Aruba 4100i User guide

Brand: Aruba

Model: 4100i

Type: User guide

AOS-CX 10.12 Command-Line

Interface Guide

4100i Switch Series

Published: September 2023

Edition: 2

This product includes code licensed under certain open source licenses which require source

compliance. The corresponding source for these components is available upon request. This offer is

valid to anyone in receipt of this information and shall expire three years following the date of the final

distribution of this product version by Hewlett Packard Enterprise Company. To obtain such source

code, please check if the code is available in the HPE Software Center at

https://myenterpriselicense.hpe.com/cwp-ui/software but, if not, send a written request for specific

software version and product for which you want the open source code. Along with the request, please

send a check or money order in the amount of US $10.00 to:

Hewlett Packard Enterprise Company

Attn: General Counsel

WW Corporate Headquarters

1701 E Mossy Oaks Rd Spring, TX 77389

United States of America.

Notices

The information contained herein is subject to change without notice. The only warranties for Hewlett

Packard Enterprise products and services are set forth in the express warranty statements

accompanying such products and services. Nothing herein should be construed as constituting an

additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or

omissions contained herein.

Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession,

use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer

Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government

under vendor's standard commercial license.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard

Enterprise has no control over and is not responsible for information outside the Hewlett Packard

Enterprise website.

For more information, see the KM Process Guide. ?>

Acknowledgments

Bluetooth is a trademark owned by its proprietor and used by Hewlett Packard Enterprise under

license.

