Enterasys® SecureStack™ B2Stackable SwitchesConfiguration GuideFirmware Version 4.02.xx.xxxx P/N 9034133-15
viii set port inlinepower ...
Resetting the Switch3-48 Basic ConfigurationModeSwitchcommand,read‐only.UsageBydefault,switchtimeoutoccursafter15minutesofuserinactivity,
clear configSecureStack B2 Configuration Guide 3-49ExamplesThisexampleshowshowtoresetthesystem:B2(su)->reset Are you sure you want to reload
Using and Configuring WebView3-50 Basic ConfigurationExampleThisexampleshowshowtoclearconfigurationparameters(includingstackingparameters,i
set webviewSecureStack B2 Configuration Guide 3-51ExampleThisexampleshowshowtodisplayWebViewstatus:B2(rw)->show webviewWebView is Enabled.se
set ssl3-52 Basic ConfigurationExampleThisexampleshowshowtodisplaySSLstatus:B2(rw)->show sslSSL status: Enabledset sslUsethiscommandtoen
show supportSecureStack B2 Configuration Guide 3-53show supportUsethiscommandtodisplayswitchinformationfortroubleshooting.Syntaxshow supportPa
show support3-54 Basic Configuration
SecureStack B2 Configuration Guide 4-14Activating Licensed FeaturesInordertoenabletheB2advancedfeatures,suchasPolicy,youmustpurchaseand
Clearing, Showing, and Applying Licenses4-2 Activating Licensed Features2. Optionally,notetheserialnumbersoftheswitchesinthestack.Youcanu
set licenseSecureStack B2 Configuration Guide 4-3set licenseUsethiscommandtoactivatetheSecureStackB2licensedfeatures.Syntaxset license type
ixReviewing Port Status ...
show license4-4 Activating Licensed Featuresshow licenseUsethiscommandtodisplaylicensekeyinformationfor switcheswithactivatedlicenses.Synt
clear licenseSecureStack B2 Configuration Guide 4-5ExampleThisexampleshowshowtoclearthePolicy licensedfeature:B2(rw)->clear license featur
clear license4-6 Activating Licensed Features
SecureStack B2 Configuration Guide 5-15Configuring System Power and PoEThecommandsinthischapterallowyoutoreviewandsetsystempowerandPoE(
set inlinepower threshold5-2 Configuring System Power and PoEExampleThisexampleshowshowtodisplaysystempowerproperties:B2(su)->show inlinepo
set inlinepower trapSecureStack B2 Configuration Guide 5-3UsageThethresholdisexpressedasapercentageoftheavailablePoEpower.Whenthisthresh
show port inlinepower5-4 Configuring System Power and PoEParametersDefaultsDefaultdetectionmodeisauto.ModeSwitchcommand,read‐write.UsageThiscom
set port inlinepowerSecureStack B2 Configuration Guide 5-5B2(su)->show port inlinepower fe.2.1Port Type Admin Oper Priority Class Pow
set port inlinepower5-6 Configuring System Power and PoE
SecureStack B2 Configuration Guide 6-16Discovery Protocol ConfigurationThischapterdescribeshowtoconfigurediscoveryprotocols.Configuring CDPPurp
x Commands ...
show cdp6-2 Discovery Protocol Configurationshow cdpUsethiscommandtodisplaythestatusoftheCDPdiscoveryprotocolandmessageintervalononeo
set cdp stateSecureStack B2 Configuration Guide 6-3set cdp stateUsethiscommandtoenableordisabletheCDPdiscoveryprotocolononeormoreports.
set cdp auth6-4 Discovery Protocol Configurationset cdp authUsethiscommandtosetaglobalCDPauthenticationcode.Syntaxset cdp auth auth-codeParam
set cdp hold-timeSecureStack B2 Configuration Guide 6-5ExampleThisexampleshowshowtosettheCDPintervalfrequencyto15seconds:B2(su)->set cd
show neighbors6-6 Discovery Protocol ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresettheCDPstatetoauto‐enabled:
Configuring Cisco Discovery ProtocolSecureStack B2 Configuration Guide 6-7Configuring Cisco Discovery ProtocolPurposeToreviewandconfiguretheCisco
show ciscodp port info6-8 Discovery Protocol ConfigurationDevice ID : 001188554A60Last Change : WED NOV 08 13:19:56 2006Table 6‐3providesan explana
set ciscodp statusSecureStack B2 Configuration Guide 6-9set ciscodp statusUsethiscommandtoenableordisabletheCiscodiscoveryprotocolglobally
set ciscodp holdtime6-10 Discovery Protocol ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetth
set ciscodp portSecureStack B2 Configuration Guide 6-11ParametersDefaults•Status:enabled•VoiceVLAN:none•Trustmode:trusted•CoSvalue:0ModeSwitch
xiset snmp user ...8
clear ciscodp6-12 Discovery Protocol Configuration•IftheswitchportisconfiguredtoaCiscoDPtruststateofuntrusted(trustedno),thissetting
Configuring Link Layer Discovery Protocol and LLDP-MEDSecureStack B2 Configuration Guide 6-13ExamplesThisexampleshowshowtoclearalltheCiscoDP
show lldp6-14 Discovery Protocol ConfigurationConfiguration TasksThecommandsincludedinthisimplementationallowyoutoperformthefollowingconfi
show lldp port statusSecureStack B2 Configuration Guide 6-15Syntaxshow lldpParametersNone.DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexamp
show lldp port trap6-16 Discovery Protocol ConfigurationTx-Enabled Ports : fe.1.1-60; fe.2.1-24; fe.3.1-30; fe.4.1-12Rx-Enabled Ports : fe.1
show lldp port location-infoSecureStack B2 Configuration Guide 6-17ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaytransmitTLV
show lldp port local-info6-18 Discovery Protocol Configurationshow lldp port local-infoUsethiscommandtodisplaytheloca lsysteminformationstore
show lldp port local-infoSecureStack B2 Configuration Guide 6-19Table 6‐5describestheinformationdisplayedbytheshowlldpportlocal‐infocommand
show lldp port remote-info6-20 Discovery Protocol Configurationshow lldp port remote-infoUsethiscommand todisplaytheremotesysteminformationst
show lldp port remote-infoSecureStack B2 Configuration Guide 6-21ExampleThisexampleshowshowtodisplaytheremotesysteminformationstoredforpor
xii Loop Protect ...
set lldp tx-interval6-22 Discovery Protocol Configurationset lldp tx-intervalUsethiscommandtosetthetime,inseconds,betweensuccessiveLLDPfra
set lldp trap-intervalSecureStack B2 Configuration Guide 6-23set lldp trap-intervalUsethiscommandtosettheminimumintervalbetweenLLDPnotificat
set lldp port status6-24 Discovery Protocol ConfigurationExampleThisexamplesetsthenumberoffaststartLLDPDUstobesentto4.B2(rw)->set lldp
set lldp port med-trapSecureStack B2 Configuration Guide 6-25DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleenablestransmitt ingLLD
set lldp port tx-tlv6-26 Discovery Protocol ConfigurationParametersall AddsalloptionalTLVstotransmittedLLDPDUs.port‐desc PortDescriptionoption
clear lldpSecureStack B2 Configuration Guide 6-27DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleconfiguresthemanagementaddress,ME
clear lldp port trap6-28 Discovery Protocol ConfigurationSyntaxclear lldp port status port-stringParametersDefaultsNone.ModeSwitchcommand,read‐write
clear lldp port tx-tlvSecureStack B2 Configuration Guide 6-29ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexamplereturnsportfe
clear lldp port tx-tlv6-30 Discovery Protocol ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampledisablesthemanagementadd
SecureStack B2 Configuration Guide 7-17Port ConfigurationThischapterdescribesthePortConfigurationsetofcommandsandhowtousethem.Port Config
xiiiset spantree portadmin...9-33cle
Port Configuration Summary7-2 Port Configuration•4SFPslots(labeledports21through24orports45through48)thatprovidetheoptionofinstallin
Reviewing Port StatusSecureStack B2 Configuration Guide 7-3Reviewing Port StatusPurposeTodisplayoperatingstatus,duplexmode,speed,porttype,and
show port status7-4 Port Configurationshow port statusUsethiscommandtodisplayoperatingandadminstatus,speed,duplexmodeandporttypeforone
show port countersSecureStack B2 Configuration Guide 7-5show port countersUsethiscommandtodisplayportcounterstatisticsdetailingtrafficthroug
Disabling / Enabling and Naming Ports7-6 Port ConfigurationThisexampleshowshowtodisplayallfe.3.1portcounterstatisticsrelatedtotrafficthr
set port disableSecureStack B2 Configuration Guide 7-7set port disableUsethiscommandtoadministrativelydisableoneormoreports.Whenthiscomman
show port alias7-8 Port Configurationshow port aliasUsethiscommandtodisplaythealias nameforoneormoreports.Syntaxshow port alias [port-stri
set port aliasSecureStack B2 Configuration Guide 7-9ExamplesThisexampleshowshowtoassignthealias“A d m i n ” tofe.3.3:B2(rw)->set port ali
Setting Speed and Duplex Mode7-10 Port ConfigurationSetting Speed and Duplex ModePurposeToreviewandsettheoperationalspeedinMbpsandthedefaul
set port speedSecureStack B2 Configuration Guide 7-11set port speedUsethiscommandtosetthedefaultspeedofoneormoreports.Thissettingonlyt
xiv show port vlan ...
