Aruba AOS-CX 10.12 User guide

AOS-CX 10.12 Command-Line

Interface Guide

6000, 6100 Switch Series

Published: September 2023

Edition: 2

|2

Copyright Information

This product includes code licensed under certain open source licenses which require source

compliance. The corresponding source for these components is available upon request. This offer is

valid to anyone in receipt of this information and shall expire three years following the date of the final

distribution of this product version by Hewlett Packard Enterprise Company. To obtain such source

code, please check if the code is available in the HPE Software Center at

https://myenterpriselicense.hpe.com/cwp-ui/software but, if not, send a written request for specific

software version and product for which you want the open source code. Along with the request, please

send a check or money order in the amount of US $10.00 to:

Hewlett Packard Enterprise Company

Attn: General Counsel

WW Corporate Headquarters

1701 E Mossy Oaks Rd Spring, TX 77389

United States of America.

Notices

The information contained herein is subject to change without notice. The only warranties for Hewlett

Packard Enterprise products and services are set forth in the express warranty statements

accompanying such products and services. Nothing herein should be construed as constituting an

additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or

omissions contained herein.

Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession,

use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer

Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government

under vendor's standard commercial license.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard

Enterprise has no control over and is not responsible for information outside the Hewlett Packard

Enterprise website.

For more information, see the KM Process Guide. ?>

Acknowledgments

Bluetooth is a trademark owned by its proprietor and used by Hewlett Packard Enterprise under

license.