Contents

Contents 3

About this document 28

Applicable products 28

What's new in this release 28

Latest version available online 30

Command syntax notation conventions 31

About the examples 31

Identifying switch ports and interfaces 32

Introduction to the AOS-CX CLI 33

CLI access 33

Getting CLI help 33

Authority levels 34

Command contexts 35

Operator context (>) 35

Navigating to the operator context (>) 35

Auditor context 35

Manager context (#) 36

Navigating to the manager context (#) 36

Global configuration context (config) 36

Navigating to the config context 37

Other configuration command contexts 37

Support for range contexts 38

Rules for range contexts 40

Command history 40

Command completion 41

Pipe (|) support in show commands 41

Command syntax notation conventions 42

Service OS CLI commands 43

boot 43

cat 44

cd path 44

config-clear 45

cp 46

du 47

erase zeroize 48

exit 49

format 50

identify 51

ls 52

md5sum 53

mkdir 54

mount 55

mv 56

password (svos) 57

pwd 57

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 3

Contents |4

reboot 58

rm 59

rmdir 59

secure-mode 60

sh 62

umount 62

update 63

version 64

ACL commands 66

ACL application 66

access-list copy 66

access-list ip 69

access-list ipv6 78

access-list log-timer 85

access-list mac 87

access-list resequence 93

access-list reset 95

apply access-list control-plane 98

apply access-list (to interface or LAG) 99

apply access-list (to VLAN) 101

clear access-list hitcounts 102

clear access-list hitcounts control-plane 103

show access-list 104

show access-list control-plane 108

show access-list hitcounts 110

show access-list hitcounts control-plane 112

show capacities 113

show capacities-status 116

ACL and Policy hardware resource commands 118

show resources 118

Alarm commands 120

alarm 120

alarm input 121

alarm snooze 122

show alarm 123

show alarm input 124

show alarm timer 125

ARP commands 127

arp inspection 127

arp inspection trust 127

arp ipv4 mac 128

arp process-grat-arp 129

clear arp 130

debug arp-security 131

ip local-proxy-arp 133

ip proxy-arp 134

ipv6 neighbor mac 135

show arp 136

show arp inspection interface 136

show arp inspection statistics 138

show arp inspection vlan 138

show arp state 139

show arp summary 141

show arp timeout 142

show arp vrf 143

show ipv6 neighbors 144

show ipv6 neighbors state 145

show tech arp-security 146

Aruba Central commands 149

aruba-central 149

aruba-central support-mode 149

configuration-lockout central managed 150

disable 151

enable 152

location-override 153

location-override-alternative 154

show aruba-central 155

show running-config current-context 158

Banner commands 160

banner 160

show banner 161

Boot commands 163

boot set-default 163

boot system 163

show boot-history 165

Cable diagnostic commands 168

diag cable-diagnostic 168

Captive portal (RADIUS) commands 171

aaa authentication port-access captive-portal-profile 171

show port-access captive-portal-profile 172

url 173

url-hash-key 174

CDP commands 177

cdp 177

clear cdp counters 178

clear cdp neighbor-info 178

show cdp 179

show cdp neighbor-info 180

show cdp traffic 181

Checkpoint commands 182

checkpoint auto 182

checkpoint auto confirm 183

checkpoint diff 184

checkpoint post-configuration 185

checkpoint post-configuration timeout 186

checkpoint rename 187

checkpoint rollback 188

copy checkpoint <CHECKPOINT-NAME> <REMOTE-URL> 188

copy checkpoint <CHECKPOINT-NAME> {running-config | startup-config} 190

copy checkpoint <CHECKPOINT-NAME> <STORAGE-URL> 191

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 5

Contents |6

copy <REMOTE-URL> checkpoint <CHECKPOINT-NAME> 191

copy <REMOTE-URL> {running-config | startup-config} 192

copy running-config {startup-config | checkpoint <CHECKPOINT-NAME>} 194

copy {running-config | startup-config} <REMOTE-URL> 195

copy {running-config | startup-config} <STORAGE-URL> 197

copy startup-config running-config 198

copy <STORAGE-URL> running-config 198

erase 200

show checkpoint <CHECKPOINT-NAME> 201

show checkpoint <CHECKPOINT-NAME> hash 203

show checkpoint post-configuration 204

show checkpoint 205

show checkpoint date 206

show running-config hash 207

show startup-config hash 208

write memory 209

Classifier policy commands 210

Classifier policy application 210

apply policy (config-if, config-lag-if, config-vlan) 210

apply policy 213

class copy 214

class ip 215

class ipv6 223

class mac 228

class resequence 230

class reset 232

clear policy hitcounts 233

policy 234

policy copy 238

policy resequence 239

policy reset 240

show class 241

show policy 242

Client Insight Commands 247

