3com 3CR17662-91 Configuration manual

3Com

®

Switch 4200G Family

Configuration Guide

4200G 12-Port (3CR17660-91)

4200G 24-Port (3CR17661-91)

4200G 48-Port (3CR17662-91)

www.3Com.com

Part Number: 10014915 Rev. AD

Published: May 2007

3Com Corporation

350 Campus Drive

Marlborough, MA

USA 01752-3064

by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written

permission from 3Com Corporation.

3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time

without obligation on the part of 3Com Corporation to provide notification of such revision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or

expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality,

and fitness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s)

described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license agreement

included with the product as a separate document, in the hard copy documentation, or on the removable media in a

directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will

be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are provided to

you subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense. Software is

delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or as a “commercial item”

as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial

license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or

FAR 52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided

on any licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered

in other countries.

3Com and the 3Com logo are registered trademarks of 3Com Corporation.

Cisco is a registered trademark of Cisco Systems, Inc.

Funk RADIUS is a registered trademark of Funk Software, Inc.

Aegis is a registered trademark of Aegis Group PLC.

Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows NT are

registered trademarks of Microsoft Corporation. Novell and NetWare are registered trademarks of Novell, Inc. UNIX is a

registered trademark in the United States and other countries, licensed exclusively through X/Open Company, Ltd.

IEEE and 802 are registered trademarks of the Institute of Electrical and Electronics Engineers, Inc.

All other company and product names may be trademarks of the respective companies with which they are associated.

ENVIRONMENTAL STATEMENT

It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we are committed

to:

Establishing environmental performance standards that comply with national legislation and regulations.

Conserving energy, materials and natural resources in all operations.

Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental standards.

Maximizing the recyclable and reusable content of all products.

Ensuring that all products can be recycled, reused and disposed of safely.

Ensuring that all products are labelled according to recognized environmental standards.

Improving our environmental record on a continual basis.

End of Life Statement

3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.

Regulated Materials Statement

3Com products do not contain any hazardous or ozone-depleting material.