Contents

Contents 3

About this document 27

Applicable products 27

What's new in this release 27

Latest version available online 29

Command syntax notation conventions 30

About the examples 30

Identifying switch ports and interfaces 31

Introduction to the AOS-CX CLI 32

CLI access 32

Getting CLI help 32

Authority levels 33

Command contexts 34

Operator context (>) 34

Navigating to the operator context (>) 34

Auditor context 34

Manager context (#) 35

Navigating to the manager context (#) 35

Global configuration context (config) 35

Navigating to the config context 36

Other configuration command contexts 36

Support for range contexts 37

Rules for range contexts 39

Command history 39

Command completion 40

Pipe (|) support in show commands 40

Command syntax notation conventions 41

Service OS CLI commands 42

boot 42

cat 43

cd path 43

config-clear 44

cp 45

du 46

erase zeroize 47

exit 48

format 49

identify 50

ls 51

md5sum 52

mkdir 53

mount 54

mv 55

password (svos) 56

pwd 56

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 3

Contents |4

reboot 57

rm 58

rmdir 58

secure-mode 59

sh 61

umount 61

update 62

version 63

ACL commands 65

ACL application 65

access-list copy 65

access-list ip 68

access-list ipv6 77

access-list log-timer 84

access-list mac 86

access-list resequence 92

access-list reset 94

apply access-list control-plane 97

apply access-list (to interface or LAG) 98

apply access-list (to VLAN) 100

clear access-list hitcounts 102

clear access-list hitcounts control-plane 103

show access-list 104

show access-list control-plane 107

show access-list hitcounts 109

show access-list hitcounts control-plane 112

show capacities 113

show capacities-status 116

ACL and Policy hardware resource commands 118

show resources 118

ARP commands 120

arp inspection 120

arp inspection trust 120

arp ipv4 mac 121

arp process-grat-arp 122

clear arp 123

debug arp-security 124

ip local-proxy-arp 126

ip proxy-arp 127

ipv6 neighbor mac 128

show arp 129

show arp inspection interface 129

show arp inspection statistics 131

show arp inspection vlan 131

show arp state 132

show arp summary 134

show arp timeout 135

show arp vrf 136

show ipv6 neighbors 137

show ipv6 neighbors state 138

show tech arp-security 139

location-override-alternative 141

Banner commands 143

banner 143

show banner 144

Boot commands 146

boot set-default 146

boot system 146

show boot-history 148

Cable diagnostic commands 151

diag cable-diagnostic 151

Captive portal (RADIUS) commands 154

aaa authentication port-access captive-portal-profile 154

show port-access captive-portal-profile 155

url 156

url-hash-key 157

CDP commands 160

cdp 160

clear cdp counters 161

clear cdp neighbor-info 161

show cdp 162

show cdp neighbor-info 163

show cdp traffic 164

Checkpoint commands 165

checkpoint auto 165

checkpoint auto confirm 166

checkpoint diff 167

checkpoint post-configuration 168

checkpoint post-configuration timeout 169

checkpoint rename 170

checkpoint rollback 171

copy checkpoint <CHECKPOINT-NAME> <REMOTE-URL> 171

copy checkpoint <CHECKPOINT-NAME> {running-config | startup-config} 173

copy checkpoint <CHECKPOINT-NAME> <STORAGE-URL> 174

copy <REMOTE-URL> checkpoint <CHECKPOINT-NAME> 174

copy <REMOTE-URL> {running-config | startup-config} 175

copy running-config {startup-config | checkpoint <CHECKPOINT-NAME>} 177

copy {running-config | startup-config} <REMOTE-URL> 178

copy {running-config | startup-config} <STORAGE-URL> 180

copy startup-config running-config 181

copy <STORAGE-URL> running-config 181

erase 183

show checkpoint <CHECKPOINT-NAME> 184

show checkpoint <CHECKPOINT-NAME> hash 186

show checkpoint post-configuration 187

show checkpoint 188

show checkpoint date 189

show running-config hash 190

show startup-config hash 191

write memory 192

Classifier policy commands 193

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 5

Contents |6

Classifier policy application 193

apply policy (config-if, config-lag-if, config-vlan) 193

apply policy 196

class copy 197

class ip 198

class ipv6 205

class resequence 211

class reset 212

clear policy hitcounts 213

policy 214

policy copy 219

policy resequence 219

policy reset 220

show class 221

show policy 223

Client Insight Commands 227

client-insight enable 227

client-insight on-boarding event logs 227

diag-dump client-insight basic 228

show capacities client-insight-client-limit 230

show capacities-status client-insight-client-limit 231

