadcast level Mode Interface Config Switching Commands 98 M4100 Series ProSAFE Managed Switches storm control broadcast rate Interface Config Use this command to configure the broadcast storm recovery threshold for an interface in packets per second If the mode is enabled broadcast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic is dropped Therefore the rate of broadcast traffic is limited to the configured threshold Default 0 Format storm control broadcast rate lt 0 14880000 gt Mode Interface Config no storm control broadcast rate This command sets the broadcast storm recovery threshold to the default value for an interface and disables broadcast storm recovery Format no storm control broadcast rate Mod
602. ted traffic This is only displayed when the COS trust Class mode is set to untrusted show interfaces cos queue This command displays the class of service queue configuration for the specified interface The slot port parameter is optional and is only valid on platforms that support independent per port Class of Service mappings If specified the class of service queue configuration of the interface is displayed If omitted the most recent global configuration settings are displayed Format show interfaces cos queue lt slot port gt Mode Privileged EXEC Term Definition Queue Id An interface supports n queues numbered 0 to n 1 The specific n value is platform dependent Minimum The minimum transmission bandwidth guarantee for the queue expressed as a Bandwidth percentage A value of 0 means bandwidth is not guaranteed and the queue operates using best effort This is a configured value Scheduler Type Indicates whether this queue is scheduled for transmission using a strict priority or a weighted scheme This is a configured value Queue The queue depth management technique used for this queue tail drop Management Type Quality of Service Commands 269 M4100 Series ProSAFE Managed Switches If you specify the interface the command also displays the following information Term Definition Interface The slot port of the interface If displaying the global configuration
603. ted with each rule The possible values are Permit or Deny Source MAC The source MAC address for this rule Address Destination MAC The destination MAC address for this rule Address Ethertype The Ethertype keyword or custom value for this rule VLAN ID The VLAN identifier value or range for this rule COS The COS 802 1p value for this rule Log Displays when you enable logging for the rule Assign Queue The queue identifier to which packets matching this rule are assigned Mirror Interface The slot port to which packets matching this rule are copied Redirect The slot port to which packets matching this rule are forwarded Interface Time Range Displays the name of the time range if the MAC ACL rule has referenced a time range name Rule Status Status Active Inactive of the MAC ACL rule IP Access Control List ACL Commands This section describes the commands you use to configure IP ACL settings IP ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources The following rules apply to IP ACLs e Managed switch software does not support IP ACL configuration for IP packet fragments e The maximum number of ACLs you can create is hardware dependent The limit applies to all ACLs regardless of type e The maximum number of rules per IP ACL is hardware dependent Quality of Service Commands 297 M4100 Series Pro
604. th proxy ARP the device might also respond if the target IP address is reachable The device responds only if all next hops in its route to the destination are through interfaces other than the interface that received the ARP request Default enabled Format ip proxy arp Mode Interface Config no ip proxy arp This command disables proxy ARP on a router interface Format no ip proxy arp Interface Config arp cachesize This command configures the ARP cache size The ARP cache size value is a platform specific integer value The default size also varies depending on the platform Format arp cachesize lt platform specific integer value gt Mode Global Config no arp cachesize This command configures the default ARP cache size Format no arp cachesize arp dynamicrenew This command enables the ARP component to automatically renew dynamic ARP entries when they age out Default enabled Format arp dynamicrenew Mode Privileged EXEC Routing Commands 229 M4100 Series ProSAFE Managed Switches no arp dynamicrenew This command prevents dynamic ARP entries from renewing when they age out Format no arp dynamicrenew Mode Privileged EXEC arp purge This command causes the specified IP address to be removed from the ARP cache Only entries of type dynamic or gateway are affected by this command Format arp purge lt ipaddr gt Mode Privileged
605. that no ssh connection can be established The range is 0 5 Defaut Format sshcon maxsessions lt 0 5 gt Mode Privileged EXEC no sshcon maxsessions Use this command to set the maximum number of allowed SSH connection sessions to the default value Mode Privileged EXEC sshcon timeout Use this command to set the SSH connection session time out value in minutes A session is active as long as the session has been idle for the value set The time is a decimal value from 1 to 160 Changing the time out value for active sessions does not become effective until the session is re accessed Also any keystroke activates the new time out duration Default 5 Format sshcon timeout lt 1 160 gt Mode Privileged EXEC no sshcon timeout Use this command to set the SSH connection session timeout value in minutes to the default Changing the timeout value for active sessions does not become effective until the session is re accessed Also any keystroke activates the new timeout duration Format no sshcon timeout Privileged EXEC Management Commands 458 show ip ssh M4100 Series ProSAFE Managed Switches Use this command to display the ssh settings Format show ip ssh Mode Privileged EXEC Term Definition Administrative Mode Protocol Level SSH Sessions Currently Active Max SSH Sessions Allowed SSH Timeout This field indicates whether the administra
606. the 802 1p header the only tag in a single tagged packet or the first or outer 802 1Q tag of a double VLAN tagged packet If the packet does not already contain this header one is inserted The CoS value is an integer from 0 to 7 Default 1 Format mark cos lt 0 7 gt Mode Policy Class Map Config Incompatibilities Drop Mark IP DSCP IP Precedence Police mark cos as sec cos This command marks outer VLAN tag priority bits of all packets as the inner VLAN tag priority marking CoS as Secondary CoS This essentially means that the inner VLAN tag CoS is copied to the outer VLAN tag CoS Format mark cos as sec cos Mode Policy Class Map Config Incompatibilities Drop Mark IP DSCP IP Precedence Police mark ip dscp This command marks all packets for the associated traffic stream with the specified IP DSCP value The lt dscpval gt value is specified as either an integer from 0 to 63 or symbolically through one of the following keywords af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 be cs0 csl1 cs2 cs3 cs4 cs5 cs6 cs7 or ef Quality of Service Commands 283 M4100 Series ProSAFE Managed Switches Format mark ip dscp lt dscpval gt Mode Policy Class Map Config Incompatibilities Drop Mark CoS Mark IP Precedence Police mark ip precedence This command marks all packets for the associated traffic stream with the specified IP Precedence value Th
607. the IGMP Querier Query Interval time to its default value Format no set igmp querier query interval Mode Global Config set igmp querier timer expiry Use this command to set the IGMP Querier timer expiration period It is the time period that the switch remains in Non Querier mode once it has discovered that there is a Multicast Querier in the network Default 60 seconds Format set igmp querier timer expiry lt 60 300 gt Mode Global Config no set igmp querier timer expiry Use this command to set the IGMP Querier timer expiration period to its default value Format no set igmp querier timer expiry set igmp querier version Use this command to set the IGMP version of the query that the snooping switch is going to send periodically Default 1 Format set igmp querier version lt 1 2 gt Mode Global Config Switching Commands 165 M4100 Series ProSAFE Managed Switches no set igmp querier version Use this command to set the IGMP Querier version to its default value Format no set igmp querier version Mode Global Config set igmp querier election participate Use this command to enable the Snooping Querier to participate in the Querier Election process when it discovers the presence of another Querier in the VLAN When this mode is enabled if the Snooping Querier finds that the other Querier s source address is better less than the Snooping Querier