client-insight enable 247

client-insight on-boarding event logs 247

diag-dump client-insight basic 248

show capacities client-insight-client-limit 250

show capacities-status client-insight-client-limit 251

show events -c client-insight 252

show tech client-insight 254

CLI session commands 257

alias 257

auto-confirm 258

configure terminal 259

disable 260

do 260

enable (manager context) 261

end 262

exit 262

list 263

page 263

Pipe (|) command 264

repeat 265

session-timeout 266

show session-timeout 267

show alias 267

show history 268

CLI user session management commands 270

cli-session 270

Clock commands 273

clock date 273

clock datetime 273

clock time 274

clock timezone 275

show clock 275

CoPP commands 277

Classes of traffic 277

apply copp-policy 277

class 279

clear copp-policy statistics 280

copp-policy 280

default-class 282

reset copp-policy 282

show copp-policy 284

show copp-policy factory-default 285

show copp-policy statistics 287

show tech copp 288

Debug logging commands 290

clear debug buffer 290

debug {all | <MODULE-NAME>} 291

debug db 292

debug destination 294

show debug 296

show debug buffer 297

show debug destination 298

Device fingerprinting commands 299

cdp 299

client device-fingerprint apply-profile 300

client device-fingerprint client-limit 301

client device-fingerprint profile 301

dhcp 302

http user-agent 303

lldp (device fingerprinting) 304

show client device-fingerprint 305

show client device-fingerprint active 307

show client device-fingerprint profile 308

Device profile commands 310

aaa authentication port-access allow-cdp-auth 310

aaa authentication port-access allow-cdp-bpdu 310

aaa authentication port-access allow-cdp-proxy-logoff 312

aaa authentication port-access allow-lldp-bpdu 313

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 7

Contents |8

associate cdp-group 314

associate lldp-group 315

associate mac-group 316

associate role 317

disable 318

enable 319

ignore (for CDP groups) 319

ignore (for LLDP groups) 321

ignore (for MAC groups) 322

mac-group 327

match (for CDP groups) 328

match (for LLDP groups) 329

match (for MAC groups) 331

port-access cdp-group 335

port-access device-profile 336

port-access device-profile mode block-until-profile-applied 337

port-access lldp-group 338

show port-access device-profile 339

DHCP client commands 342

ip dhcp 342

show ip dhcp 343

DHCPv4 relay commands 344

dhcp-relay 344

dhcp-relay hop-count-increment 344

dhcp-relay option 82 345

diag-dump dhcp-relay basic 346

ip bootp-gateway 348

ip helper-address 349

show dhcp-relay 349

show dhcp-relay bootp-gateway 350

show ip helper-address 351

DHCP relay (IPv6) commands 353

dhcpv6-relay 353

dhcpv6-relay option 79 354

ipv6 helper-address 354

show dhcpv6-relay 356

show ipv6 helper-address 356

DHCPv4 snooping commands 358

clear dhcpv4-snooping binding 358

clear dhcpv4-snooping statistics 359

dhcpv4-snooping 359

dhcpv4-snooping (in config-vlan context) 360

dhcpv4-snooping allow-overwrite-binding 361

dhcpv4-snooping authorized-server 362

dhcpv4-snooping event-log client 363

dhcpv4-snooping external-storage 364

dhcpv4-snooping flash-storage 365

dhcpv4-snooping max-bindings 367

dhcpv4-snooping option 82 368

dhcpv4-snooping static-attributes 369

dhcpv4-snooping trust 370

dhcpv4-snooping verify mac 371

show dhcpv4-snooping 372

show dhcpv4-snooping binding 373

show dhcpv4-snooping statistics 375

DHCPv6 snooping commands 376

clear dhcpv6-snooping binding 376

clear dhcpv6-snooping statistics 377

dhcpv6-snooping 377

dhcpv6-snooping (in config-vlan context) 378

dhcpv6-snooping authorized-server 379

dhcpv6-snooping event-log client 380

dhcpv6-snooping external-storage 381

dhcpv6-snooping flash-storage 383

dhcpv6-snooping max-bindings 384

dhcpv6-snooping trust 385

show dhcpv6-snooping 386

show dhcpv6-snooping binding 387

show dhcpv6-snooping statistics 388

DHCP options commands 390

http-proxy 390

DNS client commands 392

ip dns domain-list 392

ip dns domain-name 393

ip dns host 394

ip dns server address 395

show ip dns 396

ERPS Commands 397

clear erps ring <RINGID> instance <ID> 397

clear erps statistics 397

erps ring 398

erps ring <RINGID> <port0|port1> interface 399

erps ring <RINGID> description 400

erps ring <RINGID> guard-interval 401

erps ring <RINGID> hold-off-interval 402

erps ring <RINGID> instance 403

erps ring <RINGID> instance <ID> control-vlan 404

erps ring <RINGID> instance <ID> description 405

erps ring <RINGID> instance <ID> enable 406

erps ring <RINGID> instance <ID> protected-vlans 407

erps ring <RINGID> instance <ID> protection-switch {{manual|force} <PORT0>|<PORT1>} 408

