Motorola EX-3524 Cli Reference Manual

www.edge-core.com

Motorola Solutions

EX-3524/EX-3548

Layer 2 Gigabit Ethernet PoE/PoE+ Switch

CLI Reference Guide

– 3 –

How to Use This Guide

This guide includes detailed information on the switch software, including how to

operate and use the management functions of the switch. To deploy this switch

effectively and ensure trouble-free operation, you should first read the relevant

sections in this guide so that you are familiar with all of its software features.

Who Should

Read this Guide?

This guide is for network administrators who are responsible for operating and

maintaining network equipment. The guide assumes a basic working knowledge of

LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network

Management Protocol (SNMP).

How this Guide

is Organized

This guide describes the switch’s command line interface (CLI). For more detailed

information on the switch’s key features refer to the System Reference Guide.

The guide includes these sections:

◆ Section I “Getting Started” — Includes information on initial configuration.

◆ Section II “Command Line Interface” — Includes all management options

available through the CLI.

◆ Section III “Appendices” — Includes information on troubleshooting switch

management access.

This guide focuses on switch software configuration through the CLI.

For information on how to manage the switch through the Web management

interface, see the following guide:

System Reference Guide

For information on how to install the switch, see the following guide:

Installation Guide

For all safety information and regulatory statements, see the following documents:

Quick Start Guide

Safety and Regulatory Information

How to Use This Guide

– 4 –

Conventions The following conventions are used throughout this guide to show information:

Note:

Emphasizes important information or calls your attention to related features

or instructions.

Caution:

Alerts you to a potential hazard that could cause loss of data, or damage

the system or equipment.

Warning:

Alerts you to a potential hazard that could cause personal injury.

