Aruba 6100 Reference guide

Brand: Aruba

Model: 6100

Type: Reference guide

This manual is also suitable for

AOS-CX 10.13 Command-Line

Interface Guide

6000, 6100 Switch Series

Published: November 2023

Edition: 1

This product includes code licensed under certain open source licenses which require source

compliance. The corresponding source for these components is available upon request. This offer is

valid to anyone in receipt of this information and shall expire three years following the date of the final

distribution of this product version by Hewlett Packard Enterprise Company. To obtain such source

code, please check if the code is available in the HPE Software Center at

https://myenterpriselicense.hpe.com/cwp-ui/software but, if not, send a written request for specific

software version and product for which you want the open source code. Along with the request, please

send a check or money order in the amount of US $10.00 to:

Hewlett Packard Enterprise Company

Attn: General Counsel

WW Corporate Headquarters

1701 E Mossy Oaks Rd Spring, TX 77389

United States of America.

Notices

The information contained herein is subject to change without notice. The only warranties for Hewlett

Packard Enterprise products and services are set forth in the express warranty statements

accompanying such products and services. Nothing herein should be construed as constituting an

additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or

omissions contained herein.

Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession,

use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer

Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government

under vendor's standard commercial license.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard

Enterprise has no control over and is not responsible for information outside the Hewlett Packard

Enterprise website.

For more information, see the KM Process Guide. ?>

Acknowledgments

Bluetooth is a trademark owned by its proprietor and used by Hewlett Packard Enterprise under

license.

