6000

Aruba 6000, 6000, 6100 Switch Series, 6100 Reference guide

  • Hello! I've reviewed the Aruba AOS-CX 10.13 Command-Line Interface Guide for the 6000 and 6100 Switch Series. This document provides a detailed rundown of all the CLI commands available, covering everything from basic network configuration to advanced security and monitoring features. I'm ready to answer any specific questions you have about the commands, protocols, or configurations of these switches. Just ask!
  • How do I access the CLI?
    What are the different authority levels?
    How do I get help with CLI commands?
AOS-CX 10.13 Command-Line
Interface Guide
6000, 6100 Switch Series
Published: November 2023
Edition: 1
|2
Copyright Information
© Copyright 2023 Hewlett Packard Enterprise Development LP.
This product includes code licensed under certain open source licenses which require source
compliance. The corresponding source for these components is available upon request. This offer is
valid to anyone in receipt of this information and shall expire three years following the date of the final
distribution of this product version by Hewlett Packard Enterprise Company. To obtain such source
code, please check if the code is available in the HPE Software Center at
https://myenterpriselicense.hpe.com/cwp-ui/software but, if not, send a written request for specific
software version and product for which you want the open source code. Along with the request, please
send a check or money order in the amount of US $10.00 to:
Hewlett Packard Enterprise Company
Attn: General Counsel
WW Corporate Headquarters
1701 E Mossy Oaks Rd Spring, TX 77389
United States of America.
Notices
The information contained herein is subject to change without notice. The only warranties for Hewlett
Packard Enterprise products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or
omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession,
use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer
Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government
under vendor's standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard
Enterprise website.
For more information, see the KM Process Guide. ?>
Acknowledgments
Bluetooth is a trademark owned by its proprietor and used by Hewlett Packard Enterprise under
license.
Contents
Contents
Contents 3
About this document 28
Applicable products 28
What's new in this release 28
Latest version available online 29
Command syntax notation conventions 29
About the examples 30
Identifying switch ports and interfaces 31
Introduction to the AOS-CX CLI 32
CLI access 32
Getting CLI help 32
Authority levels 33
Command contexts 34
Operator context (>) 34
Navigating to the operator context (>) 34
Auditor context 34
Manager context (#) 35
Navigating to the manager context (#) 35
Global configuration context (config) 35
Navigating to the config context 36
Other configuration command contexts 36
Support for range contexts 37
Rules for range contexts 39
Command history 39
Command completion 40
Pipe (|) support in show commands 40
Command syntax notation conventions 41
Service OS CLI commands 42
boot 42
cat 43
cd path 43
config-clear 44
cp 45
du 46
erase zeroize 47
exit 48
format 49
identify 50
ls 51
md5sum 52
mkdir 53
mount 54
mv 55
password (svos) 56
pwd 56
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 3
Contents |4
reboot 57
rm 58
rmdir 58
secure-mode 59
sh 61
system serviceos password-prompt 61
umount 62
update 63
version 64
ACL commands 66
ACL application 66
access-list copy 66
access-list ip 70
access-list ipv6 80
access-list log-timer 88
access-list mac 90
access-list resequence 96
access-list reset 99
apply access-list control-plane 102
apply access-list (to interface or LAG) 103
apply access-list (to VLAN) 105
clear access-list hitcounts 107
clear access-list hitcounts control-plane 108
show access-list 109
show access-list control-plane 113
show access-list hitcounts 115
show access-list hitcounts control-plane 118
show capacities 119
show capacities-status 121
ACL and Policy hardware resource commands 125
show resources 125
ARP commands 130
arp inspection 130
arp inspection trust 130
arp ipv4 mac 131