– 5 –

Contents

How to Use This Guide 3

Contents 5

Figures 27

Tables 29

Section I Getting Started 33

1 Initial Switch Configuration 35

Connecting to the Switch 35

Configuration Options 35

Connecting to the Console Port 36

Logging Onto the Command Line Interface 37

Setting Passwords 37

Remote Connections 38

Configuring the Switch for Remote Management 39

Setting an IP Address 39

Enabling SNMP Management Access 44

Managing System Files 47

Upgrading the Operation Code 48

Saving or Restoring Configuration Settings 48

Configuring Automatic Installation of Operation Code and

Configuration Settings 50

Downloading Operation Code from a File Server 50

Specifying a DHCP Client Identifier 52

Downloading a Configuration File Referenced by a DHCP Server 53

Setting the System Clock 55

Setting the Time Manually 55

Configuring SNTP 56

Contents

– 6 –

Configuring NTP 56

Section II Command Line Interface 59

2 Using the Command Line Interface 61

Accessing the CLI 61

Console Connection 61

Telnet Connection 62

Entering Commands 63

Keywords and Arguments 63

Minimum Abbreviation 63

Command Completion 63

Getting Help on Commands 64

Partial Keyword Lookup 65

Negating the Effect of Commands 66

Using Command History 66

Understanding Command Modes 66

Exec Commands 66

Configuration Commands 67

Command Line Processing 69

Output Modifiers 69

CLI Command Groups 70

3 General Commands 73

prompt 73

reload (Global Configuration) 74

enable 75

quit 76

show history 76

configure 77

disable 78

reload (Privileged Exec) 78

show reload 79

end 79

exit 79

Contents

– 7 –

4 System Management Commands 81

Device Designation 81

hostname 82

System Status 82

show access-list tcam-utilization 83

show memory 83

show process cpu 84

show running-config 84

show startup-config 85

show system 86

show users 87

show version 88

Frame Size 89

jumbo frame 89

File Management 90

General Commands 91

boot system 91

copy 92

delete 95

dir 96

whichboot 97

Automatic Code Upgrade Commands 97

upgrade opcode auto 97

upgrade opcode path 98

show upgrade 99

Line 100

line 101

databits 101

exec-timeout 102

login 103

parity 104

password 104

password-thresh 105

silent-time 106

speed 107

Contents

– 8 –

stopbits 107

timeout login response 108

disconnect 109

show line 109

Event Logging 110

logging facility 110

logging history 111

logging host 112

logging on 112

logging trap 113

clear log 114

show log 114

show logging 115

SMTP Alerts 116

logging sendmail 117

logging sendmail host 117

logging sendmail level 118

logging sendmail destination-email 119

logging sendmail source-email 119

show logging sendmail 120

Time 120

SNTP Commands 121

sntp client 121

sntp poll 122

sntp server 122

show sntp 123

Manual Configuration Commands 124

clock summer-time 124

clock timezone 125

clock timezone-predefined 126

calendar set 126

show calendar 127

Time Range 128

time-range 128

absolute 129

Contents

– 9 –

periodic 130

show time-range 131

Switch Clustering 131

cluster 132

cluster commander 133

cluster ip-pool 134

cluster member 134

rcommand 135

show cluster 136

show cluster members 136

show cluster candidates 136

5 SNMP Commands 137

General SNMP Commands 138

snmp-server 138

snmp-server community 139

snmp-server contact 139

snmp-server location 140

show snmp 140

SNMP Target Host Commands 141

snmp-server enable traps 141

snmp-server host 142

SNMPv3 Commands 145

snmp-server engine-id 145

snmp-server group 146

snmp-server user 147

snmp-server view 148

show snmp engine-id 149

show snmp group 150

show snmp user 151

show snmp view 152

Notification Log Commands 153

nlm 153

snmp-server notify-filter 153

show nlm oper-status 155

Contents

– 10 –

show snmp notify-filter 155

6 Remote Monitoring Commands 157

rmon alarm 158

rmon event 159

rmon collection history 160

rmon collection rmon1 161

show rmon alarms 162

show rmon events 162

show rmon history 162

show rmon statistics 163

7 Authentication Commands 165

User Accounts 165

enable password 166

username 167

Authentication Sequence 168

authentication enable 168

authentication login 169

RADIUS Client 170

radius-server acct-port 170

radius-server auth-port 171

radius-server host 171

radius-server key 172

radius-server retransmit 173

radius-server timeout 173

show radius-server 174

TACACS+ Client 174

tacacs-server host 175

tacacs-server key 175

tacacs-server port 176

show tacacs-server 176

AAA 177

aaa accounting dot1x 177

aaa accounting exec 178

aaa accounting update 179

Contents

– 11 –

aaa authorization exec 180

aaa group server 181

server 181

accounting dot1x 182

accounting exec 182

authorization exec 183

show accounting 183

Web Server 184

ip http port 185

ip http server 185

ip http secure-port 186

ip http secure-server 186

Telnet Server 188