show events -c client-insight 232

show tech client-insight 234

CLI session commands 237

alias 237

auto-confirm 238

configure terminal 239

disable 240

do 240

enable (manager context) 241

end 242

exit 242

list 243

page 243

Pipe (|) command 244

repeat 245

session-timeout 246

show session-timeout 247

show alias 247

show history 248

CLI user session management commands 250

cli-session 250

Clock commands 253

clock date 253

clock datetime 253

clock time 254

clock timezone 255

show clock 255

CoPP commands 257

Classes of traffic 257

apply copp-policy 257

class 259

clear copp-policy statistics 260

copp-policy 260

default-class 262

reset copp-policy 262

show copp-policy 264

show copp-policy factory-default 265

show copp-policy statistics 267

show tech copp 268

Debug logging commands 270

clear debug buffer 270

debug {all | <MODULE-NAME>} 271

debug db 272

debug destination 274

show debug 276

show debug buffer 277

show debug destination 278

Device profile commands 279

aaa authentication port-access allow-cdp-auth 279

aaa authentication port-access allow-cdp-bpdu 279

aaa authentication port-access allow-cdp-proxy-logoff 281

aaa authentication port-access allow-lldp-bpdu 282

associate cdp-group 283

associate lldp-group 284

associate mac-group 285

associate role 286

disable 287

enable 288

ignore (for CDP groups) 288

ignore (for LLDP groups) 290

ignore (for MAC groups) 291

mac-group 296

match (for CDP groups) 297

match (for LLDP groups) 298

match (for MAC groups) 300

port-access cdp-group 304

port-access device-profile 305

port-access device-profile mode block-until-profile-applied 306

port-access lldp-group 307

show port-access device-profile 308

DHCP client commands 311

ip dhcp 311

show ip dhcp 312

DHCPv4 relay commands 313

dhcp-relay 313

dhcp-relay hop-count-increment 313

dhcp-relay option 82 314

diag-dump dhcp-relay basic 315

ip bootp-gateway 317

ip helper-address 318

show dhcp-relay 318

show dhcp-relay bootp-gateway 319

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 7

Contents |8

show ip helper-address 320

DHCP relay (IPv6) commands 322

dhcpv6-relay 322

dhcpv6-relay option 79 323

ipv6 helper-address 323

show dhcpv6-relay 325

show ipv6 helper-address 325

DHCPv4 snooping commands 327

clear dhcpv4-snooping binding 327

clear dhcpv4-snooping statistics 328

dhcpv4-snooping 328

dhcpv4-snooping (in config-vlan context) 329

dhcpv4-snooping allow-overwrite-binding 330

dhcpv4-snooping authorized-server 331

dhcpv4-snooping event-log client 332

dhcpv4-snooping external-storage 333

dhcpv4-snooping flash-storage 334

dhcpv4-snooping max-bindings 336

dhcpv4-snooping option 82 336

dhcpv4-snooping static-attributes 338

dhcpv4-snooping trust 339

dhcpv4-snooping verify mac 340

show dhcpv4-snooping 340

show dhcpv4-snooping binding 342

show dhcpv4-snooping statistics 343

DHCPv6 snooping commands 345

clear dhcpv6-snooping binding 345

clear dhcpv6-snooping statistics 346

dhcpv6-snooping 346

dhcpv6-snooping (in config-vlan context) 347

dhcpv6-snooping authorized-server 348

dhcpv6-snooping event-log client 349

dhcpv6-snooping external-storage 350

dhcpv6-snooping flash-storage 352

dhcpv6-snooping max-bindings 353

dhcpv6-snooping trust 354

show dhcpv6-snooping 355

show dhcpv6-snooping binding 356

show dhcpv6-snooping statistics 357

DHCP options commands 359

http-proxy 359

DNS client commands 361

ip dns domain-list 361

ip dns domain-name 362

ip dns host 363

ip dns server address 364

show ip dns 365

redistribute local-mac 366

Fault monitor commands 367

(Fault enabling/disabling) 367

action 368

apply fault-monitor profile 371

fault-monitor profile 372

show fault-monitor profile 373

show interface fault-monitor profile 375

show interface fault-monitor status 376

show running-config 376

threshold 378

Firmware management commands 381

copy {primary | secondary} <REMOTE-URL> 381

copy {primary | secondary} <FIRMWARE-FILENAME> 382

copy primary secondary 383

copy <REMOTE-URL> 383

copy secondary primary 385

copy <STORAGE-URL> 386

copy hot-patch 387

hot-patch 389

show hot-patch 390

HTTPS server commands 392

https-server authentication certificate 392

https-server authentication password 393

https-server max-user-sessions 393

https-server rest access-mode 394

https-server rest firmware-site-distribution 395

https-server session close all 396

https-server session-timeout 397

https-server vrf 398

show https-server 399

show https-server authentication 400