set port duplex7-12 Port ConfigurationExampleThisexampleshowshowtodisplaythedefaultduplexsettingforEtherne tport14inslot 3:B2(su)->s
Enabling / Disabling Jumbo Frame SupportSecureStack B2 Configuration Guide 7-13Enabling / Disabling Jumbo Frame SupportPurposeToreview,enable,andd
set port jumbo7-14 Port Configurationset port jumbo Usethiscommandtoenableordisablejumboframesupportononeormoreports.Syntaxset port jumb
Setting Auto-Negotiation and Advertised AbilitySecureStack B2 Configuration Guide 7-15Setting Auto-Negotiation and Advertised AbilityPurposeToreview,
set port negotiation7-16 Port ConfigurationExampleThisexampleshowshowtodisplayaut o‐negotiationstatusfor1‐GigabitEthernetport14inslot 3:
set port advertiseSecureStack B2 Configuration Guide 7-17ExampleThisexampleshowshowtodisplayadvertisementstatusforGigabitports13and14:B2
clear port advertise7-18 Port ConfigurationExampleThisexampleshowshowtoconfigureport1toadvertise1000BASE‐Tfullduplex:B2(su)->set port
Setting Flow ControlSecureStack B2 Configuration Guide 7-19Setting Flow ControlPurposeToreview,enableordisableportflowcontrol. Flowcontrolis
set flowcontrol7-20 Port ConfigurationDefaults None.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoenableflowcontrol:B2(su)->set
Setting Port Link Traps and Link Flap DetectionSecureStack B2 Configuration Guide 7-21Setting Port Link Traps and Link Flap DetectionPurposeTodisable
xvset diffserv policy police action conform ...11-13set diffserv
set port trap7-22 Port ConfigurationDefaultsIfport‐stringisnotspecified,thetrapstatusfor allportswillbedisplayed.ModeSwitchcommand,read
show linkflapSecureStack B2 Configuration Guide 7-23ParametersDefaults•Ifnotspecified,informationaboutalllinkflapdetectionsettingswillbedi
show linkflap7-24 Port ConfigurationExamplesThisexampleshowshowtodisplaytheglobalstatusofthelinktrapdetectionfunction:B2(rw)->show li
set linkflap globalstateSecureStack B2 Configuration Guide 7-25set linkflap globalstateUsethiscommandtogloballyenable ordisablethelinkflapd
set linkflap interval7-26 Port ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoenablethelinktrapmonitoringonallpor
clear linkflap actionSecureStack B2 Configuration Guide 7-27DefaultsNone.ModeSwitchmode,read‐write.ExampleThisexampleshowshowtosetthelinkfla
set linkflap downtime7-28 Port ConfigurationParametersDefaultsNone.ModeSwitchmode,read‐write.ExampleThisexampleshowshowtosetthelinkflapthre
clear linkflapSecureStack B2 Configuration Guide 7-29ParametersDefaultsIfport‐stringisnotspecified,allportsdisabledbyalinkflapviolationwi
Configuring Broadcast Suppression7-30 Port ConfigurationConfiguring Broadcast SuppressionPurposeToreviewandsetthebroadcastsuppressionthreshold
set port broadcastSecureStack B2 Configuration Guide 7-31set port broadcastUsethiscommandtosetthebroadcastsuppressionthreshold,inpacketsper
xvi show cos port-type ...12-35
clear port broadcast7-32 Port ConfigurationDefaultsNone.Mode Switchcommand,read‐write.ExampleThisexampleclearsthebroadcastthresholdlimitto14
Port MirroringSecureStack B2 Configuration Guide 7-33Port MirroringTheSecureStackB2deviceallowsyoutomirror(orredirect)thetrafficbeingswit
Port Mirroring7-34 Port Configuration5. EnterMIBoption4(createAndGo)andperformanSNMPSetoperation.6. (Optional)UsetheCLItoverifythepor
show port mirroringSecureStack B2 Configuration Guide 7-35show port mirroringUsethiscommandtodisplaythesourceandtargetportsformirroring,an
clear port mirroring7-36 Port ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageNotethatLAGportsandtheirunderlyingphysica
clear port mirroringSecureStack B2 Configuration Guide 7-37ExampleThisexampleshowshowtoclearportmirroringbetweensourceportfe.1.4andtarget
Link Aggregation Control Protocol (LACP)7-38 Port ConfigurationLink Aggregation Control Protocol (LACP)Usingmultiplelinkssimultaneouslytoincrease
Link Aggregation Control Protocol (LACP)SecureStack B2 Configuration Guide 7-39•Ameansofidentifyingthe setofcapabilitiesassociatedwitheachp
Link Aggregation Control Protocol (LACP)7-40 Port Configurationis,willblockredundantpaths).Forinformationaboutbuildingstaticaggregations, r
show lacpSecureStack B2 Configuration Guide 7-41show lacpUsethiscommandtodisplayinformationaboutoneormoreaggregatorports.Syntaxshow lacp [
xviishow logging default...15-4s
set lacp7-42 Port Configurationset lacpUsethiscommandtodisableorenabletheLinkAggregationControlProtocol(LACP)onthedevice.Syntaxset lacp
set lacp asyspriSecureStack B2 Configuration Guide 7-43set lacp asyspriUsethiscommandtosettheLACPsystempriority.Syntaxset lacp asyspri valueP
clear lacp7-44 Port ConfigurationUsageLACPwillusethisvaluetoformanoperkey.Onlyunderlyingphysicalportswithoperkeysmatchingthoseofth
clear lacp staticSecureStack B2 Configuration Guide 7-45DefaultsIfnotspecified,akeywillbeassignedaccordingtothespecifiedaggregator.Forex
set lacp singleportlag7-46 Port Configurationset lacp singleportlagUsethiscommandtoenableordisabletheformationofsingleportLAGs.Syntaxset
show port lacpSecureStack B2 Configuration Guide 7-47ExampleThisexampleshowshowtoresetthesingleportLAGfunctionbacktodisabled:B2(su)->
set port lacp7-48 Port ConfigurationPort Instance: fe.1.12 ActorPort: 1411 PartnerAdminPort: 1411 Actor
set port lacpSecureStack B2 Configuration Guide 7-49DefaultsAtleastoneparametermustbeenteredperport‐string.Ifenableordisablearenotspecif
clear port lacp7-50 Port ConfigurationModeSwitchcommand,read‐write.UsageLACPcommandsandparametersbeginningwithan“a”(suchasaadminkey)seta
clear port lacpSecureStack B2 Configuration Guide 7-51DefaultsNone.ModeSwitchcommand,read‐write.UsageIfyousetaporttoLACPpassiveusingthecom
xviii show nodealias config ...15-35
Configuring Protected Ports7-52 Port ConfigurationConfiguring Protected PortsTheProtectedPortfeatureisusedtopreventportsfromforwardingtraff
show port protectedSecureStack B2 Configuration Guide 7-53ExampleThisexampleshowshowtoassignportsfe.1.1 throughfe.1.3toprotectedportgroup
set port protected name7-54 Port ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearprotectedportsfe.1.1throughfe.
clear port protected nameSecureStack B2 Configuration Guide 7-55ExampleThisexampleshowshowtoshowthenameofprotectedportgroup1:B2(ro)->s
clear port protected name7-56 Port Configuration
SecureStack B2 Configuration Guide 8-18SNMP ConfigurationThischapterdescribestheSimpleNetworkManagementProtocol(SNMP)setofcommandsandhow
SNMP Configuration Summary8-2 SNMP Configuration•SNMPnetworkmanagementapplications,suchastheEnterasysNetSightapplication,whichcommunicatew
Reviewing SNMP StatisticsSecureStack B2 Configuration Guide 8-3Using SNMP Contexts to Access Specific MIBs Bydefault,whenoperatingfromtheswitch
show snmp engineid8-4 SNMP ConfigurationCommands show snmp engineidUsethiscommandtodisplaytheSNMPlocalengineID.ThisistheSNMPv3engine’s
show snmp countersSecureStack B2 Configuration Guide 8-5show snmp countersUsethiscommandtodisplaySNMPtrafficcountervalues.Syntaxshow snmp coun
xixset dhcp...
show snmp counters8-6 SNMP ConfigurationusmStatsUnknownEngineIDs = 0 usmStatsWrongDigests = 0 usmStatsDecryptionErrors = 0 Table 8‐15
show snmp countersSecureStack B2 Configuration Guide 8-7snmpOutBadValues Number of SNMP PDUs generated by the SNMP protocol entity with the value of t
Configuring SNMP Users, Groups, and Communities8-8 SNMP ConfigurationConfiguring SNMP Users, Groups, and CommunitiesPurposeToreviewandconfigureSNM
set snmp userSecureStack B2 Configuration Guide 8-9Ifuserisnotspecif ied,informationaboutallSNMPuserswillbedisplayed.Ifremoteisnotspec
clear snmp user8-10 SNMP ConfigurationParametersDefaultsIfremoteisnotspecified,theuserwillberegisteredforthelocalSNMPengine.Ifauthentic
show snmp groupSecureStack B2 Configuration Guide 8-11ExampleThisexampleshowshowtoremovetheSNMPusernamed“bill”:B2(su)->clear snmp user bi
set snmp group8-12 SNMP ConfigurationTable 8‐17providesanexplanationofthecommandoutput.set snmp groupUsethiscommandtocreateanSNMPgroup.
show snmp communitySecureStack B2 Configuration Guide 8-13ParametersDefaultsIf not specified, settings related to all security models will be cleared.
set snmp community8-14 SNMP Configurationset snmp communityUsethiscommandtoconfigureanSNMPcommunitygroup.Syntaxset snmp community community [s
Configuring SNMP Access RightsSecureStack B2 Configuration Guide 8-15DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtodele
xx DHCP Snooping Commands ... 18
show snmp access8-16 SNMP ConfigurationDefaultsIfgroupnameisnotspecified,accessinformationforallSNMPgroupswillbedisplayed.Ifsecurity‐mod
set snmp accessSecureStack B2 Configuration Guide 8-17set snmp accessUsethiscommandtosetanSNMPaccessconfiguration.Syntaxset snmp access group
clear snmp access8-18 SNMP ConfigurationDefaultsIfsecuritylevelisnotspecified,noauthenticationwillbeapplied.Ifcontextisnotspecified,acc
Configuring SNMP MIB ViewsSecureStack B2 Configuration Guide 8-19ExampleThisexampleshowshowtoclearSNMPversion3accessforthe“mis‐group”via
show snmp context8-20 SNMP ConfigurationExampleThisexampleshowshowtodisplaySNMPMIBviewconfigurationinformation:B2(su)->show snmp view
set snmp viewSecureStack B2 Configuration Guide 8-21ModeSwitchcommand,read‐only.UsageAnSNMPcontextisacollectionofmanagementinformationthat
clear snmp view8-22 SNMP Configurationclear snmp viewUsethiscommandtodeleteanSNMPv3MIBview.Syntaxclear snmp view viewname subtreeParametersDef
show snmp targetparamsSecureStack B2 Configuration Guide 8-23ParametersDefaultsIftargetParamsisnotspecified,entriesassociatedwithalltargetpa
set snmp targetparams8-24 SNMP Configurationset snmp targetparamsUsethiscommandtosetSNMPtargetparameters,anamedsetofsecurity/authorization
Configuring SNMP Target AddressesSecureStack B2 Configuration Guide 8-25ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshow
xxiset dot1x...1
set snmp targetaddr8-26 SNMP ConfigurationIfnotspecified,entriesofallstoragetypeswillbedisplayedforatargetaddress.ModeSwitchcommand,re
set snmp targetaddrSecureStack B2 Configuration Guide 8-27ParametersDefaultsIfnotspecified,udpportwillbesetto162.Ifnotspecified,maskwillb
clear snmp targetaddr8-28 SNMP Configurationclear snmp targetaddrUsethiscommandtodeleteanSNMPtargetaddressentry.Syntaxclear snmp targetaddr t
show newaddrtrapSecureStack B2 Configuration Guide 8-29Commands show newaddrtrapUsethiscommandtodisplaytheglobalandport‐specificstatusofthe
set newaddrtrap8-30 SNMP Configurationge.1.1 disabledge.1.2 disabledge.1.3 disabledge.1.4 disabledge.1.5 disabledset newaddrtrapUsethi
set snmp notifySecureStack B2 Configuration Guide 8-31ParametersDefaultsIfanotifynameisnotspecified,allentrieswillbedisplayed.Ifvolatile,
clear snmp notify8-32 SNMP Configurationcommand’stagparametercanbeusedtobindeachentrytoatargetaddressusingthesetsnmptargetaddrcomma
show snmp notifyfilterSecureStack B2 Configuration Guide 8-33ExampleThisexampleshowshowtocleartheSNMPnotifyconfigurationfor“hello”:B2(su)-&
set snmp notifyfilter8-34 SNMP Configurationset snmp notifyfilterUsethiscommandtocreateanSNMPnotifyfilterconfiguration.Thisidentifieswhich
show snmp notifyprofileSecureStack B2 Configuration Guide 8-35ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtod
xxii Configuring MAC Locking ...