Contents

Contents 3

About this document 28

Applicable products 28

What's new in this release 28

Latest version available online 29

Command syntax notation conventions 29

About the examples 30

Identifying switch ports and interfaces 31

Introduction to the AOS-CX CLI 32

CLI access 32

Getting CLI help 32

Authority levels 33

Command contexts 34

Operator context (>) 34

Navigating to the operator context (>) 34

Auditor context 34

Manager context (#) 35

Navigating to the manager context (#) 35

Global configuration context (config) 35

Navigating to the config context 36

Other configuration command contexts 36

Support for range contexts 37

Rules for range contexts 39

Command history 39

Command completion 40

Pipe (|) support in show commands 40

Command syntax notation conventions 41

Service OS CLI commands 42

boot 42

cat 43

cd path 43

config-clear 44

cp 45

du 46

erase zeroize 47

exit 48

format 49

identify 50

ls 51

md5sum 52

mkdir 53

mount 54

mv 55

password (svos) 56

pwd 56

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 3

Contents |4

reboot 57

rm 58

rmdir 58

secure-mode 59

sh 61

system serviceos password-prompt 61

umount 62

update 63

version 64

ACL commands 66

ACL application 66

access-list copy 66

access-list ip 70

access-list ipv6 80

access-list log-timer 88

access-list mac 90

access-list resequence 96

access-list reset 99

apply access-list control-plane 102

apply access-list (to interface or LAG) 103

apply access-list (to VLAN) 105

clear access-list hitcounts 107

clear access-list hitcounts control-plane 108

show access-list 109

show access-list control-plane 113

show access-list hitcounts 115

show access-list hitcounts control-plane 118

show capacities 119

show capacities-status 121

ACL and Policy hardware resource commands 125

show resources 125

ARP commands 130

arp inspection 130

arp inspection trust 130

arp ipv4 mac 131

arp process-grat-arp 132

clear arp 133

debug arp-security 134

ip local-proxy-arp 136

ip proxy-arp 137

ipv6 neighbor mac 138

show arp 139

show arp inspection interface 139

show arp inspection statistics 141

show arp inspection vlan 141

show arp state 142

show arp summary 144

show arp timeout 145

show arp vrf 146

show ipv6 neighbors 147

show ipv6 neighbors state 148

show tech arp-security 149

location-override-alternative 151

Banner commands 153

banner 153

show banner 154

Boot commands 156

boot set-default 156

boot system 156

show boot-history 158

Cable diagnostic commands 161

diag cable-diagnostic 161

Captive portal (RADIUS) commands 164

aaa authentication port-access captive-portal-profile 164

show port-access captive-portal-profile 165

url 166

url-hash-key 167

CDP commands 170

cdp 170

clear cdp counters 171

clear cdp neighbor-info 171

show cdp 172

show cdp neighbor-info 173

show cdp traffic 174

Checkpoint commands 175

checkpoint auto 175

checkpoint auto confirm 176

checkpoint diff 177

checkpoint post-configuration 178

checkpoint post-configuration timeout 179

checkpoint rename 180

checkpoint rollback 181

copy checkpoint <CHECKPOINT-NAME> <REMOTE-URL> 181

copy checkpoint <CHECKPOINT-NAME> {running-config | startup-config} 183

copy checkpoint <CHECKPOINT-NAME> <STORAGE-URL> 184

copy <REMOTE-URL> checkpoint <CHECKPOINT-NAME> 184

copy <REMOTE-URL> {running-config | startup-config} 185

copy running-config {startup-config | checkpoint <CHECKPOINT-NAME>} 187

copy {running-config | startup-config} <REMOTE-URL> 188

copy {running-config | startup-config} <STORAGE-URL> 190

copy startup-config running-config 191

copy <STORAGE-URL> running-config 191

erase 193

show checkpoint <CHECKPOINT-NAME> 194

show checkpoint <CHECKPOINT-NAME> hash 196

show checkpoint post-configuration 197

show checkpoint 198

show checkpoint date 199

show running-config hash 200

show startup-config hash 201

write memory 202

Classifier policy commands 203

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 5

Contents |6

Classifier policy application 203

apply policy (config-if, config-lag-if, config-vlan) 203

apply policy 206

class copy 207

class ip 208

class ipv6 215

class resequence 221

class reset 222

clear policy hitcounts 223

policy 224

policy copy 229

policy resequence 230

policy reset 231

show class 231

show policy 233

Client Insight Commands 238

client-insight enable 238

client-insight on-boarding event logs 238

diag-dump client-insight basic 239

show capacities client-insight-client-limit 241

show capacities-status client-insight-client-limit 242

show events -c client-insight 243

show tech client-insight 245