608. the hard timeout for unsecure HTTP sessions to the default value Format no ip http session hard timeout Mode Privileged EXEC ip http authentication Use this command to specify the authentication methods for http server users The additional methods of authentication are used only if the previous method returns an error not if it fails To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line For example If none specified as an authentication method after RADIUS no authentication is used if the RADIUS server is down Format ip http authentication lt method1 gt lt method2 gt Mode Global ConfigC Term Definition Uses the local user name database for authentication Radius Uses the list of all RADIUS servers for authentication Management Commands 462 M4100 Series ProSAFE Managed Switches Term Definition Tacacs Uses the list of all TACACS servers for authentication None Uses no authentication no ip http authentication Use this command to restore the authentication methods to the default Format fro ip http authentication lt method1 gt lt method2 gt Mode Global Config ip http session maxsessions Use this command to limit the number of allowable unsecure HTTP sessions Zero is the configurable minimum Default 16 Format ip http session maxsessions lt 0 16 gt
609. the hardware version of the remote device Revision Firmware Shows the firmware version of the remote device Revision Software Shows the software version of the remote device Revision Serial Number Shows the serial number of the remote device Manufacturer Name Shows the manufacture name of the remote device Switching Commands 199 M4100 Series ProSAFE Managed Switches Model Name Shows the model name of the remote device Asset ID Shows the asset id of the remote device Location Shows the location information as a string for a type of location ID Information Device Type Shows the remote device s PoE device type connected to this port Available Shows the remote port s PSE power value in tenths of a watt Source Shows the remote port s PSE power source Priority Shows the remote port s PSE priority Required Shows the remote port s PD power requirement Source Shows the remote port s PD power source Priority Shows the remote port s PD power priority Command example NETGEAR Switch show lldp med remote device detail 0 8 LLDP MED Remote Device Detail Local Interface 0 8 Remote Identifier 18 Capabilities MED Capabilities Supported capabilities networkpolicy location extendedpse MED Capabilities Enabled capabilities networkpolicy Device Class Endpoint Class I Network Policies Media Policy Application Type voice Vlan ID 10 P
610. the relay agent for relay to the client The number of DHCP server messages relayed to a client The number of valid UDP packets received This count includes DHCP messages and all other protocols relayed Conditions are similar to those for the first statistic in this table The number of UDP packets relayed This count includes DHCP messages relayed as well as all other protocols The count is incremented for each server to which a packet is sent The number of DHCP client messages received whose hop count is larger than the maximum allowed The maximum hop count is a configurable value listed in show bootpdhcprelay A log message is written for each such failure The DHCP relay agent does not relay these packets The number of DHCP client messages received whose secs field is less than the minimum value The minimum secs value is a configurable value and is displayed in show bootpdhcprelay A log message is written for each such failure The DHCP relay agent does not relay these packets DHCP message with giadar set to local address The number of DHCP client messages received whose gateway address giaddr is already set to an IP address configured on one of the relay agent s own IP addresses In this case another device is attempting to spoof the relay agent s address The relay agent does not relay such packets A log message gives details for each occurrence Packets with expired TTL The number of packets received
611. tication enable Use this command to set authentication for accessing higher privilege levels The default and optional list names that you can create with this command are used with the enable authentication command Create a list by specifying the lt 1ist name gt argument using any character string to name this list The lt met hod gt arguments identify the list of methods that the authentication algorithm tries in the sequence The additional methods of authentication are used only if the previous method returns an error not if it fails To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line For example if none is specified as an authentication method after radius no authentication is used if the RADIUS server is down Note Requests sent by the switch to a RADIUS or TACACS server include the username Senabx in which x is the requested privilege level Format aaa authentication enable default lt list name gt lt method1 gt lt method2 gt Management Commands 481 M4100 Series ProSAFE Managed Switches Parameter Description default Uses the listed authentication methods that follow this argument as the default list of methods when using higher privilege levels lt list name gt Character string used to name the list of authentication methods activated when using access higher privilege levels Range 1 12 ch
612. tion Private vlan Displays information about the configured private VLANs type Displays only private VLAN ID and its type Primary Displays primary VLAN ID Secondary Displays secondary VLAN ID Type Displays secondary VLAN type Ports Displays ports which are associated with a private VLAN show interface ethernet switchport This command displays the private VLAN mapping information for the switch interfaces show interface ethernet lt slot port gt switchport e Privileged EXEC e User EXEC Switching Commands 73 M4100 Series ProSAFE Managed Switches Term Definition Private vlan host association Displays VLAN association for the private VLAN host ports Private vlan mapping Displays VLAN mapping for the private VLAN promiscuous ports GARP Commands This section describes the commands you use to configure Generic Attribute Registration Protocol GARP and view GARP status The commands in this section affect both GARP VLAN Registration Protocol GVRP and Garp Multicast Registration Protocol GMRP GARP is a protocol that allows client stations to register with the switch for membership in VLANS by using GVMP or multicast groups by using GVMP set garp timer join This command sets the GVRP join time for one port Interface Config mode or all Global Config mode and per GARP Join time is the interval between the transmission of GARP Protocol Data Units PDUs registering or re registering me
613. tion 10 3 1 4 10BASE2 These documents define jabber as the condition where any packet exceeds 20 ms The allowed range to detect jabber is 20 150 ms Fragments Undersize Received The total number of packets received that were less than 64 octets in length excluding framing bits but including FCS octets Alignment Errors The total number of packets received that had a length excluding framing bits but including FCS octets of from 64 through 1518 octets inclusive but had a bad Frame Check Sequence FCS with a non integral number of octets Rx FCS Errors The total number of packets received that had a length excluding framing bits but including FCS octets of from 64 through 1518 octets inclusive but had a bad Frame Check Sequence FCS with an integral number of octets Overruns The total number of frames discarded as this port was overloaded with incoming packets and could not keep up with the inflow Received Packets Not Forwarded Total Received Packets Not Forwarded A count of valid frames received which were discarded in other words filtered by the forwarding process Local Traffic Frames The total number of frames dropped in the forwarding process because the destination address was located off of this port 802 3x Pause Frames Received A count of MAC Control frames received on this interface with an opcode indicating the PAUSE operation This counter does not increment when the interface is operating