set snmp notifyprofile8-36 SNMP ConfigurationRow status = activeset snmp notifyprofileUsethiscommandtocreateanSNMPnotifyfilterprofileco
Creating a Basic SNMP Trap ConfigurationSecureStack B2 Configuration Guide 8-37ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtodelete
Creating a Basic SNMP Trap Configuration8-38 SNMP ConfigurationExampleThisexampleshowshowto:• CreateanSNMPcommunitycalledmgmt.• Configurea
SecureStack B2 Configuration Guide 9-19Spanning Tree ConfigurationThischapterdescribestheSpanningTreeConfigurationsetofcommandsandhowtous
Spanning Tree Configuration Summary9-2 Spanning Tree Configurationblockingforalltrafficflowingbetweenthetwoswitches.Theblockinglinksareef
Configuring Spanning Tree Bridge ParametersSecureStack B2 Configuration Guide 9-3learningandthepriorityvectorisworsethanthatalreadyheldbyt
Configuring Spanning Tree Bridge Parameters9-4 Spanning Tree ConfigurationCommands For information about... Refer to page...show spantree stats 9-5se
show spantree statsSecureStack B2 Configuration Guide 9-5show spantree statsUsethiscommandtodisplaySpanningTreeinformationforoneormoreport
show spantree stats9-6 Spanning Tree ConfigurationExampleThisexampleshowshowtodisplaythedevice’sSpanningTreeconfiguration:B2(su)->show sp
set spantreeSecureStack B2 Configuration Guide 9-7set spantreeUsethiscommandtogloballyenable ordisabletheSpanningTreeprotocolontheswitch
xxiii10-1 Example of VLAN Propagation via GVRP... 10-21Tables1-1 De
set spantree version9-8 Spanning Tree ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaySpanningTreeversioninform
show spantree bpdu-forwardingSecureStack B2 Configuration Guide 9-9ParametersNone.DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshow
show spantree bridgeprioritymode9-10 Spanning Tree ConfigurationDefaultsBydefaultBPDUforwardingisdisabled.ModeSwitchcommand,read‐write.UsageThe
clear spantree bridgeprioritymodeSecureStack B2 Configuration Guide 9-11ParametersDefaultsNoneModeSwitchcommand,read‐write.UsageThemodeaffectsthe
show spantree mstilist9-12 Spanning Tree Configurationshow spantree mstilistUsethiscommandtodisplayalistofMultipleSpanningTree(MST)instanc
clear spantree mstiSecureStack B2 Configuration Guide 9-13clear spantree mstiUsethiscommandtodeleteoneormoreMultipleSpanningTreeinstances.S
set spantree mstmap9-14 Spanning Tree Configurationset spantree mstmapUsethiscommandtomaponeormorefilteringdatabaseIDs(FIDs)toaSID.Sinc
show spantree vlanlistSecureStack B2 Configuration Guide 9-15B2(su)->clear spantree mstmap 2show spantree vlanlistUsethiscommandtodisplaytheS
set spantree mstcfgid9-16 Spanning Tree ConfigurationMACaddress)havenotbeenchanged.Forinformationonusingthesetspantreemstcfgidcommandto
set spantree prioritySecureStack B2 Configuration Guide 9-17ExampleThisexampleshowshowtoresettheMSTconfigurationidentifierelementstodefaul
xxiv 19-3 show macauthentication Output Details ... 19-2219-4 s
set spantree hello9-18 Spanning Tree ConfigurationDefaultsIfsidisnotspecified,prioritywillberesetonSpanningTree0.ModeSwitchcommand,read‐
set spantree maxageSecureStack B2 Configuration Guide 9-19ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtogloballyresettheSpanning
set spantree fwddelay9-20 Spanning Tree ConfigurationParametersNone.DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtogloba
clear spantree fwddelaySecureStack B2 Configuration Guide 9-21clear spantree fwddelayUsethiscommandtoresettheSpanningTreeforwarddelaytothe
set spantree backuproot9-22 Spanning Tree Configurationset spantree backuprootUsethiscommandtoenableordisabletheSpanningTreebackuprootfunc
show spantree tctrapsuppressSecureStack B2 Configuration Guide 9-23ExampleThisexampleshowshowtoresetthebackuprootfunctiontodisabledonSID
clear spantree tctrapsuppress9-24 Spanning Tree ConfigurationUsageBydefault,RSTPnon‐edge(bridge)portsthattransitiontoforwardingorblockingc
show spantree spanguardSecureStack B2 Configuration Guide 9-25DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresetthep
clear spantree spanguard9-26 Spanning Tree ConfigurationModeSwitchcommand,read‐write.UsageSpanGuardisdesignedtodisable,orlockoutan“edge”po
show spantree spanguardtimeoutSecureStack B2 Configuration Guide 9-27show spantree spanguardtimeoutUsethiscommandtodisplaytheSpanningTreeSpanG
SecureStack B2 Configuration Guide xxvAbout This GuideWelcometotheEnterasys®SecureStack™B2ConfigurationGuide.Thismanualexplainshowtoacces
clear spantree spanguardtimeout9-28 Spanning Tree Configurationclear spantree spanguardtimeoutUsethiscommandtoresettheSpanningTreeSpanGuardti
clear / set spantree spanguardlockSecureStack B2 Configuration Guide 9-29clear / set spantree spanguardlockUseeitherofthesecommandstounlockone
set spantree spanguardtrapenable9-30 Spanning Tree Configurationset spantree spanguardtrapenableUsethiscommandtoenableordisablethesendingofa
show spantree legacypathcostSecureStack B2 Configuration Guide 9-31show spantree legacypathcostUsethiscommandtodisplaythedefaultSpanningTreep
clear spantree legacypathcost9-32 Spanning Tree Configurationclear spantree legacypathcostUsethiscommandtosettheSpanningTreedefaultvaluefor
Configuring Spanning Tree Port ParametersSecureStack B2 Configuration Guide 9-33Configuring Spanning Tree Port ParametersPurposeTodisplayandsetSpa
clear spantree portadmin9-34 Spanning Tree ConfigurationExampleThisexampleshowshowtodisableSpanningTreeonfe.1.5:B2(rw)->set spantree porta
show spantree portpriSecureStack B2 Configuration Guide 9-35ExampleThisexampleshowshowtodisplayportadminstatusforfe.1.1:B2(ro)->show span
clear spantree portpri9-36 Spanning Tree ConfigurationParametersDefaultsIfsidisnotspecified,portprioritywillbesetforSpanningTree0.ModeSwi
show spantree adminpathcostSecureStack B2 Configuration Guide 9-37show spantree adminpathcostUsethiscommandtodisplaytheadminpathcostforapor
Related Documentsxxvi About This GuideChapter 7,PortConfiguration,describeshowtoreviewandconfigureconsoleportsettings,andhowtoenableor
clear spantree adminpathcost9-38 Spanning Tree ConfigurationExampleThisexampleshowshowtosettheadminpathcostto200forfe.3.2onSID1:B2(su)
set spantree adminedgeSecureStack B2 Configuration Guide 9-39ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaytheedgeportstat
clear spantree adminedge9-40 Spanning Tree ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresetf
Configuring Spanning Tree Loop Protect ParametersSecureStack B2 Configuration Guide 9-41Configuring Spanning Tree Loop Protect ParametersPurposeTodis
set spantree lp9-42 Spanning Tree Configurationset spantree lpUsethiscommandtoenableordisabletheLoopProtectfeatureperportandoptionally,
clear spantree lpSecureStack B2 Configuration Guide 9-43DefaultsIfnoport‐stringisspecified,statusisdisplayedforallports.IfnoSIDisspecifi
clear spantree lplock9-44 Spanning Tree ConfigurationParametersDefaultsIfnoport‐stringisspecified,statusisdisplayedforallports.IfnoSIDis
set spantree lpcapablepartnerSecureStack B2 Configuration Guide 9-45set spantree lpcapablepartnerUsethiscommandtospecifyperportwhetherthelink
clear spantree lpcapablepartner9-46 Spanning Tree ConfigurationDefaultsIfnoport‐stringisspecified,LoopProtectcapabilityforlinkpartnersisdi
show spantree lpthresholdSecureStack B2 Configuration Guide 9-47DefaultsNone.Thedefaulteventthresholdis3.ModeSwitchcommand,read‐write.UsageThe
Conventions Used in This GuideSecureStack B2 Configuration Guide xxvii•EnterasysFirmwareFeatureGuides• SecureStackB2InstallationGuide(s)• Secure
set spantree lpwindow9-48 Spanning Tree ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresettheLoopProte
clear spantree lpwindowSecureStack B2 Configuration Guide 9-49ParametersNone.DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshow
show spantree lptrapenable9-50 Spanning Tree ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.UsageLoopProtecttrapsaresentwhenaLoopPr
set spantree disputedbpduthresholdSecureStack B2 Configuration Guide 9-51DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowto
show spantree disputedbpduthreshold9-52 Spanning Tree ConfigurationExampleThisexampleshowshowtosetthedisputedBPDUthresholdvalueto5:B2(rw)-
show spantree nonforwardingreasonSecureStack B2 Configuration Guide 9-53show spantree nonforwardingreasonUsethiscommandtodisplaythereasonforpl
show spantree nonforwardingreason9-54 Spanning Tree Configuration
SecureStack B2 Configuration Guide 10-110802.1Q VLAN ConfigurationThischapterdescribestheSecureStackB2system’scapabilitiestoimplement802.1Q
Viewing VLANs10-2 802.1Q VLAN ConfigurationIftheSecureStackB2deviceistobeconfiguredformultipleVLANs,itmaybedesirabletoconfigureaman
show vlanSecureStack B2 Configuration Guide 10-3Commandshow vlanUsethiscommandtodisplayallinformationrelatedtooneormoreVLANs.Syntaxshow vl
iNoticeEnterasysNetworksreservestherighttomakechangesinspecificationsandotherinformationcontainedinthisdocumentanditswebsitewitho
Getting Helpxxviii About This GuideBeforecallingEnterasysNetworks,havethefollowinginformationready:•YourEnterasysNetworksservicecontractn
show vlan10-4 802.1Q VLAN ConfigurationTable 10-26 show vlan Output DetailsOutput Field What It Displays...VLAN VLAN ID.NAME Name assigned to the VLAN
Creating and Naming Static VLANsSecureStack B2 Configuration Guide 10-5Creating and Naming Static VLANsPurposeTocreateanewstaticVLAN,ortoenabl
set vlan name10-6 802.1Q VLAN Configurationset vlan nameUsethiscommandtosetorchangetheASCIInameforaneworexistingVLAN.Syntaxset vlan na
clear vlan nameSecureStack B2 Configuration Guide 10-7clear vlan nameUsethiscommandtoremovethenameofaVLANfromtheVLANlist.Syntaxclear vlan
Assigning Port VLAN IDs (PVIDs) and Ingress Filtering10-8 802.1Q VLAN ConfigurationAssigning Port VLAN IDs (PVIDs) and Ingress FilteringPurposeToassi
set port vlanSecureStack B2 Configuration Guide 10-9fe.2.5 is set to 1 fe.2.6 is set to 1 set port vlanUsethiscommandtoconfigurethePVID(portVL
show port ingress filter10-10 802.1Q VLAN ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresetpo
set port ingress filterSecureStack B2 Configuration Guide 10-11set port ingress filterUsethiscommandtodiscardallframesreceivedwithaVLANIDt
set port discard10-12 802.1Q VLAN ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaytheframediscardmodeforfe.2.
Configuring the VLAN Egress ListSecureStack B2 Configuration Guide 10-13Configuring the VLAN Egress ListPurposeToassignorremoveportsontheegress
SecureStack B2 Configuration Guide 1-11IntroductionThischapterprovidesanoverviewoftheSecureStackB2’suniquefeaturesandfunctionality,anove
set vlan forbidden10-14 802.1Q VLAN ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowsyouhowtoshowVLANegressinformationfor
set vlan egressSecureStack B2 Configuration Guide 10-15set vlan egressUsethiscommandtoaddportstotheVLANegresslistforthedevice,ortoprev
show vlan dynamicegress10-16 802.1Q VLAN ConfigurationSyntaxclear vlan egress vlan-list port-string [forbidden]ParametersDefaultsIfforbiddenisnots
set vlan dynamicegressSecureStack B2 Configuration Guide 10-17ExampleThisexampleshowshowtodisplaythedynamicegressstatusforVLANs50‐55:B2(rw
Setting the Host VLAN10-18 802.1Q VLAN ConfigurationSetting the Host VLANPurposeToconfigureahostVLANthatonlyselectdevicesareallowedtoacces
clear host vlanSecureStack B2 Configuration Guide 10-19ParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageThehostVLANshouldbeasecureVLA
Enabling/Disabling GVRP (GARP VLAN Registration Protocol)10-20 802.1Q VLAN ConfigurationEnabling/Disabling GVRP (GARP VLAN Registration Protocol)About
Enabling/Disabling GVRP (GARP VLAN Registration Protocol)SecureStack B2 Configuration Guide 10-21Figure 10-1 Example of VLAN Propagation via GVRPPurp
show gvrp10-22 802.1Q VLAN Configurationshow gvrp UsethiscommandtodisplayGVRPconfigurationinformation.Syntaxshow gvrp [port-string]ParametersDe
set gvrpSecureStack B2 Configuration Guide 10-23ExampleThisexampleshowshowtodisplayGARPtimerinformationonports1through10inslot1:B2(su)
Factory Default Settings1-2 Introduction• RemotelyusingWebView™,EnterasysNetworks’embeddedwebserverapplication.TheInstallationGuideforyour
clear gvrp10-24 802.1Q VLAN ConfigurationModeSwitchcommand,read‐write.ExamplesThisexampleshowshowtoenableGVRPgloballyonthedevice:B2(su)-&g
set garp timerSecureStack B2 Configuration Guide 10-25DefaultsNone.ModeSwitchcommand,read‐write.UsageThesettingofthesetimersiscriticalandsho
set garp timer10-26 802.1Q VLAN Configuration
SecureStack B2 Configuration Guide 11-111Differentiated Services ConfigurationThischapterdescribestheDifferentiatedServices(Diffserv)setofcom
Globally Enabling or Disabling Diffserv11-2 Differentiated Services ConfigurationGlobally Enabling or Disabling DiffservPurpose Togloballyenableor
Creating Diffserv Classes and Matching ConditionsSecureStack B2 Configuration Guide 11-3Creating Diffserv Classes and Matching ConditionsPurposeTorev
show diffserv class11-4 Differentiated Services Configurationshow diffserv classUsethiscommandtodisplayinformationaboutDiffservclasses.Syntaxs
set diffserv class deleteSecureStack B2 Configuration Guide 11-5ExampleThisexampleshowshowtocreateaDiffservclasscalled“admin”:B2(rw)->se
set diffserv class match11-6 Differentiated Services ConfigurationParameterseveryclassname Matchesallpacketstoaspecificclass.dstmac|scrmaccl
set diffserv class matchSecureStack B2 Configuration Guide 11-7DefaultsNone.ModeSwitchcommand,read‐write.UsageAnypolicythatisappliedmustbecom
Factory Default SettingsSecureStack B2 Configuration Guide 1-3Link aggregation admin keySet to 32768 for all ports.Link aggregation flow regeneration
set diffserv class rename11-8 Differentiated Services Configuration– DestinationIPaddress(dstip)–VLANID(vlan)Youcannotcreateandaddaclassto
Configuring Diffserv Policies and Assigning ClassesSecureStack B2 Configuration Guide 11-9ExampleThisexampleshowshowtorenametheDiffserv“admin”
set diffserv policy create11-10 Differentiated Services ConfigurationExampleThisexampleshowshowtodisplayasummaryofDiffservpolicyinformation
set diffserv policy classSecureStack B2 Configuration Guide 11-11ModeSwitchcommand,read‐write.UsageInordertodeleteapolicyyoumustfirstremove
set diffserv policy police style simple11-12 Differentiated Services ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisex
set diffserv policy police action conformSecureStack B2 Configuration Guide 11-13set diffserv policy police action conformUsethiscommandtoconfigur
set diffserv policy rename11-14 Differentiated Services ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoset
show diffserv service infoSecureStack B2 Configuration Guide 11-15Commandsshow diffserv service info UsethiscommandtodisplayinformationaboutDif
set diffserv service11-16 Differentiated Services ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtod
DiffServ Configuration ExamplesSecureStack B2 Configuration Guide 11-17DiffServ Configuration Examples Typically,youwouldusetheDiffservcommands
Factory Default Settings1-4 IntroductionSNTP Disabled.Spanning Tree Globally enabled and enabled on all ports.Spanning Tree edge port administrative s
DiffServ Configuration Examples11-18 Differentiated Services Configuration
SecureStack B2 Configuration Guide 12-112Policy Classification ConfigurationThischapterdescribesthePolicyClassificationsetofcommandsandhowt
show policy profile12-2 Policy Classification ConfigurationCommandsshow policy profileUsethiscommandtodisplaypolicyprofileinformation.Syntaxsh
set policy profileSecureStack B2 Configuration Guide 12-3 :IPDest(13),IPFrag(14),UDPSrcPort(15), :UDPD
clear policy profile12-4 Policy Classification ConfigurationParametersDefaultsIfoptionalparametersarenotspecified,nonewillbeapplied.ModeSwitc
clear policy profileSecureStack B2 Configuration Guide 12-5DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtodeletepolicy
Configuring Classification Rules12-6 Policy Classification ConfigurationConfiguring Classification Rules PurposeToreview,create,assign,andunassig
show policy ruleSecureStack B2 Configuration Guide 12-7DefaultsIfverboseisnotspecified,summaryinformationwillbedisplayed.ModeSwitchcommand,
show policy capability12-8 Policy Classification Configuration|admin|Port |fe.1.1 |16|fe.1.1 | A|NV| | 1|?||admin|Port
show policy capabilitySecureStack B2 Configuration Guide 12-9ModeSwitchcommand,read‐only.UsageUsethiscommandtodisplaydetailedpolicyclassifica
Using the Command Line InterfaceSecureStack B2 Configuration Guide 1-5Using the Command Line InterfaceStarting a CLI SessionConnecting Using the Conso
set policy rule12-10 Policy Classification Configuration|Ether II packet type | | | X | X | X | X | | | ||LLC DSAP/SSAP/CTRL | |
set policy ruleSecureStack B2 Configuration Guide 12-11DefaultsNone.ModeSwitchcommand,read‐write.profile‐index Specifiesapolicyprofilenumberto
set policy rule12-12 Policy Classification ConfigurationUsageAnadminrulecanbeusedtomapincomingtaggedframestoapolicyrole(profile).There
clear policy ruleSecureStack B2 Configuration Guide 12-13ThisexampleshowshowtouseTable 12‐31toassignaruletopolicyprofile1thatwilldrop
clear policy all-rules12-14 Policy Classification ConfigurationDefaultsWhenapplicable,dataandmaskmustbespecifiedforindividualrulestobecle
Assigning Ports to Policy ProfilesSecureStack B2 Configuration Guide 12-15Assigning Ports to Policy ProfilesPurpose Toassignandunassignportstopo
clear policy port12-16 Policy Classification Configurationclear policy portUsethiscommandtoremoveapolicyprofilefromoneormoreports.Syntaxcl
Configuring Policy Class of Service (CoS)SecureStack B2 Configuration Guide 12-17Configuring Policy Class of Service (CoS)TheSecureStackB2supports
Configuring Policy Class of Service (CoS)12-18 Policy Classification ConfigurationB2(su)->show cos port-config Inbound Rate Limiting Port Configura
Configuring Policy Class of Service (CoS)SecureStack B2 Configuration Guide 12-192.0 2 irl none2.0 3 irl none...2.0
Using the Command Line Interface1-6 IntroductionRefertotheinstructionsincludedwiththeTelnetapplicationfor informationaboutestablishingaT
set cos state12-20 Policy Classification ConfigurationB2(su)->set cos state enableB2(su)->set cos port-resource flood-ctrl 1.0 broadcast rate 5B
show cos stateSecureStack B2 Configuration Guide 12-21ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoenableClassofService:B2(rw)-
set cos settings12-22 Policy Classification ConfigurationExampleThisexampleshowshowtocleartheCoSstatebacktoitsdefaultsettingofdisabled:
clear cos settingsSecureStack B2 Configuration Guide 12-23•IRLReferenceTheCoSIRLreferencefieldisoptional,asratelimitsarenotrequired.The
set cos port-config12-24 Policy Classification ConfigurationDefaultsIfnotspecified,allCoSentrieswillbedisplayed.ModeSwitchcommand,read‐only.