CLI session commands 248

alias 248

auto-confirm 249

configure terminal 250

disable 251

do 251

enable (manager context) 252

end 253

exit 253

list 254

page 254

Pipe (|) command 255

repeat 256

session-timeout 257

show session-timeout 258

show alias 258

show history 259

CLI user session management commands 261

cli-session 261

Clock commands 264

clock date 264

clock datetime 264

clock time 265

clock timezone 266

show clock 266

CoPP commands 268

Classes of traffic 268

apply copp-policy 268

class 270

clear copp-policy statistics 271

copp-policy 271

default-class 273

reset copp-policy 273

show copp-policy 275

show copp-policy factory-default 276

show copp-policy statistics 278

show tech copp 279

Debug logging commands 281

clear debug buffer 281

debug {all | <MODULE-NAME>} 282

debug db 283

debug destination 285

show debug 287

show debug buffer 288

show debug destination 289

Device profile commands 290

aaa authentication port-access allow-cdp-auth 290

aaa authentication port-access allow-cdp-bpdu 291

aaa authentication port-access allow-cdp-proxy-logoff 292

aaa authentication port-access allow-lldp-bpdu 293

associate cdp-group 295

associate lldp-group 296

associate mac-group 297

associate role 298

disable 298

enable 299

ignore (for CDP groups) 300

ignore (for LLDP groups) 301

ignore (for MAC groups) 302

mac-group 308

match (for CDP groups) 309

match (for LLDP groups) 310

match (for MAC groups) 312

port-access cdp-group 316

port-access device-profile 317

port-access device-profile mode block-until-profile-applied 318

port-access lldp-group 319

show port-access device-profile 320

DHCP client commands 323

ip dhcp 323

show ip dhcp 324

DHCPv4 relay commands 325

dhcp-relay 325

dhcp-relay hop-count-increment 325

dhcp-relay option 82 326

diag-dump dhcp-relay basic 327

ip bootp-gateway 329

ip helper-address 330

show dhcp-relay 330

show dhcp-relay bootp-gateway 331

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 7

Contents |8

show ip helper-address 332

DHCP relay (IPv6) commands 334

dhcpv6-relay 334

dhcpv6-relay option 79 335

ipv6 helper-address 335

show dhcpv6-relay 337

show ipv6 helper-address 337

DHCPv4 snooping commands 339

clear dhcpv4-snooping binding 339

clear dhcpv4-snooping statistics 340

dhcpv4-snooping 340

dhcpv4-snooping (in config-vlan context) 341

dhcpv4-snooping allow-overwrite-binding 342

dhcpv4-snooping authorized-server 343

dhcpv4-snooping event-log client 344

dhcpv4-snooping external-storage 345

dhcpv4-snooping flash-storage 346

dhcpv4-snooping max-bindings 348

dhcpv4-snooping option 82 348

dhcpv4-snooping static-attributes 350

dhcpv4-snooping trust 351

dhcpv4-snooping verify mac 352

show dhcpv4-snooping 352

show dhcpv4-snooping binding 354

show dhcpv4-snooping statistics 355

DHCPv6 snooping commands 357

clear dhcpv6-snooping binding 357

clear dhcpv6-snooping statistics 358

dhcpv6-snooping 358

dhcpv6-snooping (in config-vlan context) 359

dhcpv6-snooping authorized-server 360

dhcpv6-snooping event-log client 361

dhcpv6-snooping external-storage 362

dhcpv6-snooping flash-storage 364

dhcpv6-snooping max-bindings 365

dhcpv6-snooping trust 366

show dhcpv6-snooping 367

show dhcpv6-snooping binding 368

show dhcpv6-snooping statistics 369

DHCP options commands 371

http-proxy 371

DNS client commands 373

ip dns domain-list 373

ip dns domain-name 374

ip dns host 375

ip dns server address 376

show ip dns 377

redistribute local-mac 378

Fault monitor commands 379

(Fault enabling/disabling) 379

action 380

apply fault-monitor profile 383

fault-monitor profile 384

show fault-monitor profile 385

show interface fault-monitor profile 387

show interface fault-monitor status 388

show running-config 388

threshold 390

Firmware management commands 393

copy {primary | secondary} <REMOTE-URL> 393

copy {primary | secondary} <FIRMWARE-FILENAME> 394

copy primary secondary 395

copy <REMOTE-URL> 395

copy secondary primary 397

copy <STORAGE-URL> 398

copy hot-patch 399

hot-patch 400

show hot-patch 402

HTTPS server commands 404

https-server authentication certificate 404

https-server authentication password 405

https-server max-user-sessions 405

https-server rest access-mode 406

https-server rest firmware-site-distribution 407

https-server session close all 408

https-server session-timeout 409

https-server vrf 410

show https-server 411

show https-server authentication 412

ICMP commands 414

ip icmp redirect 414

ip icmp throttle 414

ip icmp unreachable 415

IGMP commands 417

ip igmp 417

ip igmp apply access-list 418