614. tion and saving power when there is no active link Note Combination ports support both copper and fiber media Energy Detect mode only applies to copper media If Energy Detect mode is configured on a combination port it will only function when a copper media is active Green Ethernet Commands 523 M4100 Series ProSAFE Managed Switches Energy Efficient Ethernet EEE Energy Efficient Ethernet EEE combines MAC with ports that support operation ina Low Power Mode This feature is defined by the IEEE 802 3az Energy Efficient Ethernet Task Force Lower Power Mode enables both send and receive sides of a link to disable some port functionality to save power when the port is lightly loaded Transition to Low Power Mode does not change the link status Frames in transit are not dropped or corrupted during transition to and from Low Power Mode This transition time is transparent to upper layer protocols and applications EEE operation is subject to the following conditions e Autonegotiation must be enabled to use any of the EEE modes EEE mode is disabled automatically when autonegotiation is disabled e Enabling or Disabling EEE mode causes the port link to flap once as EEE capability needs to be advertised This restarts autonegotiation EEE must be disabled while running hardware or software cable diagnostics e Combo Combination ports Combo ports support both copper and fiber media EEE mode only applies to copper media
615. tional methods of authentication are used only if the previous method returns an error not if it fails To ensure that the authentication succeeds even if all methods return an error specify none as the final method in the command line If none is specified as an authentication method after radius no authentication is used if the RADIUS server is down Format ip https authentication lt method1 gt lt method2 gt Mode Global Config Term Definition Local Uses the local user name database for authentication Radius Uses the list of all RADIUS servers for authentication Tacacs Uses the list of all TACACS servers for authentication None Uses no authentication no ip https authentication Use this command to restore the authentication methods to the default for http server users Format no ip https authentication lt method1 gt lt method2 gt Mode Global Config Management Commands 465 M4100 Series ProSAFE Managed Switches ip http secure port Use this command to set the SSL port where port can be 1 65535 and the default is port 443 Default 443 Format ip http secure port lt portid gt Mode Privileged EXEC no ip http secure port Use this command to reset the SSL port to the default value Format no ip http secure port Mode Privileged EXEC ip http secure protocol Use this command to set protocol levels versions The protocol level can
616. tistics arrasar a 391 clear ip dhcp snooping binding usina 146 Clear ip dhep SHOOPING StALISUCS oh asar rra 146 clear ip helper statistics 44 0 00 lt i9 00 4 4 90 s 4 004000400 49 son oedsed dices does ddoiatoend souaenoee 254 clear ip Foute alll 595 5 05 sandpxaads aia sisi iria 240 clear IP route COUNTES eee sca cvinneGGHPOPN PSS E CESS OOHRS eR AA RR OR EE 241 clear GaP COUNTES da cvdecadacandumeeaenriatesecsonddassAne nego tanaaeeanas vane sean aana dade 215 Clear is dp table oia IEEE ade ee 215 clear lldpremote data ss arar irte 185 clear Uap statistic sao at iaa 185 clearlogginigibutiered sectors canaria da dee pales 367 clear logging email Statistics uc r d ese cdon deere wade 363 559 M4100 Series ProSAFE Managed Switches clear mac addr table main id adi 367 GIS AIO ASS tddi 368 Clear port Channel se o0 4 0 sara gwd eed ee RELATES PEDEPSE ETRE ARA 368 clear radius statistic oscense 81 a cccccc345 5sciinangsonreeiesaareeeseSes Vs KosededadeneaeeaBas deasiaes Soasiase ses 368 cleat Vial site totedat erat asqoadacatermror es tect a E nates ceed bhosoetet ss titoseaadesge 368 chent identi pasividad aca 383 CHENESNAME escoria RIIIE SSS So 400o 0o SORDID ADMETSE a 383 A SouiouORewE ewadesedored ads sd edgar eeeeemWeseeeEe ean saaa dae 378 clock SUMIMEN UIME date sesionar ia 379 clock SUMIMEr TIME E CUMING vaciones iaa pad 378 COE TIMEZONE d ck c 564 5 0cas anparaweiainiinusrnd EA da 378 CONTIGUEALION 1614 co550c0 bi
617. tive mode of SSH is enabled or disabled The protocol level might have the values of version 1 version 2 or both versions 1 and version 2 The number of SSH sessions currently active The maximum number of SSH sessions allowed The SSH time out value in minutes Keys Present Key Generation in Progress Indicates whether the SSH RSA and DSA key files are present on the device Indicates whether RSA or DSA key files generation is currently in progress Management Security Commands This section describes commands you use to generate keys and certificates which you can do in addition to loading them as before crypto certificate generate Use this command to generate self signed certificate for HTTPS The generate RSA key for SSL has a length of 1024 bits The resulting certificate is generated with a common name equal to the lowest IP address of the device and a duration of 365 days Format crypto certificate generate Mode Global Config Management Commands 459 M4100 Series ProSAFE Managed Switches no crypto certificate generate Use this command to delete the HTTPS certificate files from the device regardless of whether they are self signed or downloaded from an outside source Format no crypto certificate generate Mode Global Config crypto key generate rsa Use this command to generate an RSA key pair for SSH The new key files will overwrite any existing generated or
618. to add the CLI Banner The banner message supports up to 2000 characters Format set clibanner lt line gt Mode Global Config no set clibanner Use this command to remove the CLI Banner downloaded through TFTP Format no set clibanner Mode Global Config Management Commands 521 Green Ethernet Commands This chapter describes the green Ethernet commands available in the managed switch CLI The chapter contains the following sections e Green Feature Support e Energy Detect Mode Energy Efficient Ethernet EEE e Green Ethernet Commands 522 M4100 Series ProSAFE Managed Switches Green Feature Support The NETGEAR Managed switch supports the following green Ethernet power saving modes e Energy Detect Mode EEE Mode The green Ethernet commands supported depends on the switch model Table 2 Green feature support Model Energy Detect cee o M4100 D10 POE M4100 D12G M4100 50G POE M4100 26G POE M4100 50G M4100 26G M4100 50 POE M4100 26 POE M7100 24x M4100 12GF M4100 D12G POE M4100 24G POE M4100 12G POE Yes No Energy Detect Mode When Energy Detect mode is enabled if communication on a port stops the port circuitry automatically shuts down for a short period The port wakes up periodically to check for link activity If activity is detected the port circuitry remains active This allows performing autonegotia
619. to remove an optional TLV from the LLDPDUs Use the command without parameters to remove all optional TLVs from the LLDPDU Format no lldp transmit tlv sys desc sys name sys cap port desc Interface Config lldp transmit mgmt Use this command to include transmission of the local system management address information in the LLDPDUs Default enabled Format lldp transmit mgmt Mode Interface Config no lldp transmit mgmt Use this command to include transmission of the local system management address information in the LLDPDUs Use this command to cancel inclusion of the management information in LLDPDUs Format no lldp transmit mgmt Mode Interface Config lidp notification Use this command to enable remote data change notifications Default disabled Format lldp notification Mode Interface Config Switching Commands 184 M4100 Series ProSAFE Managed Switches no Ildp notification Use this command to disable notifications Default disabled Format no lldp notification Mode Interface Config lIldp notification interval Use this command to configure how frequently the system sends remote data change notifications The lt interva21 gt parameter is the number of seconds to wait between sending notifications The valid interval range is 5 3600 seconds Default 5 Format lidp notification interval lt interval gt Mode Global Config