ICMP commands 402

ip icmp redirect 402

ip icmp throttle 402

ip icmp unreachable 403

IGMP commands 405

ip igmp 405

ip igmp apply access-list 406

ip igmp last-member-query-interval 407

ip igmp querier 408

ip igmp querier interval 409

ip igmp querier query-max-response-time 410

ip igmp robustness 411

ip igmp router-alert-check 412

ip igmp static-group 413

ip igmp version 414

ip igmp version strict 414

no ip igmp 415

show ip igmp 416

show ip igmp counters 417

show ip igmp group 419

show ip igmp groups 421

show ip igmp interface 423

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 9

Contents |10

show ip igmp interface counters 424

show ip igmp interface group 425

show ip igmp interface groups 427

show ip igmp interface statistics 428

show ip igmp static-groups 429

show ip igmp statistics 430

IGMP snooping commands 432

ip igmp snooping (config mode) 432

ip igmp snooping (interface mode) 433

ip igmp snooping (vlan mode) 435

show ip igmp snooping 437

In-System Programming commands 441

clear update-log 441

show needed-updates 441

Interface commands 443

allow-unsupported-transceiver 443

default interface 444

description 445

energy-efficient-ethernet 446

flow-control 447

interface 448

interface vlan 449

ip address 450

ip mtu 451

ipv6 address 452

mtu 453

persona 454

rate-interval 456

show allow-unsupported-transceiver 457

show interface 458

show interface dom 463

show interface energy-efficient ethernet 464

show interface flow-control 465

show interface statistics 469

show interface transceiver 472

show interface utilization 475

show ip interface 476

show ip source-interface 477

show ipv6 interface 478

show ipv6 source-interface 480

shutdown 481

speed 481

IP Client Tracker commands 485

client track ip 485

client track ip { enable | disable | auto } 486

client track ip client-limit 487

client track ip update-interval 487

client track ip update-method probe 488

show capacities 489

show client ip { count | port | vlan } 490

IPv4 source lockdown commands 491

ipv4 source-binding 491

ipv4 source-lockdown 492

ipv4 source-lockdown hardware retry 493

show ipv4 source-binding 493

show ipv4 source-lockdown 494

IPv6 RA commands 498

ipv6 address <global-unicast-address> 498

ipv6 address autoconfig 499

ipv6 address link-local 500

ipv6 nd cache-limit 501

ipv6 nd dad attempts 501

ipv6 nd hop-limit 502

ipv6 nd mtu 503

ipv6 nd ns-interval 503

ipv6 nd prefix 504

ipv6 nd ra dns search-list 506

ipv6 nd ra dns server 507

ipv6 nd ra lifetime 508

ipv6 nd ra managed-config-flag 509

ipv6 nd ra max-interval 510

ipv6 nd ra min-interval 511

ipv6 nd ra other-config-flag 511

ipv6 nd ra reachable-time 512

ipv6 nd ra retrans-timer 513

ipv6 nd route 514

ipv6 nd router-preference 515

ipv6 nd suppress-ra 516

show ipv6 nd global traffic 516

show ipv6 nd interface 517

show ipv6 nd interface prefix 520

show ipv6 nd interface route 521

show ipv6 nd ra dns search-list 522

show ipv6 nd ra dns server 523

IPv6 source lockdown commands 524

ipv6 source-binding 524

ipv6 source-lockdown 525

ipv6 source-lockdown hardware retry 526

show ipv6 source-binding 526

show ipv6 source-lockdown 527

IRDP commands 531

diag-dump irdp basic 531

ip irdp 532

ip irdp holdtime 533

ip irdp maxadvertinterval 533

ip irdp minadvertinterval 534

ip irdp preference 535

show ip irdp 536

Job Scheduler commands 538

job 538

schedule 540

show job 543

show capacities (job, schedule) 546

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 11

Contents |12

show running-config (job, schedule) 546

show schedule 548

Key chain commands 551

accept-lifetime 551

key 552

keychain 553

key-string 554

name 555

recv-id 556

send-lifetime 557

send-id 558

show capacities keychain 559

show keychain 560

show running-config keychain 561

L1-100Mbps downshift commands 563

downshift enable 563

show interface 564

show interface downshift-enable 568

show running-config interface 569

LACP and LAG commands 571

description 571

interface lag 572

lacp fallback-static 573

lacp mode 574

lacp port-id 575

lacp port-priority 575

lacp rate 576

lacp system-priority 577

lag 578

show interface 579

show lacp aggregates 581

show lacp configuration 582

show lacp interfaces 582

show lag 586

show running-config interface lag 587

shutdown 588

vlan trunk native 589

LLDP commands 591

clear lldp neighbors 591

clear lldp statistics 591

lldp 592

lldp dot3 593

lldp dot3 eee 594

lldp dot3 mfs 594

lldp holdtime-multiplier 595