erps ring <RINGID> instance <ID> revertive 410

erps ring <RINGID> instance <ID> role 411

erps ring <RINGID> instance <ID> rpl 412

erps ring <RINGID> meg-level 413

erps ring <RINGID> parent-ring 414

erps ring <RINGID> sub-ring 415

erps ring <RINGID> tcn-propogation 416

erps ring <RINGID> transmission-interval 417

erps ring <RINGID> wtr-interval 418

show erps statistics 419

show erps status 420

show erps summary 423

redistribute local-mac 424

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 9

Contents |10

Fault monitor commands 425

(Fault enabling/disabling) 425

action 426

apply fault-monitor profile 429

fault-monitor profile 430

show fault-monitor profile 431

show interface fault-monitor profile 433

show interface fault-monitor status 434

show running-config 434

threshold 436

Firmware management commands 439

copy {primary | secondary} <REMOTE-URL> 439

copy {primary | secondary} <FIRMWARE-FILENAME> 440

copy primary secondary 441

copy <REMOTE-URL> 441

copy secondary primary 443

copy <STORAGE-URL> 444

copy hot-patch 445

hot-patch 447

show hot-patch 448

HTTPS server commands 450

https-server authentication certificate 450

https-server authentication password 451

https-server max-user-sessions 451

https-server rest access-mode 452

https-server rest firmware-site-distribution 453

https-server session close all 454

https-server session-timeout 455

https-server vrf 456

show https-server 457

show https-server authentication 458

ICMP commands 460

ip icmp redirect 460

ip icmp throttle 460

ip icmp unreachable 461

IGMP commands 463

ip igmp 463

ip igmp apply access-list 464

ip igmp last-member-query-interval 465

ip igmp querier 466

ip igmp querier interval 467

ip igmp querier query-max-response-time 468

ip igmp robustness 469

ip igmp router-alert-check 470

ip igmp static-group 471

ip igmp version 472

ip igmp version strict 472

no ip igmp 473

show ip igmp 474

show ip igmp counters 475

show ip igmp group 477

show ip igmp groups 479

show ip igmp interface 481

show ip igmp interface counters 482

show ip igmp interface group 483

show ip igmp interface groups 485

show ip igmp interface statistics 486

show ip igmp static-groups 487

show ip igmp statistics 488

IGMP snooping commands 490

ip igmp snooping (config mode) 490

ip igmp snooping (interface mode) 491

ip igmp snooping (vlan mode) 493

show ip igmp snooping 495

In-System Programming commands 499

clear update-log 499

show needed-updates 499

Interface commands 501

allow-unsupported-transceiver 501

default interface 502

description 503

energy-efficient-ethernet 504

flow-control 505

interface 506

interface vlan 507

ip address 508

ip mtu 509

ipv6 address 510

mtu 511

persona 512

rate-interval 514

show allow-unsupported-transceiver 515

show interface 516

show interface dom 521

show interface energy-efficient ethernet 522

show interface flow-control 523

show interface statistics 527

show interface transceiver 530

show interface utilization 533

show ip interface 534

show ip source-interface 535

show ipv6 interface 536

show ipv6 source-interface 538

shutdown 539

speed 539

IP Client Tracker commands 543

client track ip 543

client track ip { enable | disable | auto } 544

client track ip client-limit 545

client track ip update-interval 545

client track ip update-method probe 546

show capacities 547

show client ip { count | port | vlan } 548

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 11

Contents |12

IPv4 source lockdown commands 549

ipv4 source-binding 549

ipv4 source-lockdown 550

ipv4 source-lockdown hardware retry 551

show ipv4 source-binding 551

show ipv4 source-lockdown 552

IPv6 RA commands 556

ipv6 address <global-unicast-address> 556

ipv6 address autoconfig 557

ipv6 address link-local 558

ipv6 nd cache-limit 559

ipv6 nd dad attempts 559

ipv6 nd hop-limit 560

ipv6 nd mtu 561

ipv6 nd ns-interval 561

ipv6 nd prefix 562

ipv6 nd ra dns search-list 564

ipv6 nd ra dns server 565

ipv6 nd ra lifetime 566

ipv6 nd ra managed-config-flag 567

ipv6 nd ra max-interval 568

ipv6 nd ra min-interval 569

ipv6 nd ra other-config-flag 569

ipv6 nd ra reachable-time 570

ipv6 nd ra retrans-timer 571

ipv6 nd route 572

ipv6 nd router-preference 573

ipv6 nd suppress-ra 574

show ipv6 nd global traffic 574

show ipv6 nd interface 575

show ipv6 nd interface prefix 578

show ipv6 nd interface route 579

show ipv6 nd ra dns search-list 580

show ipv6 nd ra dns server 581

IPv6 source lockdown commands 582

ipv6 source-binding 582

ipv6 source-lockdown 583