arp process-grat-arp 132
clear arp 133
debug arp-security 134
ip local-proxy-arp 136
ip proxy-arp 137
ipv6 neighbor mac 138
show arp 139
show arp inspection interface 139
show arp inspection statistics 141
show arp inspection vlan 141
show arp state 142
show arp summary 144
show arp timeout 145
show arp vrf 146
show ipv6 neighbors 147
show ipv6 neighbors state 148
show tech arp-security 149
location-override-alternative 151
Banner commands 153
banner 153
show banner 154
Boot commands 156
boot set-default 156
boot system 156
show boot-history 158
Cable diagnostic commands 161
diag cable-diagnostic 161
Captive portal (RADIUS) commands 164
aaa authentication port-access captive-portal-profile 164
show port-access captive-portal-profile 165
url 166
url-hash-key 167
CDP commands 170
cdp 170
clear cdp counters 171
clear cdp neighbor-info 171
show cdp 172
show cdp neighbor-info 173
show cdp traffic 174
Checkpoint commands 175
checkpoint auto 175
checkpoint auto confirm 176
checkpoint diff 177
checkpoint post-configuration 178
checkpoint post-configuration timeout 179
checkpoint rename 180
checkpoint rollback 181
copy checkpoint <CHECKPOINT-NAME> <REMOTE-URL> 181
copy checkpoint <CHECKPOINT-NAME> {running-config | startup-config} 183
copy checkpoint <CHECKPOINT-NAME> <STORAGE-URL> 184
copy <REMOTE-URL> checkpoint <CHECKPOINT-NAME> 184
copy <REMOTE-URL> {running-config | startup-config} 185
copy running-config {startup-config | checkpoint <CHECKPOINT-NAME>} 187
copy {running-config | startup-config} <REMOTE-URL> 188
copy {running-config | startup-config} <STORAGE-URL> 190
copy startup-config running-config 191
copy <STORAGE-URL> running-config 191
erase 193
show checkpoint <CHECKPOINT-NAME> 194
show checkpoint <CHECKPOINT-NAME> hash 196
show checkpoint post-configuration 197
show checkpoint 198
show checkpoint date 199
show running-config hash 200
show startup-config hash 201
write memory 202
Classifier policy commands 203
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 5
Contents |6
Classifier policy application 203
apply policy (config-if, config-lag-if, config-vlan) 203
apply policy 206
class copy 207
class ip 208
class ipv6 215
class resequence 221
class reset 222
clear policy hitcounts 223
policy 224
policy copy 229
policy resequence 230
policy reset 231
show class 231
show policy 233
Client Insight Commands 238
client-insight enable 238
client-insight on-boarding event logs 238
diag-dump client-insight basic 239
show capacities client-insight-client-limit 241
show capacities-status client-insight-client-limit 242
show events -c client-insight 243
show tech client-insight 245
CLI session commands 248
alias 248
auto-confirm 249
configure terminal 250
disable 251
do 251
enable (manager context) 252
end 253
exit 253
list 254
page 254
Pipe (|) command 255
repeat 256
session-timeout 257
show session-timeout 258
show alias 258
show history 259
CLI user session management commands 261
cli-session 261
Clock commands 264
clock date 264
clock datetime 264
clock time 265
clock timezone 266
show clock 266
CoPP commands 268
Classes of traffic 268
apply copp-policy 268
class 270
clear copp-policy statistics 271
copp-policy 271
default-class 273
reset copp-policy 273
show copp-policy 275
show copp-policy factory-default 276
show copp-policy statistics 278
show tech copp 279
Debug logging commands 281
clear debug buffer 281
debug {all | <MODULE-NAME>} 282
debug db 283
debug destination 285
show debug 287
show debug buffer 288
show debug destination 289
Device profile commands 290
aaa authentication port-access allow-cdp-auth 290
aaa authentication port-access allow-cdp-bpdu 291
aaa authentication port-access allow-cdp-proxy-logoff 292
aaa authentication port-access allow-lldp-bpdu 293
associate cdp-group 295
associate lldp-group 296
associate mac-group 297
associate role 298
disable 298
enable 299
ignore (for CDP groups) 300
ignore (for LLDP groups) 301
ignore (for MAC groups) 302
mac-group 308
match (for CDP groups) 309
match (for LLDP groups) 310
match (for MAC groups) 312
port-access cdp-group 316
port-access device-profile 317
port-access device-profile mode block-until-profile-applied 318
port-access lldp-group 319