CONTENTS

ABOUT THIS GUIDE

Organization of the Manual 1

Intended Readership 2

Conventions 2

Related Manuals 3

1 CLI OVERVIEW

Introduction to the CLI 1

Command Level/Command View 1

CLI Features 6

Terminal Display 7

2 LOGGING INTO AN ETHERNET SWITCH

Logging into an Ethernet Switch 9

Introduction to the User Interface 9

3 LOGGING IN THROUGH THE CONSOLE PORT

Introduction 11

Setting up the Connection to the Console Port 11

Console Port Login Configuration 13

Console Port Login Configuration with Authentication Mode Being None 15

Console Port Login Configuration with Authentication Mode Being Password 18

Console Port Login Configuration with Authentication Mode Being Scheme 21

4 LOGGING IN USING MODEM

Introduction 25

Configuration on the Administrator Side 25

Configuration on the Switch Side 25

Modem Connection Establishment 26

5 LOGGING IN THROUGH WEB-BASED NETWORK MANAGEMENT SYSTEM

Introduction 29

HTTP Connection Establishment 29

6 LOGGING IN THROUGH NMS

Introduction 33

Connection Establishment Using NMS 33

7 CONTROLLING LOGIN USERS

Introduction 35

Controlling Telnet Users 35

Controlling Network Management Users by Source IP Addresses 37

Controlling Web Users by Source IP Address 39

2 CONTENTS

8 CONFIGURATION FILE MANAGEMENT

Introduction to Configuration File 41

Configuration File-Related Configuration 41

9 VLAN CONFIGURATION

VLAN Overview 43

VLAN Configuration 44

Displaying a VLAN 44

VLAN Configuration Example 45

10 MANAGEMENT VLAN CONFIGURATION

Introduction to Management VLAN 47

Management VLAN Configuration 47

Displaying and Debugging Management VLAN 49

11 DHCP/BOOTP CLIENT CONFIGURATION

Introduction to DHCP Client 51

Introduction to BOOTP Client 53

DHCP/BOOTP Client Configuration 53

12 VOICE VLAN CONFIGURATION

Voice VLAN Configuration 55

Voice VLAN Configuration 57

Voice VLAN Displaying and Debugging 59

Voice VLAN Configuration Example 59

13 GVRP CONFIGURATION

Introduction to GVRP 61

GVRP Configuration 63

Displaying and Maintaining GVRP 65

14 BASIC PORT CONFIGURATION

Ethernet Port Overview 67

Configuring Ethernet Ports 69

Ethernet Port Configuration Example 73

Troubleshooting Ethernet Port Configuration 74

15 LINK AGGREGATION CONFIGURATION

Overview 75

Link Aggregation Configuration 79

Displaying and Maintaining Link Aggregation Information 81

Link Aggregation Configuration Example 82

16 PORT ISOLATION CONFIGURATION

Port Isolation Overview 85

CONTENTS 3

Port Isolation Configuration 85

Displaying Port Isolation 85

Port Isolation Configuration Example 85

17 PORT SECURITY CONFIGURATION

Port Security Configuration 87

Displaying Port Security 90

Port Security Configuration Example 91

18 MAC ADDRESS TABLE MANAGEMENT

Overview 93

MAC Address Table Management 95

Displaying and Maintaining a MAC Address Table 96

Configuration Example 96

19 LOGGING IN THROUGH TELNET

Introduction 99

Telnet Configuration with Authentication Mode Being None 100

Telnet Configuration with Authentication Mode Being Password 102

Telnet Configuration with Authentication Mode Being Scheme 105

Telnet Connection Establishment 109

20 MSTP CONFIGURATION

MSTP Overview 113

Root Bridge Configuration 118

Leaf Node Configuration 131

The mCheck Configuration 135

Protection Function Configuration 136

BPDU Tunnel Configuration 139

Digest Snooping Configuration 141

Rapid Transition Configuration 142

MSTP Displaying and Debugging 145

MSTP Implementation Example 145

21 802.1X CONFIGURATION

Introduction to 802.1x 149

802.1x Configuration 158

Basic 802.1x Configuration 158

Timer and Maximum User Number Configuration 159

Advanced 802.1x Configuration 160

Displaying and Debugging 802.1x 162

Configuration Example 162

22 HABP CONFIGURATION

Introduction to HABP 165

HABP Server Configuration 165

4 CONTENTS

HABP Client Configuration 166

Displaying and Debugging HABP 166

23 AAA&RADIUS CONFIGURATION

Overview 167

Configuration Tasks 173

AAA Configuration 174

RADIUS Configuration 179

Displaying AAA&RADIUS Information 186

AAA&RADIUS Configuration Example 187

Troubleshooting AAA&RADIUS Configuration 189

24 CENTRALIZED MAC ADDRESS AUTHENTICATION CONFIGURATION

Centralized MAC Address Authentication Overview 191

Centralized MAC Address Authentication Configuration 191

Displaying and Debugging Centralized MAC Address Authentication 193

Centralized MAC Address Authentication Configuration Example 194

25 ARP CONFIGURATION

Introduction to ARP 195

Introduction to Gratuitous ARP 197

ARP Configuration 198

Gratuitous ARP Packet Learning configuration 199

Displaying and Debugging ARP 199

26 ACL CONFIGURATION

ACL Overview 201

Configuring Time Ranges 202

Defining Basic ACLs 203

Defining Advanced ACLs 204

Defining Layer 2 ACLs 207

Applying ACLs on Ports 209

Displaying and Debugging ACL Configuration 210

ACL Configuration Examples 210

27 QOS CONFIGURATION

Introduction to QoS 213

Priority Mapping 221

QoS Supported by Switch 4200G 223

Configuring Priority Mapping 224

Configuring TP 229

Configuring TS 230

Configuring Queue-scheduling 231

Configuring Traffic Statistics 232

Setting the Precedence of Protocol Packet 233

Displaying and Maintaining QoS 234

QoS Configuration Example 235