lldp management-address vlan 596

lldp management-ipv4-address 597

lldp management-ipv6-address 598

lldp med 599

lldp med-location 600

lldp receive 602

lldp reinit 603

lldp select-tlv 603

lldp timer 605

lldp transmit 606

lldp txdelay 607

lldp trap enable 608

show lldp configuration 610

show lldp local-device 611

show lldp neighbor-info 613

show lldp neighbor-info detail 615

show lldp statistics 618

show lldp tlv 619

Local AAA commands 621

aaa accounting all-mgmt 621

aaa authentication console-login-attempts 623

aaa authentication limit-login-attempts 624

aaa authentication login 625

aaa authentication minimum-password-length 626

aaa authorization commands (local) 627

show aaa accounting 629

show aaa authentication 630

show aaa authorization 631

show authentication locked-out-users 632

show ssh authentication-method 633

show user 633

ssh password-authentication 635

ssh public-key-authentication 635

user authorized-key 636

Log rotation commands 639

logging threshold 639

logrotate maxsize 640

logrotate period 641

logrotate target 642

show logrotate 644

Loop protect commands 645

loop-protect 645

loop-protect action 646

loop-protect re-enable-timer 647

loop-protect transmit-interval 648

loop-protect trap loop-detected 648

loop-protect vlan 649

show loop-protect 650

Loopback commands 653

interface loopback 653

ip address 653

ipv6 address 654

show interface loopback 655

MAC address table commands 657

clear mac-address 657

mac-address-table age-time 658

show mac-address-table 659

show mac-address-table address 660

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 13

Contents |14

show mac-address-table count 661

show mac-address-table dynamic 662

show mac-address-table interface 663

show mac-address-table lockout 664

show mac-address-table port 665

show mac-address-table static 665

show mac-address-table vlan 666

static-mac 667

Mirroring commands 669

clear mirror 669

comment 669

destination interface 671

diagnostic 672

disable 673

enable 673

mirror session 674

show mirror 675

source interface 677

MLD snooping global configuration commands 680

ipv6 mld snooping 680

MLD snooping VLAN configuration commands 681

ipv6 mld snooping 681

ipv6 mld snooping fastlearn 682

ipv6 mld snooping fastleave vlan 682

ipv6 mld snooping forced fastleave vlan 683

ipv6 mld snooping apply access-list 684

ipv6 mld snooping auto vlan 686

ipv6 mld snooping blocked vlan 686

ipv6 mld snooping forward vlan 687

ipv6 mld snooping static-group 688

ipv6 mld snooping version 689

MLD snooping show commands 691

show ipv6 mld snooping 691

MLD configuration commands for interface VLAN 695

ipv6 mld 695

ipv6 mld apply access-list 695

no ipv6 mld 697

ipv6 mld querier 697

ipv6 mld querier interval 698

ipv6 mld last-member-query-interval 699

ipv6 mld querier query-max-response-time 699

ipv6 mld robustness 700

ipv6 mld static-group 701

ipv6 mld version 702

ipv6 mld version strict 702

MLD show commands for interface VLAN 704

show ipv6 mld 704

MLD configuration commands for interface 708

ipv6 mld 708

ipv6 mld apply access-list 708

no ipv6 mld 710

ipv6 mld querier 710

ipv6 mld querier interval 711

ipv6 mld last-member-query-interval 712

ipv6 mld querier query-max-response-time 712

ipv6 mld robustness 713

ipv6 mld static-group 714

ipv6 mld version 715

ipv6 mld version strict 715

MSTP commands 717

clear spanning-tree statistics 717

show spanning-tree 717

show spanning-tree detail 719

show spanning-tree inconsistent-ports 720

show spanning-tree mst 721

show spanning-tree mst-config 724

show spanning-tree mst detail 724

show spanning-tree mst <INSTANCE-ID> 728

show spanning-tree mst <INSTANCE-ID> detail 729

show spanning-tree mst interface 730

show spanning-tree summary port 731

show spanning-tree summary root 732

spanning-tree 733

spanning-tree bpdu-filter 734

spanning-tree bpdu-guard 735

spanning-tree bpdu-guard timeout 736

spanning-tree config-name 737

spanning-tree config-revision 738

spanning-tree cost 739

spanning-tree forward-delay 740

spanning-tree hello-time 741

spanning-tree instance cost 742

spanning-tree instance port-priority 743

spanning-tree instance priority 744

spanning-tree instance vlan 745

spanning-tree link-type 746

spanning-tree loop-guard 746

spanning-tree max-age 747

spanning-tree max-hops 748

spanning-tree mode 749

spanning-tree port-priority 751

spanning-tree port-type 752

spanning-tree priority 753

spanning-tree root-guard 754