show port-access device-profile 320
DHCP client commands 323
ip dhcp 323
show ip dhcp 324
DHCPv4 relay commands 325
dhcp-relay 325
dhcp-relay hop-count-increment 325
dhcp-relay option 82 326
diag-dump dhcp-relay basic 327
ip bootp-gateway 329
ip helper-address 330
show dhcp-relay 330
show dhcp-relay bootp-gateway 331
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 7
Contents |8
show ip helper-address 332
DHCP relay (IPv6) commands 334
dhcpv6-relay 334
dhcpv6-relay option 79 335
ipv6 helper-address 335
show dhcpv6-relay 337
show ipv6 helper-address 337
DHCPv4 snooping commands 339
clear dhcpv4-snooping binding 339
clear dhcpv4-snooping statistics 340
dhcpv4-snooping 340
dhcpv4-snooping (in config-vlan context) 341
dhcpv4-snooping allow-overwrite-binding 342
dhcpv4-snooping authorized-server 343
dhcpv4-snooping event-log client 344
dhcpv4-snooping external-storage 345
dhcpv4-snooping flash-storage 346
dhcpv4-snooping max-bindings 348
dhcpv4-snooping option 82 348
dhcpv4-snooping static-attributes 350
dhcpv4-snooping trust 351
dhcpv4-snooping verify mac 352
show dhcpv4-snooping 352
show dhcpv4-snooping binding 354
show dhcpv4-snooping statistics 355
DHCPv6 snooping commands 357
clear dhcpv6-snooping binding 357
clear dhcpv6-snooping statistics 358
dhcpv6-snooping 358
dhcpv6-snooping (in config-vlan context) 359
dhcpv6-snooping authorized-server 360
dhcpv6-snooping event-log client 361
dhcpv6-snooping external-storage 362
dhcpv6-snooping flash-storage 364
dhcpv6-snooping max-bindings 365
dhcpv6-snooping trust 366
show dhcpv6-snooping 367
show dhcpv6-snooping binding 368
show dhcpv6-snooping statistics 369
DHCP options commands 371
http-proxy 371
DNS client commands 373
ip dns domain-list 373
ip dns domain-name 374
ip dns host 375
ip dns server address 376
show ip dns 377
redistribute local-mac 378
Fault monitor commands 379
(Fault enabling/disabling) 379
action 380
apply fault-monitor profile 383
fault-monitor profile 384
show fault-monitor profile 385
show interface fault-monitor profile 387
show interface fault-monitor status 388
show running-config 388
threshold 390
Firmware management commands 393
copy {primary | secondary} <REMOTE-URL> 393
copy {primary | secondary} <FIRMWARE-FILENAME> 394
copy primary secondary 395
copy <REMOTE-URL> 395
copy secondary primary 397
copy <STORAGE-URL> 398
copy hot-patch 399
hot-patch 400
show hot-patch 402
HTTPS server commands 404
https-server authentication certificate 404
https-server authentication password 405
https-server max-user-sessions 405
https-server rest access-mode 406
https-server rest firmware-site-distribution 407
https-server session close all 408
https-server session-timeout 409
https-server vrf 410
show https-server 411
show https-server authentication 412
ICMP commands 414
ip icmp redirect 414
ip icmp throttle 414
ip icmp unreachable 415
IGMP commands 417
ip igmp 417
ip igmp apply access-list 418
ip igmp last-member-query-interval 419
ip igmp querier 420
ip igmp querier interval 421
ip igmp querier-wait-time 422
ip igmp querier query-max-response-time 423
ip igmp robustness 424
ip igmp router-alert-check 425
ip igmp static-group 426
ip igmp version 426
ip igmp version strict 427
no ip igmp 428
show ip igmp 429
show ip igmp counters 430
show ip igmp group 431
show ip igmp groups 434
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 9
Contents |10
show ip igmp interface 436
show ip igmp interface counters 437
show ip igmp interface group 438
show ip igmp interface groups 439
show ip igmp interface statistics 441
show ip igmp static-groups 442
show ip igmp statistics 443
IGMP snooping commands 445
ip igmp snooping apply access list 445
ip igmp snooping (config mode) 446
ip igmp snooping (interface mode) 447
ip igmp snooping preprogram-starg-flow 449
ip igmp snooping static group 451
ip igmp snooping (vlan mode) 452
show ip igmp snooping 453
In-System Programming commands 457
clear update-log 457
show needed-updates 457
Interface commands 459
allow-unsupported-transceiver 459
default interface 460
description 461
energy-efficient-ethernet 462
flow-control 463
interface 464
interface vlan 465
ip address 466
ip mtu 467
ipv6 address 467
mtu 469
persona 470
rate-interval 472