ipv6 source-lockdown hardware retry 584

show ipv6 source-binding 584

show ipv6 source-lockdown 585

IRDP commands 589

diag-dump irdp basic 589

ip irdp 590

ip irdp holdtime 591

ip irdp maxadvertinterval 591

ip irdp minadvertinterval 592

ip irdp preference 593

show ip irdp 594

Job Scheduler commands 596

job 596

schedule 598

show job 601

show capacities (job, schedule) 604

show running-config (job, schedule) 604

show schedule 606

Key chain commands 609

accept-lifetime 609

key 610

keychain 611

key-string 612

name 613

recv-id 614

send-lifetime 615

send-id 616

show capacities keychain 617

show keychain 618

show running-config keychain 619

L1-100Mbps downshift commands 621

downshift enable 621

show interface 622

show interface downshift-enable 626

show running-config interface 627

LACP and LAG commands 629

description 629

interface lag 630

lacp fallback-static 631

lacp mode 632

lacp port-id 633

lacp port-priority 633

lacp rate 634

lacp system-priority 635

lag 636

show interface 637

show lacp aggregates 639

show lacp configuration 640

show lacp interfaces 640

show lag 644

show running-config interface lag 645

shutdown 646

vlan trunk native 647

LLDP commands 649

clear lldp neighbors 649

clear lldp statistics 649

lldp 650

lldp dot3 651

lldp dot3 eee 652

lldp dot3 mfs 652

lldp holdtime-multiplier 653

lldp management-address vlan 654

lldp management-ipv4-address 655

lldp management-ipv6-address 656

lldp med 657

lldp med-location 658

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 13

Contents |14

lldp receive 660

lldp reinit 661

lldp select-tlv 661

lldp timer 663

lldp transmit 664

lldp txdelay 665

lldp trap enable 666

show lldp configuration 668

show lldp local-device 669

show lldp neighbor-info 671

show lldp neighbor-info detail 673

show lldp statistics 676

show lldp tlv 677

Local AAA commands 679

aaa accounting all-mgmt 679

aaa authentication console-login-attempts 681

aaa authentication limit-login-attempts 682

aaa authentication login 683

aaa authentication minimum-password-length 684

aaa authorization commands (local) 685

show aaa accounting 687

show aaa authentication 688

show aaa authorization 689

show authentication locked-out-users 690

show ssh authentication-method 691

show user 691

ssh password-authentication 693

ssh public-key-authentication 693

user authorized-key 694

Log rotation commands 697

logging threshold 697

logrotate maxsize 699

logrotate period 699

logrotate target 700

show logrotate 702

Loop protect commands 703

loop-protect 703

loop-protect action 704

loop-protect re-enable-timer 705

loop-protect transmit-interval 706

loop-protect trap loop-detected 706

loop-protect vlan 707

show loop-protect 708

Loopback commands 711

interface loopback 711

ip address 711

ipv6 address 712

show interface loopback 713

MAC address table commands 715

clear mac-address 715

mac-address-table age-time 716

show mac-address-table 717

show mac-address-table address 718

show mac-address-table count 719

show mac-address-table dynamic 720

show mac-address-table interface 721

show mac-address-table lockout 722

show mac-address-table port 723

show mac-address-table static 723

show mac-address-table vlan 724

static-mac 725

Mirroring commands 727

clear mirror 727

comment 727

destination interface 729

diagnostic 730

disable 731

enable 731

mirror session 732

show mirror 733

source interface 735

MLD snooping global configuration commands 738

ipv6 mld snooping 738

MLD snooping VLAN configuration commands 739

ipv6 mld snooping 739

ipv6 mld snooping fastlearn 740

ipv6 mld snooping fastleave vlan 740

ipv6 mld snooping forced fastleave vlan 741

ipv6 mld snooping apply access-list 742

ipv6 mld snooping auto vlan 744

ipv6 mld snooping blocked vlan 744

ipv6 mld snooping forward vlan 745

ipv6 mld snooping static-group 746

ipv6 mld snooping version 747

MLD snooping show commands 749

show ipv6 mld snooping 749

MLD configuration commands for interface VLAN 753

ipv6 mld 753

ipv6 mld apply access-list 753

no ipv6 mld 755

ipv6 mld querier 755

ipv6 mld querier interval 756

ipv6 mld last-member-query-interval 757

ipv6 mld querier query-max-response-time 757

ipv6 mld robustness 758

ipv6 mld static-group 759

ipv6 mld version 760

ipv6 mld version strict 760

MLD show commands for interface VLAN 762

show ipv6 mld 762

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 15

Contents |16

MLD configuration commands for interface 766

ipv6 mld 766

ipv6 mld apply access-list 766