CONTENTS 5

28 CONFIGURATION FOR MIRRORING FEATURES

Mirroring Features 237

Mirroring Supported by Switch 4200G 239

Mirroring Configuration 239

Displaying and Debugging Mirroring 248

29 IGMP SNOOPING CONFIGURATION

Overview of IGMP Snooping 249

IGMP Snooping Configuration 252

Displaying Information About IGMP Snooping 256

IGMP Snooping Configuration Example 256

Troubleshooting IGMP Snooping 259

30 ROUTING PORT JOIN TO MULTICAST GROUP CONFIGURATION

Routing Port Join to Multicast Group Configuration 261

31 MULTICAST MAC ADDRESS ENTRY CONFIGURATION

Introduction 263

Configuring a Multicast MAC Address Entry 263

Displaying Multicast MAC Address Configuration 264

32 CLUSTER CONFIGURATION

Cluster Overview 265

Management Device Configuration 268

Member Device Configuration 271

Intra-Cluster Configuration 272

Displaying and Maintaining a Cluster 272

HGMP V2 Configuration Example 273

33 SNMP CONFIGURATION

SNMP Overview 277

Configuring SNMP Basic Functions 279

Configuring Trap 281

Setting the Logging Function for Network Management 282

Displaying SNMP 282

SNMP Configuration Example 282

34 RMON CONFIGURATION

Introduction to RMON 285

RMON Configuration 287

Displaying and Debugging RMON 288

RMON Configuration Example 288

35 NTP CONFIGURATION

Introduction to NTP 291

6 CONTENTS

NTP Implementation Mode Configuration 295

Access Control Permission Configuration 297

NTP Authentication Configuration 297

Configuration of Optional NTP Parameters 299

Displaying and Debugging NTP 300

Configuration Example 300

36 SSH TERMINAL SERVICES

SSH Terminal Services 309

SFTP Service 317

37 FILE SYSTEM MANAGEMENT

File Attribute Configuration 325

File System Configuration 326

Testing Tools for Network Connection 331

38 FTP AND TFTP CONFIGURATION

FTP Configuration 333

TFTP Configuration 339

39 INFORMATION CENTER

Information Center Overview 343

Information Center Configuration 345

Displaying and Debugging Information Center 350

Information Center Configuration Example 350

40 BOOTROM AND HOST SOFTWARE LOADING

Introduction to Loading Approaches 353

Local Software Loading 353

Remote Software Loading 361

41 Basic System Configuration and Debugging

Basic System Configuration 365

Displaying the System Status 367

System Debugging 367

42 IP PERFORMANCE CONFIGURATION

IP Performance Configuration 371

Displaying and Debugging IP Performance 371

Troubleshooting the IP Performance Configuration 372

43 NETWORK CONNECTIVITY TEST

Network Connectivity Test 373

CONTENTS 7

44 DEVICE MANAGEMENT

Introduction to Device Management 375

Device Management Configuration 375

Displaying the Device Management Configuration 376

Remote Switch Update Configuration Example 376

45 CONFIGURATION OF NEWLY ADDED CLUSTER FUNCTIONS

Introduction to the Newly Added Cluster Functions 379

Displaying and Debugging a Cluster 389

Configuration Example for Newly Added Cluster Functions 390

46 DHCP RELAY CONFIGURATION

Introduction to DHCP Relay 393

DHCP Relay Configuration 395

Option 82 Supporting Configuration 397

DHCP Relay Displaying 399

DHCP Relay Configuration Example 399

Troubleshooting DHCP Relay 400

47 STATIC ROUTE CONFIGURATION

Introduction to Static Route 401

Static Route Configuration 402

Displaying and Debugging Static Route 403

Typical Static Route Configuration Example 403

Static Route Fault Diagnosis and Troubleshooting 404

48 UDP HELPER CONFIGURATION

Overview of UDP Helper 405

8 CONTENTS

ABOUT THIS GUIDE

This guide provides information about configuring your network using the

commands supported on the 3Com

®

Switch 4200-G Family.

The descriptions in this guide applies to the Switch 4200-G.

Organization of the

Manual

The Switch 4200 Family Configuration Guide consists of the following chapters:

■ CLI Overview—Provides an introduction to the CLI interface.

■ Logging In—Provides information on the different ways to log into the switch.

■ Configuration File System Management—Details the Configuration File

System Management.

■ Address Management—Details hoe to configure the switch on which the

Address Manage (AM) feature is enabled.

■ VLAN Operation—Details how to configure VLANs.

■ DHCP—Details Dynamic Host Configuration Protocol.

■ Voice-VLAN—Details configuration information to create Voice-VLAN.

■ GVRP Configuration—Details GARP VLAN Registration Protocol

configuration.

■ Port Operation—Details how to configure Ethernet ports.

■ Link Aggregation—Details how to aggregating several ports together

■ Port Isolation—Details how to configure ports to be controlled on Layer 2.

■ DLDP—Details overview and fundamentals for Device Link Detection Protocol.

■ MAC Address Table Management—Details MAC address table

configuration.

■ MSTP—Details Multiple spanning tree protocol.

■ 802.1x Configuration—Details how to configure 802.1x.

■ HABP Configuration—Details how to configure HABP

■ AAA &RADIUS—Details AAA and RADIUS Configuration.

■ EAD—Details Endpoint Admission Defense Configuration.

■ Centralized MAC address authentication—Details Centralized MAC

address authentication configuration.

■ ARP—Details Address Resolution Protocol table configuration.

■ DHCP—Details Dynamic Host Configuration Protocol.