ip igmp last-member-query-interval 419

ip igmp querier 420

ip igmp querier interval 421

ip igmp querier-wait-time 422

ip igmp querier query-max-response-time 423

ip igmp robustness 424

ip igmp router-alert-check 425

ip igmp static-group 426

ip igmp version 426

ip igmp version strict 427

no ip igmp 428

show ip igmp 429

show ip igmp counters 430

show ip igmp group 431

show ip igmp groups 434

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 9

Contents |10

show ip igmp interface 436

show ip igmp interface counters 437

show ip igmp interface group 438

show ip igmp interface groups 439

show ip igmp interface statistics 441

show ip igmp static-groups 442

show ip igmp statistics 443

IGMP snooping commands 445

ip igmp snooping apply access list 445

ip igmp snooping (config mode) 446

ip igmp snooping (interface mode) 447

ip igmp snooping preprogram-starg-flow 449

ip igmp snooping static group 451

ip igmp snooping (vlan mode) 452

show ip igmp snooping 453

In-System Programming commands 457

clear update-log 457

show needed-updates 457

Interface commands 459

allow-unsupported-transceiver 459

default interface 460

description 461

energy-efficient-ethernet 462

flow-control 463

interface 464

interface vlan 465

ip address 466

ip mtu 467

ipv6 address 467

mtu 469

persona 470

rate-interval 472

show allow-unsupported-transceiver 473

show interface 474

show interface dom 479

show interface energy-efficient ethernet 479

show interface flow-control 480

show interface statistics 485

show interface transceiver 488

show interface utilization 491

show ip interface 492

show ip source-interface 493

show ipv6 interface 494

show ipv6 source-interface 496

shutdown 497

speed 497

IP Client Tracker commands 501

client track ip 501

client track ip { enable | disable | auto } 502

client track ip client-limit 503

client track ip update-interval 503

client track ip update-method probe 504

show capacities 505

show client ip { count | port | vlan } 506

IPv4 source lockdown commands 507

ipv4 source-binding 507

ipv4 source-lockdown 508

ipv4 source-lockdown hardware retry 509

show ipv4 source-binding 509

show ipv4 source-lockdown 510

IPv6 RA commands 514

ipv6 address <global-unicast-address> 514

ipv6 address autoconfig 515

ipv6 address link-local 516

ipv6 nd cache-limit 516

ipv6 nd dad attempts 517

ipv6 nd hop-limit 518

ipv6 nd mtu 519

ipv6 nd ns-interval 519

ipv6 nd prefix 520

ipv6 nd ra dns search-list 522

ipv6 nd ra dns server 523

ipv6 nd ra lifetime 524

ipv6 nd ra managed-config-flag 525

ipv6 nd ra max-interval 526

ipv6 nd ra min-interval 527

ipv6 nd ra other-config-flag 527

ipv6 nd ra reachable-time 528

ipv6 nd ra retrans-timer 529

ipv6 nd route 530

ipv6 nd router-preference 531

ipv6 nd suppress-ra 532

show ipv6 nd global traffic 532

show ipv6 nd interface 533

show ipv6 nd interface prefix 536

show ipv6 nd interface route 537

show ipv6 nd ra dns search-list 538

show ipv6 nd ra dns server 539

IPv6 source lockdown commands 540

ipv6 source-binding 540

ipv6 source-lockdown 541

ipv6 source-lockdown hardware retry 542

show ipv6 source-binding 542

show ipv6 source-lockdown 543

IRDP commands 547

diag-dump irdp basic 547

ip irdp 548

ip irdp holdtime 549

ip irdp maxadvertinterval 549

ip irdp minadvertinterval 550

ip irdp preference 551

show ip irdp 552

Job Scheduler commands 554

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 11

Contents |12

job 554

schedule 556

show job 559

show capacities (job, schedule) 562

show running-config (job, schedule) 562

show schedule 564

Key chain commands 567

accept-lifetime 567

key 568

keychain 569

key-string 570

name 571

recv-id 572

send-lifetime 573

send-id 574

show capacities keychain 575

show keychain 576

show running-config keychain 577

L1-100Mbps downshift commands 579

downshift enable 579

show interface 580

show interface downshift-enable 584

show running-config interface 585

LACP and LAG commands 587

description 587

interface lag 588

lacp fallback-static 589

lacp mode 590

lacp port-id 591

lacp port-priority 591

lacp rate 592

lacp system-priority 593

lag 594

show interface 595

show lacp aggregates 597

show lacp configuration 598

show lacp interfaces 598

show lag 602

show running-config interface lag 603

shutdown 604

vlan trunk native 605

LLDP commands 607

clear lldp neighbors 607

clear lldp statistics 607

lldp 608

lldp dot3 609

lldp dot3 eee 610

lldp dot3 mfs 610

lldp holdtime-multiplier 611

lldp management-address vlan 612

lldp management-ipv4-address 613

lldp management-ipv6-address 614