no ipv6 mld 768

ipv6 mld querier 768

ipv6 mld querier interval 769

ipv6 mld last-member-query-interval 770

ipv6 mld querier query-max-response-time 770

ipv6 mld robustness 771

ipv6 mld static-group 772

ipv6 mld version 773

ipv6 mld version strict 773

MSTP commands 775

clear spanning-tree statistics 775

show spanning-tree 775

show spanning-tree detail 777

show spanning-tree inconsistent-ports 778

show spanning-tree mst 779

show spanning-tree mst-config 782

show spanning-tree mst detail 782

show spanning-tree mst <INSTANCE-ID> 786

show spanning-tree mst <INSTANCE-ID> detail 787

show spanning-tree mst interface 788

show spanning-tree summary port 789

show spanning-tree summary root 790

spanning-tree 791

spanning-tree bpdu-filter 792

spanning-tree bpdu-guard 793

spanning-tree bpdu-guard timeout 794

spanning-tree config-name 795

spanning-tree config-revision 796

spanning-tree cost 797

spanning-tree forward-delay 798

spanning-tree hello-time 799

spanning-tree instance cost 800

spanning-tree instance port-priority 801

spanning-tree instance priority 802

spanning-tree instance vlan 803

spanning-tree link-type 804

spanning-tree loop-guard 804

spanning-tree max-age 805

spanning-tree max-hops 806

spanning-tree mode 807

spanning-tree port-priority 809

spanning-tree port-type 810

spanning-tree priority 811

spanning-tree root-guard 812

spanning-tree rpvst-filter 813

spanning-tree rpvst-guard 814

spanning-tree tcn-guard 815

spanning-tree transmit-hold-count 816

spanning-tree trap 816

MVRP commands 819

clear mvrp statistics 819

mvrp 819

mvrp registration 820

mvrp timer 821

show mvrp config 822

show mvrp state 823

show mvrp statistics 824

NTP commands 826

ntp authentication 826

ntp authentication-key 826

ntp disable 828

ntp enable 828

ntp server 829

ntp trusted-key 831

ntp vrf 832

show ntp associations 833

show ntp authentication-keys 834

show ntp servers 835

show ntp statistics 836

show ntp status 837

Ping commands 839

ping 839

ping6 844

PKI commands 848

crypto pki application 848

crypto pki certificate 849

crypto pki ta-profile 850

enroll self-signed 851

enroll terminal 852

import (CA-signed leaf certificate) 853

import (self-signed leaf certificate) 855

key-type 857

ocsp disable-nonce 858

ocsp enforcement-level 859

ocsp url 860

ocsp vrf 861

revocation-check ocsp 862

show crypto pki application 863

show crypto pki certificate 864

show crypto pki ta-profile 866

ta-certificate 868

subject 869

PKI EST commands 871

arbitrary-label 871

arbitrary-label-enrollment 872

arbitrary-label-reenrollment 873

crypto pki est-profile 874

enroll est-profile 875

reenrollment-lead-time 876

retry-count 877

retry-interval 878

show crypto pki est-profile 879

url 880

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 17

Contents |18

username 881

vrf 883

PoE commands 885

lldp dot3 poe 885

lldp med poe 886

power-over-ethernet 886

power-over-ethernet allocate-by 887

power-over-ethernet always-on 889

power-over-ethernet assigned-class 890

power-over-ethernet pre-std-detect 891

power-over-ethernet priority 891

power-over-ethernet quick-poe 892

power-over-ethernet threshold 893

power-over-ethernet trap 894

show lldp local 895

show lldp neighbor 896

show power-over-ethernet 897

Port access 802.1X authentication commands 900

aaa authentication port-access dot1x authenticator 900

aaa authentication port-access dot1x authenticator auth-method 901

aaa authentication port-access dot1x authenticator cached-reauth 902

aaa authentication port-access dot1x authenticator cached-reauth-period 902

aaa authentication port-access dot1x authenticator discovery-period 903

aaa authentication port-access dot1x authenticator eap-tls-fragment 904

aaa authentication port-access dot1x authenticator eapol-timeout 905

aaa authentication port-access dot1x authenticator initial-auth-response-timeout 906

aaa authentication port-access dot1x authenticator max-eapol-requests 907

aaa authentication port-access dot1x authenticator max-retries 908

aaa authentication port-access dot1x authenticator quiet-period 909

aaa authentication port-access dot1x authenticator radius server-group 910

aaa authentication port-access dot1x authenticator reauth 911

aaa authentication port-access dot1x authenticator reauth-period 912

clear dot1x authenticator statistics interface 913

show aaa authentication port-access dot1x authenticator interface client-status 913

show aaa authentication port-access dot1x authenticator interface port-statistics 915