ip telnet max-sessions 188

ip telnet port 189

ip telnet server 189

show ip telnet 190

Secure Shell 190

ip ssh authentication-retries 193

ip ssh server 193

ip ssh server-key size 194

ip ssh timeout 195

delete public-key 195

ip ssh crypto host-key generate 196

ip ssh crypto zeroize 197

ip ssh save host-key 197

show ip ssh 198

show public-key 198

show ssh 199

802.1X Port Authentication 200

General Commands 201

dot1x default 201

dot1x eapol-pass-through 202

dot1x system-auth-control 202

Contents

– 12 –

Authenticator Commands 203

dot1x intrusion-action 203

dot1x max-req 203

dot1x operation-mode 204

dot1x port-control 205

dot1x re-authentication 205

dot1x timeout quiet-period 206

dot1x timeout re-authperiod 206

dot1x timeout supp-timeout 207

dot1x timeout tx-period 208

dot1x re-authenticate 208

Supplicant Commands 209

dot1x identity profile 209

dot1x max-start 209

dot1x pae supplicant 210

dot1x timeout auth-period 211

dot1x timeout held-period 211

dot1x timeout start-period 212

Information Display Commands 212

show dot1x 212

Management IP Filter 215

management 215

show management 216

8 General Security Measures 219

Port Security 220

port security 220

Network Access (MAC Address Authentication) 222

network-access aging 223

network-access mac-filter 224

mac-authentication reauth-time 224

network-access dynamic-qos 225

network-access dynamic-vlan 226

network-access guest-vlan 227

network-access link-detection 228

Contents

– 13 –

network-access link-detection link-down 228

network-access link-detection link-up 229

network-access link-detection link-up-down 229

network-access max-mac-count 230

network-access mode mac-authentication 230

network-access port-mac-filter 231

mac-authentication intrusion-action 232

mac-authentication max-mac-count 232

clear network-access 233

show network-access 233

show network-access mac-address-table 234

show network-access mac-filter 235

Web Authentication 236

web-auth login-attempts 237

web-auth quiet-period 237

web-auth session-timeout 238

web-auth system-auth-control 238

web-auth 239

web-auth re-authenticate (Port) 239

web-auth re-authenticate (IP) 240

show web-auth 240

show web-auth interface 241

show web-auth summary 241

DHCP Snooping 242

ip dhcp snooping 242

ip dhcp snooping information option 244

ip dhcp snooping information policy 245

ip dhcp snooping verify mac-address 246

ip dhcp snooping vlan 246

ip dhcp snooping trust 247

clear ip dhcp snooping database flash 248

ip dhcp snooping database flash 248

show ip dhcp snooping 249

show ip dhcp snooping binding 249

Contents

– 14 –

IP Source Guard 250

ip source-guard binding 250

ip source-guard 252

ip source-guard max-binding 253

show ip source-guard 254

show ip source-guard binding 254

ARP Inspection 255

ip arp inspection 256

ip arp inspection filter 257

ip arp inspection log-buffer logs 258

ip arp inspection validate 259

ip arp inspection vlan 259

ip arp inspection limit 260

ip arp inspection trust 261

show ip arp inspection configuration 262

show ip arp inspection interface 262

show ip arp inspection log 263

show ip arp inspection statistics 263

show ip arp inspection vlan 263

Denial of Service Protection 264

flow tcp-udp-port-zero 264

show flow 265

Port-based Traffic Segmentation 265

traffic-segmentation 266

show traffic-segmentation 267

9 Access Control Lists 269

IPv4 ACLs 269

access-list ip 270

permit, deny, redirect-to (Standard IP ACL) 271

permit, deny, redirect-to (Extended IPv4 ACL) 272

ip access-group 274

show ip access-group 275

show ip access-list 275

Contents

– 15 –

IPv6 ACLs 277

access-list ipv6 277

permit, deny, redirect-to (Standard IPv6 ACL) 278

permit, deny, redirect-to (Extended IPv6 ACL) 279

show ipv6 access-list 281

ipv6 access-group 282

show ipv6 access-group 282

MAC ACLs 283

access-list mac 283

permit, deny, redirect-to

(MAC ACL) 284

mac access-group 286

show mac access-group 287

show mac access-list 287

ARP ACLs 288

access-list arp 288

permit, deny (ARP ACL) 289

show arp access-list 290

ACL Information 290

show access-group 290

show access-list 291

10 Interface Commands 293

Interface Configuration 294

interface 294

alias 295

capabilities 295

description 296

flowcontrol 297

giga-phy-mode 298

negotiation 299

shutdown 300

speed-duplex 300

clear counters 301

show interfaces brief 302

Contents

– 16 –

show interfaces counters 302

show interfaces status 304

show interfaces switchport 305

show interfaces transceiver 307

Cable Diagnostics 308

test cable-diagnostics 308

show cable-diagnostics 309

Power Savings 310

power-save 310

show power-save 311

11 Link Aggregation Commands 313

Manual Configuration Commands 314

channel-group 314

Dynamic Configuration Commands 315

lacp 315

lacp admin-key (Ethernet Interface) 316

lacp port-priority 317