show allow-unsupported-transceiver 473
show interface 474
show interface dom 479
show interface energy-efficient ethernet 479
show interface flow-control 480
show interface statistics 485
show interface transceiver 488
show interface utilization 491
show ip interface 492
show ip source-interface 493
show ipv6 interface 494
show ipv6 source-interface 496
shutdown 497
speed 497
IP Client Tracker commands 501
client track ip 501
client track ip { enable | disable | auto } 502
client track ip client-limit 503
client track ip update-interval 503
client track ip update-method probe 504
show capacities 505
show client ip { count | port | vlan } 506
IPv4 source lockdown commands 507
ipv4 source-binding 507
ipv4 source-lockdown 508
ipv4 source-lockdown hardware retry 509
show ipv4 source-binding 509
show ipv4 source-lockdown 510
IPv6 RA commands 514
ipv6 address <global-unicast-address> 514
ipv6 address autoconfig 515
ipv6 address link-local 516
ipv6 nd cache-limit 516
ipv6 nd dad attempts 517
ipv6 nd hop-limit 518
ipv6 nd mtu 519
ipv6 nd ns-interval 519
ipv6 nd prefix 520
ipv6 nd ra dns search-list 522
ipv6 nd ra dns server 523
ipv6 nd ra lifetime 524
ipv6 nd ra managed-config-flag 525
ipv6 nd ra max-interval 526
ipv6 nd ra min-interval 527
ipv6 nd ra other-config-flag 527
ipv6 nd ra reachable-time 528
ipv6 nd ra retrans-timer 529
ipv6 nd route 530
ipv6 nd router-preference 531
ipv6 nd suppress-ra 532
show ipv6 nd global traffic 532
show ipv6 nd interface 533
show ipv6 nd interface prefix 536
show ipv6 nd interface route 537
show ipv6 nd ra dns search-list 538
show ipv6 nd ra dns server 539
IPv6 source lockdown commands 540
ipv6 source-binding 540
ipv6 source-lockdown 541
ipv6 source-lockdown hardware retry 542
show ipv6 source-binding 542
show ipv6 source-lockdown 543
IRDP commands 547
diag-dump irdp basic 547
ip irdp 548
ip irdp holdtime 549
ip irdp maxadvertinterval 549
ip irdp minadvertinterval 550
ip irdp preference 551
show ip irdp 552
Job Scheduler commands 554
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 11
Contents |12
job 554
schedule 556
show job 559
show capacities (job, schedule) 562
show running-config (job, schedule) 562
show schedule 564
Key chain commands 567
accept-lifetime 567
key 568
keychain 569
key-string 570
name 571
recv-id 572
send-lifetime 573
send-id 574
show capacities keychain 575
show keychain 576
show running-config keychain 577
L1-100Mbps downshift commands 579
downshift enable 579
show interface 580
show interface downshift-enable 584
show running-config interface 585
LACP and LAG commands 587
description 587
interface lag 588
lacp fallback-static 589
lacp mode 590
lacp port-id 591
lacp port-priority 591
lacp rate 592
lacp system-priority 593
lag 594
show interface 595
show lacp aggregates 597
show lacp configuration 598
show lacp interfaces 598
show lag 602
show running-config interface lag 603
shutdown 604
vlan trunk native 605
LLDP commands 607
clear lldp neighbors 607
clear lldp statistics 607
lldp 608
lldp dot3 609
lldp dot3 eee 610
lldp dot3 mfs 610
lldp holdtime-multiplier 611
lldp management-address vlan 612
lldp management-ipv4-address 613
lldp management-ipv6-address 614
lldp med 615
lldp med location 616
lldp receive 618
lldp reinit 619
lldp select-tlv 620
lldp timer 621
lldp transmit 623
lldp txdelay 623
lldp trap enable 624
show lldp configuration 626
show lldp local-device 627
show lldp neighbor-info 629
show lldp neighbor-info detail 631
show lldp statistics 634
show lldp tlv 635
Local AAA commands 637
aaa accounting all-mgmt 637
aaa authentication console-login-attempts 639
aaa authentication limit-login-attempts 640
aaa authentication login 641
aaa authentication minimum-password-length 642
aaa authorization commands (local) 643
show aaa accounting 645
show aaa authentication 646
show aaa authorization 647
show authentication locked-out-users 648
show ssh authentication-method 649
show user 649
ssh password-authentication 651
ssh public-key-authentication 651
user authorized-key 652
Log rotation commands 655
logging threshold 655
logrotate maxsize 656
logrotate period 657
logrotate target 658
show logrotate 660
Loop protect commands 661
loop-protect 661