■ ACL Configuration—Details how to configure QoS/ACL..

2 ABOUT THIS GUIDE

■ QoS—Details Quality of Service.

■ Mirroring—Details how to configure Mirroring.

■ IGMP Snooping—Details Internet Group Management Protocol Snooping

■ Multicast Protocol—Details how to configure multicast protocols.

■ Clustering—Details Clustering Configuration.

■ SNMP—Details Simple Network Management Protocol Configuration.

■ RMON—Details Remote Monitoring Configuration.

■ NTP—Details Network time protocol.

■ SSH—Details Secure Shell authentication.

■ File System Management—Details how to configure the file system

management.

■ FTP and TFTP—Details how to configure the FTP and TFTP protocols.

■ Information Center—Details how to configure the Information Center

■ BootROM and Host Software—Details how to how to load BootROM and

host software to a switch

■ Basic System Configuration—Details how to how to configure a basic

system.

■ IP Performance Configuration—Details how to configure routing protocols

■ Network Protocol Operation—Details how to configure network protocols

■ Network Connectivity Tests—Details how to perform a connectivity test.

■ Device Management—Details how to manage devices.

■ VLAN-VPN—Details configuration information to create VLAN-VPNs.

■ DHCP Relay—Details Dynamic Host Configuration Protocol relay

configuration.

■ Static Route—Details Static Route Configuration.

■ UDP Helper—Details UDP Configuration.

Intended Readership The manual is intended for the following readers:

■ Network administrators

■ Network engineers

■ Users who are familiar with the basics of networking

Conventions This manual uses the following conventions:

Table 1 Icons

Icon Notice Type Description

Information note Information that describes important features or instructions.

Caution Information that alerts you to potential loss of data or

potential damage to an application, system, or device.

Related Manuals 3

Related Manuals The 3Com Switch 4200 Family Getting Started Guide provides information about

installation.

The 3Com Switch 4200 Family Command Reference Guide provides all the

information you need to use the configuration commands.

Warning Information that alerts you to potential personal injury.

Tabl e 2 Text conventions

Convention Description

Screen

displays

This typeface represents text as it appears on the screen.

Keyboard key

names

If you must press two or more keys simultaneously, the key names are

linked with a plus sign (+), for example:

Press Ctrl+Alt+Del

The words “enter”

and “type”

When you see the word “enter” in this guide, you must type something,

and then press Return or Enter. Do not press Return or Enter when an

instruction simply says “type.”

Fixed command

text

This typeface indicates the fixed part of a command text. You must type

the command, or this part of the command, exactly as shown, and press

Return or Enter when you are ready to enter the command.

Example: The command display history-command must be

entered exactly as shown.

Variable

command text

This typeface indicates the variable part of a command text. You must

type a value here, and press Return or Enter when you are ready to enter

the command.

Example: in the command super level, a value in the range 0 to 3

must be entered in the position indicated by level

{ x | y | … } Alternative items, one of which must be entered, are grouped in braces

and separated by vertical bars. You must select and enter one of the

items.

Example: in the command flow-control {hardware | none |

software}, the braces and the vertical bars combined indicate that

you must enter one of the parameters. Enter either hardware, or

none, or software.

[] Items shown in square brackets [ ] are optional.

Example 1: in the command

display users [all], the square

brackets indicate that the parameter

all is optional. You can enter the

command with or without this parameter.

Example 2: in the command user-interface [type]

first-number [last-number] the square brackets indicate that the

parameters [type] and [last-number] are both optional. You can

enter a value in place of one, both or neither of these parameters.

Alternative items, one of which can optionally be entered, are grouped

in square brackets and separated by vertical bars.

Example 3: in the command header

[shell | incoming |

login] text, the square brackets indicate that the parameters

shell, incoming and login

are all optional. The vertical bars

indicate that only one of the parameters is allowed.

Tabl e 1 Icons (Continued)

Icon Notice Type Description

4 ABOUT THIS GUIDE

1

CLI OVERVIEW

Introduction to the CLI A S4200G series Ethernet switch provides a command line interface (CLI) and

commands for you to configure and manage the Ethernet switch. The CLI is featured

by the following:

■ Commands are grouped by levels. This prevents unauthorized users from

operating the switch with relevant commands.

■ Users can gain online help at any time by entering the question mark “?”.

■ Commonly used diagnosing utilities (such as Tracert and Ping) are available.

■ Debugging information of various kinds is available.

■ The command history is available. You can recall and execute a history command

easily.