show cos port-configSecureStack B2 Configuration Guide 12-25ModeSwitchcommand,read‐write.UsageCoSportgroupsareidentifiedbygroupnumberandthe
clear cos port-config12-26 Policy Classification ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowsallinboundratelimitingportg
set cos port-resource irlSecureStack B2 Configuration Guide 12-27DefaultsNone.ModeSwitchcommand,read‐write.UsageThedefaultportgroup0.0cannotbe
set cos port-resource flood-ctrl12-28 Policy Classification ConfigurationUsageCoSportresourcesarewhereactualphysicalratelimitersareconfigure
show cos port-resourceSecureStack B2 Configuration Guide 12-29UsageCoSportresourcesarewhereactualphysicalratelimitersareconfigured.Thiscom
Using the Command Line InterfaceSecureStack B2 Configuration Guide 1-7Figure 1-2 Sample CLI Defaults DescriptionCLI Command ModesEachcommanddescrip
clear cos port-resource irl12-30 Policy Classification Configuration----------- -------- ---- ---- ---------- --------------- ------2.0 1
clear cos port-resource flood-ctrlSecureStack B2 Configuration Guide 12-31clear cos port-resource flood-ctrlUsethiscommandtoclearfloodcontrolpo
show cos reference12-32 Policy Classification ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageTheCoSreferencetablemapsthe
clear cos referenceSecureStack B2 Configuration Guide 12-33ParametersDefaultsIfirlisnotspecified,allCoSreferenceinformationisdisplayed.Ifa
show cos unit12-34 Policy Classification ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocleartheCoSinbou
clear cos all-entriesSecureStack B2 Configuration Guide 12-35Port Type Type Unit Maximum Rate Minimum Rate Granularity--------- ---- ---- ----
show cos port-type12-36 Policy Classification ConfigurationDefaultsIfnoparametersarespecified,inboundratelimitingandfloodcontrolinformation
SecureStack B2 Configuration Guide 13-113Port Priority and Rate Limiting ConfigurationThischapterdescribesthePortPriority andRateLimitingset
show port priority13-2 Port Priority and Rate Limiting Configuration•Displaythecurrenttraffic classmapping‐to‐priorityofeachport.•Seteachpor
clear port prioritySecureStack B2 Configuration Guide 13-3Syntaxset port priority port-string priorityParametersDefaultsNone.ModeSwitchcommand,read‐
Using the Command Line Interface1-8 IntroductionDisplaying Scrolling ScreensIftheCLIscreenlengthhasbeensetusingthesetlengthcommandasdesc
Configuring Priority to Transmit Queue Mapping13-4 Port Priority and Rate Limiting ConfigurationExampleThisexampleshowshowtoresetfe.1.11tothe
set port priority-queueSecureStack B2 Configuration Guide 13-5ExampleThisexampleshowshowtodisplaypriorityqueueinformationforfe.1.1.Inthis
clear port priority-queue13-6 Port Priority and Rate Limiting Configurationclear port priority-queueUsethiscommandtoresetportpriorityqueuesett
set port txqSecureStack B2 Configuration Guide 13-7ParametersDefaultsIftheport‐stringisnotspecified,theQoSsettingofallphysicalportswillb
clear port txq13-8 Port Priority and Rate Limiting ConfigurationUsageQueuescanbesetforstrictpriority(SP)orweightedround‐robin(WRR).Ifset
clear port txqSecureStack B2 Configuration Guide 13-9ExampleThisexampleshowshowtocleartransmitqueuevaluesonfe.1.1:B2(su)->clear port txq
Configuring Port Traffic Rate Limiting13-10 Port Priority and Rate Limiting ConfigurationConfiguring Port Traffic Rate LimitingPurposeTolimittherat
show port ratelimitSecureStack B2 Configuration Guide 13-11ExampleThisexampleshowshowtodisplaythecurrentratelimitinginformationforfe.2.1:B
set port ratelimit13-12 Port Priority and Rate Limiting Configurationset port ratelimitUsethiscommandtoconfigurethetrafficratelimitingstatus
clear port ratelimitSecureStack B2 Configuration Guide 13-13clear port ratelimitUsethiscommandtoclearratelimitingparametersforoneormorepor
Using the Command Line InterfaceSecureStack B2 Configuration Guide 1-9Basic Line Editing CommandsTheCLIsupportsEMACs‐likelineeditingcommands.Ta
clear port ratelimit13-14 Port Priority and Rate Limiting Configuration
SecureStack B2 Configuration Guide 14-114IGMP ConfigurationThischapterdescribestheIGMPConfigurationsetofcommandsandhowtousethem.IGMP Ove
Configuring IGMP at Layer 214-2 IGMP Configurationmulticastswitch/routeritpassesthroughtoensurethattrafficisonlypassedtothehoststhatsu
set igmpsnooping adminmodeSecureStack B2 Configuration Guide 14-3thesystem,referto“setigmpsnoopingadminmode”onpage 14‐3.Forinformationonen
set igmpsnooping groupmembershipinterval14-4 IGMP ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageInorderforIGMPsnoopingt
set igmpsnooping maxresponseSecureStack B2 Configuration Guide 14-5ExampleThisexampleshowshowtosettheIGMPgroupmembershipintervalto250seco
set igmpsnooping add-static14-6 IGMP ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.UsageThistimerisforexpiringtheswitchfromthemult
set igmpsnooping remove-staticSecureStack B2 Configuration Guide 14-7set igmpsnooping remove-staticThiscommanddeletesastaticIGMPentryorremoves
show igmpsnooping mfdb14-8 IGMP ConfigurationExampleThisexampledisplaysthestaticIGMPportsforVLAN20.B2(su)->show igmpsnooping static 20----
clear igmpsnoopingSecureStack B2 Configuration Guide 14-9DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearallIGMPs
iiENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENTBEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT,CAREFULLY READ THIS LICENSE AGREEMENT.Thisdocum
Using the Command Line Interface1-10 Introduction
clear igmpsnooping14-10 IGMP Configuration
SecureStack B2 Configuration Guide 15-115Logging and Network ManagementThischapterdescribesswitch‐relatedloggingandnetworkmanagementcommandsa
show logging server15-2 Logging and Network Managementshow logging server UsethiscommandtodisplaytheSyslogconfigurationforaparticularserver
set logging serverSecureStack B2 Configuration Guide 15-3set logging serverUsethiscommandtoconfigureaSyslogserver.Syntaxset logging server inde
clear logging server15-4 Logging and Network ManagementExampleThiscommandshowshowtoenableaSyslogserverconfigurationforindex1,IPaddress1
set logging defaultSecureStack B2 Configuration Guide 15-5ExampleThiscommandshowshowtodisplaytheSyslogserverdefaultvalues.Foranexplanatio
clear logging default15-6 Logging and Network Managementclear logging defaultUsethiscommandtoresetloggingdefaultvalues.Syntax clear logging def
set logging applicationSecureStack B2 Configuration Guide 15-7ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaysystemloggingin
clear logging application15-8 Logging and Network ManagementDefaultsIflevelisnotspecified,nonewillbeapplied.ModeSwitchcommand,read‐write.Exa
show logging localSecureStack B2 Configuration Guide 15-9ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoreset
SecureStack B2 Configuration Guide 2-12Configuring Switches in a StackThischapterprovidesinformationaboutconfiguringSecureStackB2switchesina
clear logging local15-10 Logging and Network ManagementParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThiscommandshowshowtoenablel
show logging bufferSecureStack B2 Configuration Guide 15-11DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowsaportionoftheinfor
Monitoring Network Events and Status15-12 Logging and Network ManagementMonitoring Network Events and StatusPurposeTodisplayswitcheventsandcomman
show historySecureStack B2 Configuration Guide 15-13show historyUsethiscommandtodisplaythesize(inlines)ofthehistorybuffer.Syntaxshow histo
ping15-14 Logging and Network ManagementpingUsethiscommandtosendICMPecho‐requestpacketstoanothernodeonthe networkfromtheswitchCLI.Sy
disconnectSecureStack B2 Configuration Guide 15-15B2(su)->show users Session User Location -------- ----- --------------------------* telnet
show netstat15-16 Logging and Network ManagementExampleThefollowingexampleshowstheoutputofthiscommand.B2(su)->show netstatProt Local Addres
Managing Switch Network Addresses and RoutesSecureStack B2 Configuration Guide 15-17Managing Switch Network Addresses and RoutesPurposeTodisplayord
set arp15-18 Logging and Network ManagementExampleThisexampleshowshowtodisplaytheARPtab le:B2(su)->show arp
clear arpSecureStack B2 Configuration Guide 15-19clear arpUsethiscommandtodeleteaspecificentryorallentriesfromtheswitch’sARPtable.Synta
Installing a New Stackable System of Up to Eight Units2-2 Configuring Switches in a Stack•Theconsoleportonthemanagerswitchremainsactiveforou
show mac15-20 Logging and Network ManagementDefaultsIfnotspecified,waittimewillbesetto5seconds.Ifnotspecified,first‐ttlwillbesetto1s
show mac agetimeSecureStack B2 Configuration Guide 15-21DefaultsIfnoparametersarespecified,allMACaddressesforthedevicewillbedisplayed.Mod
set mac agetime15-22 Logging and Network ManagementDefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaytheMACtimeou
set mac algorithmSecureStack B2 Configuration Guide 15-23ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtoresettheMACtimeoutperiodt
clear mac algorithm15-24 Logging and Network ManagementParametersNone.DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowstheoutput
clear mac addressSecureStack B2 Configuration Guide 15-25ParametersDefaultsIfnoport‐stringisdefined,thecommandwillapplytoallports.ModeSwitc
show mac unreserved-flood15-26 Logging and Network Managementshow mac unreserved-floodUsethiscommandtodisplaythestateofmulticastfloodprotect
Configuring Simple Network Time Protocol (SNTP)SecureStack B2 Configuration Guide 15-27ExampleThisexampleenablesmulticastfloodprotection.B2(su)-&
show sntp15-28 Logging and Network ManagementDefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaySNTPclientsettings:
set sntp clientSecureStack B2 Configuration Guide 15-29set sntp clientUsethiscommandtosettheSNTPoperationmode.Syntaxset sntp client {broadcast
Installing Previously-Configured Systems in a StackSecureStack B2 Configuration Guide 2-3Installing Previously-Configured Systems in a StackIfmember
set sntp server15-30 Logging and Network ManagementModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocleartheSNTPclient’soperational
set sntp poll-intervalSecureStack B2 Configuration Guide 15-31ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoremovetheserveratIP
set sntp poll-retry15-32 Logging and Network ManagementExampleThisexampleshowshowtocleartheSNTPpollinterval:B2(su)->clear sntp poll-interv