spanning-tree rpvst-filter 755

spanning-tree rpvst-guard 756

spanning-tree tcn-guard 757

spanning-tree transmit-hold-count 758

spanning-tree trap 758

MVRP commands 761

clear mvrp statistics 761

mvrp 761

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 15

Contents |16

mvrp registration 762

mvrp timer 763

show mvrp config 764

show mvrp state 765

show mvrp statistics 766

NTP commands 768

ntp authentication 768

ntp authentication-key 768

ntp disable 770

ntp enable 770

ntp server 771

ntp trusted-key 773

ntp vrf 774

show ntp associations 775

show ntp authentication-keys 776

show ntp servers 777

show ntp statistics 778

show ntp status 779

Ping commands 781

ping 781

ping6 786

PKI commands 790

crypto pki application 790

crypto pki certificate 791

crypto pki ta-profile 792

enroll self-signed 793

enroll terminal 794

import (CA-signed leaf certificate) 795

import (self-signed leaf certificate) 797

key-type 799

ocsp disable-nonce 800

ocsp enforcement-level 801

ocsp url 802

ocsp vrf 803

revocation-check ocsp 804

show crypto pki application 805

show crypto pki certificate 806

show crypto pki ta-profile 808

ta-certificate 810

subject 811

PKI EST commands 813

arbitrary-label 813

arbitrary-label-enrollment 814

arbitrary-label-reenrollment 815

crypto pki est-profile 816

enroll est-profile 817

reenrollment-lead-time 818

retry-count 819

retry-interval 820

show crypto pki est-profile 821

url 822

username 823

vrf 825

PoE commands 827

lldp dot3 poe 827

lldp med poe 828

power-over-ethernet 828

power-over-ethernet allocate-by 829

power-over-ethernet assigned-class 831

power-over-ethernet pre-std-detect 832

power-over-ethernet priority 832

power-over-ethernet threshold 833

power-over-ethernet trap 834

show lldp local 835

show lldp neighbor 836

show power-over-ethernet 837

Port access 802.1X authentication commands 840

aaa authentication port-access dot1x authenticator 840

aaa authentication port-access dot1x authenticator auth-method 841

aaa authentication port-access dot1x authenticator cached-reauth 842

aaa authentication port-access dot1x authenticator cached-reauth-period 842

aaa authentication port-access dot1x authenticator discovery-period 843

aaa authentication port-access dot1x authenticator eap-tls-fragment 844

aaa authentication port-access dot1x authenticator eapol-timeout 845

aaa authentication port-access dot1x authenticator initial-auth-response-timeout 846

aaa authentication port-access dot1x authenticator max-eapol-requests 847

aaa authentication port-access dot1x authenticator max-retries 848

aaa authentication port-access dot1x authenticator quiet-period 849

aaa authentication port-access dot1x authenticator radius server-group 850

aaa authentication port-access dot1x authenticator reauth 851

aaa authentication port-access dot1x authenticator reauth-period 852

clear dot1x authenticator statistics interface 853

show aaa authentication port-access dot1x authenticator interface client-status 853

show aaa authentication port-access dot1x authenticator interface port-statistics 855

Port access 802.1X supplicant commands 858

aaa authentication port-access dot1x supplicant(global) 858

aaa authentication port-access dot1x supplicant(port) 858

associate policy 859

canned-eap-success 861

clear dot1x supplicant statistics 861

discovery-timeout 863

eap-identity 864

eapol-force-multicast 866

eapol-method 867

eapol-protocol-version 868

eapol-timeout 870

enable 871

enable 872

fail-mode 872

held-period 873

max-retries 875

policy (supplicant) 876

port-access dot1x supplicant restart 877

show aaa authentication port-access dot1x supplicant policy 878

show aaa authentication port-access dot1x supplicant statistics 880

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 17

Contents |18

show aaa authentication port-access dot1x supplicant status 882

start-mode 885

Port access cached-critical role commands 887

aaa authentication port-access cached-critical-role (global) 887

aaa authentication port-access cached-critical-role (per interface) 889

port-access clear cached-client 890

show port-access cached-clients 891

show port-access cached-critical-role info 892

Port access general commands 894

aaa authentication port-access auth-mode 894

aaa authentication port-access auth-precedence 895

aaa authentication port-access auth-priority 896

aaa authentication port-access auth-role 897

aaa authentication port-access client-auto-log-off final-authentication-failure 898