620. to sysapiCfgFileWrite file Error on trying to save configuration Table 8 NVStore Log Messages Component Message Cause NVStore Building defaults for file XXX A component s configuration file does not exist or the file s checksum is incorrect so the component s default configuration file is built NVStore Error on call to osapiFsWrite routine on file Either the file cannot be opened or the OS s XXX file I O returned an error trying to write to the file NVStore File XXX corrupted from file system The calculated checksum of a component s Checksum mismatch configuration file in the file system did not match the checksum of the file in memory NVStore Migrating config file XXX from version Y to A configuration file version mismatch was Z detected so a configuration file migration has started Log Messages 535 M4100 Series ProSAFE Managed Switches Table 9 RADIUS Log Messages Component Message Cause RADIUS RADIUS Invalid data length xxx The RADIUS Client received an invalid message from the server RADIUS RADIUS Failed to send the request A problem communicating with the RADIUS server RADIUS RADIUS Failed to send all of the request A problem communicating with the RADIUS server during transmit RADIUS RADIUS Could not get the Task Sync Resource issue with RADIUS Client semaphore service RADIUS RADIUS Buffer is too small for response RADIUS Client attempted to build
621. tocol DHCP clients The lt t ype gt parameter specifies the NetBIOS node type Valid types are e b node Broadcast e p node Peer to peer e m node Mixed e h node Hybrid recommended Default none Format netbios node type lt type gt Mode DHCP Pool Config no netbios node type This command removes the NetBIOS node Type Format no netbios node typ DHCP Pool Config next server This command configures the next server in the boot process of a DHCP client The lt address gt parameter is the IP address of the next server in the boot process which is typically a TFTP server Default inbound interface helper addresses Format next server lt address gt DHCP Pool Config no next server This command removes the boot server list Format no next server Mode DHCP Pool Config Utility Commands 388 M4100 Series ProSAFE Managed Switches option The option command configures DHCP server options The lt code gt parameter specifies the DHCP option code and ranges from 1 254 The lt ascii string gt parameter specifies an NVT ASCII character string ASCII character strings that contain white space must be delimited by quotation marks The hex lt string gt parameter specifies hexadecimal data In hexadecimal character strings are two hexadecimal digits You can separate each byte by a period for example a3 4f 22 0c colon for example a3 4 22 0c or w
622. torm control unicast level This command sets the unicast storm recovery threshold to the default value for an interface and disables unicast storm recovery Format no storm control unicast level Mode Interface Config storm control unicast rate Interface Config Use this command to configure the unicast storm recovery threshold for an interface in packets per second If the mode is enabled unicast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the traffic is dropped Therefore the rate of unicast traffic is limited to the configured threshold Default 0 Format storm control unicast rate lt 0 14880000 gt Interface Config Switching Commands 104 M4100 Series ProSAFE Managed Switches no storm control unicast rate This command sets the unicast storm recovery threshold to the default value for an interface and disables unicast storm recovery Format no storm control unicast rate Mode Interface Config storm control unicast Global Config This command enables unicast storm recovery mode for all interfaces If the mode is enabled unicast storm recovery is active and if the rate of unknown L2 unicast destination lookup failure traffic ingressing on an interface increases beyond the configured threshold the traffic will be dropped Therefore the rate of unknown unicast traffic will be limited to the con
623. tring must have the following structure MIB Version Organization Software Revision where e MIB Version 1 3 the version of this MIB e Organization Netgear Revision 1 0 IP Address The IP address associated with this agent Utility Commands 428 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show sflow agent SELOW VS ESTO RA ee ee ew ha ie 1 3 Netgear 1 0 IP Address LASA A Gee anaes 10 131 12 66 show sflow pollers Use this command to display the sFlow polling instances created on the switch Use for range Format show sflow pollers Mode Privileged EXEC Field Description Poller Data The sFlowDataSource slot port for this sFlow sampler This agent will support Physical Source ports only Receiver Index Poller Interval The sFlowReceiver associated with this sFlow counter poller The number of seconds between successive samples of the counters associated with this data source show sflow receivers Use this command to display configuration information related to the sFlow receivers Format show sflow receivers lt index gt Mode Privileged EXEC Field Description Receiver Index The sFlow Receiver associated with the sampler poller Owner String Time Out Max Datagram Size The identity string for receiver the entity making use of this sFlowRcvrTable entry The time in seconds remaining
624. ts but including FCS octets Packets RX and TX 512 1023 Octets The total number of packets including bad packets received and transmitted that were from 512 through 1023 octets in length inclusive excluding framing bits but including FCS octets Packets RX and TX 1024 1518 Octets The total number of packets including bad packets received and transmitted that were from 1024 through 1518 octets in length inclusive excluding framing bits but including FCS octets Packets RX and TX 1519 1522 Octets The total number of packets including bad packets received and transmitted that were from 1519 through 1522 octets in length inclusive excluding framing bits but including FCS octets Packets RX and TX 1523 2047 Octets The total number of packets received and transmitted that were from 1523 through 2047 octets in length inclusive excluding framing bits but including FCS octets and were otherwise well formed Packets RX and TX 2048 4095 Octets The total number of packets received that were from 2048 through 4095 octets in length inclusive excluding framing bits but including FCS octets and were otherwise well formed Packets RX and TX 4096 9216 Octets The total number of packets received that were from 4096 through 9216 octets in length inclusive excluding framing bits but including FCS octets and were otherwise well formed Total Packets Received Without Error The total number of packets received that were without errors
625. ts received 0 packet loss round trip msec min avg max 0 0 0 Command example The ping fails because the request times out NETGEAR Switch ping 1 1 1 1 count 1 interval 3 Pinging 1 1 1 1 with 0 bytes of data 1 1 1 1 PING statistics 1 packets transmitted 0 packets received 100 packet loss round trip msec min avg max 0 0 0 Utility Commands 370 M4100 Series ProSAFE Managed Switches quit This command closes the current telnet connection or resets the current serial connection The system asks you whether to save configuration changes before quitting Format quit Modes e Privileged EXEC User EXEC reload This command resets the switch without powering it off Reset means that all network connections are terminated and the boot code executes The switch uses the stored configuration to initialize the switch You are prompted to confirm that the reset should proceed The LEDs on the switch indicate a successful reset Format reload Mode Privileged EXEC save This command makes the current configuration changes permanent by writing the configuration changes to system NVRAM Format save Mode Privileged EXEC copy The copy command uploads and downloads files to and from the switch You can also use the copy command to manage the dual images image and image2 on the file system Upload and download files from a server by using TFTP or Xmodem SFTP and SCP are a