set sntp poll-timeoutSecureStack B2 Configuration Guide 15-33set sntp poll-timeoutUsethiscommandtosetthepolltimeout(inseconds)foraresponse
set timezone15-34 Logging and Network ManagementParametersDefaultsIfyouenteratimezonenamewithoutspecifyinganoffset inhoursandminutes,the
Configuring Node AliasesSecureStack B2 Configuration Guide 15-35Configuring Node AliasesThenodealiasfeatureenablesadministratorstodeterminethe
set nodealias15-36 Logging and Network Management----------- ----------- ------------ ------fe.2.1 16
clear nodealias configSecureStack B2 Configuration Guide 15-37Itʹsimportanttomakesurethatinter‐switchlinksare notlearningnode/aliasinforma
clear nodealias config15-38 Logging and Network Management
SecureStack B2 Configuration Guide 16-116RMON ConfigurationThischapterdescribesthecommandsusedtoconfigureRMONonaSecu reStackB2switch.RMON
Considerations About Using Clear Config in a Stack2-4 Configuring Switches in a StackTocreateavirtualswitchconfigurationinastackenvironment:1
Design Considerations16-2 RMON ConfigurationDesign ConsiderationsTheB2supportsRMONPacketCapture/FilterSamplingthroughboththeCLIandMIBs,bu
Statistics Group CommandsSecureStack B2 Configuration Guide 16-3•RMONPacketCapture/FilterSamplingandPortMirroringcannotbeenabledonthesame
show rmon stats16-4 RMON Configurationshow rmon statsUsethiscommandtodisplayRMONstatisticsmeasuredforoneormoreports.Syntaxshow rmon stats
clear rmon statsSecureStack B2 Configuration Guide 16-5DefaultsIfownerisnotspecified,monitorwillbeapplied.ModeSwitchcommand,read‐write.Examp
History Group Commands16-6 RMON ConfigurationHistory Group CommandsPurposeTodisplay,configure,andclearRMONhistorypropertiesandstatistics.Comm
set rmon historySecureStack B2 Configuration Guide 16-7Sample 2779 Interval Start: 1 days 0 hours 2 minutes 22 secondsDrop Events = 0
clear rmon history16-8 RMON ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtodeleteRMONhistoryen
Alarm Group CommandsSecureStack B2 Configuration Guide 16-9Alarm Group CommandsPurposeTodisplay,configure,andclearRMONalarmentriesandproperti
set rmon alarm properties16-10 RMON Configurationset rmon alarm propertiesUsethiscommandtoconfigureanRMONalarmentry,ortocreateanewalarm
set rmon alarm statusSecureStack B2 Configuration Guide 16-11Defaultsinterval‐3600secondstype‐absolutestartup‐risingrthresh‐0fthresh‐0reven
Issues Related to Mixed Type StacksSecureStack B2 Configuration Guide 2-5•Useclearconfigallwhenitisnecessarytoclearallconfigparameters,in
clear rmon alarm16-12 RMON ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageAnRMONalarmentrycanbecreatedusingthiscomma
Event Group CommandsSecureStack B2 Configuration Guide 16-13Event Group CommandsPurposeTodisplayandclearRMONevents,andtoconfigureRMONeventp
set rmon event properties16-14 RMON Configurationset rmon event propertiesUsethiscommandtoconfigureanRMONevententry,ortocreateanewevent
set rmon event statusSecureStack B2 Configuration Guide 16-15ExampleThisexampleshowshowtocreateandenableanRMONevententrycalled“STPtopolo
clear rmon event16-16 RMON ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearRMONevent1:B2(rw)->cle
Filter Group CommandsSecureStack B2 Configuration Guide 16-17Filter Group CommandsThepacketcaptureandfilterfunctionisdisabledbydefault.Only
set rmon channel16-18 RMON ConfigurationExample ThisexampleshowshowtodisplayRMONchannelinformationforfe.2.12:B2(rw)->show rmon channel fe
clear rmon channelSecureStack B2 Configuration Guide 16-19ExampleThisexampleshowshowtocreatean RMONchannelentry:B2(rw)->set rmon channel 5
set rmon filter16-20 RMON ConfigurationB2(rw)->show rmon filterIndex= 55508 Channel Index= 628 EntryStatus= valid--------------------------
clear rmon filterSecureStack B2 Configuration Guide 16-21ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocreateRMON filter1andapp
show switch2-6 Configuring Switches in a Stackshow switchUsethiscommandtodisplayinformationaboutoneormoreunitsinthestack.Syntaxshow swit
Packet Capture Commands16-22 RMON ConfigurationPacket Capture CommandsNotethatpacketcapturefilterissamplingonlyanddoesnotguaranteereceipt
set rmon captureSecureStack B2 Configuration Guide 16-23Owner monitorcaptureEntry= 1 Buff.control= 28062 ------------------------
clear rmon capture16-24 RMON ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocreateRMON captureentry1to“listen”on
SecureStack B2 Configuration Guide 17-117DHCP Server ConfigurationThischapterdescribesthecommandstoconfiguretheIPv4DHCPserverfunctionality
DHCP Overview17-2 DHCP Server Configuration•NetBIOSWINSserver(s)andnodename• Bootfile•DHCPoptionsasdefinedbyRFC2132Configuring a DHCP Serv
Configuring General DHCP Server ParametersSecureStack B2 Configuration Guide 17-3Configuring General DHCP Server ParametersPurposeToconfigureDHCPse
set dhcp bootp17-4 DHCP Server ConfigurationExampleThisexampleenablesDHCPserverfunctionality.B2(rw)->set dhcp enableset dhcp bootpUsethiscom
show dhcp conflictSecureStack B2 Configuration Guide 17-5ExampleThisexampleenablesDHCPconflictlogging.B2(rw)->set dhcp conflict loggingshow d
set dhcp exclude17-6 DHCP Server ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExamplesThisexampledisablesDHCPconflictlogging.B2(rw)-
clear dhcp excludeSecureStack B2 Configuration Guide 17-7clear dhcp excludeUsethiscommandtocleartheconfiguredIPaddressesthattheDHCPserver
show switch switchtypeSecureStack B2 Configuration Guide 2-78 Stack Member B2G124-24 B2G124-24 OK 04.02.xxThisexample
clear dhcp ping17-8 DHCP Server Configurationclear dhcp pingUsethiscommandtoresetthenumberofpingpacketssentbytheDHCPserverback tothe
clear dhcp bindingSecureStack B2 Configuration Guide 17-9192.0.0.13 00:33:44:56:22:37 infinite Manual192.0.0.14
clear dhcp server statistics17-10 DHCP Server ConfigurationMessages Received----------
Configuring IP Address PoolsSecureStack B2 Configuration Guide 17-11Configuring IP Address PoolsManual Pool Configuration Considerations•Thesubnetof
set dhcp pool17-12 DHCP Server Configurationset dhcp poolUsethiscommandtocreateandassignanametoaDHCPserverpoolofaddresses.Upto16add
clear dhcp poolSecureStack B2 Configuration Guide 17-13clear dhcp poolUsethiscommandtodeleteaDHCPserverpoolofaddresses.Syntaxclear dhcp poo
clear dhcp pool network17-14 DHCP Server ConfigurationExamplesThisexampleconfigurestheIPsubnet172.20.28.0withaprefixlengthof24fortheaut
clear dhcp pool hardware-addressSecureStack B2 Configuration Guide 17-15DefaultsIfnotypeisspecified,Ethernetisassumed.ModeSwitchcommand,read‐
clear dhcp pool host17-16 DHCP Server ConfigurationDefaultsIfamaskorprefixisnotspecified, theclassA,B,orCnaturalmaskwillbeused.ModeS
clear dhcp pool client-identifierSecureStack B2 Configuration Guide 17-17ParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageTheclientidentif
show switch stack-ports2-8 Configuring Switches in a Stack Mgmt CodeSID Switch Model ID Pref V
set dhcp pool client-name17-18 DHCP Server Configurationset dhcp pool client-nameUsethiscommandtoassignanametoaDHCPclientwhencreatingana
set dhcp pool bootfileSecureStack B2 Configuration Guide 17-19set dhcp pool bootfileUsethiscommandtospecifyadefaultbootimagefortheDHCPclie
set dhcp pool next-server17-20 DHCP Server Configurationset dhcp pool next-serverUsethiscommandtospecifythefileserverfromwhichthedefaultbo
set dhcp pool leaseSecureStack B2 Configuration Guide 17-21set dhcp pool leaseUsethiscommandtospecifythedurationoftheleaseforanIPaddress
set dhcp pool default-router17-22 DHCP Server ConfigurationModeSwitchcommand,read‐write.ExampleThisexamplerestoresthedefaultleasedurationofo
set dhcp pool dns-serverSecureStack B2 Configuration Guide 17-23ModeSwitchcommand,read‐write.ExampleThisexampleremovesthedefaultrouterfromthe
set dhcp pool domain-name17-24 DHCP Server ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleremovestheDNSserverlistfromtheaddres
set dhcp pool netbios-name-serverSecureStack B2 Configuration Guide 17-25ModeSwitchcommand,read‐write.ExampleThisexampleremovesthedomainnamefr
set dhcp pool netbios-node-type17-26 DHCP Server ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleremovestheNetBIOSnameserverlist
set dhcp pool optionSecureStack B2 Configuration Guide 17-27DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleremovestheNetBIOSnodet
set switchSecureStack B2 Configuration Guide 2-9set switch UsethiscommandtoassignaswitchID,tosetaswitch’spriorityforbecomingthemanagem
clear dhcp pool option17-28 DHCP Server Configurationclear dhcp pool optionUsethiscommandtoremoveaDHCPoptionfromthe addresspoolbeingconfi
show dhcp pool configurationSecureStack B2 Configuration Guide 17-29Network 192.0.0.0 255.255.255.0 Lease Time
show dhcp pool configuration17-30 DHCP Server Configuration
SecureStack B2 Configuration Guide 18-118DHCP Snooping andDynamic ARP InspectionThischapterdescribestwosecurityfeatures:•DHCPsnooping,whichmon
DHCP Snooping Overview18-2 DHCP Snooping and Dynamic ARP InspectionthehardwareforwardsclientmessagesandcopiesservermessagestotheCPUsoDHCP
DHCP Snooping OverviewSecureStack B2 Configuration Guide 18-3switchisrebooting,whentheswitchreceivesaDHCPDISCOVERYorREQUESTmessage,thecl
DHCP Snooping Commands18-4 DHCP Snooping and Dynamic ARP InspectionConfiguration NotesDHCP Server•Whentheswitchisoperatinginswitchmode,thenth
set dhcpsnoopingSecureStack B2 Configuration Guide 18-5set dhcpsnoopingUsethiscommandtoenableordisableDHCPsnoopingglobally.Syntaxset dhcpsnoo
set dhcpsnooping database write-delay18-6 DHCP Snooping and Dynamic ARP InspectionUsageBydefault,DHCPsnoopingisdisabledgloballyandonallVLANs
set dhcpsnooping bindingSecureStack B2 Configuration Guide 18-7DefaultsBydefault,portsareuntrusted.ModeSwitchcommand,read‐write.UsageInorderfo
iiiMoldova,Mongolia,NorthKorea,thePeople’sRepublicofChina,Russia,Tajikistan,Turkmenistan,Ukraine,Uzbekistan,Vietnam,orsuchothercount
set switch description2-10 Configuring Switches in a StackModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoreplicatethemanagementima
set dhcpsnooping verify18-8 DHCP Snooping and Dynamic ARP InspectionUsageWhenenabledgloballyandonVLANs,DHCPsnoopingbuildsitsbindingsdatabas
set dhcpsnooping log-invalidSecureStack B2 Configuration Guide 18-9set dhcpsnooping log-invalidUsethiscommandtoenableordisableloggingofinvali
set dhcpsnooping limit18-10 DHCP Snooping and Dynamic ARP Inspectionset dhcpsnooping limitUsethiscommandtoconfigureratelimitingparametersfori