Port access 802.1X supplicant commands 918

aaa authentication port-access dot1x supplicant(global) 918

aaa authentication port-access dot1x supplicant(port) 918

associate policy 919

canned-eap-success 921

clear dot1x supplicant statistics 921

discovery-timeout 923

eap-identity 924

eapol-force-multicast 926

eapol-method 927

eapol-protocol-version 928

eapol-timeout 930

enable 931

enable 932

fail-mode 932

held-period 933

max-retries 935

policy (supplicant) 936

port-access dot1x supplicant restart 937

show aaa authentication port-access dot1x supplicant policy 938

show aaa authentication port-access dot1x supplicant statistics 940

show aaa authentication port-access dot1x supplicant status 942

start-mode 945

Port access cached-critical role commands 947

aaa authentication port-access cached-critical-role (global) 947

aaa authentication port-access cached-critical-role (per interface) 949

port-access clear cached-client 950

show port-access cached-clients 951

show port-access cached-critical-role info 952

Port access general commands 954

aaa authentication port-access allow-lldp-auth 954

aaa authentication port-access allow-cdp-auth 954

aaa authentication port-access auth-mode 955

aaa authentication port-access auth-precedence 956

aaa authentication port-access auth-priority 957

aaa authentication port-access auth-role 959

aaa authentication port-access client-auto-log-off final-authentication-failure 960

aaa authentication port-access client-limit 960

aaa authentication port-access client-limit multi-domain 961

aaa authentication port-access radius-override 962

port-access allow-flood-traffic 963

port-access auto-vlan 964

port-access client-move 965

port-access event-log client 966

port-access fallback-role 967

port-access log-off client 968

port-access onboarding-method precedence 969

port-access onboarding-method concurrent 970

port-access reauthenticate interface 971

show aaa authentication port-access interface client-status 972

show port-access clients 974

show port-access clients detail 977

show port-access clients onboarding-method 980

Port access MAC authentication commands 982

aaa authentication port-access mac-auth 982

aaa authentication port-access mac-auth addr-format 983

aaa authentication port-access mac-auth auth-method 983

aaa authentication port-access mac-auth cached-reauth 984

aaa authentication port-access mac-auth cached-reauth-period 985

aaa authentication port-access mac-auth password 986

aaa authentication port-access mac-auth quiet-period 987

aaa authentication port-access mac-auth radius server-group 988

aaa authentication port-access mac-auth reauth 989

aaa authentication port-access mac-auth reauth-period 990

clear mac-auth statistics 991

show aaa authentication port-access mac-auth interface client-status 991

show aaa authentication port-access mac-auth interface port-statistics 993

Port access policy commands 995

port-access policy 995

port-access policy copy 999

AOS-CX 10.12 Command-Line Interface Guide | (4100i Switch Series) 19

Contents |20

port-access policy resequence 1000

port-access policy reset 1001

clear port-access policy hitcounts 1002

show port-access policy 1005

show port-access policy hitcounts 1007

Port access role commands 1009

associate policy 1009

auth-mode 1010

cached-reauth-period 1011

client-inactivity timeout 1012

description 1013

device-traffic-class 1013

mtu 1014

poe-allocate-by 1015

poe-priority 1016

port-access role 1017

reauth-period 1018

session timeout 1018

show aaa authentication port-access interface client-status 1019

show port-access role 1020

stp-admin-edge-port 1022

trust-mode 1023

vlan 1024

Port access security violation commands 1027

port-access security violation action 1027

port-access security violation action shutdown auto-recovery 1028

port-access security violation action shutdown recovery-timer 1029

show interface 1030

show port-access aaa violation interface 1030

show port-access port-security violation client-limit-exceeded interface 1031

Port access VLAN group commands 1034

associate-vlan 1034

port-access vlan-group 1035

show running-config port-access vlan-group 1036

Port filtering commands 1037

portfilter 1037

show portfilter 1038

Port security commands 1040

port-access port-security 1040

port-access port-security client-limit 1041

port-access port-security mac-address 1041

show port-access port-security interface client-status 1042

show port-access port-security interface port-statistics 1044

show port-access security violation sticky-mac-client-move interface 1045

sticky-learn enable 1046

Private VLAN commands 1047

diag-dump private-vlan basic 1047

private-vlan 1047

private-vlan port-type 1049

Page is loading ...

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496

Aruba 4100i User guide

Aruba 4100i User guide

Related papers

Other documents