loop-protect action 662
loop-protect re-enable-timer 663
loop-protect transmit-interval 664
loop-protect trap loop-detected 664
loop-protect vlan 665
show loop-protect 666
Loopback commands 670
interface loopback 670
ip address 670
ipv6 address 671
show interface loopback 672
MAC address table commands 674
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 13
Contents |14
clear mac-address 674
clear mac address mac move 676
clear mac-address-table 677
mac-address-table age-time 677
show mac-address-table 678
show mac-address-table address 679
show mac-address-table count 680
show mac-address-table dynamic 681
show mac-address-table interface 682
show mac-address-table lockout 683
show mac address table mac move 684
show mac-address-table mac-move 685
show mac-address-table port 687
show mac-address-table static 687
show mac-address-table vlan 688
show mac address table mac move 689
static-mac 690
Mirroring commands 692
clear mirror 692
comment 692
destination interface 694
diagnostic 695
disable 696
enable 696
mirror session 697
show mirror 698
source interface 700
MLD snooping global configuration commands 703
ipv6 mld snooping 703
MLD snooping VLAN configuration commands 704
ipv6 mld snooping 704
ipv6 mld snooping fastlearn 705
ipv6 mld snooping fastleave vlan 705
ipv6 mld snooping forced fastleave vlan 706
ipv6 mld snooping apply access-list 707
ipv6 mld snooping auto vlan 709
ipv6 mld snooping blocked vlan 709
ipv6 mld snooping forward vlan 710
ipv6 mld snooping preprogram-starg-flow 711
ipv6 mld snooping static-group 713
ipv6 mld snooping version 713
MLD snooping show commands 715
show ipv6 mld snooping 715
MLD configuration commands for interface VLAN 719
ipv6 mld 719
ipv6 mld apply access-list 719
no ipv6 mld 721
ipv6 mld querier 721
ipv6 mld querier interval 722
ipv6 mld querier-wait-time 723
ipv6 mld last-member-query-interval 723
ipv6 mld querier query-max-response-time 724
ipv6 mld robustness 725
ipv6 mld static-group 726
ipv6 mld version 726
ipv6 mld version strict 727
MLD show commands for interface VLAN 729
show ipv6 mld 729
MLD configuration commands for interface 733
ipv6 mld 733
ipv6 mld apply access-list 733
no ipv6 mld 735
ipv6 mld querier 735
ipv6 mld querier interval 736
ipv6 mld last-member-query-interval 737
ipv6 mld querier query-max-response-time 737
ipv6 mld robustness 738
ipv6 mld static-group 739
ipv6 mld version 740
ipv6 mld version strict 740
MSTP commands 742
clear spanning-tree statistics 742
show spanning-tree 742
show spanning-tree detail 744
show spanning-tree inconsistent-ports 745
show spanning-tree mst 746
show spanning-tree mst-config 749
show spanning-tree mst detail 749
show spanning-tree mst <INSTANCE-ID> 753
show spanning-tree mst <INSTANCE-ID> detail 754
show spanning-tree mst interface 755
show spanning-tree summary port 756
show spanning-tree summary root 757
spanning-tree 758
spanning-tree bpdu-filter 759
spanning-tree bpdu-guard 760
spanning-tree bpdu-guard timeout 761
spanning-tree config-name 762
spanning-tree config-revision 763
spanning-tree cost 764
spanning-tree forward-delay 765
spanning-tree hello-time 766
spanning-tree instance cost 767
spanning-tree instance port-priority 768
spanning-tree instance priority 769
spanning-tree instance vlan 770
spanning-tree link-type 771
spanning-tree loop-guard 771
spanning-tree max-age 772
spanning-tree max-hops 773
spanning-tree mode 774
spanning-tree port-priority 776
spanning-tree port-type 777
spanning-tree priority 778
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 15
Contents |16
spanning-tree root-guard 779
spanning-tree rpvst-filter 780
spanning-tree rpvst-guard 781
spanning-tree tcn-guard 782
spanning-tree transmit-hold-count 783
spanning-tree trap 783
MVRP commands 786
clear mvrp statistics 786
mvrp 786
mvrp registration 787
mvrp timer 788
show mvrp config 789
show mvrp state 790
show mvrp statistics 791
NTP commands 793
ntp authentication 793
ntp authentication-key 793
ntp disable 795
ntp enable 795
ntp server 796
ntp trusted-key 798
ntp vrf 799
show ntp associations 800
show ntp authentication-keys 801
show ntp servers 802
show ntp statistics 802
show ntp status 803
Ping commands 805
ping 805
ping6 810