626. tted by the device RX refers to packets received by the device Intf The interface that the packet came in or went out on Format used is slot port internal interface number Unit is always shown as 1 for interfaces on a non stacking device Src_IP The source IP address in the IP header of the packet Dest_IP The destination IP address in the IP header of the packet Rip_ Version RIP version used lt RIPv1 or RIPv2 gt Packet_Type Type of RIP packet lt RIP_REQUEST or RIP_RESPONSE gt Routes Up to 5 routes in the packet are displayed in the following format Network lt a b c d gt Mask lt a b c d gt Next_Hop lt a b c d gt Metric lt a gt The next hop is only displayed if it is different from 0 0 0 0 For RIPv1 packets Mask is always 0 0 0 0 Number of Only the first five routes present in the packet are included in the trace There is another routes not notification of the number of additional routes present in the packet that were not printed included in the trace Utility Commands 419 M4100 Series ProSAFE Managed Switches no debug rip packet This command disables tracing of RIP requests and responses Format no debug rip packet Mode Privileged EXEC debug sflow packet Use this command to enable sFlow debug packet trace Default disabled Format debug sflow packet Mode Privileged EXEC no debug sflow packet Use this command to disable sFlow debug packet trace Format
627. tters to the default value Format no passwords strength minimum special letters Mode Global Config passwords strength maximum consecutive characters Use this command to enforce a maximum number of consecutive characters that a password should contain An example of consecutive characters is abcd The valid range is 0 16 If a password has consecutive characters more than the configured limit it fails to configure The default is 0 A maximum of 0 means no restriction on that set of characters Default 0 Format passwords strength maximum consecutive characters lt number gt Mode Global Config no passwords strength maximum consecutive characters Use this command to reset the maximum number of consecutive characters to the default value Format no passwords strength maximum consecutive characters Mode Global Config Management Commands 477 M4100 Series ProSAFE Managed Switches passwords strength maximum repeated characters Use this command to enforce a maximum number of repeated characters that a password should contain An example of repeated characters is aaaa The valid range is 0 16 If a password has a repetition of characters more than the configured limit it fails to configure The default is 0 A maximum of 0 means no restriction on that set of characters Default 0 Format passwords strength maximum repeated characters lt number gt Mode Global Config no passw
628. type statically configured from the CLI or dynamically learned Lease sec The remaining lease time for the entry Switching Commands 143 M4100 Series ProSAFE Managed Switches Command example NETGEAR Switch show ip dhcp snooping binding Total number of bindings 2 MAC Address IP Address VLAN Interface Type Lease Secs 00 02 B3 06 60 80 210 LL 8 10 0 1 86400 00 0F FE 00 13 04 210 1 1 4 10 0 1 86400 show ip dhcp snooping database Use this command to display the DHCP Snooping configuration related to the database persistency Format show ip dhcp snooping database Mode e Privileged EXEC e User EXEC Term Definition Agent URL Bindings database agent URL Write Delay The maximum write time to write the database into local or remote Command example NETGEAR Switch show ip dhcp snooping database agent url 10 131 13 79 sail txt write delay 5000 show ip dhcp snooping interfaces Use this command to show the DHCP Snooping status of the interfaces Format show ip dhcp snooping interfaces Mode Privileged EXEC Switching Commands 144 M4100 Series ProSAFE Managed Switches show ip dhcp snooping statistics Use this command to list statistics for DHCP Snooping security violations on untrusted ports Format show ip dhcp snooping statistics Mode e Privileged EXEC User EXEC Term Definition Interface The IP addres
629. type are sent immediately The lowest severity level that is considered non urgent Messages of this type up to the urgent level are collected and sent in a batch email Log messages that are less severe are not sent in an email message at all The lowest severity level at which traps are logged The amount of time to wait between non urgent messages Email Alert To Address Table The configured email recipients Email Alert Subject Table The subject lines included in urgent Type 1 and non urgent Type 2 messages For Msg Type urgent subject is For Msg Type non urgent subject is The configured email subject for sending urgent messages The configured email subject for sending non urgent messages show logging email statistics This command displays email alerting statistics Format show logging email statistics Mode Privileged EXEC Term Definition Email Alert Operation Status The operational status of the email alerting feature No of Email Failures The number of email messages that have attempted to be sent but were unsuccessful Utility Commands 362 M4100 Series ProSAFE Managed Switches Term Definition No of Email Sent The number of email messages that were sent from the switch since the counter was cleared Time Since Last Email The amount of time that has passed since the last email was sent from the Sent switch
630. ue Format show running config interface lt slot port gt vlan lt vlan id gt lag lt lag id gt Mode Interface Config show sysinfo This command displays switch information Format show sysinfo Mode Privileged EXEC Term Definition Switch Text used to identify this switch Description System Name Name used to identify the switch The factory default is blank To configure the system name see snmp server on page 491 System Location Text used to identify the location of the switch The factory default is blank To configure the system location see snmp server on page 491 System Contact Text used to identify a contact person for this switch The factory default is blank To configure the system location see snmp server on page 491 System Object The base object ID for the switch s enterprise MIB ID System Up Time The time in days hours and minutes since the last switch reboot MIBs Supported A list of MIBs supported by this agent show tech support Use this command to display system and configuration information when you contact technical support The output of this command combines the output of the following commands Utility Commands 350 M4100 Series ProSAFE Managed Switches e show version e show sysinfo e show port all e show isdp neighbors e show logging e show event log e show logging buffered show trap log
631. ueue parameter allows specification of a particular hardware queue for handling traffic that matches this rule The allowed lt qgueue iad gt value is 0 n 1 where n is the number of user configurable queues available for the hardware platform The assign queue parameter is valid only for a permit rule Note The special command form deny permit any any is used to match all Ethernet layer 2 packets and is the equivalent of the IP access list match every rule Quality of Service Commands 295 M4100 Series ProSAFE Managed Switches Format deny permit lt srcmac gt any lt dstmac gt any lt ethertypekey gt lt 0x0600 0OxFFFF gt vlan eq lt 0 4095 gt cos lt 0 7 gt log time range lt time range name gt assign queue lt queue id gt mirror redirect lt slot port gt Mode Mac Access List Config mac access group This command either attaches a specific MAC access control list ACL identified by lt name gt to an interface or associates it with a VLAN ID in a specific direction The lt name gt parameter must be the name of an existing MAC ACL An optional sequence number might be specified to indicate the order of this mac access list relative to other mac access lists already assigned to this interface and direction A lower number indicates higher precedence order If a sequence number is already in use for this interface and direction the specified mac access list replace