lldp med 615

lldp med location 616

lldp receive 618

lldp reinit 619

lldp select-tlv 620

lldp timer 621

lldp transmit 623

lldp txdelay 623

lldp trap enable 624

show lldp configuration 626

show lldp local-device 627

show lldp neighbor-info 629

show lldp neighbor-info detail 631

show lldp statistics 634

show lldp tlv 635

Local AAA commands 637

aaa accounting all-mgmt 637

aaa authentication console-login-attempts 639

aaa authentication limit-login-attempts 640

aaa authentication login 641

aaa authentication minimum-password-length 642

aaa authorization commands (local) 643

show aaa accounting 645

show aaa authentication 646

show aaa authorization 647

show authentication locked-out-users 648

show ssh authentication-method 649

show user 649

ssh password-authentication 651

ssh public-key-authentication 651

user authorized-key 652

Log rotation commands 655

logging threshold 655

logrotate maxsize 656

logrotate period 657

logrotate target 658

show logrotate 660

Loop protect commands 661

loop-protect 661

loop-protect action 662

loop-protect re-enable-timer 663

loop-protect transmit-interval 664

loop-protect trap loop-detected 664

loop-protect vlan 665

show loop-protect 666

Loopback commands 670

interface loopback 670

ip address 670

ipv6 address 671

show interface loopback 672

MAC address table commands 674

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 13

Contents |14

clear mac-address 674

clear mac address mac move 676

clear mac-address-table 677

mac-address-table age-time 677

show mac-address-table 678

show mac-address-table address 679

show mac-address-table count 680

show mac-address-table dynamic 681

show mac-address-table interface 682

show mac-address-table lockout 683

show mac address table mac move 684

show mac-address-table mac-move 685

show mac-address-table port 687

show mac-address-table static 687

show mac-address-table vlan 688

show mac address table mac move 689

static-mac 690

Mirroring commands 692

clear mirror 692

comment 692

destination interface 694

diagnostic 695

disable 696

enable 696

mirror session 697

show mirror 698

source interface 700

MLD snooping global configuration commands 703

ipv6 mld snooping 703

MLD snooping VLAN configuration commands 704

ipv6 mld snooping 704

ipv6 mld snooping fastlearn 705

ipv6 mld snooping fastleave vlan 705

ipv6 mld snooping forced fastleave vlan 706

ipv6 mld snooping apply access-list 707

ipv6 mld snooping auto vlan 709

ipv6 mld snooping blocked vlan 709

ipv6 mld snooping forward vlan 710

ipv6 mld snooping preprogram-starg-flow 711

ipv6 mld snooping static-group 713

ipv6 mld snooping version 713

MLD snooping show commands 715

show ipv6 mld snooping 715

MLD configuration commands for interface VLAN 719

ipv6 mld 719

ipv6 mld apply access-list 719

no ipv6 mld 721

ipv6 mld querier 721

ipv6 mld querier interval 722

ipv6 mld querier-wait-time 723

ipv6 mld last-member-query-interval 723

ipv6 mld querier query-max-response-time 724

ipv6 mld robustness 725

ipv6 mld static-group 726

ipv6 mld version 726

ipv6 mld version strict 727

MLD show commands for interface VLAN 729

show ipv6 mld 729

MLD configuration commands for interface 733

ipv6 mld 733

ipv6 mld apply access-list 733

no ipv6 mld 735

ipv6 mld querier 735

ipv6 mld querier interval 736

ipv6 mld last-member-query-interval 737

ipv6 mld querier query-max-response-time 737

ipv6 mld robustness 738

ipv6 mld static-group 739

ipv6 mld version 740

ipv6 mld version strict 740

MSTP commands 742

clear spanning-tree statistics 742

show spanning-tree 742

show spanning-tree detail 744

show spanning-tree inconsistent-ports 745

show spanning-tree mst 746

show spanning-tree mst-config 749

show spanning-tree mst detail 749

show spanning-tree mst <INSTANCE-ID> 753

show spanning-tree mst <INSTANCE-ID> detail 754

show spanning-tree mst interface 755

show spanning-tree summary port 756

show spanning-tree summary root 757

spanning-tree 758

spanning-tree bpdu-filter 759

spanning-tree bpdu-guard 760

spanning-tree bpdu-guard timeout 761

spanning-tree config-name 762

spanning-tree config-revision 763

spanning-tree cost 764

spanning-tree forward-delay 765

spanning-tree hello-time 766

spanning-tree instance cost 767

spanning-tree instance port-priority 768

spanning-tree instance priority 769

spanning-tree instance vlan 770

spanning-tree link-type 771

spanning-tree loop-guard 771

spanning-tree max-age 772

spanning-tree max-hops 773

spanning-tree mode 774

spanning-tree port-priority 776

spanning-tree port-type 777

spanning-tree priority 778