PKI commands 814
crypto pki application 814
crypto pki certificate 815
crypto pki ta-profile 816
enroll self-signed 817
enroll terminal 818
import (CA-signed leaf certificate) 819
import (self-signed leaf certificate) 821
key-type 823
ocsp disable-nonce 824
ocsp enforcement-level 825
ocsp url 826
ocsp vrf 827
revocation-check ocsp 828
show crypto pki application 829
show crypto pki certificate 830
show crypto pki ta-profile 832
ta-certificate 834
subject 835
PKI EST commands 837
arbitrary-label 837
arbitrary-label-enrollment 838
arbitrary-label-reenrollment 839
crypto pki est-profile 840
enroll est-profile 841
reenrollment-lead-time 842
retry-count 843
retry-interval 844
show crypto pki est-profile 845
url 846
username 847
vrf 849
PoE commands 851
lldp dot3 poe 851
lldp med poe 852
power-over-ethernet 852
power-over-ethernet allocate-by 853
power-over-ethernet assigned-class 855
power-over-ethernet pre-std-detect 856
power-over-ethernet priority 856
power-over-ethernet threshold 857
power-over-ethernet trap 858
show lldp local 859
show lldp neighbor 860
show power-over-ethernet 861
Port access 802.1X authentication commands 864
aaa authentication port-access dot1x authenticator 864
aaa authentication port-access dot1x authenticator auth-method 865
aaa authentication port-access dot1x authenticator cached-reauth 866
aaa authentication port-access dot1x authenticator cached-reauth-period 866
aaa authentication port-access dot1x authenticator discovery-period 867
aaa authentication port-access dot1x authenticator eap-tls-fragment 868
aaa authentication port-access dot1x authenticator eapol-timeout 869
aaa authentication port-access dot1x authenticator initial-auth-response-timeout 870
aaa authentication port-access dot1x authenticator max-eapol-requests 871
aaa authentication port-access dot1x authenticator max-retries 872
aaa authentication port-access dot1x authenticator quiet-period 873
aaa authentication port-access dot1x authenticator radius server-group 874
aaa authentication port-access dot1x authenticator reauth 875
aaa authentication port-access dot1x authenticator reauth-period 876
clear dot1x authenticator statistics interface 877
show aaa authentication port-access dot1x authenticator interface client-status 877
show aaa authentication port-access dot1x authenticator interface port-statistics 879
Port access 802.1X supplicant commands 882
aaa authentication port-access dot1x supplicant(global) 882
aaa authentication port-access dot1x supplicant(port) 882
associate policy 883
canned-eap-success 885
clear dot1x supplicant statistics 885
discovery-timeout 887
eap-identity 888
eapol-force-multicast 890
eapol-method 891
eapol-protocol-version 892
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 17
Contents |18
eapol-timeout 894
enable 895
enable 896
fail-mode 896
held-period 897
max-retries 899
policy (supplicant) 900
port-access dot1x supplicant restart 901
show aaa authentication port-access dot1x supplicant policy 902
show aaa authentication port-access dot1x supplicant statistics 904
show aaa authentication port-access dot1x supplicant status 906
start-mode 909
Port access cached-critical role commands 911
aaa authentication port-access cached-critical-role (global) 911
aaa authentication port-access cached-critical-role (per interface) 913
port-access clear cached-client 914
show port-access cached-clients 915
show port-access cached-critical-role info 916
Port access general commands 918
aaa authentication port-access allow-lldp-auth 918
aaa authentication port-access auth-mode 920
aaa authentication port-access auth-precedence 921
aaa authentication port-access auth-priority 922
aaa authentication port-access auth-role 924
aaa authentication port-access client-auto-log-off final-authentication-failure 925
aaa authentication port-access client-limit 926
aaa authentication port-access client-limit multi-domain 927
aaa authentication port-access radius-override 927
port-access allow-flood-traffic 929
port-access client-move 930
port-access event-log client 931
port-access fallback-role 932
port-access log-off client 933
port-access onboarding-method precedence 934
port-access onboarding-method concurrent 935