■ You can execute a command by only entering part of the command in the CLI, as

long as the keywords you input uniquely identify the corresponding ones.

Command

Level/Command View

To prevent unauthorized accesses, commands are grouped by command levels.

Commands fall into four levels: visit, monitor, system, and manage:

■ Visit level: Commands at this level are mainly used to diagnose network and

change the language mode of user interface, and cannot be saved in

configuration files. For example, the ping, tracert, and language-mode

commands are at this level.

■ Monitor level: Commands at this level are mainly used to maintain the system and

diagnose service problems, and cannot be saved to configuration files. For

example, the display and debugging commands are at this level.

■ System level: Commands at this level are mainly used to configure services.

Commands concerning routing and network layers are at this level. You can utilize

network services by using these commands.

■ Manage level: Commands at this level are associated with the basic operation of

the system, and the system supporting modules. These commands provide

supports to services. Commands concerning file system, FTP/TFTP/XModem

downloading, user management, and level setting are at this level.

Users logging into a switch also fall into four levels, each of which corresponding to

one of the above command levels. Users at a specific level can only use the

commands of the same level and those of the lower levels.

Switching between

User Levels

A user can switch the user level from one to another by executing a related command

after logging into a switch. The administrator can also set user level switching

passwords so that users can switch their levels from lower ones to higher ones only

when they input the correct passwords.

2 CHAPTER 1: CLI OVERVIEW

Setting a user level switching password

Table 1 lists the operations to set a user level switching password.

Switching to another user level

Table 2 lists operations to switch to another user level.

For security purpose, the password a user enters when switching to a higher user level

is not displayed. A user will remain at the original user level if the user has tried three

times to enter the correct password but fails to do this.

Configuring the Level of

a Specific Command in a

Specific View

You can configure the level of a specific command in a specific view. Commands fall

into four command levels: visit, monitor, system, and manage, which are identified as

0, 1, 2, and 3 respectively. The administrator can change the command level a

command belongs to.

Table 3 lists the operations to configure the level of a specific command.

CLI Views CLI views are designed for different configuration tasks. They are interrelated. You will

enter user view once you log into a switch successfully, where you can perform

operations such as displaying operation status and statistical information. And by

executing the system-view command, you can enter system view, where you can

enter other views by executing the corresponding commands.

The following CLI views are provided:

■ User view

Tab le 1 Set a user level switching password

Operation Command Description

Enter system view system-view —

Set a password for

switching from a lower

user level to the user

level identified by the

level argument

super password [ level level ]

{ simple | cipher } password

Optional

A password is necessary only when

a user switches from a lower user

level to a higher user level.

Tab le 2 Switch to another user level

Operation Command Description

Switch to the user level

identified by the level

argument

super [ level ] Required

Execute this command in user view.

If a password for switching to the

user level identified by the level

argument is set and you want to

switch to a lower user level, you will

remain at the lower user level unless

you provide the correct password

after executing this command.

Tab le 3 Configure the level of a specific command in a specific view

Operation Command Description

Enter system view system-view —

Configure the level of a

specific command in a

specific view

command-privilege level level

view view command

Required

Use this command with caution to

prevent inconvenience on

maintenance and operation.

Command Level/Command View 3

■ System view

■ Ethernet port view

■ VLAN view

■ VLAN interface view

■ LoopBack interface view

■ Local user view

■ User interface view

■ FTP client view

■ SFTP client view

■ MST region view

■ Cluster view

■ Public key view

■ Public key editing view

■ Basic ACL view

■ Advanced ACL view

■ Layer 2 ACL view

■ RADIUS scheme view

■ ISP domain view

Table 4 lists information about CLI views (including the operations you can performed

in these views, how to enter these views, and so on).

Tab le 4 CLI views

View

Available

operation

Prompt

example

Enter method Quit method

User view Display operation

status and

statistical

information

<S4200G> Enter user view once

logging into the

switch.

Execute the quit

command in user

view to log out of

the switch.

System view Configure system

parameters

[4200G] Execute the

system-view

command in user

view.

Execute the quit or

return command

to return to user

view.

Ethernet

port view

Configure Ethernet

port parameters

[4200G-GigabitEt

hernet1/0/1]

Execute the interface

gigabitethernet

1/0/1 command in

system view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

[4200G-TenGiga

bitEthernet1/1/1]

Execute the interface

tengigabitethernet

1/1/1 command in

system view.