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 15

Contents |16

spanning-tree root-guard 779

spanning-tree rpvst-filter 780

spanning-tree rpvst-guard 781

spanning-tree tcn-guard 782

spanning-tree transmit-hold-count 783

spanning-tree trap 783

MVRP commands 786

clear mvrp statistics 786

mvrp 786

mvrp registration 787

mvrp timer 788

show mvrp config 789

show mvrp state 790

show mvrp statistics 791

NTP commands 793

ntp authentication 793

ntp authentication-key 793

ntp disable 795

ntp enable 795

ntp server 796

ntp trusted-key 798

ntp vrf 799

show ntp associations 800

show ntp authentication-keys 801

show ntp servers 802

show ntp statistics 802

show ntp status 803

Ping commands 805

ping 805

ping6 810

PKI commands 814

crypto pki application 814

crypto pki certificate 815

crypto pki ta-profile 816

enroll self-signed 817

enroll terminal 818

import (CA-signed leaf certificate) 819

import (self-signed leaf certificate) 821

key-type 823

ocsp disable-nonce 824

ocsp enforcement-level 825

ocsp url 826

ocsp vrf 827

revocation-check ocsp 828

show crypto pki application 829

show crypto pki certificate 830

show crypto pki ta-profile 832

ta-certificate 834

subject 835

PKI EST commands 837

arbitrary-label 837

arbitrary-label-enrollment 838

arbitrary-label-reenrollment 839

crypto pki est-profile 840

enroll est-profile 841

reenrollment-lead-time 842

retry-count 843

retry-interval 844

show crypto pki est-profile 845

url 846

username 847

vrf 849

PoE commands 851

lldp dot3 poe 851

lldp med poe 852

power-over-ethernet 852

power-over-ethernet allocate-by 853

power-over-ethernet assigned-class 855

power-over-ethernet pre-std-detect 856

power-over-ethernet priority 856

power-over-ethernet threshold 857

power-over-ethernet trap 858

show lldp local 859

show lldp neighbor 860

show power-over-ethernet 861

Port access 802.1X authentication commands 864

aaa authentication port-access dot1x authenticator 864

aaa authentication port-access dot1x authenticator auth-method 865

aaa authentication port-access dot1x authenticator cached-reauth 866

aaa authentication port-access dot1x authenticator cached-reauth-period 866

aaa authentication port-access dot1x authenticator discovery-period 867

aaa authentication port-access dot1x authenticator eap-tls-fragment 868

aaa authentication port-access dot1x authenticator eapol-timeout 869

aaa authentication port-access dot1x authenticator initial-auth-response-timeout 870

aaa authentication port-access dot1x authenticator max-eapol-requests 871

aaa authentication port-access dot1x authenticator max-retries 872

aaa authentication port-access dot1x authenticator quiet-period 873

aaa authentication port-access dot1x authenticator radius server-group 874

aaa authentication port-access dot1x authenticator reauth 875

aaa authentication port-access dot1x authenticator reauth-period 876

clear dot1x authenticator statistics interface 877

show aaa authentication port-access dot1x authenticator interface client-status 877

show aaa authentication port-access dot1x authenticator interface port-statistics 879

Port access 802.1X supplicant commands 882

aaa authentication port-access dot1x supplicant(global) 882

aaa authentication port-access dot1x supplicant(port) 882

associate policy 883

canned-eap-success 885

clear dot1x supplicant statistics 885

discovery-timeout 887

eap-identity 888

eapol-force-multicast 890

eapol-method 891

eapol-protocol-version 892

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 17

Contents |18

eapol-timeout 894

enable 895

enable 896

fail-mode 896

held-period 897

max-retries 899

policy (supplicant) 900

port-access dot1x supplicant restart 901

show aaa authentication port-access dot1x supplicant policy 902

show aaa authentication port-access dot1x supplicant statistics 904

show aaa authentication port-access dot1x supplicant status 906

start-mode 909

Port access cached-critical role commands 911

aaa authentication port-access cached-critical-role (global) 911

aaa authentication port-access cached-critical-role (per interface) 913

port-access clear cached-client 914

show port-access cached-clients 915

show port-access cached-critical-role info 916

Port access general commands 918

aaa authentication port-access allow-lldp-auth 918

aaa authentication port-access auth-mode 920

aaa authentication port-access auth-precedence 921

aaa authentication port-access auth-priority 922

aaa authentication port-access auth-role 924

aaa authentication port-access client-auto-log-off final-authentication-failure 925