aaa authentication port-access client-limit 899

aaa authentication port-access client-limit multi-domain 900

aaa authentication port-access radius-override 901

port-access allow-flood-traffic 902

port-access client-move 903

port-access event-log client 904

port-access fallback-role 905

port-access log-off client 906

port-access onboarding-method precedence 907

port-access onboarding-method concurrent 908

port-access reauthenticate interface 909

show aaa authentication port-access interface client-status 910

show port-access clients 912

show port-access clients detail 915

show port-access clients onboarding-method 918

Port access MAC authentication commands 920

aaa authentication port-access mac-auth 920

aaa authentication port-access mac-auth addr-format 921

aaa authentication port-access mac-auth auth-method 921

aaa authentication port-access mac-auth cached-reauth 922

aaa authentication port-access mac-auth cached-reauth-period 923

aaa authentication port-access mac-auth password 924

aaa authentication port-access mac-auth quiet-period 925

aaa authentication port-access mac-auth radius server-group 926

aaa authentication port-access mac-auth reauth 927

aaa authentication port-access mac-auth reauth-period 928

clear mac-auth statistics 929

show aaa authentication port-access mac-auth interface client-status 929

show aaa authentication port-access mac-auth interface port-statistics 931

Port access policy commands 933

port-access policy 933

port-access policy copy 937

port-access policy resequence 938

port-access policy reset 939

clear port-access policy hitcounts 940

show port-access policy 943

show port-access policy hitcounts 945

Port access role commands 947

associate policy 947

auth-mode 948

cached-reauth-period 949

client-inactivity timeout 950

description 951

device-traffic-class 951

mtu 952

poe-allocate-by 953

poe-priority 954

port-access role 955

reauth-period 956

session timeout 956

show aaa authentication port-access interface client-status 957

show port-access role 958

stp-admin-edge-port 960

trust-mode 961

vlan 962

Port access security violation commands 965

port-access security violation action 965

port-access security violation action shutdown auto-recovery 966

port-access security violation action shutdown recovery-timer 967

show interface 968

show port-access aaa violation interface 968

show port-access port-security violation client-limit-exceeded interface 969

Port access VLAN group commands 972

associate-vlan 972

port-access vlan-group 973

show running-config port-access vlan-group 974

Port filtering commands 975

portfilter 975

show portfilter 976

Port security commands 978

port-access port-security 978

port-access port-security client-limit 979

port-access port-security mac-address 979

show port-access port-security interface client-status 980

show port-access port-security interface port-statistics 982

show port-access security violation sticky-mac-client-move interface 983

sticky-learn enable 984

Private VLAN commands 985

diag-dump private-vlan basic 985

private-vlan 985

private-vlan port-type 987

show capacities private-vlan 988

show capacities-status private-vlan 989

show private-vlan 989

show private-vlan association 991

show private-vlan inconsistency 992

show private-vlan port-type 994

AOS-CX 10.12 Command-Line Interface Guide | (6000, 6100 Switch Series) 19

Contents |20

show running-configuration private-vlan 994

show tech private-vlan 995

QoS commands 998

apply qos 998

map queue 1000

min-bandwidth 1001

name queue 1002

qos cos 1003

qos dscp 1004

qos dscp-map 1006

qos queue-profile 1007

qos schedule-profile 1008

qos trust 1010

rate-limit 1011

show interface queues 1014

show interface qos 1016

show qos dscp-map 1017

show qos queue-profile 1018

show qos schedule-profile 1019

show qos trust 1021

strict queue 1021

Configurable RADIUS attribute commands 1024

aaa radius-attribute group 1024

nas-id request-type 1025

nas-id value 1026

nas-ip-addr request-type authentication 1027

nas-ip-addr service-type user-management 1028

tunnel-private-group-id request-type 1029

tunnel-private-group-id value 1030

RADIUS dynamic authorization commands 1032

radius dyn-authorization enable 1032

radius dyn-authorization client 1032

radius dyn-authorization client tls (RadSec) 1034

radius dyn-authorization port 1035

show radius dyn-authorization 1036

show radius dyn-authorization client 1038

show radius dyn-authorization client tls (RadSec) 1039

Remote AAA (TACACS+, RADIUS) commands 1041

aaa accounting allow-fail-through 1041

aaa accounting all-mgmt 1041

aaa authentication allow-fail-through 1044

aaa authentication login 1045

aaa authorization allow-fail-through 1047

aaa authorization commands 1049

aaa group server 1052

radius-server auth-type 1053

radius-server host 1054

radius-server host secure ipsec 1057

radius-server host tls port-access 1062

radius-server host tls tracking-method 1064

radius-server key 1065

radius-server retries 1067

Page is loading ...

Aruba AOS-CX 10.12 User guide

Aruba AOS-CX 10.12 User guide

Related papers

Other documents