show dhcpsnoopingSecureStack B2 Configuration Guide 18-11show dhcpsnoopingUsethiscommandtodisplayDHCPsnoopingconfigurationparameters.Syntaxsho
show dhcpsnooping port18-12 DHCP Snooping and Dynamic ARP InspectionDefaultsNone.ModeSwitchcommand,read‐write.UsageThiscommanddisplayswherethed
show dhcpsnooping bindingSecureStack B2 Configuration Guide 18-13show dhcpsnooping bindingUsethiscommandtodisplaythecontentsoftheDHCPsnoopin
clear dhcpsnooping binding18-14 DHCP Snooping and Dynamic ARP InspectionModeSwitchcommand,read‐write.UsageTheDHCPsnoopingapplicationprocessesin
clear dhcpsnooping statisticsSecureStack B2 Configuration Guide 18-15B2(su)->clear dhcpsnooping binding port ge.1.2clear dhcpsnooping statisticsUse
clear dhcpsnooping limit18-16 DHCP Snooping and Dynamic ARP Inspectionclear dhcpsnooping limitUsethiscommandtoresettheratelimitvaluestothed
Dynamic ARP Inspection OverviewSecureStack B2 Configuration Guide 18-17Static MappingsStaticmappingsareusefulwhenhostsconfigurestaticIPaddres
set switch memberSecureStack B2 Configuration Guide 2-11ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtomovemanagementfunctionality
Dynamic ARP Inspection Overview18-18 DHCP Snooping and Dynamic ARP InspectionEligible InterfacesDynamicARPinspectionisenabledperVLAN,effectivel
Dynamic ARP Inspection OverviewSecureStack B2 Configuration Guide 18-19Example Configuration ThefollowingexampleconfiguresDHCPsnoopinganddynami
Dynamic ARP Inspection Commands18-20 DHCP Snooping and Dynamic ARP Inspectionset vlan egress 10 ge.1.2 untaggedset vlan egress 192 ge.1.1 untaggedDHCP
set arpinspection trustSecureStack B2 Configuration Guide 18-21ParametersDefaultsLoggingisdisabledbydefault.ModeSwitchcommand,read‐write.UsageTh
set arpinspection validate18-22 DHCP Snooping and Dynamic ARP InspectionUsageIndividualinterfacesareconfiguredas trustedoruntrusted.Thetrust
set arpinspection limitSecureStack B2 Configuration Guide 18-23ExampleThisexampleaddstheoptionalverificationthatsenderMACaddressesarethesa
set arpinspection filter18-24 DHCP Snooping and Dynamic ARP Inspectionset arpinspection filterUsethiscommandtocreateanARPACLandthentoassign
show arpinspection portsSecureStack B2 Configuration Guide 18-25ParametersDefaultsIfaspecificACLisnotspecified,informationaboutallconfigured
show arpinspection vlan18-26 DHCP Snooping and Dynamic ARP Inspectionshow arpinspection vlanUsethiscommandtodisplaytheARPconfigurationofoneo
clear arpinspection validateSecureStack B2 Configuration Guide 18-27ExamplesThisexampleshowswhatisdisplayedwhennoVLANsarespecified.B2(su)-&g
clear switch member2-12 Configuring Switches in a StackDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoremovetheswitch
clear arpinspection vlan18-28 DHCP Snooping and Dynamic ARP Inspectionclear arpinspection vlanUsethiscommandtodisabledynamicARPinspectiononon
clear arpinspection filterSecureStack B2 Configuration Guide 18-29B2(su)->clear arpinspection vlan 5 loggingB2(su)->show arpinspection vlan 5Sou
clear arpinspection limit18-30 DHCP Snooping and Dynamic ARP InspectionExamplesThisexampleremovesapermitrulefromtheARPACLnamedstaticARP.B2(
clear arpinspection statisticsSecureStack B2 Configuration Guide 18-31clear arpinspection statisticsUsethiscommandtoclearalldynamicARPinspecti
clear arpinspection statistics18-32 DHCP Snooping and Dynamic ARP Inspection
SecureStack B2 Configuration Guide 19-119Authentication and AuthorizationConfigurationThischapterdescribestheauthenticationandauthorizationcomm
Overview of Authentication and Authorization Methods19-2 Authentication and Authorization Configuration• 802.1XPortBasedNetworkAccessControlusin
Configuring RADIUSSecureStack B2 Configuration Guide 19-3EachusercanbeconfiguredintheRADIUSserverdatabasewithaRADIUSFilter‐IDattributet
show radius19-4 Authentication and Authorization ConfigurationCommandsshow radiusUsethiscommandtodisplaythecurrentRADIUSclient/serverconfigur
set radiusSecureStack B2 Configuration Guide 19-5set radiusUsethiscommandtoenable,disable,orconfigureRADIUSauthentication.Syntaxset radius {e
SecureStack B2 Configuration Guide 3-13Basic ConfigurationAtstartup,theSecureStackB2switchisconfiguredwithmanydefaultsandstandardfeatures
set radius19-6 Authentication and Authorization ConfigurationDefaultsIfsecret‐valueisnotspecified,nonewillbeapplied.Ifrealmisnotspecified,
clear radiusSecureStack B2 Configuration Guide 19-7Thisexampleshowshowtoforceanymanagement‐accesstotheswitch(Telnet,web,SSH)toauthentic
set radius accounting19-8 Authentication and Authorization ConfigurationParametersModeSwitchcommand,read‐only.DefaultsIfnoparametersarespecified
clear radius accountingSecureStack B2 Configuration Guide 19-9ModeSwitchcommand,read‐write.DefaultsNone.ExamplesThisexampleshowshowtoenablethe
clear radius accounting19-10 Authentication and Authorization ConfigurationDefaultsNone.ExampleThisexampleshowshowtoresettheRADIUSaccountingt
Configuring 802.1X AuthenticationSecureStack B2 Configuration Guide 19-11Configuring 802.1X AuthenticationPurposeToreviewandconfigure802.1Xauthen
show dot1x19-12 Authentication and Authorization ConfigurationIfport‐stringisnotspecified,informationforallportswillbedisplayed.ModeSwitch
show dot1x auth-configSecureStack B2 Configuration Guide 19-13show dot1x auth-configUsethiscommandtodisplay802.1Xauthenticationconfigurationse
set dot1x19-14 Authentication and Authorization ConfigurationPort : 1 Auth-Config PAE state: Initialize Backend auth st
set dot1x auth-configSecureStack B2 Configuration Guide 19-15set dot1x auth-configUsethiscommandtoconfigure802.1Xauthentication.Syntaxset dot1x
Setting User Accounts and Passwords3-2 Basic ConfigurationSetting User Accounts and PasswordsPurposeTochangetheswitch’sdefaultuserloginandpass
clear dot1x auth-config19-16 Authentication and Authorization ConfigurationExamplesThisexampleshowshowtoenablereauthenticationcontrolonports
show eapolSecureStack B2 Configuration Guide 19-17Thisexampleshowshowtoresetthe802.1Xquietperiodto60secondsonportsfe.1.1‐3:B2(su)->c
show eapol19-18 Authentication and Authorization ConfigurationTable 19-2 show eapol Output DetailsOutput Field What It Displays...Port Port designatio
set eapolSecureStack B2 Configuration Guide 19-19set eapolUsethiscommandtoenableordisableEAPOLport‐baseduserauthenticationwiththe RADIUS
clear eapol19-20 Authentication and Authorization ConfigurationParametersDefaultsIfauth‐modeisnotspecified,allEAPOLsettingswillbecleared.If
Configuring MAC AuthenticationSecureStack B2 Configuration Guide 19-21Configuring MAC AuthenticationPurposeToreview,disable,enableandconfigureMA
show macauthentication19-22 Authentication and Authorization ConfigurationParametersDefaultsIfport‐stringisnotspecified,MACauthenticationinform
show macauthentication sessionSecureStack B2 Configuration Guide 19-23show macauthentication sessionUsethiscommandtodisplaytheactiveMACauthent
set macauthentication19-24 Authentication and Authorization Configurationset macauthenticationUsethiscommandtogloballyenable ordisableMACauth
clear macauthentication passwordSecureStack B2 Configuration Guide 19-25ExampleThisexampleshowshowtosettheMACauthenticationpasswordto“macau
show system loginSecureStack B2 Configuration Guide 3-3show system loginUsethiscommandtodisplayuserloginaccountinformation.Syntaxshow system l
set macauthentication portinitialize19-26 Authentication and Authorization ConfigurationUsageEnablingport(s)forMACauthenticationrequiresglobally
clear macauthentication portquietperiodSecureStack B2 Configuration Guide 19-27DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexamplesetspo
set macauthentication reauthentication19-28 Authentication and Authorization ConfigurationModeSwitchcommand,read‐write.DefaultsNone.ExampleThisexam
set macauthentication macreauthenticateSecureStack B2 Configuration Guide 19-29ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexamp
clear macauthentication reauthperiod19-30 Authentication and Authorization ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageCha
set macauthentication significant-bitsSecureStack B2 Configuration Guide 19-31set macauthentication significant-bitsUsethiscommandtosetthenumber
clear macauthentication significant-bits19-32 Authentication and Authorization ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleresets
Configuring Multiple Authentication MethodsSecureStack B2 Configuration Guide 19-33Configuring Multiple Authentication MethodsAbout Multiple Authentic
show multiauth19-34 Authentication and Authorization Configurationshow multiauthUsethiscommandtodisplaymultipleauthenticationsystemconfigurati
set multiauth modeSecureStack B2 Configuration Guide 19-35set multiauth modeUsethiscommandtosetthesystemauthenticationmodetoallowmultiplea
set system login3-4 Basic Configurationset system loginUsethiscommandtocreateanewuserloginaccount,ortodisableorenableanexistingaccoun
set multiauth precedence19-36 Authentication and Authorization ConfigurationExampleThisexampleshowshowtoclearthesystemauthenticationmode:B2(r
show multiauth portSecureStack B2 Configuration Guide 19-37ExampleThisexampleshowshowtoclearthemultipleauthenticat ionprecedence:B2(rw)->c
clear multiauth port19-38 Authentication and Authorization ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExamplesThisexamplesho
show multiauth stationSecureStack B2 Configuration Guide 19-39ModeSwitchcommand,read‐write.ExamplesThisexampleshowshowtocleartheportmultiple
show multiauth idle-timeout19-40 Authentication and Authorization ConfigurationParametersDefaultsIfnooptionsarespecified,multipleauthentication
set multiauth idle-timeoutSecureStack B2 Configuration Guide 19-41ExampleThisexampleshowshowtodisplaytimeoutvaluesforanidlesessionforall
clear multiauth idle-timeout19-42 Authentication and Authorization Configurationclear multiauth idle-timeoutUsethiscommandtoresetthemaximumnumb
set multiauth session-timeoutSecureStack B2 Configuration Guide 19-43ExampleThisexampledisplaysthesessiontimeoutvaluesforallauthenticationme
clear multiauth session-timeout19-44 Authentication and Authorization Configurationclear multiauth session-timeoutUsethiscommandtoresetthemaximu
Configuring VLAN Authorization (RFC 3580)SecureStack B2 Configuration Guide 19-45Configuring VLAN Authorization (RFC 3580)PurposeRFC3580TunnelAttri