aaa authentication port-access client-limit 926

aaa authentication port-access client-limit multi-domain 927

aaa authentication port-access radius-override 927

port-access allow-flood-traffic 929

port-access client-move 930

port-access event-log client 931

port-access fallback-role 932

port-access log-off client 933

port-access onboarding-method precedence 934

port-access onboarding-method concurrent 935

port-access reauthenticate interface 936

show aaa authentication port-access interface client-status 937

show port-access clients 939

show port-access clients detail 942

show port-access clients onboarding-method 945

Port access MAC authentication commands 947

aaa authentication port-access mac-auth 947

aaa authentication port-access mac-auth addr-format 948

aaa authentication port-access mac-auth auth-method 948

aaa authentication port-access mac-auth cached-reauth 949

aaa authentication port-access mac-auth cached-reauth-period 950

aaa authentication port-access mac-auth password 951

aaa authentication port-access mac-auth quiet-period 952

aaa authentication port-access mac-auth radius server-group 953

aaa authentication port-access mac-auth reauth 954

aaa authentication port-access mac-auth reauth-period 955

clear mac-auth statistics 956

show aaa authentication port-access mac-auth interface client-status 956

show aaa authentication port-access mac-auth interface port-statistics 958

Port access policy commands 960

port-access policy 960

port-access policy copy 964

port-access policy resequence 965

port-access policy reset 965

clear port-access policy hitcounts 967

show port-access policy 969

show port-access policy hitcounts 971

Port access role commands 974

associate policy 974

auth-mode 975

cached-reauth-period 976

client-inactivity timeout 977

description 978

device-traffic-class 978

mtu 979

poe-allocate-by 980

poe-priority 981

port-access role 982

reauth-period 983

session timeout 983

show aaa authentication port-access interface client-status 984

show port-access role 985

stp-admin-edge-port 987

trust-mode 988

vlan 989

Port access security violation commands 992

port-access security violation action 992

port-access security violation action shutdown auto-recovery 993

port-access security violation action shutdown recovery-timer 994

show interface 995

show port-access aaa violation interface 995

show port-access port-security violation client-limit-exceeded interface 997

Port access VLAN group commands 999

associate-vlan 999

port-access vlan-group 1000

show running-config port-access vlan-group 1001

Port filtering commands 1002

portfilter 1002

show portfilter 1003

Port security commands 1005

port-access port-security 1005

port-access port-security client-limit 1006

port-access port-security mac-address 1006

show port-access port-security interface client-status 1007

show port-access port-security interface port-statistics 1009

show port-access security violation sticky-mac-client-move interface 1010

sticky-learn enable 1011

AOS-CX 10.13 Command-Line Interface Guide | (6000, 6100 Switch Series) 19

Contents |20

Private VLAN commands 1012

diag-dump private-vlan basic 1012

private-vlan 1012

private-vlan port-type 1014

show capacities private-vlan 1015

show capacities-status private-vlan 1016

show private-vlan 1016

show private-vlan association 1018

show private-vlan inconsistency 1019

show private-vlan port-type 1021

show running-configuration private-vlan 1021

show tech private-vlan 1022

QoS commands 1025

apply qos 1025

map queue 1027

min-bandwidth 1028

name queue 1030

qos cos 1030

qos dscp 1031

qos dscp-map 1033

qos queue-profile 1034

qos schedule-profile 1035

qos trust 1037

rate-limit 1039

show interface queues 1042

show interface qos 1043

show qos dscp-map 1044

show qos queue-profile 1045

show qos schedule-profile 1046

show qos trust 1048

strict queue 1049

Configurable RADIUS attribute commands 1051

aaa radius-attribute group 1051

nas-id request-type 1052

nas-id value 1053

nas-ip-addr request-type authentication 1054

nas-ip-addr service-type user-management 1055

tunnel-private-group-id request-type 1056

tunnel-private-group-id value 1057

RADIUS dynamic authorization commands 1059

radius dyn-authorization enable 1059

radius dyn-authorization client 1059

radius dyn-authorization client tls (RadSec) 1061

radius dyn-authorization port 1063

show radius dyn-authorization 1064

show radius dyn-authorization client 1066

show radius dyn-authorization client tls (RadSec) 1067

Remote AAA (TACACS+, RADIUS) commands 1070

aaa accounting allow-fail-through 1070

aaa accounting all-mgmt 1070

aaa authentication allow-fail-through 1073

Page is loading ...

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450

Aruba 6100 Reference guide

Brand: Aruba

Model: 6100

Type: Reference guide

This manual is also suitable for

Download PDF

report

Aruba 6100 Reference guide

This manual is also suitable for

Aruba 6100 Reference guide

Related papers