632. ult the generation of ICMP Echo Reply messages is enabled Default enabled Format ip icmp echo reply no ip icmp echo reply Use this command to prevent the generation of ICMP Echo Reply messages by the router Format no ip icmp echo reply Mode Global Config ip icmp error interval Use this command to limit the rate at which IPv4 ICMP error messages are sent The rate limit is configured as a token bucket with two configurable parameters burst size and burst interval e lt burst interval gt specifies how often the token bucket is initialized with burst size tokens burst interval is from 0 to 2147483647 milliseconds msec e lt burst size gt is the number of ICMP error messages that can be sent during one burst interval The range is from 1 to 200 messages To disable ICMP rate limiting set the burst interval to zero 0 Default e burst interval of 1000 msec e burst size of 100 messages Format ip icmp error interval lt burst interval gt lt burst size gt Mode Global Config no ip icmp error interval Use this command to return the burst interval and burst size to their default values Format no ip icmp error interval Routing Commands 261 Quality of Service Commands This chapter describes the Quality of Service QoS commands available in the managed switch CLI The chapter contains the following sections e Class of Service CoS Commands
633. ult port channel collector max delay Format no lacp collector max delay Mode Interface Config lacp actor admin key Use this command to configure the administrative value of the LACP actor admin key The valid range for lt key gt is 0 65535 Default Internal Interface Number of this Physical Port Format lacp actor admin key lt key gt Interface Config Note This command is only applicable to physical interfaces no lacp actor admin key Use this command to configure the default administrative value of the key Format no lacp actor admin key Mode Interface Config lacp actor admin state individual Use this command to set LACP actor admin state to individual Format lacp actor admin state individual Mode Interface Config Note This command is only applicable to physical interfaces no lacp actor admin state individual Use this command to set the LACP actor admin state to aggregation Format no lacp actor admin state individual Interface Config Switching Commands 111 M4100 Series ProSAFE Managed Switches lacp actor admin state longtimeout Use this command to set LACP actor admin state to longtimeout Format lacp actor admin state longtimeout Interface Config Note This command is only applicable to physical interfaces no lacp actor admin state longtimeout Use this command to set the LACP actor admin state to short timeout Format no lacp acto
634. ult_RADIUS_Server Server Host ADS SiS oe bois seit ioe a sat es dooms ica a 192 168 37 200 ACCESS REQUESES ruuat is a wild Bae da a 0 00 Access Retransmissi0NS o ooooocoomoomoo oo 0 ACCESS ACCE DUS aise 815 aided Guat everest Be Biden adnate ee 0 AGCESS REGWSCUS eripe e ce aya a aia ard wane a 0 Access Challenges eee nave eine e Aw eee ae oe 0 alformed Access RESPONSES ee eee eee ee eee 0 Bad AUCRENE PCAC OL Sanda 0 Pending REQUESTES ace tees wine Mee Bee are ees 0 WMS CO UES ia ato Stef S 0 Unkown TYPES isc ai ad datos 0 Packets DODDS ll tina idas 0 Command example NETGEAR Switch show radius statistics name Default_RADIUS_Server RADIUS Server NaM c ccc ccc ce eee edad eae ea e Default_RADIUS_Server Server Host Addres SS viii ela Sree Gra 192 168 37 200 ACCESS REQUCSE Sis si cir ri 0 00 ACCESS Retransmission Sindicaci n a 0 Management Commands 513 M4100 Series ProSAFE Managed Switches ACEOSS ACTORES spade aai aaa ta e Gries aa lacas LA omens 0 ACUESS REJECE SAA a a a a 0 Actess Challenges avs aa a a adas dead 0 Malformed Access ResponseS ooo ooooooom oo 0 Bad AUthenea Cat OLS vea st sid a as 0 Pending REQUESTS sks nens daa a Kae Rae we 0 TIMEOUTS ti E at we EEE EITEAN E a aan 0 UNknown TY DSS iva wis ee ee ah oe Lorine we ane ae ares 0 Packets DEOPPe ds dn ates aio mas 0 TACACS Commands TACACS provides access control for networked devices via one or more centralized serve
635. ultiple Spanning Tree Protocol Bridge Protocol Data Units received Switching Commands 40 M4100 Series ProSAFE Managed Switches show spanning tree mst port detailed This command displays the detailed settings and parameters for a specific switch port within a particular multiple spanning tree instance The parameter lt mst id gt is a number that corresponds to the desired existing multiple spanning tree instance The lt slot port gt is the desired switch port Format show spanning tree mst port detailed lt mstid gt lt slot port gt Mode e Privileged EXEC e User EXEC Term Definition MST Instance ID The ID of the existing MST instance Port Identifier The port identifier for the specified port within the selected MST instance It is made up from the port priority and the interface number of the port Port Priority The priority for a particular port within the selected MST instance The port priority is displayed in multiples of 16 Port Forwarding Current spanning tree state of this port State Port Role Each enabled MST Bridge Port receives a Port Role for each spanning tree The port role is one of the following values Root Port Designated Port Alternate Port Backup Port Master Port or Disabled Port Auto Calculate Indicates whether auto calculation for port path cost is enabled Port Path Cost Port Path Cost Configured value of the Internal Port Path Cost parameter Designated Ro
636. untagged from the trunk port The default ID is 1 the default VLAN Default 1 default VLAN Format switchport trunk native vlan lt vlan id gt Interface Config no switchport trunk native vlan Use this command to reset the trunk mode native VLAN of the switch port to its default value Format no switchport trunk native vlan Mode Interface Config switchport access vlan Use this command to configure the VLAN on the access port You can assign one VLAN only to the access port The access port is member of VLAN 1 by default You can assign the access port to a VLAN other than VLAN 1 If you remove the access VLAN on the switch the access port becomes a member of VLAN 1 If you configure the access port as a member of a VLAN that does not exist an error occurs and the configuration does not change Default 1 default VLAN Format switchport access vlan lt vlan id gt Mode Interface Config no switchport access vian This command resets the switch port access mode VLAN to its default value Format no switchport access vlan Mode Interface Config show interfaces switchport Use this command to either display the switch port status for all interfaces for a specific interface or for a specific mode access trunk or general If you select a mode but do not specify the interface for the mode the selected mode is displayed for all interfaces Format show interfaces switchport
637. unting mode Mode Global Config Management Commands 501 M4100 Series ProSAFE Managed Switches no radius accounting mode Use this command to set the RADIUS accounting function to the default value disabled Format no radius accounting mode Mode Global Config radius server attribute Use this command to specify the RADIUS client to use the NAS IP Address attribute in the RADIUS requests If the specific IP address is configured while enabling this attribute the RADIUS client uses that IP address while sending NAS IP Address attribute in RADIUS communication Format radius server attribute 4 lt ipaddr gt Mode Global Config Parameter Definition NAS IP Address attribute to be used in RADIUS requests ipaddr The IP address of the server no radius server attribute Use this command to disable the NAS IP Address attribute global parameter for RADIUS client When this parameter is disabled the RADIUS client does not send the NAS IP Address attribute in RADIUS requests Format no radius server attribute 4 lt ipaddr gt Mode Global Config Command example NETGEAR Switch Config radius server attribute 4 192 168 37 60 Command example NETGEAR Switch Config radius server attribute 4 radius server host This command configures the IP address or DNS name to use for communicating with the RADIUS server of a selected server type While configuring the IP ad
638. uration to the startup configuration nvram clibanner lt url gt Copies the CLI banner to a server nvram cpupktcapture pcap lt url gt Uploads the CPU packets capture file nvram errorlog lt url gt Copies the error log file to a server nvram log lt url gt Copies the log file to a server nvram script lt scriptname gt lt url gt Copies a specified configuration script nvram startup config nvram startup config nvram traplog nvram backup config lt url gt lt url gt file to a server Copies the startup configuration to the backup configuration Copies the startup configuration to a server Copies the trap log file to a server system running config nvram startup config Saves the running configuration to nvram lt url gt lt url gt lt url gt nvram clibanner nvram script lt destfilename gt nvram script lt destfilename gt noval Downloads the CLI banner to the system Downloads a configuration script file to the system During the download of a configuration script the copy command validates the script In case of any error the command lists all the lines at the end of the validation process and prompts you to confirm before copying the script file When you use this option the copy command does not validate the downloaded script file An example of the CLI command follows NETGEAR Switch copy tftp 1 1 1 1 file scr nvram script file scr