port-access reauthenticate interface 936
show aaa authentication port-access interface client-status 937
show port-access clients 939
show port-access clients detail 942
show port-access clients onboarding-method 945
Port access MAC authentication commands 947
aaa authentication port-access mac-auth 947
aaa authentication port-access mac-auth addr-format 948
aaa authentication port-access mac-auth auth-method 948
aaa authentication port-access mac-auth cached-reauth 949
aaa authentication port-access mac-auth cached-reauth-period 950
aaa authentication port-access mac-auth password 951
aaa authentication port-access mac-auth quiet-period 952
aaa authentication port-access mac-auth radius server-group 953
aaa authentication port-access mac-auth reauth 954
aaa authentication port-access mac-auth reauth-period 955
clear mac-auth statistics 956
show aaa authentication port-access mac-auth interface client-status 956
show aaa authentication port-access mac-auth interface port-statistics 958
Port access policy commands 960
port-access policy 960
port-access policy copy 964
port-access policy resequence 965
port-access policy reset 965
clear port-access policy hitcounts 967
show port-access policy 969
show port-access policy hitcounts 971
Port access role commands 974
associate policy 974
auth-mode 975
cached-reauth-period 976
client-inactivity timeout 977
description 978
device-traffic-class 978
mtu 979
poe-allocate-by 980
poe-priority 981
port-access role 982
reauth-period 983
session timeout 983
show aaa authentication port-access interface client-status 984
show port-access role 985
stp-admin-edge-port 987
trust-mode 988
vlan 989
Port access security violation commands 992
port-access security violation action 992
port-access security violation action shutdown auto-recovery 993
port-access security violation action shutdown recovery-timer 994
show interface 995
show port-access aaa violation interface 995
show port-access port-security violation client-limit-exceeded interface 997
Port access VLAN group commands 999
associate-vlan 999
port-access vlan-group 1000
show running-config port-access vlan-group 1001
Port filtering commands 1002
portfilter 1002
show portfilter 1003
Port security commands 1005
port-access port-security 1005
port-access port-security client-limit 1006
port-access port-security mac-address 1006
show port-access port-security interface client-status 1007
show port-access port-security interface port-statistics 1009
show port-access security violation sticky-mac-client-move interface 1010
sticky-learn enable 1011
AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 19
Contents |20
Private VLAN commands 1012
diag-dump private-vlan basic 1012
private-vlan 1012
private-vlan port-type 1014
show capacities private-vlan 1015
show capacities-status private-vlan 1016
show private-vlan 1016
show private-vlan association 1018
show private-vlan inconsistency 1019
show private-vlan port-type 1021
show running-configuration private-vlan 1021
show tech private-vlan 1022
QoS commands 1025
apply qos 1025
map queue 1027
min-bandwidth 1028
name queue 1030
qos cos 1030
qos dscp 1031
qos dscp-map 1033
qos queue-profile 1034
qos schedule-profile 1035
qos trust 1037
rate-limit 1039
show interface queues 1042
show interface qos 1043
show qos dscp-map 1044
show qos queue-profile 1045
show qos schedule-profile 1046
show qos trust 1048
strict queue 1049
Configurable RADIUS attribute commands 1051
aaa radius-attribute group 1051
nas-id request-type 1052
nas-id value 1053
nas-ip-addr request-type authentication 1054
nas-ip-addr service-type user-management 1055
tunnel-private-group-id request-type 1056
tunnel-private-group-id value 1057
RADIUS dynamic authorization commands 1059
radius dyn-authorization enable 1059
radius dyn-authorization client 1059
radius dyn-authorization client tls (RadSec) 1061
radius dyn-authorization port 1063
show radius dyn-authorization 1064
show radius dyn-authorization client 1066
show radius dyn-authorization client tls (RadSec) 1067
Remote AAA (TACACS+, RADIUS) commands 1070
aaa accounting allow-fail-through 1070
aaa accounting all-mgmt 1070
aaa authentication allow-fail-through 1073
/