set passwordSecureStack B2 Configuration Guide 3-5ParametersDefaultsNone.ModeSwitchcommand,superuser.ExampleThisexampleshowshowtoremovethe“n
set policy maptable response19-46 Authentication and Authorization Configurationmultiauthportcommand(page19‐37)tosetthenumberofRFC3580user
set vlanauthorizationSecureStack B2 Configuration Guide 19-47Whenausersuccessfullyauthenticatestothenetwork,theRADIUSserverreturnsanAcces
set vlanauthorization egress19-48 Authentication and Authorization Configurationset vlanauthorization egressControlsthemodificationofthecurrentV
show vlanauthorizationSecureStack B2 Configuration Guide 19-49ModeSwitchcommand,read‐write.ExampleThisexampleshowhowtoclearVLANauthorization
Configuring MAC Locking19-50 Authentication and Authorization ConfigurationConfiguring MAC LockingThisfeaturelocksaMACaddresstooneormoreport
show maclockSecureStack B2 Configuration Guide 19-51show maclockUsethiscommandtodisplaythestatusofMAClockingononeormoreports.Syntaxshow
show maclock stations19-52 Authentication and Authorization Configurationshow maclock stationsUsethiscommandtodisplayMAClockinginformationabou
set maclock enableSecureStack B2 Configuration Guide 19-53ExampleThisexampleshowshowtodisplayMAClockinginformationfortheendstationsconnec
set maclock disable19-54 Authentication and Authorization ConfigurationMAClockingisdisabledbydefaultatdevicestartup.Configuringoneormorep
clear maclockSecureStack B2 Configuration Guide 19-55DefaultsNone.ModeSwitchcommand,read‐write.UsageConfiguringaportforMAClockingrequiresglob
set system password length3-6 Basic ConfigurationExamplesThisexampleshowshowasuper‐userwouldchangetheRead‐Writepasswordfromthesystemdefa
set maclock static19-56 Authentication and Authorization ConfigurationUsageTheMACaddressthatisclearedwillnolongerbeabletocommunicateonth
set maclock firstarrivalSecureStack B2 Configuration Guide 19-57ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowto
clear maclock firstarrival19-58 Authentication and Authorization ConfigurationExampleThisexampleshowshowtorestrictMAClockingto6MACaddresses
clear maclock agefirstarrivalSecureStack B2 Configuration Guide 19-59ModeSwitchmode,read‐write.ExampleThisexampleenablesfirstarrivalagingonpo
set maclock trap19-60 Authentication and Authorization ConfigurationModeSwitchcommand,read‐write.UsageIftherearemorefirstarrivalMACsthanthe
Configuring Port Web Authentication (PWA)SecureStack B2 Configuration Guide 19-61Configuring Port Web Authentication (PWA)About PWAPWAprovidesaway
show pwa19-62 Authentication and Authorization Configurationshow pwaUsethiscommandtodisplayportwebauthenticationinformationforoneormorepo
set pwaSecureStack B2 Configuration Guide 19-63set pwaUsethiscommandtoenableordisableportwebauthenticati on.Syntaxset pwa {enable | disable}P
show pwa banner19-64 Authentication and Authorization ConfigurationExampleThisexampleshowshowtoenableportwebauthentication:B2(su)->set pwa
clear pwa bannerSecureStack B2 Configuration Guide 19-65clear pwa bannerUsethiscommandtoresetthePWAloginbanner toablankstring.Syntaxclear
set system password historySecureStack B2 Configuration Guide 3-7ParametersDefaults None.ModeSwitchcommand,superuser.ExampleThisexampleshowshow
set pwa ipaddress19-66 Authentication and Authorization Configurationset pwa ipaddressUsethiscommandtosetthePWAIPaddress.ThisistheIPaddre
set pwa guestnameSecureStack B2 Configuration Guide 19-67set pwa guestnameUsethiscommandtosetaguestusernameforPWAnetworking.PWAwilluset
set pwa guestpassword19-68 Authentication and Authorization Configurationset pwa guestpasswordUsethiscommandtosettheguestuserpasswordforPWA
set pwa initializeSecureStack B2 Configuration Guide 19-69UsagePWAwilluseaguestpasswordandguestusernametograntnetworkaccesswithdefault
set pwa maxrequest19-70 Authentication and Authorization ConfigurationDefaultsIfport‐stringisnotspecified,quietperiodwillbesetforallports.
show pwa sessionSecureStack B2 Configuration Guide 19-71ParametersDefaultsIfport‐stringisnotspecified,PWAwillenabledonallports.ModeSwitchco
set pwa enhancedmode19-72 Authentication and Authorization Configurationset pwa enhancedmodeThiscommandenablesPWAURLredirection.Theswitchinter
Configuring Secure Shell (SSH)SecureStack B2 Configuration Guide 19-73Configuring Secure Shell (SSH)PurposeToreview,enable,disable,andconfiguret
set ssh hostkey19-74 Authentication and Authorization ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowsho
Index -1IndexNumerics802.1D 9-1802.1p 12-17, 13-1802.1Q 10-1802.1s 9-1802.1w 9-1802.1x 19-5, 19-19AAdvertised Ability 7-15Aliasnode 15-35ARPdynamic in
iv13. SEVERABILITY. IntheeventanyprovisionofthisAgreementisfoundtobeinvalid,illegalorunenforceable,thevalidity,legalityandenforcea
set system lockout3-8 Basic ConfigurationParametersNone.DefaultsNone.ModeSwitchcommand,superuser.ExampleThisexampleshowshowtodisplayuserlock
Index - 2 monitoring switch events and status 15-12Node Alias 15-35NVRAMclearing 3-49PPasswordaging 3-6history 3-6, 3-7set new 3-5setting the login 3
Setting Basic Switch PropertiesSecureStack B2 Configuration Guide 3-9UsageOnceauseraccountislockedout,itcanonlybere‐enabledbyasuperuser
show ip address3-10 Basic Configurationshow ip addressUsethiscommandtodisplaythesystemIPaddressandsubnetmask.Syntaxshow ip addressParameter
set ip addressSecureStack B2 Configuration Guide 3-11set ip addressUsethiscommandtosetthesystemIPaddress,subnetmaskanddefaultgateway.Synt
show ip protocol3-12 Basic ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearthesystemIPaddress:B2(rw)->clear i
show systemSecureStack B2 Configuration Guide 3-13ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetthemethodusedtoacquireanet
show system hardware3-14 Basic ConfigurationThefollowingtableprovidesanexplanationofthecommandoutput.show system hardwareUsethiscommandto
show system utilizationSecureStack B2 Configuration Guide 3-15ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaythesystem’shard
show system enhancedbuffermode3-16 Basic ConfigurationType Description Size(Kb) Available (Kb)---------------------------------
set system temperatureSecureStack B2 Configuration Guide 3-17switches..Executingthiscommandwillresettheswitch,sothesystempromptsyoutocon
vContentsAbout This GuideUsing This Guide ...
clear system temperature3-18 Basic ConfigurationUsageOntheplatformsthatsupportthisfeature,temperaturesensorsarelocatedinseveraldifferent
show timeSecureStack B2 Configuration Guide 3-19show timeUsethiscommandtodisplaythecurrenttimeofdayinthesystemclock.Syntaxshow timeParame
show summertime3-20 Basic Configurationshow summertimeUsethiscommandtodisplaydaylightsavingstimesettings.Syntaxshow summertimeParametersNone.D
set summertime dateSecureStack B2 Configuration Guide 3-21set summertime dateUsethiscommandtoconfigurespecificdatestostartandstopdaylights
clear summertime3-22 Basic ConfigurationParametersDefaultsIfanoffsetisnotspecified,nonewillbeapplied.ModeSwitchcommand,read‐write.ExampleTh
set promptSecureStack B2 Configuration Guide 3-23set promptUsethiscommandtomodifythecommandprompt.Syntaxset prompt prompt_stringParametersDefau
set banner motd3-24 Basic Configurationset banner motdUsethiscommandtosetthebannermessageofthedaydisplayedatsessionlogin.Syntaxset banne
show versionSecureStack B2 Configuration Guide 3-25ExampleThisexampleshowshowtoclearthemessageofthedaybannertoablankstring:B2(rw)->c
set system name3-26 Basic Configurationset system nameUsethiscommandtoconfigureanameforthesystem.Syntaxset system name [string]ParametersDefa
set system contactSecureStack B2 Configuration Guide 3-27set system contactUsethiscommandtoidentifyacontactpersonforthesystem.Syntaxset syst
vi set system password history ...3-7show
set length3-28 Basic ConfigurationExampleThisexampleshowshowtosettheterminalcolumnsto50:B2(su)->set width 50set lengthUsethiscommandto
set logoutSecureStack B2 Configuration Guide 3-29ExampleThisexampleshowshowtodisplaytheCLIlogoutsetting:B2(su)->show logout Logou
set console baud3-30 Basic ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplayallconsolesettings:B2(su)->show co
Downloading a Firmware ImageSecureStack B2 Configuration Guide 3-31–TeraTermProVersion2.3Anyotherterminalapplicationsmayworkbutarenotexpl
Downloading a Firmware Image3-32 Basic Configuration3. Type2.Thefollowingbaudrateselectionscreendisplays:1 - 12002 - 24003 - 48004 - 96005 - 1
Reviewing and Selecting a Boot Firmware ImageSecureStack B2 Configuration Guide 3-33Reverting to a Previous ImageIntheeventthatyouneedtodowngra
show boot system3-34 Basic Configurationshow boot systemUsethiscommandtodisplaythefirmwareimagetheswitchloadsatstartup.Syntaxshow boot sys
Starting and Configuring TelnetSecureStack B2 Configuration Guide 3-35ExampleThisexampleshowshowtosetthebootfirmwareimagefileandresetthe
show telnet3-36 Basic Configurationshow telnetUsethiscommandtodisplaythestatusofTelnetontheswitch.Syntaxshow telnetParametersNone.DefaultsN
telnetSecureStack B2 Configuration Guide 3-37telnetUsethiscommandtostartaTelnetconnectiontoaremotehost.TheSecureStackB2switchallowsa
viiPurpose ...
show snmp persistmode3-38 Basic ConfigurationPurposeTosetandviewthepersistencemodefor CLIconfigurationcommands,manuallysavetherunningco
set snmp persistmodeSecureStack B2 Configuration Guide 3-39saved.Inordertomakeconfigurationchangespersistentwhenthemodeismanual,thesave
dir3-40 Basic ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosavetherunningconfiguration:B2(su)->save
show fileSecureStack B2 Configuration Guide 3-41base_may 22629base_apr 22629base_july
configure3-42 Basic ConfigurationParametersDefaultsBydefault,showconfigwilldisplayallnon‐defaultconfigurationinformationforallfacilities.M
copySecureStack B2 Configuration Guide 3-43ParametersDefaultsIfappendisnotspecified,thecurrentrunningconfigurationwillbereplacedwiththec
delete3-44 Basic Configurationdelete UsethiscommandtoremoveanimageoraCLIconfig urationfilefromtheswitch.Syntaxdelete filenameParametersD
set tftp timeoutSecureStack B2 Configuration Guide 3-45ExampleThisexampleshowstheoutputofthiscommand.B2(ro)->show tftp settings TFTP packet
set tftp retry3-46 Basic ConfigurationExampleThisexampleshowshowtoclearthetimeoutvaluetothedefaultof2seconds.B2(rw)-> clear tftp time
Clearing and Closing the CLISecureStack B2 Configuration Guide 3-47Clearing and Closing the CLIPurposeTocleartheCLIscreenortocloseyourCLIses
Kommentare zu diesen Handbüchern