639. ured for OSPFv2 OSPF Admin Mode ___ Whether OSPF is enabled or disabled globally Maximum Paths The maximum number of next hops in an OSPF route Routing for Networks The address ranges configured with an OSPF network command Distance The administrative distance or route preference for intra area inter area and external routes Default Route Whether OSPF is configured to originate a default route Advertise Always Whether default advertisement depends on having a default route in the common routing table Metric The metric configured to be advertised with the default route Metric Type The metric type for the default route Redist Source A type of routes that OSPF is redistributing Metric The metric to advertise for redistributed routes of this type Routing Commands 244 M4100 Series ProSAFE Managed Switches Parameter Description Metric Type The metric type to advertise for redistributed routes of this type Subnets Whether OSPF redistributes subnets of classful addresses or only classful prefixes Dist List A distribute list used to filter routes of this type Only routes that pass the distribute list are redistributed Number of Active Areas The number of OSPF areas with at least one interface running on this router Also broken down by area type ABR Status ASBR Status RIP Whether the router is an area border router A router is an area border router if it has inter
640. use Dot1p the mode does not appear in the output of the show running config command because Dotip is the default Default dotip Format classofservice trust dotlp ip dscp ip precedence untrusted Modes e Global Config e Interface Config no classofservice trust This command sets the interface mode to the default value Format no classofservice trust Modes e Global Config e Interface Config cos queue min bandwidth This command specifies the minimum transmission bandwidth guarantee for each interface queue The total number of queues supported per interface is platform specific A value from 0 100 percentage of link rate must be specified for each supported queue with 0 indicating no guaranteed minimum bandwidth The sum of all values entered must not exceed 100 Format cos queue min bandwidth lt bw 0 gt lt bw 1 gt lt bw n gt Modes e Global Config e Interface Config Quality of Service Commands 264 M4100 Series ProSAFE Managed Switches no cos queue min bandwidth This command restores the default for each queue s minimum bandwidth value Format no cos queue min bandwidth Modes e Global Config e Interface Config cos queue strict This command activates the strict priority scheduler mode for each specified queue Format cos queue strict lt queue id 1 gt lt queue id 2 gt lt queue 1d n gt Modes e Global Config Interface Config n
641. ute entry for route DVMRP dvmrp_prepare_routes failed getting Failed to get memory while announcing a memory for dvmrp_ann_rt new route entry Cause EDB EDB Callback Unit Join lt num gt Unit lt num gt has joined the stack Log Messages 553 M4100 Series ProSAFE Managed Switches Technologies Table 54 System General Error Messages Component Message Cause Invalid USP unit x slot x port x A port was not able to be translated correctly during the receive In hapiBroadSystemMacAddress call to Failed to add an L2 address to the MAC bem_12_addr_ado FAILED x table This should only happen when a hash collision occurs or the table is full Failed installing mirror action rest of the A previously configured probe port is not policy applied successfully being used in the policy The release notes state that only a single probe port can be configured Policy x does not contain rule x The rule was not added to the policy due to a discrepancy in the rule count for this specific policy Additionally the message can be displayed when an old rule is being modified but the old rule is not in the policy ERROR policy x tmpPolicy x size x data An issue installing the policy due to a XXXXXXXX possible duplicate hash ACL x not found in internal table Attempting to delete a non existent ACL ACL internal table overflow Attempting to add an ACL to a full table I
642. vailable as additional transfer methods if the software package supports secure management Format copy lt source gt lt destination gt Mode Privileged EXEC Replace the lt source gt and lt destination gt parameters with the options in Table 7 on page 373 Utility Commands 371 M4100 Series ProSAFE Managed Switches You can use the copy command with the following options copy lt url gt imagel image2 nvram backup config nvram clibanner nvram cpu pkt capture pcap nvram errorlog nvram factory defaults nvram log nvram script nvram startup config nvram tech support nvram traplog system running config lt url gt isa users imagel image2 nvram startup config nvram backup config nvram startup config nvram clibanner nvram script lt destfilename gt nvram script lt destfilename gt noval nvram sshkey dsa nvram sshkey rsal nvram sshkey rsa2 nvram sslpem dhweak nvram sslpem dhstrong nvram sslpem root nvram sslpem server nvram startup config Use the ias users keyword to download the IAS user database file When the IAS user s file is downloaded the switch IAS user s database is replaced with the users and their attributes in the downloaded file In the copy lt url gt ias users command for lt ur1 gt use one of the following values for the IAS user s file tftp lt ipaddr gt lt ipv address gt lt hostname gt lt filepath gt lt filename gt
643. value is configurable Response time seconds is measured in seconds Retries The maximum number of times an ARP request is retried This value is configurable Cache Size The maximum number of entries in the ARP table This value is configurable Dynamic Renew Mode Total Entry Count Current Peak Static Entry Count Current Max Displays whether the ARP component automatically attempts to renew dynamic ARP entries when they age out The total entries in the ARP table and the peak entry count in the ARP table The static entry count in the ARP table and maximum static entry count in the ARP table show arp switch Address Resolution Protocol commands This command displays the contents of the switch s Address Resolution Protocol ARP table Format show arp switch Mode Privileged EXEC Term Definition IP Address The IP address of a device on a subnet attached to the switch MAC Address The hardware MAC address of that device Interface The routing slot port associated with the device s ARP entry Routing Commands 233 M4100 Series ProSAFE Managed Switches IP Routing Commands This section describes the commands you use to enable and configure IP routing on the switch routing This command enables IPv4 and IPv6 routing for an interface You can view the current value for this function with the show ip brief command The value is labeled as Routing Mode
644. value maps from the aLldpXdot3RemTxTwSys attribute Remote Tw_sys Echo microsec Integer that indicates the value Transmit Tw_sys echoed back by the remote system This value maps from the aLldpXdot3RemTxTwSysEcho attribute Green Ethernet Commands 527 M4100 Series ProSAFE Managed Switches ig Detntion S O Remote Tw_sys_rx Integer that indicates the value of Tw_sys that the remote system requests from the microsec local system This value maps from the aLldpXdot3RemRxTwSys attribute Remote Tw_sys_rx Echo Integer that indicates the value of Receive Tw_sys echoed back by the remote microsec system This value maps from the aLldpXdot3RemRxTwSysEcho attribute Remote Fallback Tw_sys Integer that indicates the value of fallback Tw_sys that the remote system is microsec advertising This attribute maps to the variable RemFbSystemValue as defined in 78 4 2 3 Tx_dll_ enabled Initialization status of the EEE transmit Data Link Layer management function on the local system Tx_dll_ready Data Link Layer ready This variable indicates that the tx system initialization is complete and is ready to update receive LLDPDU containing EEE TLV This variable is updated by the local system software Rx_dll_enabled Status of the EEE capability negotiation on the local system Rx_dll_ready Data Link Layer ready This variable indicates that the rx system initialization is complete and is ready to upda