4 CHAPTER 1: CLI OVERVIEW

VLAN view Configure VLAN

parameters

[4200G-Vlan1] Execute the vlan 1

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

VLAN

interface

view

Configure IP

interface

parameters for

VLANs and

aggregated VLANs

[4200G-Vlan-inte

rface1]

Execute the interface

vlan-interface 1

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

LoopBack

interface

view

Configure

LoopBack interface

parameters

[4200G-LoopBac

k0]

Execute the interface

loopback 0

command in system

view

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

Local user

view

Configure local

user parameters

[4200G-luser-use

r1]

Execute the

local-user user1

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

User

interface

view

Configure user

interface

parameters

[4200G-ui0] Execute the

user-interface 0

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

FTP client

view

Configure FTP

client parameters

[ ftp] Execute the ftp

command in user

view.

Execute the quit

command to

return to user

view.

SFTP client

view

Configure SFTP

client parameters

<sftp-client> Execute the sftp

10.1.1.1 command in

system view.

Execute the quit

command to

return to user

view.

MST region

view

Configure MST

region parameters

[4200G-mst-regi

on]

Execute the stp

region-configuratio

n command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

Tab le 4 CLI views (Continued)

View

Available

operation

Prompt

example

Enter method Quit method

Command Level/Command View 5

Cluster view Configure cluster

parameters

[4200G-cluster] Execute the cluster

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

Public key

view

Configure RSA

public keys for SSH

users

[4200G-rsa-publi

c-key]

Execute the rsa

peer-public-key

S4200G003

command in system

view.

Execute the

peer-public-key

end command to

return to system

view.

Public key

editing view

Edit RSA public

keys of SSH users

[4200G-rsa-key-c

ode]

Execute the

public-key-code

begin command in

public key view.

Execute the

public-key-code

end command to

return to public

key view.

Basic ACL

view

Define rules for a

basic ACL (ACLs

with their IDs

ranging from 2000

to 2999 are basic

ACLs.)

[4200G-acl-

basic-2000]

Execute the acl

number 2000

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

Advanced

ACL view

Define rules for an

advanced ACL

(ACLs with their

IDs ranging from

3000 to 3999 are

advanced ACLs.)

[4200G-acl-

adv-3000]

Execute the acl

number 3000

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

Layer 2 ACL

view

Define the

sub-rules of Layer

2 ACLs, which is

numbered from

4000 to 4999.

[4200G-acl-ether

netframe-4000]

Execute the acl

number 4000

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

RADIUS

scheme view

Configure RADIUS

parameters

[4200G-radius-1] Execute the radius

scheme 1 command

in system view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

ISP domain

view

Configure

parameters for an

ISP domain

[4200G-isp-3Co

m163.net]

Execute the domain

3Com163.net

command in system

view.

Execute the quit

command to

return to system

view.

Execute the return

command to

return to user

view.

Tab le 4 CLI views (Continued)

View

Available

operation

Prompt

example

Enter method Quit method

6 CHAPTER 1: CLI OVERVIEW

CLI Features

Online Help CLI provides two types of online help: complete online help and partial online help.

They assist you with your configuration.

Complete online help

Enter a “?” character in any view on your terminal to display all the commands

available in the view and their brief descriptions. The following takes user view as an

example.

<S4200G> ?

User view commands:

boot Set boot option

cd Change the current path

clock Specify the system clock

cluster Run cluster command

copy Copy the file

debugging Enable system debugging functions

delete Delete the file

dir Display the file list in system

display Display current system information

Enter a command, a space, and a “?” character (instead of a keyword available in this

position of the command) on your terminal to display all the available keywords and

their brief descriptions. The following takes the clock command as an example.

<S4200G> clock ?

datetime Specify the time and date

summer-time Configure summer time

timezone Configure time zone

Enter a command, a space, and a “?” character (instead of an argument available in

this position of the command) on your terminal to display all the available arguments

and their brief descriptions. The following takes the interface vlan command as an

example.

[4200G] interface vlan ?

<1-4094> VLAN interface number

[4200G] interface vlan 1 ?

<cr>

The string <cr> means no argument is available in the position occupied by the “?”

character. You can execute the command without providing any other information.

Partial online help

Enter a string followed directly by a “?” character on your terminal to display all the

commands beginning with the string. For example:

<S4200G> pi?

ping

Enter a command, a space, and a string followed by a “?” character on your terminal

to display all the keywords that belong to the command and begin with the string (if

available). For example:

<S4200G> display ver?

version

Page is loading ...

3com 3CR17662-91 Configuration manual

This manual is also suitable for

3com 3CR17662-91 Configuration manual

Related papers

Other documents