lacp system-priority 318

lacp admin-key (Port Channel) 319

Trunk Status Display Commands 320

show lacp 320

12 Power over Ethernet Commands 325

power inline compatible 325

power inline 326

power inline maximum allocation 327

power inline priority 328

power inline time-range 329

show power inline status 330

show power inline time-range 331

show power poe 331

13 Port Mirroring Commands 333

Local Port Mirroring Commands 333

port monitor 333

Contents

– 17 –

show port monitor 335

RSPAN Mirroring Commands 336

rspan source 338

rspan destination 339

rspan remote vlan 340

no rspan session 341

show rspan 341

14 Congestion Control Commands 343

Rate Limit Commands 343

rate-limit 344

Storm Control Commands 345

switchport packet-rate 345

Automatic Traffic Control Commands 346

Threshold Commands 349

auto-traffic-control apply-timer 349

auto-traffic-control release-timer 350

auto-traffic-control 351

auto-traffic-control action 351

auto-traffic-control alarm-clear-threshold 352

auto-traffic-control alarm-fire-threshold 353

auto-traffic-control auto-control-release 354

auto-traffic-control control-release 355

SNMP Trap Commands 355

snmp-server enable port-traps atc broadcast-alarm-clear 355

snmp-server enable port-traps atc broadcast-alarm-fire 356

snmp-server enable port-traps atc broadcast-control-apply 356

snmp-server enable port-traps atc broadcast-control-release 357

snmp-server enable port-traps atc multicast-alarm-clear 357

snmp-server enable port-traps atc multicast-alarm-fire 358

snmp-server enable port-traps atc multicast-control-apply 358

snmp-server enable port-traps atc multicast-control-release 359

ATC Display Commands 359

show auto-traffic-control 359

show auto-traffic-control interface 360

Contents

– 18 –

15 Address Table Commands 361

mac-address-table aging-time 361

mac-address-table static 362

clear mac-address-table dynamic 363

show mac-address-table 363

show mac-address-table aging-time 364

show mac-address-table count 365

16 Spanning Tree Commands 367

spanning-tree 368

spanning-tree cisco-prestandard 369

spanning-tree forward-time 369

spanning-tree hello-time 370

spanning-tree max-age 371

spanning-tree mode 371

spanning-tree pathcost method 373

spanning-tree priority 373

spanning-tree mst configuration 374

spanning-tree transmission-limit 374

max-hops 375

mst priority 376

mst vlan 376

name 377

revision 378

spanning-tree bpdu-filter 378

spanning-tree bpdu-guard 379

spanning-tree cost 380

spanning-tree edge-port 381

spanning-tree link-type 382

spanning-tree loopback-detection 382

spanning-tree loopback-detection action 383

spanning-tree loopback-detection release-mode 384

spanning-tree loopback-detection trap 385

spanning-tree mst cost 385

spanning-tree mst port-priority 386

Contents

– 19 –

spanning-tree port-priority 387

spanning-tree root-guard 388

spanning-tree spanning-disabled 389

spanning-tree loopback-detection release 389

spanning-tree protocol-migration 390

show spanning-tree 390

show spanning-tree mst configuration 392

17 VLAN Commands 393

GVRP and Bridge Extension Commands 394

bridge-ext gvrp 394

garp timer 395

switchport forbidden vlan 396

switchport gvrp 397

show bridge-ext 397

show garp timer 398

show gvrp configuration 399

Editing VLAN Groups 399

vlan database 400

vlan 400

Configuring VLAN Interfaces 401

interface vlan 402

switchport acceptable-frame-types 403

switchport allowed vlan 403

switchport ingress-filtering 404

switchport mode 405

switchport native vlan 406

vlan-trunking 407

Displaying VLAN Information 408

show vlan 408

Configuring IEEE 802.1Q Tunneling 409

dot1q-tunnel system-tunnel-control 410

dot1q-tunnel tpid 411

switchport dot1q-tunnel mode 412

show dot1q-tunnel 413

Contents

– 20 –

Configuring Protocol-based VLANs 413

protocol-vlan protocol-group (Configuring Groups) 414

protocol-vlan protocol-group (Configuring Interfaces) 415

show protocol-vlan protocol-group 416

show interfaces protocol-vlan protocol-group 416

Configuring IP Subnet VLANs 417

subnet-vlan 417

show subnet-vlan 418

Configuring MAC Based VLANs 419

mac-vlan 419

show mac-vlan 420

Configuring Voice VLANs 421

voice vlan 421

voice vlan aging 422

voice vlan mac-address 423

switchport voice vlan 424

switchport voice vlan priority 424

switchport voice vlan rule 425

switchport voice vlan security 426

show voice vlan 426

18 Class of Service Commands 429

Priority Commands (Layer 2) 429

queue mode 430

queue weight 431

switchport priority default 432

show queue mode 433

show queue weight 433

Priority Commands (Layer 3 and 4) 434

qos map cos-dscp 434

qos map dscp-mutation 436

qos map phb-queue 437

qos map trust-mode 438

show qos map cos-dscp 439

show qos map dscp-mutation 439

Page is loading ...

Motorola EX-3524, EX-3548 Cli Reference Manual

Related papers

Other documents