645. ver Log Messages 536 M4100 Series ProSAFE Managed Switches Table 10 TACACS Log Messages Component Message Cause TACACS TACACS authentication error no server TACACS request needed but no servers to contact are configured TACACS TACACS connection failed to server TACACS request sent to server x x x x X X X X but no response was received TACACS TACACS no key configured to encrypt No key configured for the specified server packet for server x x x Xx TACACS TACACS received invalid packet type Received packet type that is not supported from server TACACS TACACS invalid major version in Major version mismatch received packet TACACS TACACS invalid minor version in Minor version mismatch received packet Table 11 LLDP Log Message Component Message Cause LLDP lldpTask invalid message type xx Unsupported LLDP packet received XXXXXX XX Table 12 SNTP Log Message Component Message Cause SNTP system clock synchronized on s Indicates that SNTP has successfully UTC synchronized the time of the box with the server Management Table 13 SNMP Log Message Component Message Cause SNMP EDB Callback Unit Join x A new unit has joined the stack Log Messages 537 M4100 Series ProSAFE Managed Switches Table 14 EmWeb Log Messages Component Message Cause EMWEB Telnet Max number of Telnet login
646. vlans IP Subnet Vlans failed to save This message appears when save configuration configuration of subnet vians failed IPsubnet vlans vlanlpSubnetCnfgrinitPhase1 Process Appears when a read write lock creations Unable to create r w lock for vlanlpSubnet fails IPsubnet vlans vlanlpSubnetCnfgrIinitPhase2Process Appears when this component unable to Unable to register for VLAN change register for VLAN change notifications callback IPsubnet vlans vlanlpSubnetCnfgrFiniPhase1 Process Appears when a semaphore deletion of this could not delete avl semaphore component fails IPsubnet vlans vlanlpSubnetDtlVianCreate Failed Appears when a dtl call fails to add an entry into the table IPsubnet vlans vlanlpSubnetSubnetDeleteApply Failed Appears when a dil fails to delete an entry from the table IPsubnet vlans vlanlpSubnetVlanChangeCallback Failed Appears when a dil fails to add an entry for to add an Entry a VLAN add notify event IPsubnet vlans vlanlpSubnetVlanChangeCallback Failed Appears when a dtl fails to delete an entry to delete an Entry for a VLAN delete notify event Table 23 Mac based VLANs Log Messages Component Message Cause Mac based MAC VLANs Failed to save configuration This message appears when save VLANS configuration of Mac VLANs failed Mac based vlanMacCnfgrinitPhase1 Process Unable Appears when a read write lock creations VLANS to create r w lock for vlanMac fails
647. w the logical slots The port identifies the specific physical port or logical interface being managed on a slot Table 4 Type of ports Port Type Description Physical Ports The physical ports for each slot are numbered sequentially starting from zero Logical Interfaces Port channel or link aggregation group LAG interfaces are logical interfaces that are only used for bridging functions VLAN routing interfaces are only used for routing functions Loopback interfaces are logical interfaces that are always up Tunnel interfaces are logical point to point links that carry encapsulated packets CPU ports CPU ports are handled by the driver as one or more physical entities located on physical slots Note In the CLI loopback and tunnel interfaces do not use the slot port format To specify a loopback interface you use the loopback ID To specify a tunnel interface you use the tunnel ID Using a Command s No Form The no keyword is a specific form of an existing command and does not represent a new or distinct command Almost every configuration command has a no form In general use the no form to reverse the action of acommand or reset a value back to the default For example the no shutdown configuration command reverses the shutdown of an interface Use the Using the Command Line Interface 10 M4100 Series ProSAFE Managed Switches command without the keyword no to reenable a disabled feature
648. with TTL of 0 or 1 that might otherwise have been relayed Packets that matched a discard entry The number of packets ignored by the relay agent because they match a discard relay entry Routing Commands 259 M4100 Series ProSAFE Managed Switches ICMP Throttling Commands This section describes the commands you use to configure options for the transmission of various types of ICMP messages ip unreachables Use this command to enable the generation of ICMP Destination Unreachable messages By default the generation of ICMP Destination Unreachable messages is enabled Default enable Format ip unreachables Mode Interface Config no ip unreachables Use this command to prevent the generation of ICMP Destination Unreachable messages Format no ip unreachables Interface Config ip redirects Use this command to enable the generation of ICMP Redirect messages by the router By default the generation of ICMP Redirect messages is disabled Default disabled Format ip redirects Mode e Global Config Interface Config no ip redirects Use this command to prevent the generation of ICMP Redirect messages by the router Format no ip redirects Mode e Global Config Interface Config Routing Commands 260 M4100 Series ProSAFE Managed Switches ip icmp echo reply Use this command to enable the generation of ICMP Echo Reply messages by the router By defa
649. y one default gateway can be configured If you use this command multiple times each command replaces the previous value ip default gateway lt ipaddr gt Mode Global Config no ip default gateway Use this command to remove the default gateway address from the configuration Format no ip default gateway lt ipaddr gt Mode Interface Config release dhcp Use this command to force the DHCPv4 client to release the leased address from the specified interface Format release dhcp lt slot port gt Mode Privileged EXEC renew dhcp Use this command to force the DHCPv4 client to immediately renew an IPv4 address lease on the specified interface Format renew dhcp lt slot port gt network port Mode Privileged EXEC Note This command can be used on in band ports as well as network out of band port Routing Commands 236 M4100 Series ProSAFE Managed Switches show dhcp lease Use this command to display a list of IPv4 addresses currently leased from a DHCP server on a specific in band interface or all in band interfaces This command does not apply to service or network ports Format show dhcp lease interface lt slot port gt Mode Privileged EXEC Term Definition ss esses oS IP address Subnet The IP address and network mask leased from the DHCP server mask DHCP Lease The IPv4 address of the DHCP server that leased the ad
650. zed Select auto to specify that the Switching Commands 83 M4100 Series ProSAFE Managed Switches authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant authenticator and the authentication server If the mac based option is specified MAC based dot1x authentication is enabled on the port Default auto Format dot1x port control all force unauthorized force authorized auto mac based Mode Global Config no dot1x port control all This command sets the authentication mode on all ports to the default value Format no dot1x port control all Mode Global Config dot1x re authenticate This command begins the re authentication sequence on the specified port This command is only valid if the control mode for the specified port is auto or mac based If the control mode is not auto or mac based an error will be returned Format dot1x re authenticate lt slot port gt Mode Privileged EXEC dot1x re authentication This command enables re authentication of the supplicant for the specified port Default disabled Format dotlx re authentication Mode Interface Config no dot1x re authentication This command disables re authentication of the supplicant for the specified port Format no dotlx re authentication Mode Interface Config Switching Commands

ProSafe Managed Switch Command Line Interface (CLI) User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents